last executing test programs: 36.529828216s ago: executing program 4 (id=2154): timer_create(0x0, 0x0, &(0x7f0000001440)) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000001480)) 36.488766118s ago: executing program 4 (id=2157): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) 36.45387279s ago: executing program 4 (id=2158): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x12, {"a2e3ad21ed0d09f91b23090938f70906d038e7ff7fc6e5539b0d3d0e8b089b323b6d07060890e0878f0e1ac6e7049b3342959b3e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0931a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5bcd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd0000000039ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00b98e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d877a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 36.312293509s ago: executing program 4 (id=2161): getgroups(0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff]) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000800)=ANY=[@ANYBLOB='dots,fmask=00000000000000000006675,nfs=stale_rw,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,nodots,nfs=stale_rw,nodots,dots,nodots,nodots,nodots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',gid=', @ANYRESHEX=r0, @ANYBLOB=',dots,nodots,nodots,dots,umask=0000000076645,nodots,tz=UTC,dots,nodots,\x00'], 0x3, 0x1f5, &(0x7f0000000600)="$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") mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) 36.154256868s ago: executing program 4 (id=2166): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 35.93730972s ago: executing program 4 (id=2175): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) flock(r0, 0x6) 35.825155707s ago: executing program 32 (id=2175): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) flock(r0, 0x6) 27.124576678s ago: executing program 0 (id=2425): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x68}}, 0x0) 27.100516059s ago: executing program 0 (id=2427): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000004"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080003007f000000080005"], 0x40}}, 0x0) 27.08681732s ago: executing program 0 (id=2428): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f0000000380)={[{@barrier}, {@nodioread_nolock}, {@usrquota}, {@errors_remount}, {@auto_da_alloc}, {@sysvgroups}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) fallocate(r0, 0x0, 0x0, 0x8ffff) 26.958895057s ago: executing program 0 (id=2430): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') 26.570447841s ago: executing program 0 (id=2438): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400000, 0x343f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x80000001], [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xeb9, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x2, 0x0, 0x9]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000006480)) 26.163648734s ago: executing program 0 (id=2444): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_getparam(0x0, &(0x7f0000000180)) 26.113773617s ago: executing program 33 (id=2444): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sched_getparam(0x0, &(0x7f0000000180)) 22.044222606s ago: executing program 3 (id=2525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x26d, 0x0, 0x200000000000}]}) 21.946422741s ago: executing program 3 (id=2529): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20001000) 21.929259523s ago: executing program 3 (id=2530): unshare(0x22020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) 21.896961355s ago: executing program 3 (id=2532): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3200009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file2\x00', 0x0) 21.661112549s ago: executing program 3 (id=2540): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) 21.309526899s ago: executing program 3 (id=2547): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000009c0), 0xff, 0x55c, &(0x7f0000000440)="$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") io_setup(0x2, &(0x7f00000001c0)=0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x147042, 0x60) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x18, 0x1, 0x5, r1, 0x0, 0xb, 0x1000000}]) 21.303804149s ago: executing program 34 (id=2547): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000009c0), 0xff, 0x55c, &(0x7f0000000440)="$eJzs3c9rHFUcAPDvbDb9rU2hFPQgwR6s1G6axB8VPNSjaLGg97ok01Cy6ZbspjSxYHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzUx+7ubntkndzwdm+97O27757pv3+mbelA2gZw1mL6WIVyLi2yTi+Ip95ch3Di6Wm396eyzbklhY+OyvJJL8vaJ8kv95tMiUI377OuJsaVWVA9lLY3ZuslqrpdP5m0PNqRtDjdm5c9emqhPpRHp9ZHT0wjujI++/9+7aQ07u7DDWNy//88OnDz+68M3p+e9/eXzifhIX41i+b2Ucu7Dq0AZjMP9O+uPimoLDXahsP0n2+gDYkb68n/dHNgYcj7681wP/f19FxALQoxL9H3pUMQ8oru27dB38wnjy4eIF0Pr4y4v3RuJQ69royHyy6sooKW5k7FJWx69/PrifbdG9+xAAm7pzNyLOl8vrx78kH/927vwWyqytw/gHz8/DbP7zVrv5T2lp/hNt5j9H2/Tdndi8/5ced6GajrL53wdt57/5otVADPTluZda2f7k6rVamo1tL0fEmeg/mOU3Ws+5MP9oodO+lfO/bMvqL+aC+XE8Lh9c/ZnxarO6u6iXPbkb8Wrb+W+y1P5Jm/bPvo/LW6zjVPrgtU77No//2Vr4OeKNtu2/vKKVbLw+OdQ6H4aKs2K9v++d+r1T/Xsdf9b+RzaOfyBZuV7b2H4dPx36N+20r2P8B4oS7c//A8nnrXRR7Fa12ZwejjiQfLL+/ZHlzxb5onwW/5nTG49/7c7/wxHxxRbjv3fyXseiu2r/Liy6ZvGPb6v9t5949PGXP24//kv53Yms/d9ulT2Tf2Yr499WD3D33yAAAAAAAADsH6WIOBZJqbKULpUqlcXnO07GkVKt3mievVp/PVr7Ws8/lIqV7uMrnocYzp+HLfIja/KjEXEiIr7rO9zKV8bqtfG9Dh4AAAAAAAAAAAAAAAAAAAD2iaMd/v9/5o++vT464Jnzk9/Quzbt/934pSdgX/LvP/Qu/R96l/4PvUv/h96l/0Pv0v+hd+n/0Lv0fwAAAAAAAAAAAAAAAAAAAAAAAAAAAOiqy5cuZdvC/NPbY1l+/ObszGT95rnxtDFZmZoZq4zVp29UJur1iVpaGatPbfb31er1G8MjMXNrqJk2mkON2bkrU/WZ680r16aqE+mVtP+5RAUAAAAAAAAAAAAAAAAAAAAvlsbs3GS1VkunJSR2lCjvj8OQ6HJir0cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFj2XwAAAP//4Uw7cA==") io_setup(0x2, &(0x7f00000001c0)=0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x147042, 0x60) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x18, 0x1, 0x5, r1, 0x0, 0xb, 0x1000000}]) 14.967900161s ago: executing program 6 (id=2675): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r0], 0x10) 14.917129084s ago: executing program 6 (id=2678): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000a07000/0x3000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x75b5000) 14.593811553s ago: executing program 6 (id=2695): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 14.566732774s ago: executing program 6 (id=2697): syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x4, 0x550c, &(0x7f00000089c0)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DKJjT9WPRWdRc/sEtZ9eBJ0yQN2U0ypUnT2pMHj+LB/0QUPHn0b/Dg2Zt4ULwJSmYmuvUDhKaN3f5+MHnmffPmmecNy8IzUxLAuTWf/PJTKW7ElYiYjYjrEdl5qTgy63l4LiJuRsTMY0epmP9j4mJEXI2IG6Pkec5S8dZnt4e31n588+evv7104drnX303vV0D0/Z8RHR38vP9bh7TVh4fFvO1YTuL3dVhEfM3uo+KcZrH/eZWlmG/Nl5Xy+JKK1+f7uz1R3G7U6uPYqu9nc3v9PIL9oetcZ7sAw9ru9m40dzKYrufZrF1mNd1cJj/33bYH+R5GkW+D7P0MRiMYz7fPGjm+9l5lMV6b1DM53nTRvNgFIdFLC4X9bTTyOrYOs43/f/2Vru3d5AMm7v9dtpL1irVFyvVO+XqbtpoDpqr5Vq3cWc1WWh1RsvKg2atu95K01anWamn3cVkoVWvl6vVZOFuc6td6yXVamWlslReWyzObiev3X836TSShVF8pd3bG7Q7/WQ73U3yTywmy5WVlxaTW9Xk7Y3NZPPBvXsbm++8f/e9+y9vvPFqsehvZb0Qy0vLy+XqUnm5uniO9v9xUXSyMLH9w7GUpl0AwNmj/wem4eT6/90HESff/4f+fyLOVP87LmuC/e953z8ci/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODc+n7ui9ezk/l8fK2Yf6qYeqYYlyJiJiJ++wezcfFIztkiz9y/rJ/7Sw3flCLLMLrGpeK4GhHrxfHr0yf9LQAAAMCT68uPbn6ad+v5y/y0C+I05TdtZq5/MKF8pYiYm/9hQtlmRi/PTihZ9u/7QhxMKFt2A+vyhJLlt9wuTCrbfzJ7JFx+LJTyMHOq5QAAAKfiaCdwul0IAAAAp+mTaRfAdJRi/Chz/Cw4+8v7Px8IXjkyAgAAAM6g0rQLAAAAAE5c1v/7/T8AAAB4suW//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzOzv3cJg5EcQB+Nnhh/2nRau/byt6gjC1hj3uMKCBNUEAOpIU0QA3klhIiiPA4BCIOkTy2lej7JGcylvnxBsFhZqQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALt1X68Xt1e/rtjm7fTt5RgMAAABcsq3Wi/qfWep/be5/b279bPpFRJQRcWnuPopPZ5mjJqd6ef7m9PnqVQ13EXXC4T0mzfUlIv401+OPrj8FAAAA+Lg2y9U8zdbTn9nQBdGntGhTfvubKa+IiGr2kCmtPOT9yhRWf7/H8T9TWr2ANc0UlpbcxrnS3qT+uR9X7aYnTZGa8uLLjkVmGzsAANCj0VnT7ywEAACAPv0bugCGUcTzVuZxK3CSmmZ77/NZDwAAAHiHiqELAAAAADpXz/97Ov9v7/w/AAAAGEY6/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAubav1YrNczdvm7Pbt5BkNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwxP68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fzGkcVBwD8zc7OxlbFNcoeIqLgQS92u62tvYkHJXjwTxBCuq2xW3+0OdhSxFy8Sc69iB5FBCXe+j/0nEAu8ZbDHiJ4jszszO7kB7j+6Mwm+XzgzfvuMMz7vlkI+c57CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBh+O4kjtNDexQ38nObew+W037rUJ96tL69kLY0jqpM+mR4ufwh6ozDvTqSAQAA4GyIi/o+hLCTbCymfaOd1f9JcU1a83//7Cgu6vnDdX/RF7V/2n77dffF8UDt0TjpTW+sDPoXj6bSfHKznG3P/e0VzezJZ+9e4uwLaXyw9sIwyZ5n9O3jx++1snCuimwBgH/jQtHnQfH7UNr36kwMgDOjWSq8i/o/btebEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAVhmvh6SKOQggLzUmc2tp7sHxc/2h9e6FoVx8+XA9fT+6Z3iIJIdxYGfQvVjqb2Xb33v1bS4NB/071wSshhLpGfyef/q2Pprg4hFqej+D/Cfbn8i97RvI5IUGNP5QAADiVkryldf1OsrGYnovmQ9j/4WD9/3opDlPW/7sfX90sj1Wu/3uVzXD2dVdvf969e+/+myu3l272b/Y/fetS7+3e5WtXrlzrZu9Kut6YAAAA8N+08lau/xvzR9f/z5fiMGX9/8V3va/KY8Xq/2NNFv3qzgQAAOBse/7VP/+IjjkftVrhy6XV1Tu90XH8+dLoWEOq/9hc3sr1fzxfd1YAAABAFYZr0YH1/+ulOEy5/v/Mjy/9XL5nHEI4l6//X1j+bHC9uunMtCr+nLjuOQIAAFCvc3krr/8n2f7/xnjLQyOE8MZrozj/N4BT1f/x+9/8VB6rvP//cnVTnEmNzuh5ZH0nhGan7owAAAA4zZ7KW1rs/55sLH7yy/kPW/b/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFTtrwAAAP//RAE/8A==") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 13.598774632s ago: executing program 6 (id=2716): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000402) lseek(r0, 0x0, 0x3) creat(&(0x7f0000000140)='./file0\x00', 0x80) 12.645132948s ago: executing program 6 (id=2729): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x64800}, 0x4010) 12.584747161s ago: executing program 35 (id=2729): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x64800}, 0x4010) 7.3261481s ago: executing program 1 (id=2858): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010100000000001c0012800b0001006d616373656300000c00028005000f000100000008000500", @ANYRES32=r1], 0x44}}, 0x40) 7.290034782s ago: executing program 1 (id=2859): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x8a0b65732b5bb91b}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x45, 0x1, 0x0, 0x6, 0x4, [{0x0, 0xfff}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x28) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 7.16565351s ago: executing program 1 (id=2861): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000008000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 7.165287389s ago: executing program 1 (id=2862): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@acl}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) getxattr(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000380)=@known='system.posix_acl_access\x00', &(0x7f00000005c0)=""/244, 0xf4) 6.871596667s ago: executing program 1 (id=2869): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.165556738s ago: executing program 1 (id=2878): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 6.127322711s ago: executing program 36 (id=2878): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 2.21394126s ago: executing program 8 (id=2984): syz_mount_image$f2fs(&(0x7f0000000280), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x1458c0, 0x22) openat(0xffffffffffffff9c, 0x0, 0x42, 0x5) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, 0x0) 1.789555775s ago: executing program 5 (id=2995): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff024}, {0x6}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x803, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 1.70884917s ago: executing program 5 (id=2997): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x9, 0xfefff00c}, {0x6, 0x0, 0x5, 0x1}]}, 0x10) syz_emit_ethernet(0x1016, &(0x7f00000011c0)=ANY=[], 0x0) 1.636974014s ago: executing program 5 (id=2999): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) 1.547371849s ago: executing program 5 (id=3000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x40000003, 0x7579b5df, 0x401, 0x5, 0x4}, {0x40000001, 0x31237648, 0x3, 0x81, 0x2}]}) 1.51685818s ago: executing program 8 (id=3002): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) 1.413285227s ago: executing program 5 (id=3006): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pivot_root(0x0, 0x0) 1.244399767s ago: executing program 8 (id=3013): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0xffffffff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0xfaea, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000b8]}, 0x45c) 1.18955332s ago: executing program 8 (id=3015): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00\x00'], 0x48) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x85132, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 1.086131616s ago: executing program 8 (id=3018): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ff", @ANYRES16], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x1, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 1.02951686s ago: executing program 8 (id=3019): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.02915285s ago: executing program 7 (id=3021): syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f0000000240)="368c413f888b1fb9667728860744c52794ae410f353306fac5db108a", 0xfffffffffffffcf8, 0x4000804, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) 846.53818ms ago: executing program 5 (id=3028): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="05200304000004aa"], 0x0, 0x0, 0x0, 0x0, 0x0}) 846.07051ms ago: executing program 2 (id=3029): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x40004, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) 782.548754ms ago: executing program 2 (id=3032): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18, &(0x7f0000000580)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x20) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000180)={0x8000000000000001, 0x5, 0x0, 0x5}) 717.442588ms ago: executing program 7 (id=3033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 717.109267ms ago: executing program 7 (id=3034): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x4, 0x8, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 699.529968ms ago: executing program 7 (id=3035): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000008c0)='#R', 0x2}], 0x1) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 565.333917ms ago: executing program 7 (id=3036): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) 490.117631ms ago: executing program 7 (id=3038): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, 0x0, &(0x7f0000000180)) 245.948625ms ago: executing program 9 (id=3044): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 238.800016ms ago: executing program 2 (id=3045): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000001600)) 181.078439ms ago: executing program 9 (id=3046): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001040)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 180.806149ms ago: executing program 9 (id=3047): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05072bbd7000ffdbdf250100000004000180100002800c000180"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 180.654409ms ago: executing program 2 (id=3048): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5f3a, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "003c01", 0x0, 0x33, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2}}}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) 125.803553ms ago: executing program 9 (id=3049): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400"], 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xdffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 125.600013ms ago: executing program 2 (id=3050): syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@noauto_da_alloc}, {@quota}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) unlink(&(0x7f0000000580)='./file0/file0\x00') 125.495183ms ago: executing program 9 (id=3051): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0d00000009080000040000000100000000000000", @ANYRES32=r0], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r1, &(0x7f0000000240)}, 0x20) 116.700753ms ago: executing program 9 (id=3052): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@max_dir_size_kb}, {@nogrpid}, {@noauto_da_alloc}, {@orlov}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=3053): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) fchown(r0, r1, 0xffffffffffffffff) kernel console output (not intermixed with test programs): : Read-only file system [ 92.186843][ T4948] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 92.219962][ T4952] loop3: detected capacity change from 0 to 512 [ 92.305228][ T4956] loop4: detected capacity change from 0 to 128 [ 92.335978][ T4952] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.2052: inode has both inline data and extents flags [ 92.377715][ T4952] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2052: couldn't read orphan inode 15 (err -117) [ 92.398377][ T4952] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.541019][ T4970] loop4: detected capacity change from 0 to 128 [ 92.557828][ T20] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 92.682397][ T4937] loop1: detected capacity change from 0 to 131072 [ 92.715470][ T4990] loop4: detected capacity change from 0 to 512 [ 92.725634][ T4937] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 92.737224][ T4937] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 92.749952][ T4937] F2FS-fs (loop1): invalid crc value [ 92.767186][ T4937] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.818780][ T4990] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2069: bg 0: block 255: padding at end of block bitmap is not set [ 92.833211][ T20] usb 1-1: Using ep0 maxpacket: 32 [ 92.850537][ T4990] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 92.859583][ T4990] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2069: invalid indirect mapped block 1 (level 1) [ 92.882579][ T4990] EXT4-fs (loop4): 1 truncate cleaned up [ 92.888668][ T4990] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: none. [ 92.913187][ T4937] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 92.920520][ T4937] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 92.984238][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.023590][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.046706][ T20] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 93.057352][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.081354][ T20] usb 1-1: config 0 descriptor?? [ 93.121911][ T20] hub 1-1:0.0: USB hub found [ 93.263385][ T342] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 93.414029][ T20] hub 1-1:0.0: 9 ports detected [ 93.446479][ T20] hub 1-1:0.0: insufficient power available to use all downstream ports [ 93.514542][ T5055] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 93.521012][ T5055] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 93.530439][ T5055] F2FS-fs (loop3): invalid crc value [ 93.552051][ T5055] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 93.584409][ T5055] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 93.591917][ T5055] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 93.618608][ T281] attempt to access beyond end of device [ 93.618608][ T281] loop3: rw=2049, want=45104, limit=40427 [ 93.629246][ T5067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2102'. [ 93.641647][ T20] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 93.648068][ T20] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 93.674185][ T342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.689716][ T342] usb 3-1: New USB device found, idVendor=2087, idProduct=0703, bcdDevice= 0.00 [ 93.699086][ T342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.717991][ T342] usb 3-1: config 0 descriptor?? [ 93.771628][ T20] usbhid 1-1:0.0: can't add hid device: -71 [ 93.780011][ T20] usbhid: probe of 1-1:0.0 failed with error -71 [ 93.805131][ T5073] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.816638][ T20] usb 1-1: USB disconnect, device number 14 [ 93.835928][ T5081] xt_hashlimit: size too large, truncated to 1048576 [ 93.839218][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 93.839252][ T30] audit: type=1400 audit(2000000056.197:465): avc: denied { rename } for pid=5072 comm="syz.4.2106" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.879938][ T5073] EXT4-fs error (device loop4): ext4_check_all_de:667: inode #12: block 7: comm syz.4.2106: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 94.136563][ T5094] netlink: 'syz.3.2114': attribute type 298 has an invalid length. [ 94.158325][ T5096] binfmt_misc: register: failed to install interpreter file ./file2 [ 94.242070][ T342] hid-generic 0003:2087:0703.0022: hidraw0: USB HID v0.02 Device [HID 2087:0703] on usb-dummy_hcd.2-1/input0 [ 94.387217][ T5109] sock: sock_timestamping_bind_phc: sock not bind to device [ 94.435934][ T5115] netlink: 'syz.4.2123': attribute type 1 has an invalid length. [ 94.445156][ T30] audit: type=1400 audit(2000000056.759:466): avc: denied { create } for pid=5113 comm="syz.0.2120" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 94.459103][ T4755] usb 3-1: USB disconnect, device number 11 [ 94.489148][ T30] audit: type=1400 audit(2000000056.778:467): avc: denied { write } for pid=5113 comm="syz.0.2120" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 94.540594][ T5123] xt_hashlimit: size too large, truncated to 1048576 [ 95.101090][ T5161] netlink: 'syz.4.2145': attribute type 49 has an invalid length. [ 95.245878][ T30] audit: type=1400 audit(2000000057.498:468): avc: denied { watch_reads } for pid=5184 comm="syz.4.2157" path="/479" dev="tmpfs" ino=2467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 95.284329][ T5175] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.300905][ T5107] F2FS-fs (loop1): Test dummy encryption mode enabled [ 95.310523][ T5175] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 95.324678][ T5107] F2FS-fs (loop1): invalid crc value [ 95.335911][ T5175] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 95.357534][ T30] audit: type=1400 audit(2000000057.599:469): avc: denied { getattr } for pid=5174 comm="syz.2.2150" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 95.384690][ T5107] F2FS-fs (loop1): Found nat_bits in checkpoint [ 95.455377][ T5202] usb usb8: usbfs: process 5202 (syz.3.2164) did not claim interface 9 before use [ 95.478496][ T5107] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 95.487950][ T5200] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 95.498477][ T5200] EXT4-fs (loop0): Test dummy encryption mode enabled [ 95.513765][ T5204] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.537059][ T5200] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,sysvgroups,acl,grpquota,discard,,errors=continue. Quota mode: writeback. [ 95.595847][ T5204] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,dioread_nolock,quota,,errors=continue. Quota mode: writeback. [ 95.609410][ T5204] ext4 filesystem being mounted at /507/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.703374][ T5218] tipc: Enabling of bearer rejected, failed to enable media [ 95.798910][ T332] tipc: Disabling bearer [ 95.804457][ T332] tipc: Left network mode [ 95.819899][ T775] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 95.870449][ T5228] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,delalloc,inlinecrypt,user_xattr,nodelalloc,errors=continue,mb_optimize_scan=0x0000000000000001,barrier,,errors=continue. Quota mode: writeback. [ 96.044932][ T30] audit: type=1400 audit(2000000058.227:470): avc: denied { mounton } for pid=5240 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 96.101679][ T775] usb 3-1: Using ep0 maxpacket: 8 [ 96.123947][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.131036][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.138860][ T5240] device bridge_slave_0 entered promiscuous mode [ 96.146350][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.153493][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.161580][ T5240] device bridge_slave_1 entered promiscuous mode [ 96.242704][ T775] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 96.253714][ T775] usb 3-1: config 0 has no interface number 0 [ 96.282941][ T5253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2185'. [ 96.308136][ T5253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2185'. [ 96.362534][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 96.389682][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.396928][ T5240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.404251][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.411351][ T5240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.460107][ T775] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 96.473875][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.492895][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.501086][ T775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.509608][ T775] usb 3-1: Product: syz [ 96.514365][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.524373][ T775] usb 3-1: Manufacturer: syz [ 96.529101][ T775] usb 3-1: SerialNumber: syz [ 96.550255][ T775] usb 3-1: config 0 descriptor?? [ 96.557333][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.568455][ T332] device bridge_slave_0 left promiscuous mode [ 96.574640][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.604944][ T332] device bridge0 left promiscuous mode [ 96.610525][ T332] device veth1_macvtap left promiscuous mode [ 96.622068][ T332] device veth0_vlan left promiscuous mode [ 96.708673][ T342] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 96.803428][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.817419][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.840831][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.849632][ T5238] set_capacity_and_notify: 9 callbacks suppressed [ 96.849646][ T5238] loop3: detected capacity change from 0 to 131072 [ 96.862908][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.882589][ T5238] F2FS-fs (loop3): invalid crc value [ 96.889887][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.899168][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.912814][ T5240] device veth0_vlan entered promiscuous mode [ 96.920422][ T5238] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.936852][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.945249][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.976748][ T5240] device veth1_macvtap entered promiscuous mode [ 96.983921][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.993693][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.005229][ T5238] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 97.012775][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.020981][ T5238] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 97.021384][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.037314][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.056238][ T775] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 97.077097][ T60] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 97.078339][ T775] usb 3-1: No valid video chain found. [ 97.091283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.099954][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.108426][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.116836][ T342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.128818][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.134396][ T342] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 97.153659][ T342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.165385][ T342] usb 2-1: config 0 descriptor?? [ 97.171261][ T30] audit: type=1400 audit(2000000059.269:471): avc: denied { mounton } for pid=5240 comm="syz-executor" path="/root/syzkaller.ETrMdk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 97.275211][ T39] usb 3-1: USB disconnect, device number 12 [ 97.292859][ T378] udevd[378]: symlink '../../loop3' '/dev/disk/by-diskseq/462.tmp-b7:3' failed: Read-only file system [ 97.332383][ T378] udevd[378]: symlink '../../loop3' '/dev/disk/by-diskseq/462.tmp-b7:3' failed: Read-only file system [ 97.423772][ T5297] usb usb8: usbfs: process 5297 (syz.5.2201) did not claim interface 0 before use [ 97.445702][ T5297] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.499928][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.520808][ T60] usb 1-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00 [ 97.540981][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.558731][ T60] usb 1-1: config 0 descriptor?? [ 97.576111][ T378] udevd[378]: symlink '../../loop3' '/dev/disk/by-diskseq/463.tmp-b7:3' failed: Read-only file system [ 97.631056][ T2193] udevd[2193]: symlink '../../loop3' '/dev/disk/by-diskseq/463.tmp-b7:3' failed: Read-only file system [ 97.666283][ T2193] udevd[2193]: symlink '../../loop3' '/dev/disk/by-diskseq/463.tmp-b7:3' failed: Read-only file system [ 97.685541][ T342] isku 0003:1E7D:3264.0023: unbalanced collection at end of report description [ 97.697064][ T342] isku 0003:1E7D:3264.0023: parse failed [ 97.703309][ T342] isku: probe of 0003:1E7D:3264.0023 failed with error -22 [ 97.844509][ T377] udevd[377]: symlink '../../loop2' '/dev/disk/by-diskseq/455.tmp-b7:2' failed: Read-only file system [ 97.889082][ T377] udevd[377]: symlink '../../loop2' '/dev/disk/by-diskseq/455.tmp-b7:2' failed: Read-only file system [ 97.927475][ T20] usb 2-1: USB disconnect, device number 13 [ 97.953264][ T2193] udevd[2193]: symlink '../../loop2' '/dev/disk/by-diskseq/455.tmp-b7:2' failed: Read-only file system [ 97.976603][ T2155] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 98.017932][ T377] udevd[377]: symlink '../../loop2' '/dev/disk/by-diskseq/455.tmp-b7:2' failed: Read-only file system [ 98.060158][ T60] wacom 0003:056A:00E6.0024: hidraw0: USB HID v10.00 Device [HID 056a:00e6] on usb-dummy_hcd.0-1/input0 [ 98.258397][ T2155] usb 4-1: Using ep0 maxpacket: 8 [ 98.295142][ T775] usb 1-1: USB disconnect, device number 15 [ 98.342337][ T5328] loop2: detected capacity change from 0 to 40427 [ 98.374793][ T5328] F2FS-fs (loop2): invalid crc value [ 98.400064][ T2155] usb 4-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.416279][ T5328] F2FS-fs (loop2): Found nat_bits in checkpoint [ 98.438788][ T2155] usb 4-1: config 0 interface 0 has no altsetting 0 [ 98.438635][ T377] udevd[377]: symlink '../../loop2' '/dev/disk/by-diskseq/464.tmp-b7:2' failed: Read-only file system [ 98.467191][ T2155] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 98.490021][ T2155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.535816][ T2155] usb 4-1: config 0 descriptor?? [ 98.544009][ T5328] F2FS-fs (loop2): Start checkpoint disabled! [ 98.554547][ T5328] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 98.691270][ T5339] loop1: detected capacity change from 0 to 256 [ 98.757405][ T5339] exfat: Deprecated parameter 'namecase' [ 98.802497][ T5339] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 98.955345][ T5359] loop1: detected capacity change from 0 to 256 [ 98.996873][ T5363] loop5: detected capacity change from 0 to 512 [ 99.019679][ T5359] exFAT-fs (loop1): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 99.059165][ T5359] exFAT-fs (loop1): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 99.063820][ T2155] kye 0003:0458:0087.0025: unknown main item tag 0x0 [ 99.088834][ T5359] exFAT-fs (loop1): Filesystem has been set read-only [ 99.107962][ T2155] kye 0003:0458:0087.0025: unknown main item tag 0x0 [ 99.115612][ T5363] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 99.122397][ T2155] kye 0003:0458:0087.0025: unknown main item tag 0x0 [ 99.136138][ T2155] kye 0003:0458:0087.0025: unknown main item tag 0x0 [ 99.143276][ T2155] kye 0003:0458:0087.0025: unknown main item tag 0x0 [ 99.150949][ T2155] kye 0003:0458:0087.0025: hidraw0: USB HID v0.09 Device [HID 0458:0087] on usb-dummy_hcd.3-1/input0 [ 99.166650][ T5363] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.302368][ T775] usb 4-1: USB disconnect, device number 8 [ 99.308749][ T5369] loop1: detected capacity change from 0 to 8192 [ 99.340655][ T30] audit: type=1400 audit(2000000061.271:472): avc: denied { load_policy } for pid=5374 comm="syz.5.2234" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 99.340791][ T5375] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 99.386849][ T5369] loop1: p1 < > p2 p3 < p5 p6 > p4 [ 99.392112][ T5369] loop1: partition table partially beyond EOD, truncated [ 99.413460][ T5369] loop1: p1 start 100663296 is beyond EOD, truncated [ 99.417870][ T5375] SELinux: failed to load policy [ 99.426420][ T5369] loop1: p2 size 134217732 extends beyond EOD, truncated [ 99.459157][ T5369] loop1: p4 size 14876672 extends beyond EOD, truncated [ 99.466816][ T5369] loop1: p5 size 134217732 extends beyond EOD, truncated [ 99.484066][ T5369] loop1: p6 size 14876672 extends beyond EOD, truncated [ 99.522911][ T30] audit: type=1400 audit(2000000061.438:473): avc: denied { getopt } for pid=5378 comm="syz.5.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.563243][ T5381] loop5: detected capacity change from 0 to 256 [ 99.625800][ T5381] FAT-fs (loop5): Directory bread(block 1285) failed [ 99.638548][ T5381] FAT-fs (loop5): FAT read failed (blocknr 1281) [ 99.703254][ T5393] netlink: 'syz.1.2244': attribute type 298 has an invalid length. [ 99.798620][ T5404] loop0: detected capacity change from 0 to 256 [ 99.817266][ T5356] loop2: detected capacity change from 0 to 131072 [ 99.824947][ T30] audit: type=1326 audit(2000000061.724:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda157eceb9 code=0x7ffc0000 [ 99.848838][ T30] audit: type=1326 audit(2000000061.724:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fda157eceb9 code=0x7ffc0000 [ 99.873499][ T30] audit: type=1326 audit(2000000061.724:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda157eceb9 code=0x7ffc0000 [ 99.896991][ T5356] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 99.905119][ T5356] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 99.929627][ T5404] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 99.937239][ T30] audit: type=1326 audit(2000000061.724:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fda157eceb9 code=0x7ffc0000 [ 99.965909][ T5356] F2FS-fs (loop2): invalid crc value [ 100.000470][ T30] audit: type=1326 audit(2000000061.724:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5405 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda157eceb9 code=0x7ffc0000 [ 100.034575][ T5356] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.171926][ T5356] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 100.193015][ T5442] loop3: detected capacity change from 0 to 512 [ 100.198559][ T5356] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 100.244580][ T5442] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 100.318898][ T5356] F2FS-fs (loop2): inaccessible inode: 1, run fsck to repair [ 100.337413][ T5356] F2FS-fs (loop2): inaccessible inode: 1, run fsck to repair [ 100.369155][ T5442] ext4 filesystem being mounted at /521/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.408334][ T5457] device ip6gretap0 entered promiscuous mode [ 100.433827][ T5457] device vlan2 entered promiscuous mode [ 100.554705][ T5465] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.905247][ T30] audit: type=1326 audit(2000000062.720:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.3.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79cb0aaeb9 code=0x7ffc0000 [ 100.978291][ T30] audit: type=1326 audit(2000000062.757:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.3.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f79cb0aaeb9 code=0x7ffc0000 [ 101.065448][ T30] audit: type=1326 audit(2000000062.757:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5481 comm="syz.3.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79cb0aaeb9 code=0x7ffc0000 [ 101.397279][ T5527] netlink: 'syz.2.2302': attribute type 2 has an invalid length. [ 101.506306][ T5533] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000000,nobarrier,debug_want_extra_isize=0x0000000000000080,barrier,minixdf,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: none. [ 101.687920][ T5552] tipc: Enabling of bearer rejected, failed to enable media [ 101.733894][ T5557] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2315'. [ 101.737613][ T2155] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 101.826101][ T5562] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.912112][ T5576] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2325: bg 0: block 255: padding at end of block bitmap is not set [ 101.931439][ T5576] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 101.940502][ T5576] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.2325: invalid indirect mapped block 1 (level 1) [ 101.955510][ T5576] EXT4-fs (loop0): 1 truncate cleaned up [ 101.967446][ T5576] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.008262][ T2155] usb 2-1: Using ep0 maxpacket: 16 [ 102.051720][ T60] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 102.138404][ T2155] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.149152][ T2155] usb 2-1: config 0 has no interface number 0 [ 102.155301][ T2155] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.171390][ T5599] EXT4-fs (loop2): Test dummy encryption mode enabled [ 102.178899][ T2155] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.189237][ T2155] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 102.200468][ T2155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.208915][ T5599] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.219954][ T2155] usb 2-1: config 0 descriptor?? [ 102.237719][ T5599] EXT4-fs error (device loop2): xattr_find_entry:297: inode #15: comm syz.2.2336: corrupted xattr entries [ 102.251783][ T5599] EXT4-fs (loop2): 1 orphan inode deleted [ 102.257888][ T5599] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none. [ 102.287705][ T5606] set_capacity_and_notify: 7 callbacks suppressed [ 102.287723][ T5606] loop3: detected capacity change from 0 to 16 [ 102.307741][ T5599] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 102.318131][ T5599] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz.2.2336: deleted inode referenced: 15 [ 102.333405][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 102.345497][ T5606] erofs: (device loop3): mounted with root inode @ nid 36. [ 102.366500][ T5606] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 102.381029][ T5606] attempt to access beyond end of device [ 102.381029][ T5606] loop3: rw=524288, want=34359740336, limit=16 [ 102.411972][ T5614] loop2: detected capacity change from 0 to 256 [ 102.436654][ T5614] FAT-fs (loop2): Directory bread(block 64) failed [ 102.444391][ T5614] FAT-fs (loop2): Directory bread(block 65) failed [ 102.459771][ T5616] loop3: detected capacity change from 0 to 256 [ 102.466257][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.477386][ T5614] FAT-fs (loop2): Directory bread(block 66) failed [ 102.483951][ T5614] FAT-fs (loop2): Directory bread(block 67) failed [ 102.490838][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.508826][ T60] usb 6-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.00 [ 102.518545][ T5614] FAT-fs (loop2): Directory bread(block 68) failed [ 102.525111][ T5614] FAT-fs (loop2): Directory bread(block 69) failed [ 102.531897][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.543033][ T60] usb 6-1: config 0 descriptor?? [ 102.548415][ T5614] FAT-fs (loop2): Directory bread(block 70) failed [ 102.555616][ T5614] FAT-fs (loop2): Directory bread(block 71) failed [ 102.562506][ T5614] FAT-fs (loop2): Directory bread(block 72) failed [ 102.569049][ T5614] FAT-fs (loop2): Directory bread(block 73) failed [ 102.725460][ T377] udevd[377]: symlink '../../loop0' '/dev/disk/by-diskseq/493.tmp-b7:0' failed: Read-only file system [ 102.746519][ T2193] udevd[2193]: symlink '../../loop3' '/dev/disk/by-diskseq/500.tmp-b7:3' failed: Read-only file system [ 102.758980][ T2155] holtek_mouse 0003:04D9:A081.0026: unknown main item tag 0x0 [ 102.766518][ T2155] holtek_mouse 0003:04D9:A081.0026: unknown main item tag 0x0 [ 102.812302][ T377] udevd[377]: symlink '../../loop2' '/dev/disk/by-diskseq/501.tmp-b7:2' failed: Read-only file system [ 102.823931][ T2155] holtek_mouse 0003:04D9:A081.0026: unknown main item tag 0x0 [ 102.830173][ T2193] udevd[2193]: symlink '../../loop3' '/dev/disk/by-diskseq/500.tmp-b7:3' failed: Read-only file system [ 102.842828][ T2155] holtek_mouse 0003:04D9:A081.0026: unknown main item tag 0x0 [ 102.842860][ T2155] holtek_mouse 0003:04D9:A081.0026: unknown main item tag 0x0 [ 102.863257][ T377] udevd[377]: symlink '../../loop2' '/dev/disk/by-diskseq/501.tmp-b7:2' failed: Read-only file system [ 102.882676][ T2155] holtek_mouse 0003:04D9:A081.0026: unknown main item tag 0x0 [ 102.894145][ T2193] udevd[2193]: symlink '../../loop3' '/dev/disk/by-diskseq/500.tmp-b7:3' failed: Read-only file system [ 102.911278][ T2155] holtek_mouse 0003:04D9:A081.0026: unknown main item tag 0x0 [ 102.919674][ T2155] holtek_mouse 0003:04D9:A081.0026: unknown main item tag 0x0 [ 102.929049][ T2155] holtek_mouse 0003:04D9:A081.0026: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.1-1/input1 [ 102.951013][ T377] udevd[377]: symlink '../../loop3' '/dev/disk/by-diskseq/500.tmp-b7:3' failed: Read-only file system [ 103.012247][ T342] usb 2-1: USB disconnect, device number 14 [ 103.019348][ T378] udevd[378]: symlink '../../loop3' '/dev/disk/by-diskseq/500.tmp-b7:3' failed: Read-only file system [ 103.050450][ T60] apple 0003:05AC:024D.0027: item fetching failed at offset 5/9 [ 103.059696][ T60] apple 0003:05AC:024D.0027: parse failed [ 103.072242][ T60] apple: probe of 0003:05AC:024D.0027 failed with error -22 [ 103.080413][ T2193] udevd[2193]: symlink '../../loop3' '/dev/disk/by-diskseq/500.tmp-b7:3' failed: Read-only file system [ 103.096351][ T378] udevd[378]: symlink '../../loop2' '/dev/disk/by-diskseq/501.tmp-b7:2' failed: Read-only file system [ 103.140802][ T5662] loop2: detected capacity change from 0 to 512 [ 103.283520][ T775] usb 6-1: USB disconnect, device number 2 [ 103.421176][ T5698] loop0: detected capacity change from 0 to 512 [ 103.439850][ T5698] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.459159][ T5698] EXT4-fs (loop0): 1 truncate cleaned up [ 103.465267][ T5698] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 103.610078][ T5719] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.621515][ T5719] F2FS-fs (loop1): Unable to read 1th superblock [ 103.628142][ T5719] blk_update_request: I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.639168][ T5719] F2FS-fs (loop1): Unable to read 2th superblock [ 103.663273][ T5721] loop0: detected capacity change from 0 to 1024 [ 103.700522][ T5721] EXT4-fs (loop0): Ignoring removed orlov option [ 103.708983][ T5721] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 103.855363][ T5730] loop5: detected capacity change from 0 to 256 [ 103.894114][ T5730] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 103.923693][ T5736] loop0: detected capacity change from 0 to 128 [ 104.068776][ T5744] loop0: detected capacity change from 0 to 8192 [ 104.086401][ T5744] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 104.103663][ T5744] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 104.112931][ T5744] FAT-fs (loop0): Filesystem has been set read-only [ 104.344711][ T5757] SELinux: security_context_str_to_sid(=5ýÆÉ] ÖS9q#“ë) failed for (dev ?, type ?) errno=-22 [ 104.360352][ T5757] SELinux: security_context_str_to_sid(=5ýÆÉ] ÖS9q#“ë) failed for (dev pstore, type pstore) errno=-22 [ 104.522616][ T60] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 104.554848][ T5772] loop3: detected capacity change from 0 to 8192 [ 104.590259][ T5788] overlayfs: overlapping lowerdir path [ 104.702483][ T5795] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,usrquota,errors=remount-ro,auto_da_alloc,sysvgroups,. Quota mode: writeback. [ 104.719114][ T5795] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.734639][ T5795] EXT4-fs error (device loop0): ext4_map_blocks:740: inode #15: comm syz.0.2428: lblock 0 mapped to illegal pblock 0 (length 6) [ 104.748434][ T5795] EXT4-fs (loop0): Remounting filesystem read-only [ 104.793629][ T60] usb 6-1: Using ep0 maxpacket: 32 [ 104.831855][ T5800] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012366, chksum : 0x6ab66362, utbl_chksum : 0xe619d30d) [ 104.907478][ T5803] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 104.921387][ T5811] binder: 5808:5811 ioctl 400c620e 200000000240 returned -22 [ 104.929053][ T60] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 104.943348][ T60] usb 6-1: config 2 has no interface number 0 [ 104.949918][ T5803] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.978410][ T5801] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 104.995688][ T60] usb 6-1: config 2 interface 88 has no altsetting 0 [ 105.075213][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 105.075239][ T30] audit: type=1400 audit(2000000066.559:489): avc: denied { setattr } for pid=5802 comm="syz.0.2430" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.158606][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 105.183413][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 105.203254][ T60] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 105.216256][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.217561][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 105.224473][ T60] usb 6-1: Product: syz [ 105.254919][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 105.263904][ T60] usb 6-1: Manufacturer: syz [ 105.269337][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 105.281456][ T60] usb 6-1: SerialNumber: syz [ 105.287040][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 105.313112][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 105.335877][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 105.350370][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 105.370557][ T5828] FAT-fs (loop1): Directory bread(block 64) failed [ 105.385209][ T283] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 105.386484][ T5828] FAT-fs (loop1): Directory bread(block 65) failed [ 105.422282][ T5828] FAT-fs (loop1): Directory bread(block 66) failed [ 105.428867][ T5828] FAT-fs (loop1): Directory bread(block 67) failed [ 105.436936][ T5828] FAT-fs (loop1): Directory bread(block 68) failed [ 105.443509][ T5828] FAT-fs (loop1): Directory bread(block 69) failed [ 105.450419][ T5828] FAT-fs (loop1): Directory bread(block 70) failed [ 105.457399][ T5828] FAT-fs (loop1): Directory bread(block 71) failed [ 105.464106][ T5828] FAT-fs (loop1): Directory bread(block 72) failed [ 105.471014][ T5828] FAT-fs (loop1): Directory bread(block 73) failed [ 105.559322][ T562] tipc: Left network mode [ 105.588027][ T5841] IPv6: NLM_F_REPLACE set, but no existing node found! [ 105.671627][ T775] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 105.694531][ T5846] erofs: (device loop3): mounted with root inode @ nid 36. [ 105.705544][ T5846] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 105.715891][ T5846] attempt to access beyond end of device [ 105.715891][ T5846] loop3: rw=0, want=304, limit=16 [ 105.726673][ T5846] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 105.735039][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.735062][ T5846] erofs: (device loop3): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 105.745319][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.760469][ T5847] device bridge_slave_0 entered promiscuous mode [ 105.772875][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.780323][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.787872][ T5847] device bridge_slave_1 entered promiscuous mode [ 105.890205][ T5856] FAT-fs (loop1): Directory bread(block 64) failed [ 105.914185][ T5856] FAT-fs (loop1): Directory bread(block 65) failed [ 105.921496][ T5856] FAT-fs (loop1): Directory bread(block 66) failed [ 105.928134][ T5856] FAT-fs (loop1): Directory bread(block 67) failed [ 105.935824][ T5856] FAT-fs (loop1): Directory bread(block 68) failed [ 105.943145][ T5856] FAT-fs (loop1): Directory bread(block 69) failed [ 105.949787][ T5856] FAT-fs (loop1): Directory bread(block 70) failed [ 105.957884][ T5856] FAT-fs (loop1): Directory bread(block 71) failed [ 105.965064][ T5856] FAT-fs (loop1): Directory bread(block 72) failed [ 105.971693][ T5856] FAT-fs (loop1): Directory bread(block 73) failed [ 105.982514][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.989669][ T5847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.997005][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.004068][ T5847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.039380][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.047657][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.055394][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.065552][ T5854] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 1) [ 106.074371][ T5854] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 106.083354][ T775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.089295][ T5854] F2FS-fs (loop3): invalid crc value [ 106.098723][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.107263][ T775] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 106.120744][ T775] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 106.122821][ T5854] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root and reserve_node [ 106.131788][ T775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.142878][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.154722][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.162455][ T775] usb 3-1: config 0 descriptor?? [ 106.173914][ T5854] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.186489][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.198877][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.206007][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.242714][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.254722][ T5854] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 106.256249][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.268256][ T5854] F2FS-fs (loop3): Failed to read root inode [ 106.285516][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.289680][ T60] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 106.296710][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.313159][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.323752][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.333626][ T562] device bridge_slave_1 left promiscuous mode [ 106.341733][ T60] asix: probe of 6-1:2.88 failed with error -71 [ 106.342442][ T562] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.360693][ T60] usb 6-1: USB disconnect, device number 3 [ 106.368171][ T562] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.393098][ T562] device veth1_macvtap left promiscuous mode [ 106.403319][ T562] device veth0_vlan left promiscuous mode [ 106.674124][ T5847] device veth0_vlan entered promiscuous mode [ 106.695577][ T775] hid-generic 0003:05AC:0324.0028: hidraw0: USB HID v0.00 Device [HID 05ac:0324] on usb-dummy_hcd.2-1/input0 [ 106.754517][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 106.770332][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.792238][ T5878] FAT-fs (loop3): Directory bread(block 64) failed [ 106.809626][ T5878] FAT-fs (loop3): Directory bread(block 65) failed [ 106.818073][ T5847] device veth1_macvtap entered promiscuous mode [ 106.828990][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.832478][ T5878] FAT-fs (loop3): Directory bread(block 66) failed [ 106.850168][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.868662][ T5878] FAT-fs (loop3): Directory bread(block 67) failed [ 106.875342][ T5878] FAT-fs (loop3): Directory bread(block 68) failed [ 106.876985][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.882252][ T5878] FAT-fs (loop3): Directory bread(block 69) failed [ 106.905083][ T5878] FAT-fs (loop3): Directory bread(block 70) failed [ 106.920450][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.939688][ T5878] FAT-fs (loop3): Directory bread(block 71) failed [ 106.940907][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.949991][ T20] usb 3-1: USB disconnect, device number 13 [ 106.960499][ T5878] FAT-fs (loop3): Directory bread(block 72) failed [ 107.002181][ T5878] FAT-fs (loop3): Directory bread(block 73) failed [ 107.434073][ T5885] F2FS-fs (loop6): invalid crc value [ 107.457640][ T5885] F2FS-fs (loop6): Found nat_bits in checkpoint [ 107.536428][ T5885] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 107.546448][ T4755] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 107.557608][ T5885] F2FS-fs (loop6): Start checkpoint disabled! [ 107.565837][ T5885] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 107.736349][ T5909] set_capacity_and_notify: 11 callbacks suppressed [ 107.736361][ T5909] loop1: detected capacity change from 0 to 1024 [ 107.766814][ T5909] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.817325][ T4755] usb 4-1: Using ep0 maxpacket: 16 [ 107.819145][ T5909] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,noauto_da_alloc,nodelalloc,sysvgroups,data_err=ignore,barrier=0x000000000000007f,noauto_da_alloc,grpquota,dioread_nolock,nobarrier,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 107.930953][ T5920] loop1: detected capacity change from 0 to 256 [ 107.952633][ T5919] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 107.961357][ T4755] usb 4-1: config 0 interface 0 has no altsetting 0 [ 107.970036][ T4755] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 107.988912][ T5919] FAT-fs (loop1): Filesystem has been set read-only [ 107.995854][ T4755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.011369][ T4755] usb 4-1: config 0 descriptor?? [ 108.057282][ T5930] loop1: detected capacity change from 0 to 512 [ 108.126927][ T5930] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 108.159229][ T5930] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.175118][ T5939] loop5: detected capacity change from 0 to 4096 [ 108.187290][ T378] udevd[378]: symlink '../../loop1' '/dev/disk/by-diskseq/542.tmp-b7:1' failed: Read-only file system [ 108.201653][ T378] udevd[378]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 108.243857][ T2193] udevd[2193]: symlink '../../loop5' '/dev/disk/by-diskseq/543.tmp-b7:5' failed: Read-only file system [ 108.258476][ T378] udevd[378]: symlink '../../loop1' '/dev/disk/by-diskseq/542.tmp-b7:1' failed: Read-only file system [ 108.264840][ T5939] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 108.285553][ T2193] udevd[2193]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 108.293156][ T378] udevd[378]: symlink '../../loop1' '/dev/disk/by-diskseq/542.tmp-b7:1' failed: Read-only file system [ 108.321859][ T2193] udevd[2193]: symlink '../../loop5' '/dev/disk/by-diskseq/543.tmp-b7:5' failed: Read-only file system [ 108.341168][ T2193] udevd[2193]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 108.368003][ T378] udevd[378]: symlink '../../loop1' '/dev/disk/by-diskseq/544.tmp-b7:1' failed: Read-only file system [ 108.400979][ T378] udevd[378]: symlink '../../loop5' '/dev/disk/by-diskseq/543.tmp-b7:5' failed: Read-only file system [ 108.464750][ T5955] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 108.479738][ T5957] loop1: detected capacity change from 0 to 1024 [ 108.494313][ T5957] EXT4-fs (loop1): Ignoring removed nobh option [ 108.505690][ T5957] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.513437][ T4755] hid (null): unknown global tag 0xd [ 108.540662][ T4755] hid (null): invalid report_count -2088282604 [ 108.547601][ T4755] hid (null): global environment stack underflow [ 108.554130][ T4755] hid (null): invalid report_count 790000760 [ 108.561410][ T5957] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,nojournal_checksum,barrier=0x0000000000000002,dioread_lock,nolazytime,resgid=0x0000000000000000,jqfmt=vfsold,journal_dev=0x0000000000000800,nobh,inlinecrypt,barrier,dioread_nolock,,errors=continue. Quota mode: none. [ 108.608438][ T30] audit: type=1400 audit(2000000069.816:490): avc: denied { rename } for pid=5956 comm="syz.1.2489" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.671505][ T5973] loop5: detected capacity change from 0 to 1024 [ 108.730426][ T4755] usb 4-1: USB disconnect, device number 9 [ 108.753516][ T5973] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 108.763713][ T5973] EXT4-fs (loop5): orphan cleanup on readonly fs [ 108.781655][ T5973] EXT4-fs error (device loop5): ext4_map_blocks:740: inode #3: block 3: comm syz.5.2497: lblock 3 mapped to illegal pblock 3 (length 1) [ 108.808553][ T5973] Quota error (device loop5): write_blk: dquota write failed [ 108.816386][ T5973] Quota error (device loop5): find_free_dqentry: Can't write quota data block 3 [ 108.826027][ T5973] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 108.836708][ T5973] EXT4-fs error (device loop5): ext4_acquire_dquot:6225: comm syz.5.2497: Failed to acquire dquot type 0 [ 108.858513][ T5973] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #3: block 3: comm syz.5.2497: lblock 3 mapped to illegal pblock 3 (length 1) [ 108.877321][ T5973] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 108.893207][ T5973] EXT4-fs error (device loop5): ext4_acquire_dquot:6225: comm syz.5.2497: Failed to acquire dquot type 0 [ 108.910487][ T5973] EXT4-fs error (device loop5): ext4_free_blocks:6234: comm syz.5.2497: Freeing blocks not in datazone - block = 0, count = 4096 [ 108.933819][ T5973] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #3: block 3: comm syz.5.2497: lblock 3 mapped to illegal pblock 3 (length 1) [ 108.957015][ T5973] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 108.971756][ T5995] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 108.975693][ T5973] EXT4-fs error (device loop5): ext4_acquire_dquot:6225: comm syz.5.2497: Failed to acquire dquot type 0 [ 109.009064][ T5973] EXT4-fs (loop5): 1 orphan inode deleted [ 109.019784][ T5973] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.048546][ T5999] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2508'. [ 109.211417][ T6007] loop6: detected capacity change from 0 to 128 [ 109.232680][ T6010] loop5: detected capacity change from 0 to 256 [ 109.280719][ T6010] exfat: Deprecated parameter 'utf8' [ 109.290427][ T6007] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.302234][ T6010] exfat: Deprecated parameter 'utf8' [ 109.319035][ T6007] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.337821][ T6010] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 109.395998][ T8] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.524952][ T6022] loop3: detected capacity change from 0 to 512 [ 109.579733][ T6022] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 109.592237][ T6022] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.812015][ T6051] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 109.842161][ T6057] loop3: detected capacity change from 0 to 512 [ 109.880096][ T30] audit: type=1400 audit(2000000070.997:491): avc: denied { name_bind } for pid=6062 comm="syz.2.2535" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 109.907803][ T6057] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 109.921533][ T6057] ext4 filesystem being mounted at /576/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.967927][ T30] audit: type=1400 audit(2000000071.080:492): avc: denied { write } for pid=6056 comm="syz.3.2532" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.993498][ T6057] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #12: comm syz.3.2532: Directory hole found for htree leaf block 0 [ 110.010618][ T30] audit: type=1400 audit(2000000071.098:493): avc: denied { remove_name } for pid=6056 comm="syz.3.2532" name="file2" dev="overlay" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.035070][ T6073] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 110.052316][ T6073] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.067642][ T281] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 110.088230][ T281] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 110.104966][ T281] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 110.120293][ T281] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 110.134018][ T281] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 110.148256][ T281] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 110.172799][ T281] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 110.201857][ T281] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 110.229373][ T281] EXT4-fs error (device loop3): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 110.353372][ T6083] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 110.366646][ T281] syz-executor (281) used greatest stack depth: 20448 bytes left [ 110.389690][ T6083] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.427730][ T6083] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #2: comm syz.5.2544: corrupted inode contents [ 110.440929][ T6083] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #2: comm syz.5.2544: mark_inode_dirty error [ 110.452813][ T6083] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #2: comm syz.5.2544: corrupted inode contents [ 110.466220][ T8] tipc: Disabling bearer [ 110.471380][ T8] tipc: Left network mode [ 110.487457][ T6083] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.2544: mark_inode_dirty error [ 110.543119][ T6087] F2FS-fs (loop1): invalid crc value [ 110.562011][ T6087] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.618580][ T6087] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 110.631116][ T6087] F2FS-fs (loop1): Start checkpoint disabled! [ 110.641680][ T6087] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 110.691995][ T6093] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.700517][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.708193][ T6093] device bridge_slave_0 entered promiscuous mode [ 110.716143][ T6093] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.723453][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.731074][ T6093] device bridge_slave_1 entered promiscuous mode [ 110.882557][ T6093] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.889679][ T6093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.897026][ T6093] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.904082][ T6093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.921551][ T6114] FAT-fs (loop2): Directory bread(block 64) failed [ 110.941881][ T6114] FAT-fs (loop2): Directory bread(block 65) failed [ 110.948884][ T6114] FAT-fs (loop2): Directory bread(block 66) failed [ 110.955559][ T6114] FAT-fs (loop2): Directory bread(block 67) failed [ 110.978946][ T6114] FAT-fs (loop2): Directory bread(block 68) failed [ 110.987063][ T332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.988609][ T6114] FAT-fs (loop2): Directory bread(block 69) failed [ 111.001617][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.001779][ T6114] FAT-fs (loop2): Directory bread(block 70) failed [ 111.015849][ T6114] FAT-fs (loop2): Directory bread(block 71) failed [ 111.022454][ T6114] FAT-fs (loop2): Directory bread(block 72) failed [ 111.029499][ T6114] FAT-fs (loop2): Directory bread(block 73) failed [ 111.036866][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.071317][ T6114] attempt to access beyond end of device [ 111.071317][ T6114] loop2: rw=2049, want=1228, limit=256 [ 111.083221][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 111.103254][ T562] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.110370][ T562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.118136][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.135291][ T562] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.142698][ T562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.180141][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.195021][ T8] device bridge_slave_1 left promiscuous mode [ 111.205788][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x7 [ 111.207221][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.220580][ T26] hid-generic 0001:0007:0000.002A: ignoring exceeding usage max [ 111.230005][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.233592][ T8] device bridge_slave_0 left promiscuous mode [ 111.238327][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.250962][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.256870][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.258989][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.272847][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.280524][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.288695][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.296579][ T8] device veth1_macvtap left promiscuous mode [ 111.302713][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.310495][ T8] device veth0_vlan left promiscuous mode [ 111.318595][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.334312][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.350120][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.372096][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.379563][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.405090][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.412557][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.431851][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.439511][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.447106][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.454889][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.462553][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.470020][ T26] hid-generic 0001:0007:0000.002A: unknown main item tag 0x0 [ 111.478035][ T26] hid-generic 0001:0007:0000.002A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 111.504187][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.530318][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.534113][ T6132] fido_id[6132]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 111.560821][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.573062][ T6093] device veth0_vlan entered promiscuous mode [ 111.582733][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.590991][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.599290][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.607195][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.626944][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2560'. [ 111.647336][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.659348][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.678945][ T6093] device veth1_macvtap entered promiscuous mode [ 111.705099][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.719518][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.730278][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.760862][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.775490][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.860672][ T6149] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,block_validity,i_version,data_err=ignore,,errors=continue. Quota mode: writeback. [ 111.997055][ T6155] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 112.034744][ T6155] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.2568: bad orphan inode 131083 [ 112.057397][ T6155] EXT4-fs (loop7): mounted filesystem without journal. Opts: stripe=0x0000000000000008,abort,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 112.074632][ T6164] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 112.169506][ T6171] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 112.185528][ T6169] EXT4-fs (loop7): Test dummy encryption mode enabled [ 112.192357][ T6169] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.204743][ T6171] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.233672][ T6169] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,data_err=ignore,resuid=0x0000000000000000,inlinecrypt,dioread_nolock,bsddf,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 112.478589][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 112.478602][ T30] audit: type=1400 audit(2000000073.396:498): avc: denied { read } for pid=6193 comm="syz.2.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.510878][ T6190] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 112.542756][ T6190] EXT4-fs warning (device loop7): dx_probe:869: inode #2: comm syz.7.2583: Unimplemented hash flags: 0x0001 [ 112.554663][ T6190] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.2583: Corrupt directory, running e2fsck is recommended [ 112.576175][ T30] audit: type=1400 audit(2000000073.460:499): avc: denied { mount } for pid=6199 comm="syz.5.2587" name="/" dev="ramfs" ino=36551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 112.602907][ T30] audit: type=1400 audit(2000000073.460:500): avc: denied { remount } for pid=6199 comm="syz.5.2587" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 112.651721][ T30] audit: type=1400 audit(2000000073.506:501): avc: denied { unmount } for pid=5240 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 112.693720][ T30] audit: type=1400 audit(2000000073.590:502): avc: denied { map } for pid=6211 comm="syz.1.2593" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 112.982697][ T6234] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 112.994344][ T6234] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 113.004716][ T6234] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.2602: Corrupt directory, running e2fsck is recommended [ 113.018458][ T6234] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 113.026875][ T26] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 113.035181][ T6234] EXT4-fs error (device loop6): ext4_iget_extra_inode:4597: inode #15: comm syz.6.2602: corrupted in-inode xattr [ 113.047743][ T6234] EXT4-fs (loop6): Remounting filesystem read-only [ 113.055818][ T6234] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2602: couldn't read orphan inode 15 (err -117) [ 113.068996][ T6234] EXT4-fs (loop6): Remounting filesystem read-only [ 113.075797][ T6234] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,noinit_itable,discard,auto_da_alloc,grpjquota=.mb_optimize_scan=0x0000000000000000,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 113.118535][ T6234] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 113.130321][ T6234] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 113.141370][ T6234] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.2602: Corrupt directory, running e2fsck is recommended [ 113.237723][ T6248] set_capacity_and_notify: 11 callbacks suppressed [ 113.237742][ T6248] loop1: detected capacity change from 0 to 512 [ 113.281860][ T6248] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.293507][ T6248] ext4 filesystem being mounted at /507/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.463803][ T26] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 113.472107][ T26] usb 6-1: config 0 has no interface number 0 [ 113.481626][ T30] audit: type=1326 audit(2000000074.318:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.6.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e5b0eeb9 code=0x50000 [ 113.505046][ T30] audit: type=1326 audit(2000000074.318:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.6.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e5b0eeb9 code=0x50000 [ 113.528225][ T30] audit: type=1326 audit(2000000074.318:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.6.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e5b0eeb9 code=0x50000 [ 113.553405][ T30] audit: type=1326 audit(2000000074.318:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.6.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e5b0eeb9 code=0x50000 [ 113.588568][ T6264] loop1: detected capacity change from 0 to 512 [ 113.597614][ T6266] input: syz1 as /devices/virtual/input/input32 [ 113.617586][ T30] audit: type=1326 audit(2000000074.318:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.6.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85e5b0eeb9 code=0x50000 [ 113.653869][ T377] udevd[377]: symlink '../../loop2' '/dev/disk/by-diskseq/567.tmp-b7:2' failed: Read-only file system [ 113.670162][ T6264] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.2622: invalid block [ 113.692194][ T26] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 113.704186][ T6264] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2622: invalid indirect mapped block 10 (level 1) [ 113.704978][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.728958][ T6264] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2622: invalid indirect mapped block 8 (level 1) [ 113.742319][ T26] usb 6-1: Product: syz [ 113.746872][ T26] usb 6-1: Manufacturer: syz [ 113.751590][ T26] usb 6-1: SerialNumber: syz [ 113.757553][ T6264] EXT4-fs (loop1): 1 truncate cleaned up [ 113.763480][ T26] usb 6-1: config 0 descriptor?? [ 113.778156][ T6264] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 113.824756][ T378] udevd[378]: symlink '../../loop1' '/dev/disk/by-diskseq/582.tmp-b7:1' failed: Read-only file system [ 113.858259][ T378] udevd[378]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 113.882156][ T378] udevd[378]: symlink '../../loop2' '/dev/disk/by-diskseq/567.tmp-b7:2' failed: Read-only file system [ 113.903297][ T6273] input: syz1 as /devices/virtual/input/input33 [ 113.936623][ T378] udevd[378]: symlink '../../loop2' '/dev/disk/by-diskseq/567.tmp-b7:2' failed: Read-only file system [ 113.953425][ T6275] loop2: detected capacity change from 0 to 1024 [ 113.966577][ T2193] udevd[2193]: symlink '../../loop1' '/dev/disk/by-diskseq/582.tmp-b7:1' failed: Read-only file system [ 113.985019][ T6275] EXT4-fs (loop2): Test dummy encryption mode enabled [ 113.996436][ T2193] udevd[2193]: symlink '../../loop1' '/dev/disk/by-diskseq/582.tmp-b7:1' failed: Read-only file system [ 114.012244][ T378] udevd[378]: symlink '../../loop2' '/dev/disk/by-diskseq/584.tmp-b7:2' failed: Read-only file system [ 114.015586][ T6275] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.033485][ T378] udevd[378]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 114.051094][ T2193] udevd[2193]: symlink '../../loop1' '/dev/disk/by-diskseq/583.tmp-b7:1' failed: Read-only file system [ 114.104572][ T6281] loop7: detected capacity change from 0 to 256 [ 114.142352][ T6275] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,data_err=ignore,resuid=0x0000000000000000,inlinecrypt,dioread_nolock,bsddf,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 114.169416][ T6281] exfat: Deprecated parameter 'namecase' [ 114.178573][ T6281] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 114.328304][ T6289] loop1: detected capacity change from 0 to 128 [ 114.364147][ T6289] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 114.419631][ T6289] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.525905][ T26] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 114.536147][ T26] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 114.594158][ T26] asix: probe of 6-1:0.251 failed with error -71 [ 114.624126][ T26] usb 6-1: USB disconnect, device number 4 [ 115.175800][ T6322] loop2: detected capacity change from 0 to 512 [ 115.286633][ T6322] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.2634: inode has both inline data and extents flags [ 115.324293][ T6322] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.2634: couldn't read orphan inode 15 (err -117) [ 115.368924][ T6322] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 115.399705][ T6326] loop5: detected capacity change from 0 to 4096 [ 115.418445][ T6327] syz.7.2646 (6327) used greatest stack depth: 20224 bytes left [ 115.486721][ T6326] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,block_validity,i_version,data_err=ignore,,errors=continue. Quota mode: writeback. [ 115.516197][ T6330] loop7: detected capacity change from 0 to 512 [ 115.599263][ T6330] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 115.627291][ T6330] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.181437][ T6376] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2658'. [ 116.397974][ T6389] SELinux: failed to load policy [ 116.521489][ T6397] loop2: detected capacity change from 0 to 16 [ 116.568301][ T6397] erofs: (device loop2): mounted with root inode @ nid 36. [ 116.576474][ T6397] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 116.587665][ T6397] erofs: (device loop2): z_erofs_fill_inode_lazy: per-inode big pcluster without sb feature for nid 36 [ 116.598837][ T6397] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 116.761552][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2672'. [ 117.299568][ T6470] loop7: detected capacity change from 0 to 1024 [ 117.332944][ T6470] EXT4-fs (loop7): Ignoring removed bh option [ 117.381196][ T6470] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 117.410953][ T6441] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 117.430857][ T6441] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 117.455797][ T6441] F2FS-fs (loop2): invalid crc value [ 117.492694][ T6470] EXT4-fs error (device loop7): ext4_check_all_de:667: inode #12: block 7: comm syz.7.2701: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 117.545910][ T6441] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.571484][ T6470] EXT4-fs (loop7): Remounting filesystem read-only [ 117.697435][ T6441] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 117.715081][ T6489] exfat: Deprecated parameter 'utf8' [ 117.722998][ T6441] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 117.733749][ T6459] F2FS-fs (loop6): fault_injection options not supported [ 117.751101][ T6489] exfat: Deprecated parameter 'utf8' [ 117.787680][ T6459] F2FS-fs (loop6): fault_type options not supported [ 117.802929][ T6489] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 117.816054][ T6459] F2FS-fs (loop6): invalid crc value [ 117.832342][ T6459] F2FS-fs (loop6): Found nat_bits in checkpoint [ 117.962082][ T285] attempt to access beyond end of device [ 117.962082][ T285] loop2: rw=2049, want=40968, limit=40427 [ 117.992160][ T6459] F2FS-fs (loop6): Start checkpoint disabled! [ 118.015668][ T6459] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 118.069942][ T30] kauditd_printk_skb: 18374 callbacks suppressed [ 118.069959][ T30] audit: type=1400 audit(2000000078.544:18882): avc: denied { rename } for pid=6458 comm="syz.6.2697" name="#11" dev="loop6" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.120188][ T5847] F2FS-fs (loop6): access invalid blkaddr:4043309056 [ 118.130683][ T5847] CPU: 1 PID: 5847 Comm: syz-executor Not tainted syzkaller #0 [ 118.138294][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 118.148390][ T5847] Call Trace: [ 118.151701][ T5847] [ 118.154656][ T5847] __dump_stack+0x21/0x30 [ 118.159022][ T5847] dump_stack_lvl+0x110/0x170 [ 118.163737][ T5847] ? show_regs_print_info+0x20/0x20 [ 118.168976][ T5847] dump_stack+0x15/0x20 [ 118.173161][ T5847] f2fs_is_valid_blkaddr+0xca0/0x12a0 [ 118.178586][ T5847] f2fs_map_blocks+0xd8b/0x38f0 [ 118.183575][ T5847] ? f2fs_do_map_lock+0x80/0x80 [ 118.188459][ T5847] f2fs_mpage_readpages+0xb26/0x1e50 [ 118.193800][ T5847] ? dquot_release_reservation_block+0xa0/0xa0 [ 118.199989][ T5847] ? __this_cpu_preempt_check+0x13/0x20 [ 118.205568][ T5847] ? cgroup_rstat_updated+0xf5/0x360 [ 118.210894][ T5847] f2fs_readahead+0xfc/0x240 [ 118.215510][ T5847] ? f2fs_set_data_page_dirty+0x520/0x520 [ 118.221363][ T5847] read_pages+0x17b/0xb00 [ 118.225723][ T5847] ? __lru_cache_activate_page+0x210/0x210 [ 118.231578][ T5847] ? page_cache_ra_unbounded+0x9a0/0x9a0 [ 118.237238][ T5847] page_cache_ra_unbounded+0x7a5/0x9a0 [ 118.242729][ T5847] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 118.243917][ T30] audit: type=1400 audit(2000000078.581:18883): avc: denied { unlink } for pid=6458 comm="syz.6.2697" name="#12" dev="loop6" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 118.249257][ T5847] ? do_wp_page+0x9a8/0xc90 [ 118.249284][ T5847] ondemand_readahead+0x8fa/0xe80 [ 118.280681][ T5847] ? fault_around_bytes_set+0xc0/0xc0 [ 118.286101][ T5847] ? page_cache_sync_ra+0x430/0x430 [ 118.291339][ T5847] page_cache_sync_ra+0x2ca/0x430 [ 118.296389][ T5847] ? force_page_cache_ra+0x460/0x460 [ 118.301702][ T5847] f2fs_readdir+0x490/0x9e0 [ 118.306259][ T5847] ? f2fs_fill_dentries+0xd10/0xd10 [ 118.311497][ T5847] ? down_read_killable+0xc1/0x110 [ 118.316636][ T5847] ? security_file_permission+0x83/0xa0 [ 118.322223][ T5847] iterate_dir+0x260/0x600 [ 118.326669][ T5847] ? f2fs_fill_dentries+0xd10/0xd10 [ 118.331897][ T5847] __se_sys_getdents64+0xf2/0x250 [ 118.336981][ T5847] ? __x64_sys_getdents64+0x90/0x90 [ 118.342213][ T5847] ? filldir+0x690/0x690 [ 118.346491][ T5847] ? debug_smp_processor_id+0x17/0x20 [ 118.351935][ T5847] __x64_sys_getdents64+0x7b/0x90 [ 118.356983][ T5847] x64_sys_call+0x592/0x9a0 [ 118.361504][ T5847] do_syscall_64+0x4c/0xa0 [ 118.365959][ T5847] ? clear_bhb_loop+0x50/0xa0 [ 118.370674][ T5847] ? clear_bhb_loop+0x50/0xa0 [ 118.375376][ T5847] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.381344][ T5847] RIP: 0033:0x7f85e5b37873 [ 118.385816][ T5847] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 118.405502][ T5847] RSP: 002b:00007ffee5510078 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 118.413943][ T5847] RAX: ffffffffffffffda RBX: 000055555b9a6910 RCX: 00007f85e5b37873 [ 118.421941][ T5847] RDX: 0000000000008000 RSI: 000055555b9a6940 RDI: 0000000000000005 [ 118.429937][ T5847] RBP: 000055555b9a6940 R08: 00007f85e5d5bcc0 R09: 0000000000000001 [ 118.437930][ T5847] R10: 0000000000000000 R11: 0000000000000293 R12: 000055555b9a6914 [ 118.445944][ T5847] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffee5512320 [ 118.453948][ T5847] [ 118.518903][ T5847] attempt to access beyond end of device [ 118.518903][ T5847] loop6: rw=524288, want=45072, limit=40427 [ 118.530950][ T5847] attempt to access beyond end of device [ 118.530950][ T5847] loop6: rw=0, want=45072, limit=40427 [ 118.547172][ T6506] exfat: Deprecated parameter 'utf8' [ 118.552618][ T6506] exfat: Deprecated parameter 'utf8' [ 118.582644][ T559] attempt to access beyond end of device [ 118.582644][ T559] loop6: rw=2049, want=40984, limit=40427 [ 118.600923][ T6506] exfat: Deprecated parameter 'utf8' [ 118.630222][ T30] audit: type=1326 audit(2000000079.070:18884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6507 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d967bbeb9 code=0x7ffc0000 [ 118.664565][ T30] audit: type=1326 audit(2000000079.070:18885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6507 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d967bbeb9 code=0x7ffc0000 [ 118.688801][ T30] audit: type=1326 audit(2000000079.089:18886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6507 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d967bbeb9 code=0x7ffc0000 [ 118.724044][ T6506] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 118.745406][ T30] audit: type=1326 audit(2000000079.089:18887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6507 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d967bbeb9 code=0x7ffc0000 [ 118.797551][ T30] audit: type=1326 audit(2000000079.089:18888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6507 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d967bbeb9 code=0x7ffc0000 [ 118.831957][ T30] audit: type=1326 audit(2000000079.098:18889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6507 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d967bbeb9 code=0x7ffc0000 [ 118.934962][ T30] audit: type=1326 audit(2000000079.098:18890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6507 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d967bbeb9 code=0x7ffc0000 [ 118.985062][ T6526] set_capacity_and_notify: 4 callbacks suppressed [ 118.985079][ T6526] loop5: detected capacity change from 0 to 512 [ 119.011468][ T6530] loop1: detected capacity change from 0 to 256 [ 119.044589][ T6532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6532 comm=syz.7.2728 [ 119.057266][ T30] audit: type=1326 audit(2000000079.098:18891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6507 comm="syz.2.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f4d967bbeb9 code=0x7ffc0000 [ 119.088217][ T378] udevd[378]: symlink '../../loop1' '/dev/disk/by-diskseq/609.tmp-b7:1' failed: Read-only file system [ 119.094286][ T377] udevd[377]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 119.103911][ T6530] exfat: Deprecated parameter 'utf8' [ 119.122911][ T2193] udevd[2193]: symlink '../../loop2' '/dev/disk/by-diskseq/604.tmp-b7:2' failed: Read-only file system [ 119.123877][ T378] udevd[378]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 119.148474][ T6530] exfat: Deprecated parameter 'utf8' [ 119.153416][ T2193] udevd[2193]: symlink '../../loop7' '/dev/disk/by-diskseq/601.tmp-b7:7' failed: Read-only file system [ 119.164764][ T6530] exfat: Deprecated parameter 'utf8' [ 119.184983][ T6530] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 119.199379][ T6526] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 119.216362][ T6526] ext4 filesystem being mounted at /100/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.233597][ T377] udevd[377]: symlink '../../loop2' '/dev/disk/by-diskseq/604.tmp-b7:2' failed: Read-only file system [ 119.269832][ T813] udevd[813]: symlink '../../loop7' '/dev/disk/by-diskseq/601.tmp-b7:7' failed: Read-only file system [ 119.287035][ T378] udevd[378]: symlink '../../loop5' '/dev/disk/by-diskseq/608.tmp-b7:5' failed: Read-only file system [ 119.301557][ T2193] udevd[2193]: symlink '../../loop1' '/dev/disk/by-diskseq/609.tmp-b7:1' failed: Read-only file system [ 119.341484][ T2193] udevd[2193]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 119.445727][ T6554] loop2: detected capacity change from 0 to 8192 [ 119.467220][ T332] device bridge_slave_1 left promiscuous mode [ 119.475270][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.486716][ T6554] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.497534][ T332] device bridge_slave_0 left promiscuous mode [ 119.512118][ T6554] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 119.512679][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.528788][ T6554] FAT-fs (loop2): Filesystem has been set read-only [ 119.547339][ T332] device veth1_macvtap left promiscuous mode [ 119.554637][ T6554] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 119.559750][ T332] device veth0_vlan left promiscuous mode [ 119.574559][ T6554] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 119.596350][ T6554] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 119.618182][ T6554] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 119.640021][ T6554] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 119.661861][ T6554] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 119.683703][ T6554] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 119.685213][ T6547] loop5: detected capacity change from 0 to 40427 [ 119.704245][ T6554] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 119.722424][ T6554] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 119.742526][ T6547] F2FS-fs (loop5): fault_injection options not supported [ 119.750662][ T6547] F2FS-fs (loop5): fault_type options not supported [ 119.758423][ T6547] F2FS-fs (loop5): invalid crc value [ 119.778460][ T6547] F2FS-fs (loop5): Found nat_bits in checkpoint [ 119.831635][ T6547] F2FS-fs (loop5): Start checkpoint disabled! [ 119.851089][ T6547] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 119.870420][ T6569] overlayfs: workdir and upperdir must be separate subtrees [ 119.883332][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.890459][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.898321][ T6555] device bridge_slave_0 entered promiscuous mode [ 119.905621][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.913145][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.920775][ T6555] device bridge_slave_1 entered promiscuous mode [ 120.013353][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.020519][ T6555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.027974][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.035066][ T6555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.061541][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.069704][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.093244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 120.109178][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 120.127049][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 120.143690][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.150820][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.184918][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 120.195604][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.202722][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.210937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.226196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.280298][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 120.291854][ T60] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 120.320971][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 120.330849][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 120.341251][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 120.349384][ T6555] device veth0_vlan entered promiscuous mode [ 120.385705][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 120.401831][ T6555] device veth1_macvtap entered promiscuous mode [ 120.413134][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.454195][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.484501][ T6605] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2755'. [ 120.513857][ T6607] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2757'. [ 120.560482][ T6613] loop8: detected capacity change from 0 to 256 [ 120.626216][ T6613] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d) [ 120.660565][ T6613] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 120.703447][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.720703][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2766'. [ 120.734698][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.761574][ T60] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 120.774329][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.800376][ T6636] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2769'. [ 120.805261][ T60] usb 2-1: config 0 descriptor?? [ 120.851504][ T6642] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2773'. [ 120.869814][ T6643] loop8: detected capacity change from 0 to 512 [ 120.932145][ T6643] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrquota,grpjquota=,lazytime,,errors=continue. Quota mode: writeback. [ 120.969920][ T6643] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.982387][ T6654] loop7: detected capacity change from 0 to 16 [ 121.008546][ T6654] erofs: (device loop7): mounted with root inode @ nid 36. [ 121.046224][ T6654] attempt to access beyond end of device [ 121.046224][ T6654] loop7: rw=524288, want=1342177528, limit=16 [ 121.088376][ T6654] attempt to access beyond end of device [ 121.088376][ T6654] loop7: rw=0, want=1342177280, limit=16 [ 121.115615][ T6654] attempt to access beyond end of device [ 121.115615][ T6654] loop7: rw=0, want=1342177280, limit=16 [ 121.133711][ T6665] loop5: detected capacity change from 0 to 1024 [ 121.159791][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.167106][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.246679][ T6665] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.299058][ T6665] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3887: comm syz.5.2781: Allocating blocks 497-513 which overlap fs metadata [ 121.313426][ T6665] EXT4-fs (loop5): pa ffff8881304ca0a8: logic 256, phys. 385, len 8 [ 121.321630][ T6665] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 121.336679][ T6686] loop8: detected capacity change from 0 to 256 [ 121.345214][ T60] hid-steam 0003:28DE:1142.002B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 121.349080][ T6684] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2790'. [ 121.362214][ T60] hid-steam 0003:28DE:1142.002C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 121.451184][ T60] hid-steam 0003:28DE:1142.002B: Steam wireless receiver connected [ 121.469491][ T6686] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 121.551601][ T6701] loop2: detected capacity change from 0 to 512 [ 121.575604][ T60] usb 2-1: USB disconnect, device number 15 [ 121.587295][ T60] hid-steam 0003:28DE:1142.002B: Steam wireless receiver disconnected [ 121.626597][ T6705] device veth1_macvtap left promiscuous mode [ 121.642061][ T6705] device macsec0 entered promiscuous mode [ 121.658949][ T6701] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 121.694821][ T6701] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.940734][ T6724] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 122.058486][ T6722] F2FS-fs (loop7): invalid crc value [ 122.075607][ T6722] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 122.106256][ T6722] F2FS-fs (loop7): Start checkpoint disabled! [ 122.113465][ T6722] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 122.155877][ T6722] attempt to access beyond end of device [ 122.155877][ T6722] loop7: rw=2049, want=78800, limit=40427 [ 122.188568][ T332] attempt to access beyond end of device [ 122.188568][ T332] loop7: rw=2049, want=45104, limit=40427 [ 122.296656][ T60] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 122.578361][ T60] usb 3-1: Using ep0 maxpacket: 32 [ 122.669109][ T6758] F2FS-fs (loop5): invalid crc value [ 122.679731][ T6758] F2FS-fs (loop5): Found nat_bits in checkpoint [ 122.708500][ T60] usb 3-1: config 0 has an invalid interface number: 166 but max is 0 [ 122.720507][ T60] usb 3-1: config 0 has no interface number 0 [ 122.733840][ T60] usb 3-1: config 0 interface 166 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 122.746875][ T6758] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 122.789152][ T6758] F2FS-fs (loop5): Unrecognized mount option "noload" or missing value [ 122.832173][ T6764] F2FS-fs (loop7): invalid crc value [ 122.851131][ T6764] F2FS-fs (loop7): Found nat_bits in checkpoint [ 122.914363][ T60] usb 3-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=3f.5a [ 122.930283][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.946817][ T6764] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 122.959157][ T60] usb 3-1: Product: syz [ 122.968087][ T60] usb 3-1: Manufacturer: syz [ 122.976369][ T60] usb 3-1: SerialNumber: syz [ 122.986242][ T60] usb 3-1: config 0 descriptor?? [ 123.004827][ T6093] attempt to access beyond end of device [ 123.004827][ T6093] loop7: rw=2049, want=45104, limit=40427 [ 123.022748][ T6729] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.122891][ T6778] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 123.154607][ T6778] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 123.284507][ T6729] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.318755][ T60] net1080 3-1:0.166 usb0: register 'net1080' at usb-dummy_hcd.2-1, NetChip TurboCONNECT, f6:2c:86:05:9d:5f [ 123.540243][ T60] usb 3-1: USB disconnect, device number 14 [ 123.548422][ T60] net1080 3-1:0.166 usb0: unregister 'net1080' usb-dummy_hcd.2-1, NetChip TurboCONNECT [ 123.605639][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 123.605656][ T30] audit: type=1400 audit(2000000083.656:18918): avc: denied { write } for pid=6816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=485 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.678598][ T30] audit: type=1400 audit(2000000083.656:18919): avc: denied { add_name } for pid=6816 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.734174][ T30] audit: type=1400 audit(2000000083.656:18920): avc: denied { create } for pid=6816 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.790323][ T30] audit: type=1400 audit(2000000083.656:18921): avc: denied { write } for pid=6816 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=16131 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.832351][ T30] audit: type=1400 audit(2000000083.656:18922): avc: denied { append } for pid=6816 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=16131 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.865983][ T30] audit: type=1400 audit(2000000083.721:18923): avc: denied { remove_name } for pid=6834 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=16131 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.891474][ T6814] F2FS-fs (loop8): invalid crc value [ 123.896953][ T30] audit: type=1400 audit(2000000083.721:18924): avc: denied { unlink } for pid=6834 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=16131 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.950228][ T6814] F2FS-fs (loop8): Found nat_bits in checkpoint [ 124.028285][ T6814] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 124.089906][ T6555] attempt to access beyond end of device [ 124.089906][ T6555] loop8: rw=2049, want=45104, limit=40427 [ 124.216473][ T6878] EXT4-fs (loop2): Ignoring removed bh option [ 124.226206][ T6878] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 124.248642][ T6878] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,bh,grpquota,mblk_io_submit,,errors=continue. Quota mode: writeback. [ 124.289434][ T6878] EXT4-fs (loop2): shut down requested (2) [ 124.300145][ T6878] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 124.309567][ T30] audit: type=1400 audit(2000000084.311:18925): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 124.325270][ T6878] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 124.351573][ T30] audit: type=1400 audit(2000000084.311:18926): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.400205][ T6882] EXT4-fs (loop8): Ignoring removed bh option [ 124.437012][ T6882] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 124.439283][ T30] audit: type=1400 audit(2000000084.311:18927): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.525028][ T377] udevd[377]: symlink '../../loop1' '/dev/disk/by-diskseq/611.tmp-b7:1' failed: Read-only file system [ 124.565930][ T377] udevd[377]: symlink '../../loop8' '/dev/disk/by-diskseq/641.tmp-b7:8' failed: Read-only file system [ 124.579358][ T378] udevd[378]: symlink '../../loop1' '/dev/disk/by-diskseq/611.tmp-b7:1' failed: Read-only file system [ 124.596539][ T377] udevd[377]: symlink '../../loop8' '/dev/disk/by-diskseq/641.tmp-b7:8' failed: Read-only file system [ 124.607956][ T6897] set_capacity_and_notify: 8 callbacks suppressed [ 124.607972][ T6897] loop1: detected capacity change from 0 to 512 [ 124.622779][ T6897] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.640572][ T378] udevd[378]: symlink '../../loop1' '/dev/disk/by-diskseq/644.tmp-b7:1' failed: Read-only file system [ 124.654717][ T378] udevd[378]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 124.672701][ T6897] EXT4-fs (loop1): 1 truncate cleaned up [ 124.680825][ T6897] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,acl,nombcache,noload,noquota,,errors=continue. Quota mode: none. [ 124.689203][ T377] udevd[377]: symlink '../../loop8' '/dev/disk/by-diskseq/643.tmp-b7:8' failed: Read-only file system [ 124.724302][ T775] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 124.745331][ T377] udevd[377]: symlink '../../loop1' '/dev/disk/by-diskseq/644.tmp-b7:1' failed: Read-only file system [ 124.759023][ T378] udevd[378]: symlink '../../loop8' '/dev/disk/by-diskseq/643.tmp-b7:8' failed: Read-only file system [ 124.787024][ T2193] udevd[2193]: symlink '../../loop7' '/dev/disk/by-diskseq/636.tmp-b7:7' failed: Read-only file system [ 124.856261][ T282] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /546/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 124.932715][ T282] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 124.980210][ T282] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /546/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 125.003348][ T282] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 125.023506][ T282] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /546/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 125.045570][ T282] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 125.076532][ T282] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /546/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 125.120204][ T282] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 125.142270][ T282] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /546/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 125.163829][ T775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.174083][ T282] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 125.193809][ T775] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 125.206587][ T775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.230193][ T775] usb 3-1: config 0 descriptor?? [ 125.309214][ T6921] loop5: detected capacity change from 0 to 128 [ 125.356777][ T6921] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 125.368386][ T6921] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.420445][ T6921] EXT4-fs error (device loop5): __ext4_find_entry:1696: inode #2: comm syz.5.2872: checksumming directory block 0 [ 125.720722][ T6944] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.728061][ T6944] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.735615][ T6944] device bridge_slave_0 entered promiscuous mode [ 125.742662][ T6944] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.749938][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.757727][ T6944] device bridge_slave_1 entered promiscuous mode [ 125.765693][ T775] sony 0003:1345:3008.002D: unknown main item tag 0x0 [ 125.773860][ T775] sony 0003:1345:3008.002D: unknown main item tag 0x0 [ 125.780799][ T775] sony 0003:1345:3008.002D: unknown main item tag 0x0 [ 125.787706][ T775] sony 0003:1345:3008.002D: unknown main item tag 0x0 [ 125.795073][ T775] sony 0003:1345:3008.002D: unknown main item tag 0x0 [ 125.802244][ T775] sony 0003:1345:3008.002D: unknown main item tag 0x0 [ 125.809274][ T775] sony 0003:1345:3008.002D: unknown main item tag 0x0 [ 125.821900][ T775] sony 0003:1345:3008.002D: hiddev96,hidraw0: USB HID v90.00 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 125.833825][ T775] sony 0003:1345:3008.002D: failed to claim input [ 125.868982][ T6944] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.876113][ T6944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.883431][ T6944] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.890533][ T6944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.912939][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.920725][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.928964][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.938821][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.947313][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.954451][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.964529][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.972807][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.979860][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.994230][ T775] usb 3-1: USB disconnect, device number 15 [ 126.005981][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.017261][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.031820][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.040967][ T332] device bridge_slave_1 left promiscuous mode [ 126.047343][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.055169][ T332] device bridge_slave_0 left promiscuous mode [ 126.061598][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.069511][ T332] device veth1_macvtap left promiscuous mode [ 126.075523][ T332] device veth0_vlan left promiscuous mode [ 126.149721][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.158006][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.165658][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.174192][ T6944] device veth0_vlan entered promiscuous mode [ 126.185716][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.196365][ T6944] device veth1_macvtap entered promiscuous mode [ 126.207415][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.218512][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.251667][ T6958] input: syz1 as /devices/virtual/input/input34 [ 126.373211][ T6960] loop8: detected capacity change from 0 to 40427 [ 126.424063][ T6960] F2FS-fs (loop8): fault_injection options not supported [ 126.432147][ T6960] F2FS-fs (loop8): invalid crc value [ 126.439316][ T6960] F2FS-fs (loop8): Found nat_bits in checkpoint [ 126.473675][ T6960] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 126.507341][ T6555] attempt to access beyond end of device [ 126.507341][ T6555] loop8: rw=2049, want=45104, limit=40427 [ 126.560215][ T6969] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 126.566774][ T2155] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 126.593840][ T6970] loop5: detected capacity change from 0 to 256 [ 126.639584][ T6970] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.826694][ T2155] usb 10-1: Using ep0 maxpacket: 16 [ 126.832542][ T6983] loop7: detected capacity change from 0 to 4096 [ 126.877994][ T6983] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.901146][ T6983] EXT4-fs error (device loop7): ext4_do_update_inode:5253: inode #15: comm syz.7.2890: corrupted inode contents [ 126.914601][ T6989] loop8: detected capacity change from 0 to 1024 [ 126.921299][ T6983] EXT4-fs error (device loop7): ext4_dirty_inode:6089: inode #15: comm syz.7.2890: mark_inode_dirty error [ 126.947944][ T6983] EXT4-fs error (device loop7): ext4_do_update_inode:5253: inode #15: comm syz.7.2890: corrupted inode contents [ 126.963480][ T6997] EXT4-fs (loop7): shut down requested (1) [ 126.964902][ T6993] kvm [6992]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010005 data 0x5 [ 126.980648][ T6983] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #15: comm syz.7.2890: mark_inode_dirty error [ 126.996124][ T6989] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.017663][ T45] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 127.050295][ T7001] loop5: detected capacity change from 0 to 512 [ 127.114276][ T7001] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 127.130237][ T2155] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 127.137693][ T7001] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.152478][ T2155] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.169210][ T7001] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 3: comm syz.5.2901: path /134/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 127.199458][ T7001] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 12: comm syz.5.2901: path /134/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 127.221268][ T7001] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.2901: path /134/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 127.238632][ T2155] usb 10-1: Product: syz [ 127.247799][ T7001] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 14: comm syz.5.2901: path /134/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=1, rec_len=0, size=2048 fake=0 [ 127.268939][ T7001] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 15: comm syz.5.2901: path /134/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 127.289420][ T2155] usb 10-1: Manufacturer: syz [ 127.298750][ T2155] usb 10-1: SerialNumber: syz [ 127.324166][ T7020] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 127.340346][ T2155] r8152-cfgselector 10-1: config 0 descriptor?? [ 127.358589][ T7001] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz.5.2901: path /134/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 127.380229][ T7001] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 17: comm syz.5.2901: path /134/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 127.380441][ T7001] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #2: block 18: comm syz.5.2901: lblock 23 mapped to illegal pblock 18 (length 1) [ 127.388105][ T7026] binder: 7022:7026 ioctl 40046205 0 returned -22 [ 127.495269][ T7039] loop5: detected capacity change from 0 to 1024 [ 127.522269][ T7039] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,grpjquota=,bsddf,,errors=continue. Quota mode: none. [ 127.804480][ T7064] loop7: detected capacity change from 0 to 512 [ 127.845534][ T2155] r8152-cfgselector 10-1: Unknown version 0x0000 [ 127.855575][ T2155] r8152-cfgselector 10-1: bad CDC descriptors [ 127.870364][ T7064] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 127.883003][ T2155] r8152-cfgselector 10-1: Unknown version 0x0000 [ 127.894498][ T2155] r8152-cfgselector 10-1: USB disconnect, device number 2 [ 127.910568][ T7064] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.939139][ T7064] EXT4-fs (loop7): shut down requested (1) [ 127.954155][ T7064] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 127.965774][ T559] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 127.981589][ T7064] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 127.991065][ T559] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 128.012921][ T559] EXT4-fs (loop5): This should not happen!! Data will be lost [ 128.012921][ T559] [ 128.022886][ T559] EXT4-fs (loop5): Total free blocks count 0 [ 128.028902][ T559] EXT4-fs (loop5): Free/Dirty block details [ 128.035139][ T559] EXT4-fs (loop5): free_blocks=68451041280 [ 128.041223][ T559] EXT4-fs (loop5): dirty_blocks=16384 [ 128.046676][ T559] EXT4-fs (loop5): Block reservation details [ 128.053099][ T559] EXT4-fs (loop5): i_reserved_data_blocks=1024 [ 128.074985][ T559] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 128.098058][ T559] EXT4-fs (loop5): This should not happen!! Data will be lost [ 128.098058][ T559] [ 128.141634][ T7068] loop2: detected capacity change from 0 to 40427 [ 128.154577][ T7068] F2FS-fs (loop2): fault_injection options not supported [ 128.162387][ T7068] F2FS-fs (loop2): fault_type options not supported [ 128.177473][ T7068] F2FS-fs (loop2): invalid crc value [ 128.185811][ T7068] F2FS-fs (loop2): Found nat_bits in checkpoint [ 128.225749][ T7068] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 128.496829][ T7096] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.510335][ T7094] EXT4-fs (loop2): Ignoring removed bh option [ 128.556499][ T7096] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 128.591331][ T7094] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 128.646184][ T7102] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.2941: invalid indirect mapped block 256 (level 2) [ 128.660132][ T7102] EXT4-fs (loop8): 2 truncates cleaned up [ 128.665914][ T7102] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,block_validity,lazytime,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 128.690244][ T7096] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 128.828104][ T7115] EXT4-fs (loop7): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 128.847651][ T7115] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.864891][ T7117] EXT4-fs (loop9): Test dummy encryption mode enabled [ 128.878929][ T7117] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 128.888920][ T7117] EXT4-fs (loop9): SIPHASH is not a valid default hash value [ 129.059090][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 129.059123][ T30] audit: type=1400 audit(2000000088.685:18932): avc: denied { mount } for pid=7147 comm="syz.9.2959" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 129.125979][ T30] audit: type=1400 audit(2000000088.759:18933): avc: denied { listen } for pid=7155 comm="syz.9.2963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.170973][ T30] audit: type=1400 audit(2000000088.796:18934): avc: denied { accept } for pid=7155 comm="syz.9.2963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.386096][ T7195] exfat: Deprecated parameter 'utf8' [ 129.393454][ T7185] attempt to access beyond end of device [ 129.393454][ T7185] loop9: rw=2049, want=240, limit=128 [ 129.409442][ T7195] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 129.459642][ T7198] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 129.481746][ T7200] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2982'. [ 129.489313][ T7198] EXT4-fs (loop7): Test dummy encryption mode enabled [ 129.544214][ T7198] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,sysvgroups,acl,grpquota,discard,,errors=continue. Quota mode: writeback. [ 129.670698][ T7212] netlink: 'syz.2.2987': attribute type 1 has an invalid length. [ 129.700906][ T7212] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2987'. [ 129.739565][ T7205] F2FS-fs (loop8): invalid crc value [ 129.834729][ T7205] F2FS-fs (loop8): Found nat_bits in checkpoint [ 129.841737][ T7226] EXT4-fs (loop2): Ignoring removed oldalloc option [ 129.848452][ T7226] EXT4-fs (loop2): Ignoring removed bh option [ 129.892486][ T7226] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.913397][ T7231] input: syz1 as /devices/virtual/input/input35 [ 129.950204][ T378] udevd[378]: symlink '../../loop5' '/dev/disk/by-diskseq/673.tmp-b7:5' failed: Read-only file system [ 129.965978][ T2193] udevd[2193]: symlink '../../loop9' '/dev/disk/by-diskseq/679.tmp-b7:9' failed: Read-only file system [ 129.985175][ T7226] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,bsddf,usrquota,data_err=ignore,init_itable,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 130.026357][ T377] udevd[377]: symlink '../../loop2' '/dev/disk/by-diskseq/683.tmp-b7:2' failed: Read-only file system [ 130.040120][ T378] udevd[378]: symlink '../../loop5' '/dev/disk/by-diskseq/673.tmp-b7:5' failed: Read-only file system [ 130.060424][ T377] udevd[377]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 130.068937][ T2193] udevd[2193]: symlink '../../loop9' '/dev/disk/by-diskseq/679.tmp-b7:9' failed: Read-only file system [ 130.098699][ T377] udevd[377]: symlink '../../loop5' '/dev/disk/by-diskseq/673.tmp-b7:5' failed: Read-only file system [ 130.124941][ T7205] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 130.142351][ T378] udevd[378]: symlink '../../loop8' '/dev/disk/by-diskseq/681.tmp-b7:8' failed: Read-only file system [ 130.159099][ T378] udevd[378]: symlink '../../loop8' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:8' failed: Read-only file system [ 130.183428][ T6555] attempt to access beyond end of device [ 130.183428][ T6555] loop8: rw=2049, want=45104, limit=40427 [ 130.213946][ T377] udevd[377]: symlink '../../loop9' '/dev/disk/by-diskseq/679.tmp-b7:9' failed: Read-only file system [ 130.248368][ T7250] device sit0 entered promiscuous mode [ 130.267872][ T7250] netlink: 'syz.9.3003': attribute type 1 has an invalid length. [ 130.302614][ T7250] netlink: 1 bytes leftover after parsing attributes in process `syz.9.3003'. [ 130.409457][ T7269] set_capacity_and_notify: 11 callbacks suppressed [ 130.409477][ T7269] loop7: detected capacity change from 0 to 512 [ 130.499138][ T30] audit: type=1400 audit(2000000090.023:18935): avc: denied { mounton } for pid=7278 comm="syz.9.3014" path="/22/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 130.500094][ T7280] incfs: Can't find or create .index dir in ./file0 [ 130.529238][ T7280] incfs: mount failed -1 [ 130.541300][ T7269] FAT-fs (loop7): error, invalid FAT chain (i_pos 51, last_block 64) [ 130.564340][ T30] audit: type=1400 audit(2000000090.023:18936): avc: denied { search } for pid=7278 comm="syz.9.3014" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 130.586754][ T30] audit: type=1400 audit(2000000090.023:18937): avc: denied { write } for pid=7278 comm="syz.9.3014" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 130.610521][ T30] audit: type=1400 audit(2000000090.106:18938): avc: denied { unmount } for pid=6944 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 130.672478][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3020'. [ 130.890728][ T559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.899809][ T7313] device veth0_to_team entered promiscuous mode [ 130.935641][ T7317] loop9: detected capacity change from 0 to 256 [ 130.945091][ T775] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 130.970888][ T7319] loop2: detected capacity change from 0 to 1024 [ 130.990568][ T7317] FAT-fs (loop9): Directory bread(block 64) failed [ 130.997579][ T7317] FAT-fs (loop9): Directory bread(block 65) failed [ 131.015237][ T7317] FAT-fs (loop9): Directory bread(block 66) failed [ 131.029393][ T7317] FAT-fs (loop9): Directory bread(block 67) failed [ 131.036043][ T7317] FAT-fs (loop9): Directory bread(block 68) failed [ 131.043054][ T7317] FAT-fs (loop9): Directory bread(block 69) failed [ 131.049636][ T7317] FAT-fs (loop9): Directory bread(block 70) failed [ 131.051036][ T7319] EXT4-fs (loop2): Ignoring removed bh option [ 131.059084][ T7317] FAT-fs (loop9): Directory bread(block 71) failed [ 131.063062][ T7319] EXT4-fs (loop2): Ignoring removed nobh option [ 131.075753][ T7317] FAT-fs (loop9): Directory bread(block 72) failed [ 131.078862][ T7319] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.083279][ T7317] FAT-fs (loop9): Directory bread(block 73) failed [ 131.096194][ T30] audit: type=1400 audit(2000000090.576:18939): avc: denied { execute } for pid=7324 comm="syz.7.3035" dev="tmpfs" ino=1226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 131.122847][ T30] audit: type=1400 audit(2000000090.576:18940): avc: denied { execute_no_trans } for pid=7324 comm="syz.7.3035" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 131.172642][ T2155] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 131.183890][ T7319] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: none. [ 131.269194][ T7319] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3887: comm syz.2.3032: Allocating blocks 497-513 which overlap fs metadata [ 131.283198][ T775] usb 9-1: Using ep0 maxpacket: 16 [ 131.289431][ T7319] EXT4-fs (loop2): pa ffff8881119a7498: logic 128, phys. 385, len 8 [ 131.297635][ T7319] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 131.411306][ T775] usb 9-1: config 0 interface 0 has no altsetting 0 [ 131.417999][ T775] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 131.436307][ T775] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.443748][ T2155] usb 6-1: Using ep0 maxpacket: 16 [ 131.457181][ T775] usb 9-1: config 0 descriptor?? [ 131.491050][ T30] audit: type=1400 audit(2000000090.936:18941): avc: denied { associate } for pid=7347 comm="syz.9.3044" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 131.574199][ T2155] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 131.592714][ T7360] loop2: detected capacity change from 0 to 512 [ 131.615125][ T7364] loop9: detected capacity change from 0 to 1024 [ 131.621771][ T7360] EXT4-fs (loop2): Ignoring removed oldalloc option [ 131.633333][ T7364] EXT4-fs (loop9): Ignoring removed orlov option [ 131.641495][ T7360] EXT4-fs error (device loop2): ext4_xattr_inode_iget:397: comm syz.2.3050: Parent and EA inode have the same ino 15 [ 131.656436][ T7360] EXT4-fs (loop2): 1 orphan inode deleted [ 131.664502][ T7360] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x0000000000000022,noauto_da_alloc,quota,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 131.689117][ T7364] EXT4-fs (loop9): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,max_dir_size_kb=0x0000000000000000,nogrpid,noauto_da_alloc,orlov,,errors=continue. Quota mode: writeback. [ 131.725121][ T285] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 131.748386][ T285] ------------[ cut here ]------------ [ 131.753867][ T285] kernel BUG at fs/namei.c:2941! [ 131.759144][ T285] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 131.765250][ T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0 [ 131.772771][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 131.782910][ T285] RIP: 0010:may_delete+0x701/0x710 [ 131.788069][ T285] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 b0 2a f5 ff e9 77 fe ff ff e8 c6 ff b5 ff 0f 0b e8 bf ff b5 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 131.807773][ T285] RSP: 0018:ffffc90000a57c90 EFLAGS: 00010293 [ 131.813849][ T285] RAX: ffffffff81b3ccf1 RBX: ffff88810d394110 RCX: ffff88811e5293c0 [ 131.821857][ T285] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 131.829849][ T285] RBP: ffffc90000a57cf8 R08: 0000000000000003 R09: 0000000000000004 [ 131.837840][ T285] R10: dffffc0000000000 R11: fffff5200014af74 R12: dffffc0000000000 [ 131.845826][ T285] R13: 0000000000000001 R14: ffff8881299067a0 R15: 1ffff11021a72822 [ 131.853816][ T285] FS: 0000555556df1500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 131.862774][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.869384][ T285] CR2: 00007f6ae228f000 CR3: 00000001270e6000 CR4: 00000000003506b0 [ 131.877382][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 131.885372][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 131.893362][ T285] Call Trace: [ 131.896679][ T285] [ 131.899627][ T285] vfs_rmdir+0x32/0x460 [ 131.903804][ T285] incfs_kill_sb+0x105/0x220 [ 131.908414][ T285] deactivate_locked_super+0xa0/0x100 [ 131.913838][ T285] deactivate_super+0xaf/0xe0 [ 131.918543][ T285] cleanup_mnt+0x45b/0x510 [ 131.922978][ T285] __cleanup_mnt+0x19/0x20 [ 131.927515][ T285] task_work_run+0x127/0x190 [ 131.932123][ T285] exit_to_user_mode_loop+0xd0/0xe0 [ 131.937341][ T285] exit_to_user_mode_prepare+0x87/0xd0 [ 131.942816][ T285] syscall_exit_to_user_mode+0x1a/0x30 [ 131.948285][ T285] do_syscall_64+0x58/0xa0 [ 131.952728][ T285] ? clear_bhb_loop+0x50/0xa0 [ 131.957417][ T285] ? clear_bhb_loop+0x50/0xa0 [ 131.962109][ T285] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.968021][ T285] RIP: 0033:0x7f4d967bd117 [ 131.972451][ T285] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 131.992070][ T285] RSP: 002b:00007ffdfbb73408 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 132.000540][ T285] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4d967bd117 [ 132.008529][ T285] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdfbb734c0 [ 132.016517][ T285] RBP: 00007ffdfbb734c0 R08: 00007ffdfbb744c0 R09: 00000000ffffffff [ 132.024529][ T285] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdfbb745b0 [ 132.032510][ T285] R13: 00007f4d9682571f R14: 000000000001e545 R15: 00007ffdfbb75680 [ 132.040496][ T285] [ 132.043548][ T285] Modules linked in: [ 132.048447][ T285] ---[ end trace 1bfbeae1af73ab75 ]--- [ 132.054037][ T285] RIP: 0010:may_delete+0x701/0x710 [ 132.059218][ T285] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 b0 2a f5 ff e9 77 fe ff ff e8 c6 ff b5 ff 0f 0b e8 bf ff b5 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 132.063137][ T775] hid (null): unknown global tag 0xe [ 132.079467][ T285] RSP: 0018:ffffc90000a57c90 EFLAGS: 00010293 [ 132.084619][ T775] hid (null): global environment stack underflow [ 132.084957][ T285] [ 132.090768][ T775] hid (null): invalid report_size 1765707594 [ 132.097974][ T2155] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 132.099751][ T775] hid (null): global environment stack underflow [ 132.106267][ T2155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.115002][ T775] hid (null): unknown global tag 0xe [ 132.121778][ T285] RAX: ffffffff81b3ccf1 RBX: ffff88810d394110 RCX: ffff88811e5293c0 [ 132.129998][ T775] hid (null): unknown global tag 0x62 [ 132.135198][ T2155] usb 6-1: Product: syz [ 132.142858][ T775] hid (null): unknown global tag 0xe [ 132.148640][ T285] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 132.165495][ T2155] usb 6-1: Manufacturer: syz [ 132.170173][ T2155] usb 6-1: SerialNumber: syz [ 132.174855][ T285] RBP: ffffc90000a57cf8 R08: 0000000000000003 R09: 0000000000000004 [ 132.184021][ T2155] usb 6-1: config 0 descriptor?? [ 132.189069][ T285] R10: dffffc0000000000 R11: fffff5200014af74 R12: dffffc0000000000 [ 132.197298][ T285] R13: 0000000000000001 R14: ffff8881299067a0 R15: 1ffff11021a72822 [ 132.202343][ T4755] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 132.205508][ T285] FS: 0000555556df1500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 132.221959][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.228674][ T285] CR2: 00002000000054c0 CR3: 00000001270e6000 CR4: 00000000003506b0 [ 132.237676][ T2155] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 132.245293][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 132.254158][ T2155] usb 6-1: Detected FT232RL [ 132.258870][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 132.266965][ T285] Kernel panic - not syncing: Fatal exception [ 132.273293][ T285] Kernel Offset: disabled [ 132.277634][ T285] Rebooting in 86400 seconds..