last executing test programs: 2.756329379s ago: executing program 3 (id=4123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x2, 0x8009}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f00000000c0), 0x0}, 0x20) 2.734113983s ago: executing program 3 (id=4125): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./file0\x00', 0x10, &(0x7f0000003640)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db32300c41ec42421e326f0f3d24478d7f472cf86b66accda698e56ae96dc33ced02f8e6601ed0a758a9f6b0712af45bc138adb9217e31e309a3039a15f4f323957b2824eb068440a8e9c31857f52472347e7560aa15cb70c902000000326a7321796b653e49bbde9213cfcd77871a61e6daf5deab0eea", @ANYBLOB="15a73d4aca1afce73372354dda807c5d6baabe9ced64b94fbb05d987b85cd789987988dee328d1a3161a541ecb3d59dbdcec55f6ccf4cc83e57525034017af75c4a532174905e6491a0f1d8497d6a1f21b877fdd25266f26833ea330259d621573f30f6a2409100fbdd3dff6e56fe2392efbee2cd87eaadc4c9dd04fcc55b5bb3ee82c3f9b486829e931237a9ec12f88e4c1492bc9447e3d4bf87d3c9ffac5038804cd595780309e592f328cc7d5ec3cc71ca1f70b9546540fe09e575a59bf93a9002d3341705cdb091fdc3965d29162a06204e7ec84a338e73267fb67ad62b5133de6745d56ceb867199a1129e1a478a4743bb3e6e110108567cb838ea30a4a5c42feaac3ddbfdf1fe2028d7ccd9fcbf0a03bbd4df3a1752ff33f9a58ac39a522f12646c9a60fe76e3d75bbf638140bb3659f064c4b94d0be2b74ed730e7f360bc4aa17b3919a667c9b12c630f8bb3f38d8f82b1e82707824fbfd9ae1ccf3d29c2a02b0743dde57bc5fd9d4f1497ceb9608e31235b5897fd2ccf55128de0ab934eba9e66b31e06836caeced2c9c89bfae4b8f51e30a14e8b52b15a477a3f095e3d74ad4d7bcfef0c5d7abcde9d581862ec8e6b3506f3e9af6705bd8ab0ae50e5ef4e8b06e8632a8d318c07348c6b5591b6404623bd89e497c959801bd7edadc460dae0af6b937495602c6f4ee75d19cb147807d19722d3259a30f93a3b739e6c9ad329dddf6c07f39aad6bac2d2979eba458651bf861e1003f8cb2ae6e0bee5eea26f5e74149376126d52e65cbeef2cab307e5ca7b4895d0b892ee749111a2c0e3b4c481170ca3963b1f3cd6f19f962a2f436238334a80b55dff94867d467d1e77523c2461b6aa4ea5a49d81a5e2a5e7c5ac7ef152d8c995d95e79231c9d215641fe7c73a0758a09a26ebc08e81bae6a589e276db38b4c5de5bcd2d05dc114d65e062d857c9532ef7d3afad7b19960b1c62b46ffa46e2822f6808d06b4cebf57a3e320bbc607ffb6dd56640488d43140a4d20c12f19627e46a3678cc8fe81f44247a49faba302887ba01036c2ed07be9e9039784f75f68242d33f65efb3785aa17ea1d7fd491087618b2fd66990f400026aa43d32244bcf60d70130138166419ee878c8c21b61272fe03231fd78425e47f38a5be3174c7ba97a69ba93be74026a92a5dbb2766cf076a69a58c9ee8abea14aef332921804fa02f358170796355a4a19efa014314c7ed576c761606a05871223270b5e89199982af5a18454034d50a3a190952415fbd7d251ddca46d4867a04253412cfd716cb0f145ecf0eb8c5ab50a19507759e3060f122fe26c11c49265d0b815bc841782af56d91796eec33361f1328add99d9fe2083dfa1ae73881fe5d5068c046e051c862278f1f52467800b3348cf30f8298483291932952be2f3fd19987a9bf8bb7b3904588dab382eb95e86410344d65bc5aeda0283b7039a7228832f1463be406f7bd64dae04f9e53f4eb1b13c464cc1ee7214b4af6c9db81a5a24bb4a16164debdc7e2f0afd754886cf6fe80151a61a27d706f572f655b264aea0fbe4ee0a8c69385393d0f02d4536cd4e7cc29e9a1b9fa76e9f75407171e9a2bf25d81205318c0b9825356d4ec8ffbe081a785495ea406eb1151607381af7eceff48451f82218405ba9aefe473e3c1c74d37a4dd083bc8bedc8378c8715ab9e27324cab081f410593989d38e9203be4a20519cc56d2cd374cd88efa4cc698efd0f28563972fb34c99a6ec3ecfd9ca1e5258a6f19e77b77b423b611d939eb01e22a0fc4a8d560f4166096703a9f2310a2aaf150fdee838b633ec0a170bf9f4e4a585f5617d0952563be0b752665b3e55493ef52c53751dc5efead682463a9a015ad4a2c26e313c14ead144878be1dc94a41f657a3e9e07fcefea5ddb796f219a56e4df50c9ca376bcd65e0aa7bffda5ecc10c085e680a52c35ca2cd0403d6bd10121af174b90291fca7fd78ba49b50613f4b578e34882f8f2ea80cb99323483853c64bed2c4081e6fa5a410d576eb4123aab2beb20ff9c71e5d838879a3142db0fa7659252da86afe404cfddb1d15fb58dc7567de776e4b7cd0509074e60426f1bad53a2e5e0557c81551ddf3f11d0c2f8ea54d6c3449ce86a764b4987377a0c61937594730b28a8c12f3c4c99ee43ba278328563d93651161586578c84c6811b2405b992751978f9f4b72e8da3f6bf61730539f4b6b29d625dd8f3ada8631135bd5435331600b403ee1d00ae9c645cd5a2a05aaebe2c4553e2d66606a8feef63d1ebb6e35b9c71c456d85860a22cdb7db5a39b5bc8f79117e511ce444ee185d7de0748ec655fc7b79e3df16c57f8c2d823d67fbd93a023dc469ec7543cef5852c79516ddc20649dae29a571f219e2a8106527e207542788dc6d40a6cfbc0d551e2f8936778a37f015c6d855ccc0fe9157d2360fbde271f54f5955414fab841eeb55e95bbf63828cecf26247d03e2e4a898401f98d265f0681a76c55ea36feb0b78d4c4cf8db94f88209649287b343eeefdbe156283f871660f8bbc352458c7afc742e20658e9908aa0e815ea904310a16dc1cb27bf488d4582e45bfbf632f4ce89c93fabefeb7c38d120c5f04a494936c02d6d1dae8eb4d8b900f7399a9e4687e467492f0fb242a6e95211062ab8a0995422e8a567e6ffaf84f74917fff17633dd0cbb6bf0ed5a4f235b3834f8343619c630cc803e42bec66406625515f80d6f2350fc63d155efd0f08e17857105399a481f3900bd41d4487fc052ee123a4499cefc5e1bc4ebfe4eecd17cca6aa1ad975eeb57fb72ca67dba42a7189338a1ffb306e981afd7024c7516e509eca01cb36a32e41dd3def2a124e9bbf57b18667210c5712e3a0f1d5960d2a4c3b4ae59296be3786d4c855d7ad0ca90fec3ca9e5396557e3420aedf6b2b30c66da4b20b0a3242f215a75a36660db315cfceeb635cb77a7ef2a2c1710a3975fd84d1802618373d73573f5be71239c86b93868eb10626e1a749dcf381ac7cb7ec9961ed641beb969cb226560c9572d41df95ccacd4c49e0eb55ebedfe0f466b285ed0ebe52ea391601711e8e4fb7271608e0980a6af36dfc64e380f245ade364b5feb972cdb0107dffbb8f16a8d2a75695bf8361680a85fe03949c2e052a21d820f41aeeb8f93d695726135502e460bb16cbabf0788b9fa7d8bc5b398205199697c981f66243d2af2c2cba204c6a6518c28c8d225392cbba0c03e387ca0dada6bbe1f6db076e738b778825197f9c6a179748fc2036758e519efe774756341a9205dcfb26bf625dc552c26a2a41ec47082161928d0e6602b9ea17929d723686ffae60ded35fcd0b9640c28f1d7f2a1a5cbe7cbc030ed95737a6c32d454692b9e6ae356da7d90e21847cf896419f2a5287b3eeeee58508019b6f230bf5eb6a40422b6fd8dd4d41856a3574a74c2562d9c2ad7b1f028ddcb378c2f15d9bc620d8ed07522ae1412a21db19127235caffaddb9e4f9d00f9b11859ac0e6ed1bd9225b95cbf7824fabd2c6ea36a7b9cde89226af01fe690229606f8d548136ea4253f98ef0e00e2093fbc6c2716ff1a00e60b7bebadc18f668694cf13fd81aaf13df97c9d3492c6bc9bb205baca44b7cf49cdff94cd1c3a75d66ad2a73b7324676b6ee7e201e9a9b79460e64d10c9df23fb5e8c1b39661b22efd0f5e04f328ef1935b97a6ec625dc3b29543972807bdb0c0d146565fe746f46c251e7ae1b365b38d55669708614f9acc10dd0c6f1804f2523bc9d2eade52e03e6504c687e58df35337b961ff0e9f89aa3822f6e4c77155c69b9c3e19250ea8c5e97594628bb8efbcc1b10fc57e808500b3e9ecb8afcebe63a69225703d3b43b0459679e94b8cfc967d7771bd25debeb21be37b126e3829ead3044e296b4ce999cbe1cd62495b91443ca758fede387b5bad0769f4d76326cc3c487987196ad6773b204fa80944c7e34bc17aa5208e3f7603938aa2142a7c99938e3c2195fbd1429ab59957f94ae2f022edf4aebcd534b240c2f8bb917609c72784b38ef26134563b38a3a84a4be43d91f6559c2fc95ff49ffd229b707ff857ab1e24340eb6f08e6da2467aafd1ca5d678c274d3befb468f89da69ffa33011ea4edae942998c4291eafdb84b76f390ce441a5cd119db53d04b7c631b1277a3b5b581bf38c1d058b63233a898239a7dcc64afd1cec85dcb45c2a3723800be30918802dccc98c5adc385aad19fdf561784955c7931717496434c18e0f2aebb74f1d316660a3abe7c04e8b0787075aa2692cfe732706b98e6e03015674ae6ebe6a07ea2277006c152ed470f8c78f9d84feba449ba3685a95f7535432c1ddd44375bfea1017a5194057d0b0a2f974d1bca252f04eb44590b8feb13e1f15f4d7d4045b120dda3fde6c3aaa160b0c29369c48601693b370fba1f1c3634fa2c34a32f0b87da3172b954ff3c4b2faa44561bcf1d44952b6facb52a294276c8b327e1b985dfb5a4487b1c51f3a9fd91ac4619f6f0687ef973de02c240f6bbfa563db6a9899007a0ce9338d8533e407f8bfa3bbd5d302447d514fd09bcffb4b414632fa79221ca9e462e1f101d3d60beb8833983970b0898f1b64586aba45cac51eef489c421b40a6e5f855af69fa48749d1e3eee087f3075ff2d5520e24570cef95d203e066a189935af7f78e49764e22d9e2a801c17b0a1f8866dc918c028a7964e012b90e0b5d9deac0ada8dcc3e7e4eda6bc1ec31a736f664cc5c3b4cc211319dbb8fa6a11aba012e2a84e07ea16971851c10acb310ec13ba391941140ae2704f03d891d99eac1e4673dc11120b58e68a2e7eb13322c3a66b0c53874f540ecec2fb5080106be8b1cc0eed572e7f65d5156f3d8651aa1619bb6306e1335b6a90cd29c6f3b915e1f97237685cb2140af14718fc8eef9caad648282d82557f7777b8fa67f3f736533442de3d3d1575fa12119061064a6ae5d31749e99f7975051e8a513d261f44b227df8d771995c9813557fc2ddee8e951439a3559662f2cf99b17599a472473bd9305b9b9431dcef207a139e6880387041e1163dba21bbbe4ed10a843004ae37a2d5362a523c5da269df7c74b805873cdf028113f9b1bdc6869052988f253924ae1dd241be742d3ca6bd407e78e1ac820748f9d2e8636f34fd72ff023fbcf2b115828e90e893adb9a80f54ebd1d2c7d0707b33ec63144d4e92d2a00ee68c14bc8dde6c3dc032948c9df8a644d41cec5b1796acabf2b7643733da91acb4f942ceaf586f60e1cec3f84a02c1689dc876d85dd9a63faccac55d7552337d1793206c740263cecdf7df9c4d934aaceb146ad311f86e47265a9a1a8792daaed5d608ff1969936848978943a67bdf958c416b6829354049ce3d93b2c5da0ef962d59f4d284d120693d6e28ec9d57ec2d9c8ba2c40d63a088b48f5e1525021a5c0332e8eae50f1337b1ae064417854918f389d9fede86bd1ceaed8bf816e5940966c0fe58c545d77a3ae38f7987a7f4320823c8917837fe07615710cd278c120e52a6b3fed0f30781c5ea1820ed02af0c3aab702497c5f102ceb2e171e88120df9dd2055cb3128dcb936fc223c398eced1f10f8412daa42fe29c63a7a669b1a0bee5b88c6e0a3efaa3dccdfb4f959bac67e5f813fa42f9f382226cfb0d4a405a7637b338bcc5177750dd7043b6283a1e9059cf6ac324c79c33b348bc887d4842adf1c2f5ffd2d743ca1e40f76bde96b303e0777a9adfa9f17b7e4e325079183ed11d9f7b0f5cabc614ff7e42c74769c7e85c903cb1bad"], 0x1, 0x105f0, &(0x7f0000020c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x1ff, 0x2495, 0xfffffffffffffc00}) 2.601306615s ago: executing program 2 (id=4128): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910900000000000c3000000000000009500000000000000a45c8b106d45385a1964b904e462de529745a4cd61a7a0d25ddfd38b8b9a36c14ae1ee5ae29051b28b53a4182deb5ae03bc2644f3f168925abb901765f30c1d039e73af80f39ba982e44fe40c17211db9c82e6da61712f41775115599d65c29cfcd0bffd10d2c62aebfbf41dd375c71938ddfaa1df3117a99e"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r0, 0x20, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000001240)=""/159, 0x9f}}, 0x10) 2.569623579s ago: executing program 2 (id=4129): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x43, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c89000d84"], 0x0) 2.268671741s ago: executing program 2 (id=4130): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="26807800fb206f0100cf61e0b954", 0x0, 0x41ff, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.195895433s ago: executing program 2 (id=4131): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d80402f000000000000109022d00010000001009040000010300000009211000fd0122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "819de9f5"}]}}, 0x0}, 0x0) 2.123827934s ago: executing program 3 (id=4132): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.79231565s ago: executing program 3 (id=4139): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x800f, &(0x7f0000000dc0)={[{@inline_dentry}, {@heap}, {@acl}, {@noflush_merge}, {@fastboot}, {@discard_unit_section}, {@noheap}, {@jqfmt_vfsold}, {@whint_mode_user}, {@adaptive_mode}, {@memory_low}, {@discard_unit_block}, {@whint_mode_user}, {@prjjquota={'prjjquota', 0x3d, 'upperdir'}}, {@prjjquota={'prjjquota', 0x3d, 'upperdir'}}, {@norecovery}, {@nodiscard}, {@background_gc_off}, {@checkpoint_diasble}, {@background_gc_on}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'wg1\x00'}}, {@fsname={'fsname', 0x3d, '\x15x\xd38/vjf\xfa\xb0\xe4\x00>\x85m^\xf4\x16\x18d\a\tA\xa2\xee\xdf\xf4H\xc3{I\xe8\x1c7\x1e\xf8&\xf9\x1db\xc1-\x7f\xc19\xdd\xf7\x90\vW&]\xae\x1c\xfc\xc5\xf8\xbc\xb3yZ\x89\xc4E\xc7I\xb2\xb8\x1d2\x99\xccg9\x92Y\xe3\xec\xdaI\xfc\xe5\xdb\x8b\xd9\xbdy\x80\xee\xa8\xdf\x8bMO\f\xc8\xfcdNJ\x02\x1bj\xd0\x85S\x1c\x8a\x17h!\xde\x19\xc5\xc1\xbf\x9c$\x1a\xea@2o \xc5\x12m\x86\xb5T\xbb\xf0\x8c\xf9\x98#\xcd?\x03\xbc\xd6\xf0\xbd\xbe\x88\x84\f\xacw\x9bl\x1a\xae\x9a;\xf5U\x93\xc4\x06\x13 \xc9\x01\xd1P\x80\xdf[\x97\x84\'Ec\xaaa\xedJ\xb0\xbd \xf0\xad\xe2\xf1\x9f\xbd\xf1-\x95c\b\x00\fc.\x0e\x8d\xfb/\xf0\xa3&\xeblU\xe8A\x174>\xe1\xdd\xbfbV9\x16\xeaY%\xad}\xd2GB\r\xdb\xb3\x14^\xec\xc7\xb5\x86\x0e\x1a\xb6\x12_\t\xdf5l;\xdbY\x88\x8b'}}]}, 0x1, 0x555c, &(0x7f000000b3c0)="$eJzs3EtvG9UXAPAzSdOmj3//EWLBriNVSIlUW3X6EOwCtLxEq6rAghU4tmu5tT1R7Lqhqy5YIhZ8EwQSK5Z8Bhas2SEWIHZIIM+dPtJShBQXp+3vJ43PzJ3rc++1osjn2nIAz62V/PdfszgehyNiMSKORZTnWXWUNlJ4KSJORMTCA0dWtd9rOBgRRyLi+DR5yplVt748NTl57pd3f/vuh0MHjn717Y/zWzUwby9HxGArnd8apFh0U7xetTcnvTIOzk6qmG70l9P9QZHab3U2ywy3mnf7Nct4ppv6F1s3R9N4rd9sTWO3d61s3xqmAUeT7t085ROuN7fL63Zns4y9UVHG7u007s7t9L/t9mic8rSrfJ+W6WM8vhtTe2enk9azdaOMreG4ak95i3ZnZxonVayGi1bRb5fz2NzDC73Pvdcb3tzJJ53tUa8Y5ufqjVfqjfO1xnbR7ow7Z2vNQfv82Xy12592q407zcFGtyi6/U69VQzW8tVuq1VrNPLVC53NXnOYNxr1M/XTtXNr1dmp/K3LH+b9dr46ja/3hjfHvf4ov1Zs5+kZa/l6/cyra/nJRv7+pSv5lasXL1668sHHFz66/Nqld96oOj0yrXx1/fT6eq1xurbeWHuG1r8c99Y/fR/wyPo/qyY9w/XDnmTzngDA00f9D8zDo/X/xq76P/uH+n9wo7ouJvHmsYfr/+2rEU++/g/1/0zsq/o31f8L8bzW/3PY/4A9Uf8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy3flr6+u3yZCVdH63a/1c1vVBdZxGxEBF//o3FOLgr52KVZ+kx/ZcemsP3WZQZpmMcqo4jEbFRHX/8/0m/CgAAAPDs+ubOiS9StZ4eVuY9IfYsu/Ovu6ZNm4Vjn8xq6IhYWvl5RtkWpg8vzihZ+fd9IHZmlK3cwFqeUbK05XZgBoke3ld7vMVdYfmBkKWwMIPpAAAA+8zuSmAWVQgAAAD70+fzngDzkcX9zwyrL/AfSqH6QPDwrisAAADgqXH/++HZXOcBAAAA/BfK+t/v/wEAAMCzLf3+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bc7d5CbNhCFAfjZ4EJbqqKq+16lOzhGj9Bld604QC/BAbLgDLkAZyC7HCGCCI9DIGGRiLGtRN8nmcHG/LxBsJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBNN9Wqin8//l+as91dJk9vAAAAgHM21WpeP5mm88/N9S/NpW/NeRERZUScG7sP4sNJ5qDJqR7vvzq+v3pSw3VEnbD/jFFzfIqIn81x97XtbwEAAADer/ViOUuj9fQw7bsgupQmbcrJr0x5RURU09tMaeU+73uWqMnf+vc9jD9Z4tLEVowzhaUpt2GutBep/+6HWbvxUVOkpjz7tkOR2foOAAB0aHDSdDsKAQAAoEu/+y6AfhTxsJR5WAocpaZZ3vt4cgYAAAC8QUXfBQAAAACtq8f/He3/t7P/HwAAAPQj7f8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAmzbVar5eLGfPXhi+Lme7u0y+HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjgIhEAZhsHd9ZzL3P6w0aGhsUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9LCoRAEETBnPG/k77/YSVBzyBCBDQ8qqhFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7NzPaxxVHADw78zubG2rGKPkEBEFD3qx6ba29iYiSvDgnyCEdFtjt/5oc7CliLl4k5x7ET2KCEq89X/ouYVe6q2HHCqIx5WZnUmmTdBttDOb5vOBN++bYTLv+2Yh5DvvJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVDbf2Y47+WFmHKfluVv3ry3n/e2H+tyN9TvzecvjpMmk94eXxt27becBAADAAdKp6vuIuJttLOZ9OlPU/1l1TV7zf//MOK7q+Yfr/qqvav+8/fbrvRe2BpoZj5Pf9NzKcHB8ZyrdxzfL6fbsv17RLZ588e6lU3wg6Qdrz29mxfNMvr15871eER5qIlsAYC+OVX0ZVL8P5X2/zcQAODC6tcK7qv87M+3mBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCEzbU4WsVJRMx3t+Pc7fvXlnfrb6zfma/a6evX1+Pr7Xvmt8gi4tzKcHC80dlMt8tXrl5YGg4Hl/5DkMT4ST/it78cEf/D6HsK3i6nf+GjCS6OaCHDvQR/TUcaEwVHo7Gx0vLDbnvK+yto72cSAABPpqxseV1/N9tYzM8lsxGjHx6s/1+rxTFh/X/v49O36mPV6/9+YzOcfgurFz9fuHzl6hsrF5fOD84PPn3zRP+t/skzp06dWSjelSzseGOStpctAAAA+8RoNBptfdErW73+T2d3rv8fqcUxYf3/xXf9r+oDd9T/u9pe9Gs7EwAAgIPtuVf+/CPZ5XzS63VjaXX1Uv/L4pj0elFEJ8bHFlJ9ZIfKVq//O7NtZwUAAAA0YXMteWD9/2wtjgnX/5/+8cWf6/fsRMThcv3/2PJnw7PNTWeqNfHnxG3PEQAAgHYdLlt9/T8r9v+nW1se0oh4/dVxXP4bwH+s/7Oy/u+8/81P9bHq+/9PNjfFqZTOjZ9H0c9FdOfazggAAIAn2VNly4v937ONxU9+OfJhz/5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKb9HQAA//8veDyA") r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='mounts\x00') read$FUSE(r0, &(0x7f00000013c0)={0x2020}, 0x2020) 1.211413077s ago: executing program 3 (id=4152): syz_mount_image$vfat(&(0x7f00000190c0), &(0x7f0000000000)='./file2\x00', 0x2000006, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x25, 0x355, &(0x7f0000000840)="$eJzs3T1sG+UbAPDHvSROo3//8YBUwWTYkFDVBDHAlKgqUkUGKLL4WrBoykdsKsXCUhjieAFVTCAWJJjYOtCxM2JAiI2BlSKhAmKhW6VGHDr77JxjhyaDQyt+vyF69Lzvc+9zl1PuEiVvXu/ExqXZuHz79q2Yny/FzMq5lbhTikqciCT6dmKij+Ym5wGA+9ydNI0/0757z/5kYRB59gPAg6v3/H/z1F6ifITiq/+bRksAwJQd8vv/5ydmr0ytLQBgisae/4+NDO/7Mf/M8HcCAIAH14uvvPrc6lrExWp1PqL5YbvWrsUzvaHrsxGxejnejkasx9lYjN2I/otC/20h+/jshbXzZ6uZXytRy8ratYhmp13rvymsJr36cizFYlTy+nRYn2T1S736akTsdHrrR7PUrs3GQr7+TwuxHsuxGA+N1UdcWDu/XM0PUGsO6jsR3ZgfnGTW/5lYjB/eiCvRiEuR1e71v71UrZ5L10bq29fKvXkAAAAAAAAAAAAAAAAAAAAAADANZ6pDleH+N2mz0/7g4v4JlZH9cWr94Xx/oG5/f6C0PNid52qyf3+g0f152rWZOPGvnjkAAAAAAAAAAAAAAAAAAADcP1pbc1FvNNY3W1vvbxSDTiHz7ndffXMyBkMzeek7yV5V5MmR4wwmFo6cxHCJdFieJiNz8iCJGEzeqV+7Mey4OKc8PIux8iwojw2V8p7qjcapR3/5fFLVX1mw08skMXZZRoNSvn5hqPn/LDEfEbsHVR0cLN9jzs00TQ8q3/5svCpKETNx5DYOEXx7662Hn2ydfqqX+Trf9OHxJxZfuvnpl79v1BvR7V+ZRmNus7WbHuLIWa/jQ0nh/inl17k04U6YHHT3Mt3N1lY9+fGPlx/5+Pt9k5PJ909azLx38FrX92fm+kEpojK4CP/U6uyEm39y8Nrd4d179E/c6S9W6je2f/7tsFWFLxI26gAAAAAAAAAAAAAAAAAAgGNR+FvxI3j6hel1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHb+///xeC7ljmMMHdTowPldc3WwcufvJYTxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+wvwMAAP//jZtzvQ==") r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 333.011974ms ago: executing program 1 (id=4158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 332.735654ms ago: executing program 1 (id=4160): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 279.037743ms ago: executing program 4 (id=4161): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2, r0}]) 278.884203ms ago: executing program 1 (id=4162): unshare(0x20000400) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) 210.988614ms ago: executing program 1 (id=4164): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @binary="9f00d4f3"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) 210.530475ms ago: executing program 1 (id=4166): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @desc3}}) 209.767175ms ago: executing program 3 (id=4168): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) 198.659926ms ago: executing program 4 (id=4169): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in6=@private0, 0x4e28, 0x0, 0x1, 0x3, 0x2}, {0x0, 0x802, 0x9141, 0x0, 0xfffffffffffffffc, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@loopback, 0x7507, 0x2, 0x2, 0x4, 0x4, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 191.564558ms ago: executing program 0 (id=4170): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) capset(&(0x7f00000002c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200800}) chroot(&(0x7f0000000140)='./file0\x00') 164.989772ms ago: executing program 0 (id=4171): symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a00)=""/159, 0x9f) 164.721552ms ago: executing program 4 (id=4172): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000080)) 164.540702ms ago: executing program 0 (id=4173): capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x5f22}) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000240)={'sit0\x00', 0x0}) 140.311166ms ago: executing program 2 (id=4174): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c) 93.816024ms ago: executing program 0 (id=4175): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0x104, 0x16, 0x1, 0x70bd25, 0x0, {{{@in=@empty, @in6=@remote, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x1f}, {}, {}, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x35075b}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160001000000000000556a67c8acb8000000fe8800045cb27c146c0fc600000000000000000000000001ff0100000000000000000000000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000000000002"], 0xf8}}, 0x0) 93.542164ms ago: executing program 0 (id=4176): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x2d08, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000400)={0x6, 0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/121, 0x79}, {&(0x7f0000000140)=""/31, 0x1f}, {&(0x7f0000000180)=""/216, 0xd8}, {&(0x7f0000000280)=""/236, 0xec}], &(0x7f00000003c0)=[0xfffffffffffffff7, 0x7ff, 0x0, 0x0, 0x0, 0x0]}, 0x20) 93.262944ms ago: executing program 4 (id=4177): setuid(0xee01) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000009c0)={'gre0\x00', &(0x7f0000000940)={'tunl0\x00', 0x0, 0x7800, 0x7, 0x9, 0xc70, {{0x5, 0x4, 0x2, 0x3a, 0x14, 0x68, 0x0, 0x2, 0x4, 0x0, @loopback, @private=0xa010101}}}}) 81.214636ms ago: executing program 2 (id=4178): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 61.581039ms ago: executing program 0 (id=4179): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00222200000096010076010083000000002a90a08538b325038a39942bb09ea54983"], 0x0}, 0x0) 5.190929ms ago: executing program 4 (id=4180): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0xffffffffffffffe3, &(0x7f0000000380)="eb00000000000010000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.926959ms ago: executing program 1 (id=4181): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000580)='#', 0x1}, {&(0x7f0000002000)="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", 0x1000}], 0x3, 0x0, 0x0, 0x24000040}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 0s ago: executing program 4 (id=4182): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7c, 0x400000, 0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newroute={0x20, 0x1a, 0x201, 0x0, 0x0, {0xa}, [@RTA_METRICS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) kernel console output (not intermixed with test programs): : 0xe619d30d) [ 119.323083][ T373] udevd[373]: symlink '../../loop2' '/dev/disk/by-diskseq/607.tmp-b7:2' failed: Read-only file system [ 119.352352][ T375] udevd[375]: symlink '../../loop3' '/dev/disk/by-diskseq/604.tmp-b7:3' failed: Read-only file system [ 119.364611][ T7256] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 119.456084][ T7261] loop0: detected capacity change from 0 to 1024 [ 119.484227][ T7261] EXT4-fs (loop0): Ignoring removed bh option [ 119.536561][ T7261] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 119.647473][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 119.647492][ T30] audit: type=1400 audit(1776075458.389:700): avc: denied { create } for pid=7260 comm="syz.0.3057" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 119.817515][ T7263] loop2: detected capacity change from 0 to 40427 [ 119.892186][ T7279] loop3: detected capacity change from 0 to 512 [ 119.896945][ T7281] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3065'. [ 119.901668][ T7263] F2FS-fs (loop2): invalid crc value [ 119.956413][ T7279] EXT4-fs (loop3): Ignoring removed bh option [ 119.970555][ T7263] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.980755][ T7279] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 120.001255][ T7279] EXT4-fs (loop3): 1 truncate cleaned up [ 120.007255][ T7279] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 120.021806][ T7263] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 120.059464][ T7263] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.137043][ T7297] netlink: 'syz.4.3070': attribute type 4 has an invalid length. [ 120.145473][ T7297] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3070'. [ 120.262929][ T7310] loop4: detected capacity change from 0 to 16 [ 120.334665][ T7310] erofs: (device loop4): mounted with root inode @ nid 36. [ 120.405534][ T30] audit: type=1400 audit(1776075459.149:701): avc: denied { map } for pid=7316 comm="syz.3.3079" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 120.462276][ T7319] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3078'. [ 120.608260][ T7266] F2FS-fs (loop1): invalid crc value [ 120.648554][ T7333] EXT4-fs (loop2): Ignoring removed bh option [ 120.664550][ T30] audit: type=1400 audit(1776075459.409:702): avc: denied { write } for pid=7334 comm="syz.4.3087" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 120.690702][ T7266] F2FS-fs (loop1): Found nat_bits in checkpoint [ 120.708657][ T7333] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 120.728369][ T7340] device macsec1 entered promiscuous mode [ 120.735477][ T7333] EXT4-fs (loop2): 1 truncate cleaned up [ 120.743637][ T7333] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 120.748264][ T7266] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 120.965431][ T7357] netlink: 'syz.4.3097': attribute type 2 has an invalid length. [ 121.208745][ T7373] EXT4-fs (loop4): Ignoring removed bh option [ 121.240165][ T7373] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 121.280135][ T7379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3108'. [ 121.285537][ T7373] EXT4-fs (loop4): 1 truncate cleaned up [ 121.334835][ T7373] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 121.424420][ T7387] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 121.501869][ T30] audit: type=1326 audit(1776075460.249:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdedca7819 code=0x7ffc0000 [ 121.549759][ T30] audit: type=1326 audit(1776075460.279:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdedca7819 code=0x7ffc0000 [ 121.581764][ T30] audit: type=1326 audit(1776075460.289:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7efdedca7819 code=0x7ffc0000 [ 121.631691][ T30] audit: type=1326 audit(1776075460.289:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdedca7819 code=0x7ffc0000 [ 121.657417][ T30] audit: type=1326 audit(1776075460.289:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdedca7819 code=0x7ffc0000 [ 121.684148][ T30] audit: type=1326 audit(1776075460.299:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7efdedca7819 code=0x7ffc0000 [ 121.752833][ T7422] FAT-fs (loop3): Directory bread(block 64) failed [ 121.760013][ T7422] FAT-fs (loop3): Directory bread(block 65) failed [ 121.767465][ T7422] FAT-fs (loop3): Directory bread(block 66) failed [ 121.770227][ T30] audit: type=1326 audit(1776075460.299:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7405 comm="syz.3.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdedca7819 code=0x7ffc0000 [ 121.787267][ T7422] FAT-fs (loop3): Directory bread(block 67) failed [ 121.826328][ T7422] FAT-fs (loop3): Directory bread(block 68) failed [ 121.834664][ T7422] FAT-fs (loop3): Directory bread(block 69) failed [ 121.858641][ T7422] FAT-fs (loop3): Directory bread(block 70) failed [ 121.874752][ T7422] FAT-fs (loop3): Directory bread(block 71) failed [ 121.887821][ T7422] FAT-fs (loop3): Directory bread(block 72) failed [ 121.916047][ T7422] FAT-fs (loop3): Directory bread(block 73) failed [ 121.924553][ T6] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 121.924647][ T7412] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 121.966991][ T7412] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 121.992478][ T7412] F2FS-fs (loop0): invalid crc value [ 121.999335][ T7412] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 122.047323][ T7439] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3134'. [ 122.073500][ T7412] F2FS-fs (loop0): recover fsync data on readonly fs [ 122.081806][ T7412] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 122.089591][ T7412] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 122.309923][ T6] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 122.341288][ T6] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 122.382106][ T6] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 122.426483][ T6] usb 2-1: config 220 has no interface number 2 [ 122.434138][ T6] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 122.448995][ T6] usb 2-1: config 220 interface 0 has no altsetting 0 [ 122.465293][ T6] usb 2-1: config 220 interface 76 has no altsetting 0 [ 122.473383][ T6] usb 2-1: config 220 interface 1 has no altsetting 0 [ 122.541035][ T7437] F2FS-fs (loop4): fault_injection options not supported [ 122.552757][ T7437] F2FS-fs (loop4): fault_type options not supported [ 122.561452][ T7437] F2FS-fs (loop4): invalid crc value [ 122.574606][ T7437] F2FS-fs (loop4): Found nat_bits in checkpoint [ 122.606898][ T7412] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0 [ 122.615815][ T7437] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 122.625469][ T7412] F2FS-fs (loop0): Start checkpoint disabled! [ 122.649814][ T6] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 122.660990][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.670585][ T6] usb 2-1: Product: syz [ 122.675182][ T6] usb 2-1: Manufacturer: syz [ 122.680318][ T288] attempt to access beyond end of device [ 122.680318][ T288] loop4: rw=2049, want=45104, limit=40427 [ 122.681012][ T6] usb 2-1: SerialNumber: syz [ 122.831881][ T7471] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.069888][ T6] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 123.077322][ T6] usb 2-1: No valid video chain found. [ 123.083218][ T6] usb 2-1: selecting invalid altsetting 0 [ 123.109987][ T60] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 123.172228][ T6] usb 2-1: USB disconnect, device number 13 [ 123.379700][ T60] usb 5-1: device descriptor read/64, error -71 [ 123.392778][ T7480] set_capacity_and_notify: 8 callbacks suppressed [ 123.392794][ T7480] loop2: detected capacity change from 0 to 512 [ 123.442416][ T7480] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.462968][ T7480] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm syz.2.3153: bg 0: bad block bitmap checksum [ 123.481990][ T7480] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.3153: Directory block failed checksum [ 123.769827][ T60] usb 5-1: device descriptor read/64, error -71 [ 124.039825][ T60] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 124.309794][ T60] usb 5-1: device descriptor read/64, error -71 [ 124.699761][ T60] usb 5-1: device descriptor read/64, error -71 [ 124.819775][ T60] usb usb5-port1: attempt power cycle [ 125.229818][ T60] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 125.399870][ T60] usb 5-1: device descriptor read/8, error -71 [ 125.679803][ T60] usb 5-1: device descriptor read/8, error -71 [ 125.848601][ T2061] udevd[2061]: symlink '../../loop0' '/dev/disk/by-diskseq/636.tmp-b7:0' failed: Read-only file system [ 125.861212][ T7489] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3155'. [ 125.868663][ T373] udevd[373]: symlink '../../loop4' '/dev/disk/by-diskseq/637.tmp-b7:4' failed: Read-only file system [ 125.918386][ T7489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.935017][ T2061] udevd[2061]: symlink '../../loop2' '/dev/disk/by-diskseq/639.tmp-b7:2' failed: Read-only file system [ 126.008581][ T373] udevd[373]: symlink '../../loop1' '/dev/disk/by-diskseq/626.tmp-b7:1' failed: Read-only file system [ 126.030119][ T2061] udevd[2061]: symlink '../../loop2' '/dev/disk/by-diskseq/639.tmp-b7:2' failed: Read-only file system [ 126.119447][ T2061] udevd[2061]: symlink '../../loop1' '/dev/disk/by-diskseq/626.tmp-b7:1' failed: Read-only file system [ 126.133001][ T7497] loop2: detected capacity change from 0 to 8192 [ 126.225206][ T2061] udevd[2061]: symlink '../../loop1' '/dev/disk/by-diskseq/626.tmp-b7:1' failed: Read-only file system [ 126.227262][ T373] udevd[373]: symlink '../../loop2' '/dev/disk/by-diskseq/640.tmp-b7:2' failed: Read-only file system [ 126.265009][ T373] udevd[373]: symlink '../../loop2' '/dev/disk/by-uuid/8AF3-4683.tmp-b7:2' failed: Read-only file system [ 126.399061][ T2061] udevd[2061]: symlink '../../loop2' '/dev/disk/by-diskseq/640.tmp-b7:2' failed: Read-only file system [ 126.400421][ T7486] loop3: detected capacity change from 0 to 40427 [ 126.484414][ T7486] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 126.497159][ T7486] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 126.526753][ T7486] F2FS-fs (loop3): invalid crc value [ 126.551253][ T7486] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 126.644909][ T7486] F2FS-fs (loop3): recover fsync data on readonly fs [ 126.668198][ T7486] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 126.707521][ T7486] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 127.124357][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 127.124374][ T30] audit: type=1326 audit(1776075465.869:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.2.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2d294819 code=0x7ffc0000 [ 127.216022][ T30] audit: type=1326 audit(1776075465.909:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.2.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2d294819 code=0x7ffc0000 [ 127.274560][ T7531] loop2: detected capacity change from 0 to 256 [ 127.297786][ T30] audit: type=1326 audit(1776075465.909:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.2.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2d294819 code=0x7ffc0000 [ 127.342611][ T7531] FAT-fs (loop2): Directory bread(block 64) failed [ 127.345015][ T30] audit: type=1326 audit(1776075465.909:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.2.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fcd2d294819 code=0x7ffc0000 [ 127.359703][ T7531] FAT-fs (loop2): Directory bread(block 65) failed [ 127.383047][ T30] audit: type=1326 audit(1776075465.909:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.2.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2d294819 code=0x7ffc0000 [ 127.383427][ T7486] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0 [ 127.407646][ T30] audit: type=1326 audit(1776075465.909:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.2.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2d294819 code=0x7ffc0000 [ 127.442721][ T7531] FAT-fs (loop2): Directory bread(block 66) failed [ 127.450758][ T7537] tipc: Enabled bearer , priority 20 [ 127.458302][ T7486] F2FS-fs (loop3): Start checkpoint disabled! [ 127.458334][ T7531] FAT-fs (loop2): Directory bread(block 67) failed [ 127.473284][ T30] audit: type=1326 audit(1776075465.909:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.2.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcd2d294819 code=0x7ffc0000 [ 127.495561][ T7531] FAT-fs (loop2): Directory bread(block 68) failed [ 127.512960][ T7531] FAT-fs (loop2): Directory bread(block 69) failed [ 127.535229][ T7531] FAT-fs (loop2): Directory bread(block 70) failed [ 127.541343][ T30] audit: type=1326 audit(1776075465.909:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7520 comm="syz.2.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcd2d294819 code=0x7ffc0000 [ 127.544133][ T7531] FAT-fs (loop2): Directory bread(block 71) failed [ 127.598268][ T7531] FAT-fs (loop2): Directory bread(block 72) failed [ 127.614451][ T7549] loop1: detected capacity change from 0 to 512 [ 127.620882][ T7531] FAT-fs (loop2): Directory bread(block 73) failed [ 127.701618][ T7549] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 127.719958][ T7549] ext4 filesystem being mounted at /598/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.758884][ T30] audit: type=1400 audit(1776075466.499:720): avc: denied { ioctl } for pid=7565 comm="syz.0.3192" path="socket:[38680]" dev="sockfs" ino=38680 ioctlcmd=0x8954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.782181][ T7549] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #2: block 3: comm syz.1.3185: lblock 8 mapped to illegal pblock 3 (length 26) [ 127.806925][ T7572] loop0: detected capacity change from 0 to 256 [ 127.809324][ T30] audit: type=1326 audit(1776075466.549:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7568 comm="syz.3.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdedca7819 code=0x7ffc0000 [ 127.880005][ T7572] exfat: Deprecated parameter 'namecase' [ 127.887315][ T7572] exfat: Deprecated parameter 'namecase' [ 127.904791][ T7586] loop2: detected capacity change from 0 to 16 [ 127.906251][ T7588] netlink: 592 bytes leftover after parsing attributes in process `syz.3.3202'. [ 127.939618][ T7572] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 127.978256][ T7572] exFAT-fs (loop0): hint_cluster is invalid (4278190089) [ 127.981422][ T7592] loop1: detected capacity change from 0 to 512 [ 128.011807][ T7586] erofs: (device loop2): mounted with root inode @ nid 36. [ 128.015963][ T7572] exFAT-fs (loop0): error, failed to bmap (inode : ffff8881293527a0 iblock : 8, err : -5) [ 128.032423][ T7572] exFAT-fs (loop0): error, invalid access to FAT (entry 0xff000008) [ 128.066708][ T311] attempt to access beyond end of device [ 128.066708][ T311] loop0: rw=1, want=34225520832, limit=256 [ 128.141149][ T7592] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 128.227218][ T7592] ext4 filesystem being mounted at /600/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.264387][ T7611] loop2: detected capacity change from 0 to 40427 [ 128.314379][ T7611] F2FS-fs (loop2): Corrupted extension count (33554469 + 1 > 64) [ 128.348396][ T7611] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 128.397651][ T7611] F2FS-fs (loop2): invalid crc value [ 128.399760][ T7643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3228'. [ 128.427195][ T7611] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 128.456703][ T7649] loop0: detected capacity change from 0 to 2048 [ 128.512929][ T7656] loop3: detected capacity change from 0 to 512 [ 128.521448][ T7611] F2FS-fs (loop2): recover fsync data on readonly fs [ 128.529467][ T7649] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 128.542453][ T7611] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 128.560633][ T7611] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 128.572246][ T7649] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback. [ 128.578246][ T7656] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 128.611135][ T7649] ext4 filesystem being mounted at /617/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.629889][ T7656] ext4 filesystem being mounted at /667/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.832878][ T7677] loop3: detected capacity change from 0 to 512 [ 128.866195][ T7683] loop2: detected capacity change from 0 to 512 [ 128.911918][ T7667] loop1: detected capacity change from 0 to 40427 [ 128.950677][ T7667] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 128.985239][ T7667] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 128.987956][ T7686] loop3: detected capacity change from 0 to 256 [ 129.013275][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3248'. [ 129.024729][ T7688] loop2: detected capacity change from 0 to 1024 [ 129.035411][ T7667] F2FS-fs (loop1): invalid crc value [ 129.052211][ T7688] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 129.052211][ T7688] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 129.052211][ T7688] [ 129.091040][ T7667] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 129.120175][ T7688] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 129.158063][ T7686] FAT-fs (loop3): Directory bread(block 64) failed [ 129.161161][ T7688] EXT4-fs (loop2): orphan cleanup on readonly fs [ 129.173577][ T7686] FAT-fs (loop3): Directory bread(block 65) failed [ 129.173765][ T7667] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 129.181684][ T7686] FAT-fs (loop3): Directory bread(block 66) failed [ 129.196093][ T7686] FAT-fs (loop3): Directory bread(block 67) failed [ 129.203136][ T7686] FAT-fs (loop3): Directory bread(block 68) failed [ 129.203193][ T7688] EXT4-fs error (device loop2): __ext4_get_inode_loc:4358: comm syz.2.3249: Invalid inode table block 0 in block_group 0 [ 129.209954][ T7686] FAT-fs (loop3): Directory bread(block 69) failed [ 129.210016][ T7686] FAT-fs (loop3): Directory bread(block 70) failed [ 129.210034][ T7686] FAT-fs (loop3): Directory bread(block 71) failed [ 129.210063][ T7686] FAT-fs (loop3): Directory bread(block 72) failed [ 129.210081][ T7686] FAT-fs (loop3): Directory bread(block 73) failed [ 129.225344][ T7698] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3251'. [ 129.232341][ T7667] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 129.260085][ T7698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.275024][ T7688] EXT4-fs (loop2): Remounting filesystem read-only [ 129.306358][ T7688] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 129.317778][ T7688] EXT4-fs (loop2): Remounting filesystem read-only [ 129.348009][ T7688] EXT4-fs error (device loop2): ext4_quota_write:6637: inode #3: comm syz.2.3249: mark_inode_dirty error [ 129.370859][ T7704] loop0: detected capacity change from 0 to 256 [ 129.380235][ T7688] EXT4-fs (loop2): Remounting filesystem read-only [ 129.387036][ T7688] EXT4-fs error (device loop2): ext4_acquire_dquot:6225: comm syz.2.3249: Failed to acquire dquot type 0 [ 129.403626][ T7688] EXT4-fs (loop2): Remounting filesystem read-only [ 129.411597][ T7688] EXT4-fs error (device loop2): __ext4_get_inode_loc:4358: comm syz.2.3249: Invalid inode table block 0 in block_group 0 [ 129.422418][ T7704] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 129.438265][ T7688] EXT4-fs (loop2): Remounting filesystem read-only [ 129.477878][ T7688] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 129.529679][ T7688] EXT4-fs (loop2): Remounting filesystem read-only [ 129.543105][ T7688] EXT4-fs error (device loop2): ext4_ext_truncate:4462: inode #15: comm syz.2.3249: mark_inode_dirty error [ 129.549690][ T7718] xt_hashlimit: size too large, truncated to 1048576 [ 129.570716][ T7688] EXT4-fs (loop2): Remounting filesystem read-only [ 129.577530][ T7688] EXT4-fs error (device loop2): __ext4_get_inode_loc:4358: comm syz.2.3249: Invalid inode table block 0 in block_group 0 [ 129.641126][ T7688] EXT4-fs (loop2): Remounting filesystem read-only [ 129.648544][ T7688] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 129.670268][ T7688] EXT4-fs (loop2): Remounting filesystem read-only [ 129.677358][ T7688] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 129.696813][ T7688] EXT4-fs (loop2): Remounting filesystem read-only [ 129.703793][ T7688] EXT4-fs error (device loop2): __ext4_get_inode_loc:4358: comm syz.2.3249: Invalid inode table block 0 in block_group 0 [ 129.720536][ T7708] loop4: detected capacity change from 0 to 40427 [ 129.735195][ T7688] EXT4-fs (loop2): Remounting filesystem read-only [ 129.749773][ T7688] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 129.763816][ T7708] F2FS-fs (loop4): invalid crc value [ 129.770124][ T7688] EXT4-fs (loop2): Remounting filesystem read-only [ 129.780147][ T7688] EXT4-fs error (device loop2): ext4_truncate:4310: inode #15: comm syz.2.3249: mark_inode_dirty error [ 129.803671][ T7708] F2FS-fs (loop4): Found nat_bits in checkpoint [ 129.812934][ T7688] EXT4-fs (loop2): Remounting filesystem read-only [ 129.834281][ T7688] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 129.863401][ T7688] EXT4-fs (loop2): Remounting filesystem read-only [ 129.875081][ T7708] F2FS-fs (loop4): Start checkpoint disabled! [ 129.880030][ T7688] EXT4-fs (loop2): 1 truncate cleaned up [ 129.892408][ T7688] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000015,stripe=0x0000000000000000,noinit_itable,noquota,nouser_xattr,auto_da_alloc,minixdf,errors=remount-ro,. Quota mode: writeback. [ 129.917277][ T7708] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 129.959827][ T7739] loop1: detected capacity change from 0 to 256 [ 130.020408][ T7739] FAT-fs (loop1): Directory bread(block 64) failed [ 130.058206][ T372] attempt to access beyond end of device [ 130.058206][ T372] loop4: rw=2049, want=40976, limit=40427 [ 130.060695][ T7739] FAT-fs (loop1): Directory bread(block 65) failed [ 130.078782][ T7739] FAT-fs (loop1): Directory bread(block 66) failed [ 130.086146][ T7739] FAT-fs (loop1): Directory bread(block 67) failed [ 130.093790][ T7739] FAT-fs (loop1): Directory bread(block 68) failed [ 130.103219][ T7739] FAT-fs (loop1): Directory bread(block 69) failed [ 130.113121][ T7739] FAT-fs (loop1): Directory bread(block 70) failed [ 130.122640][ T7739] FAT-fs (loop1): Directory bread(block 71) failed [ 130.132207][ T7739] FAT-fs (loop1): Directory bread(block 72) failed [ 130.140683][ T7739] FAT-fs (loop1): Directory bread(block 73) failed [ 130.293562][ T7756] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 130.319929][ T569] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 130.322654][ T7758] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 130.391933][ T7762] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.3279: bg 0: block 5: invalid block bitmap [ 130.405889][ T7762] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 130.416577][ T7762] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3279: invalid indirect mapped block 3 (level 2) [ 130.431900][ T7762] EXT4-fs (loop1): 2 truncates cleaned up [ 130.438972][ T7762] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,nodioread_nolock,grpjquota=,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 130.551746][ T7771] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 130.568599][ T7781] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.578197][ T7771] ext4 filesystem being mounted at /705/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.589715][ T569] usb 3-1: Using ep0 maxpacket: 16 [ 130.597329][ T7778] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 130.619742][ T7771] SELinux: Context system_u:object_r:system_m is not valid (left unmapped). [ 130.644453][ T7778] FAT-fs (loop0): Filesystem has been set read-only [ 130.729888][ T569] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.745717][ T569] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.869258][ T2061] udevd[2061]: symlink '../../loop3' '/dev/disk/by-diskseq/668.tmp-b7:3' failed: Read-only file system [ 130.886749][ T373] udevd[373]: symlink '../../loop4' '/dev/disk/by-diskseq/685.tmp-b7:4' failed: Read-only file system [ 130.930049][ T569] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.964434][ T7797] netlink: 'syz.4.3294': attribute type 12 has an invalid length. [ 130.969940][ T569] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.984701][ T569] usb 3-1: Product: syz [ 130.990238][ T569] usb 3-1: Manufacturer: syz [ 130.995996][ T569] usb 3-1: SerialNumber: syz [ 131.049487][ T373] udevd[373]: symlink '../../loop4' '/dev/disk/by-diskseq/685.tmp-b7:4' failed: Read-only file system [ 131.179256][ T373] udevd[373]: symlink '../../loop1' '/dev/disk/by-diskseq/682.tmp-b7:1' failed: Read-only file system [ 131.253929][ T373] udevd[373]: symlink '../../loop1' '/dev/disk/by-diskseq/682.tmp-b7:1' failed: Read-only file system [ 131.298216][ T373] udevd[373]: symlink '../../loop1' '/dev/disk/by-diskseq/682.tmp-b7:1' failed: Read-only file system [ 131.328071][ T375] udevd[375]: symlink '../../loop4' '/dev/disk/by-diskseq/685.tmp-b7:4' failed: Read-only file system [ 131.377533][ T373] udevd[373]: symlink '../../loop4' '/dev/disk/by-diskseq/685.tmp-b7:4' failed: Read-only file system [ 131.459140][ T373] udevd[373]: symlink '../../loop1' '/dev/disk/by-diskseq/682.tmp-b7:1' failed: Read-only file system [ 131.465160][ T375] udevd[375]: symlink '../../loop4' '/dev/disk/by-diskseq/685.tmp-b7:4' failed: Read-only file system [ 131.554447][ T569] usb 3-1: USB disconnect, device number 11 [ 131.665675][ T7826] FAT-fs (loop1): Directory bread(block 64) failed [ 131.698143][ T7826] FAT-fs (loop1): Directory bread(block 65) failed [ 131.759879][ T7826] FAT-fs (loop1): Directory bread(block 66) failed [ 131.769498][ T7826] FAT-fs (loop1): Directory bread(block 67) failed [ 131.786894][ T7826] FAT-fs (loop1): Directory bread(block 68) failed [ 131.794451][ T7826] FAT-fs (loop1): Directory bread(block 69) failed [ 131.801882][ T7826] FAT-fs (loop1): Directory bread(block 70) failed [ 131.809138][ T7826] FAT-fs (loop1): Directory bread(block 71) failed [ 131.839819][ T7826] FAT-fs (loop1): Directory bread(block 72) failed [ 131.843280][ T7820] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 131.854330][ T7826] FAT-fs (loop1): Directory bread(block 73) failed [ 131.858632][ T7820] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 131.901560][ T7820] F2FS-fs (loop4): invalid crc value [ 131.939437][ T7820] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 132.019129][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3318'. [ 132.030352][ T7820] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 132.056900][ T7820] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 132.143384][ T288] attempt to access beyond end of device [ 132.143384][ T288] loop4: rw=2049, want=45104, limit=40427 [ 132.294673][ T7874] FAT-fs (loop0): Directory bread(block 64) failed [ 132.317594][ T7874] FAT-fs (loop0): Directory bread(block 65) failed [ 132.338557][ T7874] FAT-fs (loop0): Directory bread(block 66) failed [ 132.346582][ T7874] FAT-fs (loop0): Directory bread(block 67) failed [ 132.357235][ T7874] FAT-fs (loop0): Directory bread(block 68) failed [ 132.364646][ T7874] FAT-fs (loop0): Directory bread(block 69) failed [ 132.385510][ T7874] FAT-fs (loop0): Directory bread(block 70) failed [ 132.394080][ T7874] FAT-fs (loop0): Directory bread(block 71) failed [ 132.395469][ T7859] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 132.401051][ T7874] FAT-fs (loop0): Directory bread(block 72) failed [ 132.415515][ T7874] FAT-fs (loop0): Directory bread(block 73) failed [ 132.420102][ T7859] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 132.455420][ T7859] F2FS-fs (loop2): fault_type options not supported [ 132.479967][ T7859] F2FS-fs (loop2): invalid crc value [ 132.495323][ T7859] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 132.542684][ T7859] F2FS-fs (loop2): Start checkpoint disabled! [ 132.557202][ T7859] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 132.565592][ T7859] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 132.637749][ T384] attempt to access beyond end of device [ 132.637749][ T384] loop2: rw=2049, want=45104, limit=40427 [ 132.644191][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 132.644207][ T30] audit: type=1400 audit(1776075471.379:755): avc: denied { listen } for pid=7897 comm="syz.0.3340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.650951][ T26] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 132.749744][ T569] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 132.939764][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 133.029737][ T39] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 133.059873][ T26] usb 2-1: config 0 has no interfaces? [ 133.139887][ T569] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.151677][ T569] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.162310][ T569] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.176354][ T569] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.185830][ T569] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.195966][ T569] usb 5-1: config 0 descriptor?? [ 133.229823][ T26] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 133.239381][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.248073][ T26] usb 2-1: Product: syz [ 133.252314][ T26] usb 2-1: Manufacturer: syz [ 133.257103][ T26] usb 2-1: SerialNumber: syz [ 133.262618][ T26] r8152-cfgselector 2-1: config 0 descriptor?? [ 133.389913][ T39] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 133.401526][ T39] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.415078][ T39] usb 3-1: config 0 interface 0 has no altsetting 0 [ 133.422543][ T39] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 133.431782][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.441097][ T39] usb 3-1: config 0 descriptor?? [ 133.459890][ T7900] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 133.680694][ T569] plantronics 0003:047F:FFFF.0017: unbalanced collection at end of report description [ 133.691426][ T569] plantronics 0003:047F:FFFF.0017: parse failed [ 133.698792][ T569] plantronics: probe of 0003:047F:FFFF.0017 failed with error -22 [ 133.707549][ T372] usb 2-1: config 0 descriptor?? [ 133.881702][ T26] usb 5-1: USB disconnect, device number 19 [ 133.920592][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 133.928702][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 133.936616][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 133.944378][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 133.952773][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 133.953508][ T569] usb 2-1: USB disconnect, device number 14 [ 133.960427][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 133.974665][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 133.981670][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 133.988550][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 133.995378][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.002539][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.009311][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.016933][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.023762][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.030927][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.037903][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.045505][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.052816][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.059975][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.066894][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.074298][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.081924][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.091016][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.098940][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.106191][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.113471][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.120401][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.127956][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.135006][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.142121][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.149166][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.156458][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.163539][ T39] sony 0003:054C:0374.0018: unknown main item tag 0x0 [ 134.172338][ T39] sony 0003:054C:0374.0018: hiddev96,hidraw0: USB HID v0.20 Device [HID 054c:0374] on usb-dummy_hcd.2-1/input0 [ 134.185127][ T39] sony 0003:054C:0374.0018: failed to claim input [ 134.195356][ T39] usb 3-1: USB disconnect, device number 12 [ 134.212050][ T7901] fido_id[7901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 134.508836][ T7915] set_capacity_and_notify: 9 callbacks suppressed [ 134.508854][ T7915] loop3: detected capacity change from 0 to 256 [ 134.570694][ T7915] FAT-fs (loop3): Directory bread(block 64) failed [ 134.598261][ T7915] FAT-fs (loop3): Directory bread(block 65) failed [ 134.617308][ T30] audit: type=1400 audit(1776075473.359:756): avc: denied { setopt } for pid=7928 comm="syz.1.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 134.641741][ T7915] FAT-fs (loop3): Directory bread(block 66) failed [ 134.659034][ T7915] FAT-fs (loop3): Directory bread(block 67) failed [ 134.683900][ T7915] FAT-fs (loop3): Directory bread(block 68) failed [ 134.704351][ T7915] FAT-fs (loop3): Directory bread(block 69) failed [ 134.729815][ T7915] FAT-fs (loop3): Directory bread(block 70) failed [ 134.736528][ T7915] FAT-fs (loop3): Directory bread(block 71) failed [ 134.750652][ T7915] FAT-fs (loop3): Directory bread(block 72) failed [ 134.757553][ T7915] FAT-fs (loop3): Directory bread(block 73) failed [ 134.882765][ T7956] loop0: detected capacity change from 0 to 512 [ 134.891619][ T7959] loop4: detected capacity change from 0 to 256 [ 134.925590][ T7956] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 134.939494][ T7956] ext4 filesystem being mounted at /655/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.948430][ T7973] loop3: detected capacity change from 0 to 512 [ 134.969472][ T7959] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 134.973184][ T7956] SELinux: Context system_u:object_r:system_map_t:s0 is not valid (left unmapped). [ 134.981562][ T7959] FAT-fs (loop4): Filesystem has been set read-only [ 134.997856][ T30] audit: type=1400 audit(1776075473.739:757): avc: denied { relabelto } for pid=7955 comm="syz.0.3367" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:system_map_t:s0" [ 135.045565][ T7973] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.657209][ T7983] loop0: detected capacity change from 0 to 512 [ 135.660150][ T7979] loop4: detected capacity change from 0 to 256 [ 135.671295][ T7982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3376'. [ 135.682783][ T7982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3376'. [ 135.719872][ T7983] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.730701][ T7995] loop1: detected capacity change from 0 to 256 [ 135.752854][ T7979] FAT-fs (loop4): Directory bread(block 64) failed [ 135.760690][ T7979] FAT-fs (loop4): Directory bread(block 65) failed [ 135.767928][ T7979] FAT-fs (loop4): Directory bread(block 66) failed [ 135.776093][ T7979] FAT-fs (loop4): Directory bread(block 67) failed [ 135.783187][ T7983] EXT4-fs (loop0): 1 truncate cleaned up [ 135.796595][ T7983] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.857051][ T7979] FAT-fs (loop4): Directory bread(block 68) failed [ 135.875080][ T2061] udevd[2061]: symlink '../../loop1' '/dev/disk/by-diskseq/704.tmp-b7:1' failed: Read-only file system [ 135.884422][ T373] udevd[373]: symlink '../../loop0' '/dev/disk/by-diskseq/702.tmp-b7:0' failed: Read-only file system [ 135.909371][ T7979] FAT-fs (loop4): Directory bread(block 69) failed [ 135.922430][ T373] udevd[373]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 135.923563][ T2061] udevd[2061]: symlink '../../loop1' '/dev/disk/by-diskseq/704.tmp-b7:1' failed: Read-only file system [ 135.943318][ T7979] FAT-fs (loop4): Directory bread(block 70) failed [ 135.954977][ T7979] FAT-fs (loop4): Directory bread(block 71) failed [ 135.964681][ T373] udevd[373]: symlink '../../loop3' '/dev/disk/by-diskseq/701.tmp-b7:3' failed: Read-only file system [ 135.970009][ T7983] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none. [ 135.978082][ T7979] FAT-fs (loop4): Directory bread(block 72) failed [ 135.999609][ T7979] FAT-fs (loop4): Directory bread(block 73) failed [ 136.023950][ T8007] loop3: detected capacity change from 0 to 4096 [ 136.025372][ T373] udevd[373]: symlink '../../loop4' '/dev/disk/by-diskseq/703.tmp-b7:4' failed: Read-only file system [ 136.052509][ T2061] udevd[2061]: symlink '../../loop1' '/dev/disk/by-diskseq/704.tmp-b7:1' failed: Read-only file system [ 136.083282][ T8007] EXT4-fs (loop3): Test dummy encryption mode enabled [ 136.092723][ T2061] udevd[2061]: symlink '../../loop1' '/dev/disk/by-diskseq/704.tmp-b7:1' failed: Read-only file system [ 136.099224][ T375] udevd[375]: symlink '../../loop3' '/dev/disk/by-diskseq/706.tmp-b7:3' failed: Read-only file system [ 136.133306][ T2061] udevd[2061]: symlink '../../loop1' '/dev/disk/by-diskseq/705.tmp-b7:1' failed: Read-only file system [ 136.139613][ T8007] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 136.172752][ T8017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3390'. [ 136.237885][ T8007] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #15: comm syz.3.3387: corrupted inode contents [ 136.340858][ T8007] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #15: comm syz.3.3387: mark_inode_dirty error [ 136.375272][ T8007] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #15: comm syz.3.3387: corrupted inode contents [ 136.462841][ T8007] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.3387: mark_inode_dirty error [ 136.465503][ T8039] loop1: detected capacity change from 0 to 256 [ 136.496797][ T8007] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #15: comm syz.3.3387: corrupted inode contents [ 136.518387][ T8007] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #15: comm syz.3.3387: mark_inode_dirty error [ 136.540013][ T8007] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #15: comm syz.3.3387: corrupted inode contents [ 136.559900][ T8039] exfat: Unknown parameter '017777777777777777777770xffffffffffffffff' [ 136.565397][ T8007] EXT4-fs error (device loop3): ext4_truncate:4310: inode #15: comm syz.3.3387: mark_inode_dirty error [ 136.599920][ T8007] EXT4-fs error (device loop3) in ext4_setattr:5657: Corrupt filesystem [ 136.691297][ T8053] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3408'. [ 136.806056][ T30] audit: type=1326 audit(1776075475.549:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.3.3413" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdedca7819 code=0x0 [ 136.842381][ T8067] loop1: detected capacity change from 0 to 256 [ 136.860059][ T8067] exfat: Deprecated parameter 'namecase' [ 136.869554][ T8067] exfat: Deprecated parameter 'namecase' [ 136.876637][ T8067] exfat: Deprecated parameter 'namecase' [ 136.923222][ T8067] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd6f0c8a0, utbl_chksum : 0xe619d30d) [ 136.957949][ T8019] F2FS-fs (loop2): Test dummy encryption mode enabled [ 136.986703][ T8019] F2FS-fs (loop2): invalid crc value [ 137.009153][ T8019] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.041041][ T8019] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 137.048545][ T8019] F2FS-fs (loop2): Start checkpoint disabled! [ 137.055769][ T8019] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 137.081139][ T8055] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 137.091907][ T8055] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 137.147007][ T8055] F2FS-fs (loop4): invalid crc value [ 137.153757][ T8055] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 137.198758][ T8055] F2FS-fs (loop4): Start checkpoint disabled! [ 137.222604][ T8055] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 137.230571][ T8055] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 137.325728][ T8094] EXT4-fs (loop1): Ignoring removed oldalloc option [ 137.351333][ T8094] EXT4-fs (loop1): Ignoring removed bh option [ 137.357566][ T8094] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.438892][ T8094] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 137.493229][ T8094] EXT4-fs (loop1): journaled quota format not specified [ 137.772725][ T8131] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.785865][ T8135] EXT4-fs (loop3): Ignoring removed nobh option [ 137.805468][ T8135] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 137.847169][ T8135] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,nobh,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 138.081281][ T8168] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 138.095161][ T8168] ext4 filesystem being mounted at /669/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.217530][ T8178] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.332480][ T8188] FAT-fs (loop3): Directory bread(block 64) failed [ 138.360129][ T8188] FAT-fs (loop3): Directory bread(block 65) failed [ 138.396701][ T8188] FAT-fs (loop3): Directory bread(block 66) failed [ 138.426793][ T8188] FAT-fs (loop3): Directory bread(block 67) failed [ 138.450433][ T8198] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 2: comm syz.4.3465: lblock 2 mapped to illegal pblock 2 (length 1) [ 138.482941][ T8188] FAT-fs (loop3): Directory bread(block 68) failed [ 138.506321][ T8188] FAT-fs (loop3): Directory bread(block 69) failed [ 138.518993][ T8198] EXT4-fs (loop4): Remounting filesystem read-only [ 138.525784][ T8188] FAT-fs (loop3): Directory bread(block 70) failed [ 138.538233][ T8188] FAT-fs (loop3): Directory bread(block 71) failed [ 138.540701][ T8198] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 138.545190][ T8188] FAT-fs (loop3): Directory bread(block 72) failed [ 138.560672][ T8188] FAT-fs (loop3): Directory bread(block 73) failed [ 138.595370][ T8198] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 48: comm syz.4.3465: lblock 0 mapped to illegal pblock 48 (length 1) [ 138.641088][ T8198] EXT4-fs (loop4): Remounting filesystem read-only [ 138.679783][ T8198] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 138.689310][ T8198] EXT4-fs error (device loop4): ext4_acquire_dquot:6225: comm syz.4.3465: Failed to acquire dquot type 0 [ 138.729865][ T8198] EXT4-fs (loop4): Remounting filesystem read-only [ 138.749716][ T8198] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 138.780881][ T8218] EXT4-fs (loop0): 1 truncate cleaned up [ 138.787791][ T8218] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,nojournal_checksum,usrjquota=,,errors=continue. Quota mode: none. [ 138.832061][ T8198] EXT4-fs (loop4): Remounting filesystem read-only [ 138.849767][ T8198] EXT4-fs error (device loop4): ext4_evict_inode:283: inode #11: comm syz.4.3465: mark_inode_dirty error [ 138.891314][ T8221] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 138.919864][ T8198] EXT4-fs (loop4): Remounting filesystem read-only [ 138.927335][ T8198] EXT4-fs warning (device loop4): ext4_evict_inode:286: couldn't mark inode dirty (err -117) [ 138.949773][ T8198] EXT4-fs (loop4): 1 orphan inode deleted [ 138.949843][ T311] EXT4-fs error (device loop4): ext4_map_blocks:630: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 138.956179][ T8198] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,init_itable,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000000800,stripe=0x0000000000000004,errors=remount-ro,. Quota mode: none. [ 139.055368][ T8198] EXT4-fs error (device loop4): __ext4_get_inode_loc:4358: comm syz.4.3465: Invalid inode table block 1 in block_group 0 [ 139.062700][ T311] EXT4-fs (loop4): Remounting filesystem read-only [ 139.080021][ T8198] EXT4-fs (loop4): Remounting filesystem read-only [ 139.087203][ T311] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 139.090188][ T8198] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 139.106794][ T311] EXT4-fs error (device loop4): ext4_release_dquot:6261: comm kworker/u4:3: Failed to release dquot type 0 [ 139.127408][ T8198] EXT4-fs (loop4): Remounting filesystem read-only [ 139.140386][ T311] EXT4-fs (loop4): Remounting filesystem read-only [ 139.172057][ T288] EXT4-fs error (device loop4): __ext4_get_inode_loc:4358: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 139.200218][ T288] EXT4-fs (loop4): Remounting filesystem read-only [ 139.212123][ T288] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 139.233739][ T288] EXT4-fs (loop4): Remounting filesystem read-only [ 139.242969][ T288] EXT4-fs error (device loop4): ext4_quota_off:6531: inode #3: comm syz-executor: mark_inode_dirty error [ 139.289886][ T288] EXT4-fs (loop4): Remounting filesystem read-only [ 139.336657][ T8246] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,min_batch_time=0x0000000000000007,noquota,journal_ioprio=0x0000000000000003,errors=remount-ro,nodioread_nolock,. Quota mode: none. [ 139.359868][ T8246] ext4 filesystem being mounted at /676/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.415260][ T30] audit: type=1401 audit(1776075478.159:759): op=fscreate invalid_context=9B59 [ 139.461021][ T30] audit: type=1326 audit(1776075478.199:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8261 comm="syz.4.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3b728819 code=0x7ffc0000 [ 139.465647][ T8246] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #15: comm syz.2.3485: lblock 0 mapped to illegal pblock 0 (length 1) [ 139.489995][ T30] audit: type=1326 audit(1776075478.199:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8261 comm="syz.4.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f6a3b728819 code=0x7ffc0000 [ 139.556639][ T30] audit: type=1326 audit(1776075478.199:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8261 comm="syz.4.3492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3b728819 code=0x7ffc0000 [ 139.673479][ T30] audit: type=1326 audit(1776075478.419:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.3.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdedca7819 code=0x7ffc0000 [ 139.719986][ T8246] EXT4-fs (loop2): Remounting filesystem read-only [ 139.722224][ T8292] netlink: 'syz.1.3505': attribute type 1 has an invalid length. [ 139.755619][ T30] audit: type=1326 audit(1776075478.419:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.3.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7efdedca7819 code=0x7ffc0000 [ 139.838566][ T30] audit: type=1326 audit(1776075478.419:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8285 comm="syz.3.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdedca7819 code=0x7ffc0000 [ 140.573266][ T8309] syz_tun: refused to change device tx_queue_len [ 140.594969][ T8309] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 140.837333][ T8291] set_capacity_and_notify: 15 callbacks suppressed [ 140.837350][ T8291] loop3: detected capacity change from 0 to 131072 [ 140.879923][ T8291] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 150994945) [ 140.898894][ T8291] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 140.904873][ T2061] udevd[2061]: symlink '../../loop3' '/dev/disk/by-diskseq/744.tmp-b7:3' failed: Read-only file system [ 140.920495][ T8291] F2FS-fs (loop3): invalid crc value [ 140.945722][ T8291] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.960721][ T2061] udevd[2061]: symlink '../../loop3' '/dev/disk/by-uuid/7d96804d-fc78-4d7b-ba96-ee448261d02c.tmp-b7:3' failed: Read-only file system [ 141.011246][ T8291] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 141.022971][ T8291] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 141.037566][ T2061] udevd[2061]: symlink '../../loop3' '/dev/disk/by-diskseq/744.tmp-b7:3' failed: Read-only file system [ 141.076663][ T373] udevd[373]: symlink '../../loop1' '/dev/disk/by-diskseq/732.tmp-b7:1' failed: Read-only file system [ 141.090501][ T2061] udevd[2061]: symlink '../../loop3' '/dev/disk/by-uuid/7d96804d-fc78-4d7b-ba96-ee448261d02c.tmp-b7:3' failed: Read-only file system [ 141.131865][ T373] udevd[373]: symlink '../../loop1' '/dev/disk/by-diskseq/732.tmp-b7:1' failed: Read-only file system [ 141.148362][ T8348] loop1: detected capacity change from 0 to 128 [ 141.187213][ T373] udevd[373]: symlink '../../loop3' '/dev/disk/by-diskseq/744.tmp-b7:3' failed: Read-only file system [ 141.202448][ T2061] udevd[2061]: symlink '../../loop1' '/dev/disk/by-diskseq/745.tmp-b7:1' failed: Read-only file system [ 141.219373][ T373] udevd[373]: symlink '../../loop3' '/dev/disk/by-diskseq/744.tmp-b7:3' failed: Read-only file system [ 141.285423][ T2061] udevd[2061]: symlink '../../loop1' '/dev/disk/by-diskseq/745.tmp-b7:1' failed: Read-only file system [ 141.577409][ T8304] loop2: detected capacity change from 0 to 131072 [ 141.582615][ T8364] loop3: detected capacity change from 0 to 512 [ 141.602691][ T8304] F2FS-fs (loop2): Test dummy encryption mode enabled [ 141.637416][ T8304] F2FS-fs (loop2): invalid crc value [ 141.676482][ T8304] F2FS-fs (loop2): Found nat_bits in checkpoint [ 141.703323][ T8370] loop0: detected capacity change from 0 to 256 [ 141.712144][ T8356] loop1: detected capacity change from 0 to 40427 [ 141.736937][ T8304] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 141.746383][ T8304] F2FS-fs (loop2): Start checkpoint disabled! [ 141.750704][ T8370] exfat: Deprecated parameter 'utf8' [ 141.759281][ T8356] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 141.767593][ T8356] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 141.768923][ T8375] xt_hashlimit: size too large, truncated to 1048576 [ 141.777042][ T8370] exfat: Deprecated parameter 'utf8' [ 141.791920][ T8356] F2FS-fs (loop1): invalid crc value [ 141.798874][ T8370] exfat: Deprecated parameter 'utf8' [ 141.804818][ T8304] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 141.831265][ T8370] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 141.851864][ T8356] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 141.873577][ T8356] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 141.925663][ T8356] F2FS-fs (loop1): recover fsync data on readonly fs [ 141.936906][ T8356] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 141.945363][ T8356] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 141.960150][ T8356] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 142.256679][ T8400] loop4: detected capacity change from 0 to 512 [ 142.272444][ T8403] loop1: detected capacity change from 0 to 512 [ 142.272690][ T8402] loop2: detected capacity change from 0 to 2048 [ 142.290755][ T8400] EXT4-fs (loop4): quotafile must be on filesystem root [ 142.316093][ T8405] loop0: detected capacity change from 0 to 512 [ 142.370200][ T8402] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.410861][ T8405] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 142.411339][ T8407] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 142.426082][ T8405] ext4 filesystem being mounted at /701/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.480770][ T8407] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #11: comm syz.4.3553: directory missing '..' [ 142.623294][ T8426] EXT4-fs (loop2): Test dummy encryption mode enabled [ 142.676903][ T8426] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 142.714940][ T8426] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #15: comm syz.2.3557: corrupted inode contents [ 142.730921][ T8426] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #15: comm syz.2.3557: mark_inode_dirty error [ 142.747160][ T8426] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #15: comm syz.2.3557: corrupted inode contents [ 142.775772][ T8426] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.3557: mark_inode_dirty error [ 142.810341][ T8426] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #15: comm syz.2.3557: corrupted inode contents [ 142.836513][ T8426] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.3557: mark_inode_dirty error [ 142.850501][ T8426] EXT4-fs error (device loop2): ext4_do_update_inode:5253: inode #15: comm syz.2.3557: corrupted inode contents [ 142.867437][ T8426] EXT4-fs error (device loop2): ext4_truncate:4310: inode #15: comm syz.2.3557: mark_inode_dirty error [ 142.882462][ T8426] EXT4-fs error (device loop2) in ext4_setattr:5657: Corrupt filesystem [ 142.883327][ T8449] usb usb8: usbfs: process 8449 (syz.0.3569) did not claim interface 0 before use [ 142.918443][ T8446] erofs: (device loop3): mounted with root inode @ nid 36. [ 142.943514][ T8446] attempt to access beyond end of device [ 142.943514][ T8446] loop3: rw=0, want=1342177288, limit=16 [ 142.956231][ T8453] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3571'. [ 143.046454][ T8457] FAT-fs (loop4): Directory bread(block 64) failed [ 143.054651][ T8457] FAT-fs (loop4): Directory bread(block 65) failed [ 143.071601][ T8457] FAT-fs (loop4): Directory bread(block 66) failed [ 143.079403][ T8457] FAT-fs (loop4): Directory bread(block 67) failed [ 143.089716][ T8457] FAT-fs (loop4): Directory bread(block 68) failed [ 143.097173][ T8457] FAT-fs (loop4): Directory bread(block 69) failed [ 143.126494][ T8457] FAT-fs (loop4): Directory bread(block 70) failed [ 143.139335][ T8463] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 143.163265][ T8457] FAT-fs (loop4): Directory bread(block 71) failed [ 143.173078][ T8463] ext4 filesystem being mounted at /681/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.190033][ T8457] FAT-fs (loop4): Directory bread(block 72) failed [ 143.197579][ T8457] FAT-fs (loop4): Directory bread(block 73) failed [ 143.359794][ T26] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 143.429398][ T8493] EXT4-fs (loop4): Test dummy encryption mode enabled [ 143.469110][ T8493] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 143.508135][ T8502] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 143.545176][ T8507] FAT-fs (loop0): Directory bread(block 64) failed [ 143.557852][ T8507] FAT-fs (loop0): Directory bread(block 65) failed [ 143.558199][ T8493] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #15: comm syz.4.3583: corrupted inode contents [ 143.570600][ T8507] FAT-fs (loop0): Directory bread(block 66) failed [ 143.585874][ T8507] FAT-fs (loop0): Directory bread(block 67) failed [ 143.586462][ T8493] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #15: comm syz.4.3583: mark_inode_dirty error [ 143.596684][ T8507] FAT-fs (loop0): Directory bread(block 68) failed [ 143.608224][ T8493] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #15: comm syz.4.3583: corrupted inode contents [ 143.613154][ T8507] FAT-fs (loop0): Directory bread(block 69) failed [ 143.626782][ T8493] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.3583: mark_inode_dirty error [ 143.632447][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 143.644447][ T8507] FAT-fs (loop0): Directory bread(block 70) failed [ 143.657319][ T8507] FAT-fs (loop0): Directory bread(block 71) failed [ 143.665486][ T8507] FAT-fs (loop0): Directory bread(block 72) failed [ 143.674396][ T8493] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #15: comm syz.4.3583: corrupted inode contents [ 143.674476][ T8507] FAT-fs (loop0): Directory bread(block 73) failed [ 143.688497][ T8493] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.3583: mark_inode_dirty error [ 143.744879][ T8493] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #15: comm syz.4.3583: corrupted inode contents [ 143.767775][ T8493] EXT4-fs error (device loop4): ext4_truncate:4310: inode #15: comm syz.4.3583: mark_inode_dirty error [ 143.780591][ T26] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.813805][ T26] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.813953][ T8493] EXT4-fs error (device loop4) in ext4_setattr:5657: Corrupt filesystem [ 143.836570][ T26] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.876250][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 143.896888][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 143.927402][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.953259][ T26] usb 4-1: config 0 descriptor?? [ 144.421429][ T8544] FAT-fs (loop2): Directory bread(block 64) failed [ 144.429762][ T8544] FAT-fs (loop2): Directory bread(block 65) failed [ 144.437855][ T8544] FAT-fs (loop2): Directory bread(block 66) failed [ 144.445948][ T8544] FAT-fs (loop2): Directory bread(block 67) failed [ 144.456215][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.466139][ T8544] FAT-fs (loop2): Directory bread(block 68) failed [ 144.475820][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.485094][ T8544] FAT-fs (loop2): Directory bread(block 69) failed [ 144.492765][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.500928][ T8544] FAT-fs (loop2): Directory bread(block 70) failed [ 144.508008][ T8544] FAT-fs (loop2): Directory bread(block 71) failed [ 144.515786][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.523237][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.523252][ T8544] FAT-fs (loop2): Directory bread(block 72) failed [ 144.530590][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.538361][ T8544] FAT-fs (loop2): Directory bread(block 73) failed [ 144.545295][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.545322][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.545343][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.579542][ T8514] F2FS-fs (loop1): Test dummy encryption mode enabled [ 144.597239][ T8514] F2FS-fs (loop1): invalid crc value [ 144.619905][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.629455][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.649748][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.656213][ T8514] F2FS-fs (loop1): Found nat_bits in checkpoint [ 144.666550][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.679720][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.689578][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.709820][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.723603][ T8514] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 144.729794][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.749702][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.757871][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.775913][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.790367][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.803138][ T8514] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3598'. [ 144.809770][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.814501][ T8514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.835738][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.887404][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.915769][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.949955][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.959378][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 144.979698][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 145.009720][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 145.017071][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 145.031313][ T8565] netlink: 'syz.2.3621': attribute type 12 has an invalid length. [ 145.039688][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 145.047289][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 145.069736][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 145.079726][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 145.102450][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 145.110698][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 145.131020][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 145.141668][ T8569] EXT4-fs (loop1): Test dummy encryption mode enabled [ 145.150539][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 145.183450][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 145.186844][ T8569] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 145.209759][ T26] lg-g15 0003:046D:C22D.0019: unknown main item tag 0x0 [ 145.218814][ T26] lg-g15 0003:046D:C22D.0019: hidraw0: USB HID vff.fc Device [HID 046d:c22d] on usb-dummy_hcd.3-1/input0 [ 145.218900][ T1630] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 145.258676][ T26] usb 4-1: USB disconnect, device number 12 [ 145.292782][ T8577] fido_id[8577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 145.311260][ T8581] exfat: Deprecated parameter 'utf8' [ 145.318710][ T8581] exfat: Deprecated parameter 'utf8' [ 145.335117][ T8581] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 145.340324][ T8569] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #15: comm syz.1.3615: corrupted inode contents [ 145.340539][ T8569] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #15: comm syz.1.3615: mark_inode_dirty error [ 145.340781][ T8569] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #15: comm syz.1.3615: corrupted inode contents [ 145.340936][ T8569] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.3615: mark_inode_dirty error [ 145.341070][ T8569] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #15: comm syz.1.3615: corrupted inode contents [ 145.341201][ T8569] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #15: comm syz.1.3615: mark_inode_dirty error [ 145.341342][ T8569] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #15: comm syz.1.3615: corrupted inode contents [ 145.341484][ T8569] EXT4-fs error (device loop1): ext4_truncate:4310: inode #15: comm syz.1.3615: mark_inode_dirty error [ 145.341617][ T8569] EXT4-fs error (device loop1) in ext4_setattr:5657: Corrupt filesystem [ 145.552697][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 145.552714][ T30] audit: type=1400 audit(145.516:781): avc: denied { getattr } for pid=8591 comm="syz.1.3632" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=42489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 145.630136][ T8596] netlink: 'syz.3.3633': attribute type 12 has an invalid length. [ 145.642730][ T8600] exfat: Deprecated parameter 'utf8' [ 145.684997][ T8600] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 145.719889][ T1630] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.729750][ T30] audit: type=1400 audit(145.686:782): avc: denied { getopt } for pid=8613 comm="syz.3.3642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.755951][ T1630] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 145.784787][ T30] audit: type=1400 audit(145.716:783): avc: denied { checkpoint_restore } for pid=8615 comm="syz.1.3644" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 145.799772][ T1630] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 145.829344][ T1630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.843228][ T1630] usb 5-1: config 0 descriptor?? [ 145.867830][ T8602] set_capacity_and_notify: 14 callbacks suppressed [ 145.867845][ T8602] loop2: detected capacity change from 0 to 40427 [ 145.890939][ T8620] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 145.907666][ T8620] exFAT-fs (loop3): hint_cluster is invalid (521) [ 145.917984][ T8620] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000208) [ 145.928674][ T8620] exFAT-fs (loop3): Filesystem has been set read-only [ 145.935619][ T8602] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 145.938748][ T2061] udevd[2061]: symlink '../../loop3' '/dev/disk/by-uuid/1234-1234.tmp-b7:0' failed: Read-only file system [ 145.961595][ T303] udevd[303]: symlink '../../loop1' '/dev/disk/by-diskseq/786.tmp-b7:1' failed: Read-only file system [ 145.961878][ T375] udevd[375]: symlink '../../loop2' '/dev/disk/by-diskseq/791.tmp-b7:2' failed: Read-only file system [ 145.974433][ T8602] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 145.991547][ T8627] loop1: detected capacity change from 0 to 512 [ 145.999850][ T321] udevd[321]: symlink '../../loop3' '/dev/disk/by-diskseq/789.tmp-b7:3' failed: Read-only file system [ 146.004148][ T8627] EXT4-fs (loop1): quotafile must be on filesystem root [ 146.014906][ T8620] exFAT-fs (loop3): error, failed to bmap (inode : ffff88812914b040 iblock : 9, err : -5) [ 146.033194][ T2061] udevd[2061]: symlink '../../loop0' '/dev/disk/by-diskseq/788.tmp-b7:0' failed: Read-only file system [ 146.033874][ T375] udevd[375]: symlink '../../loop2' '/dev/disk/by-diskseq/791.tmp-b7:2' failed: Read-only file system [ 146.048363][ T321] udevd[321]: symlink '../../loop3' '/dev/disk/by-uuid/1234-1234.tmp-b7:3' failed: Read-only file system [ 146.074063][ T8602] F2FS-fs (loop2): invalid crc value [ 146.078138][ T321] udevd[321]: symlink '../../loop3' '/dev/disk/by-diskseq/789.tmp-b7:3' failed: Read-only file system [ 146.083393][ T2061] udevd[2061]: symlink '../../loop0' '/dev/disk/by-diskseq/788.tmp-b7:0' failed: Read-only file system [ 146.095592][ T8620] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000208) [ 146.121400][ T8620] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000208) [ 146.122788][ T8602] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 146.133541][ T321] udevd[321]: symlink '../../loop3' '/dev/disk/by-uuid/1234-1234.tmp-b7:3' failed: Read-only file system [ 146.146279][ T8602] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 146.199774][ T8602] F2FS-fs (loop2): recover fsync data on readonly fs [ 146.208604][ T8602] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 146.216852][ T8602] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 146.282249][ T8630] netlink: 'syz.1.3650': attribute type 12 has an invalid length. [ 146.291058][ T8602] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 146.341845][ T1630] zydacron 0003:13EC:0006.001A: unknown main item tag 0x7 [ 146.356669][ T8647] loop1: detected capacity change from 0 to 1024 [ 146.363988][ T1630] zydacron 0003:13EC:0006.001A: unknown main item tag 0x1 [ 146.382896][ T1630] zydacron 0003:13EC:0006.001A: unknown main item tag 0x2 [ 146.394969][ T1630] zydacron 0003:13EC:0006.001A: unknown main item tag 0x4 [ 146.404462][ T1630] zydacron 0003:13EC:0006.001A: unexpected long global item [ 146.415274][ T1630] zydacron 0003:13EC:0006.001A: parse failed [ 146.422584][ T1630] zydacron: probe of 0003:13EC:0006.001A failed with error -22 [ 146.433135][ T8647] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,nogrpid,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,jqfmt=vfsold,bsdgroups,init_itable,,errors=continue. Quota mode: writeback. [ 146.520584][ T8657] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3662'. [ 146.556868][ T1630] usb 5-1: USB disconnect, device number 20 [ 146.568173][ T8661] loop2: detected capacity change from 0 to 256 [ 146.578448][ T8661] exfat: Unknown parameter '18446744073709551615184467440737095516150xffffffffffffffff' [ 146.605218][ T8662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3661'. [ 146.817769][ T8651] loop3: detected capacity change from 0 to 131072 [ 146.881415][ T8651] F2FS-fs (loop3): Test dummy encryption mode enabled [ 146.889385][ T8651] F2FS-fs (loop3): invalid crc value [ 146.896470][ T8651] F2FS-fs (loop3): Found nat_bits in checkpoint [ 146.922909][ T8651] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 148.868413][ T8687] netlink: 'syz.0.3666': attribute type 12 has an invalid length. [ 148.945800][ T30] audit: type=1326 audit(148.906:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.4.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3b728819 code=0x7ffc0000 [ 148.984124][ T8705] bridge0: port 3(veth0_macvtap) entered blocking state [ 149.013049][ T8705] bridge0: port 3(veth0_macvtap) entered disabled state [ 149.022226][ T30] audit: type=1326 audit(148.916:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.4.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3b728819 code=0x7ffc0000 [ 149.063991][ T8705] device veth0_macvtap entered promiscuous mode [ 149.072543][ T8705] bridge0: port 3(veth0_macvtap) entered blocking state [ 149.080374][ T8705] bridge0: port 3(veth0_macvtap) entered forwarding state [ 149.096408][ T30] audit: type=1326 audit(148.916:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.4.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f6a3b728819 code=0x7ffc0000 [ 149.125428][ T8708] tipc: New replicast peer: 255.255.255.255 [ 149.142369][ T8708] tipc: Enabled bearer , priority 5 [ 149.151631][ T30] audit: type=1400 audit(148.936:787): avc: denied { mount } for pid=8702 comm="syz.1.3680" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 149.223450][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3694'. [ 149.258814][ T8736] loop1: detected capacity change from 0 to 512 [ 149.267345][ T30] audit: type=1326 audit(149.166:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.4.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3b728819 code=0x7ffc0000 [ 149.296063][ T30] audit: type=1326 audit(149.166:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.4.3681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3b728819 code=0x7ffc0000 [ 149.361854][ T8736] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.3698: inode #1: comm syz.1.3698: iget: illegal inode # [ 149.369966][ T8739] netlink: 'syz.4.3695': attribute type 12 has an invalid length. [ 149.379841][ T8736] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.3698: error while reading EA inode 1 err=-117 [ 149.403550][ T8736] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.3698: inode #1: comm syz.1.3698: iget: illegal inode # [ 149.403704][ T8736] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.3698: error while reading EA inode 1 err=-117 [ 149.437568][ T8736] EXT4-fs (loop1): 1 orphan inode deleted [ 149.444077][ T8736] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 149.520296][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3707'. [ 149.679172][ T8784] loop0: detected capacity change from 0 to 512 [ 149.702427][ T8789] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3718'. [ 149.712568][ T8784] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 149.726061][ T8787] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3720'. [ 149.738719][ T8787] ..0ªî{X¹¦: renamed from gretap0 [ 149.744903][ T8787] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 149.762478][ T8795] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 149.781309][ T8784] EXT4-fs error (device loop0): mb_free_blocks:1874: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 149.797014][ T8784] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #11: comm syz.0.3719: corrupted inode contents [ 149.822357][ T8784] EXT4-fs error (device loop0): ext4_dirty_inode:6089: inode #11: comm syz.0.3719: mark_inode_dirty error [ 149.837359][ T8784] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.3719: invalid indirect mapped block 1 (level 1) [ 149.851975][ T8784] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #11: comm syz.0.3719: corrupted inode contents [ 149.865265][ T8784] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 149.874498][ T8784] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #11: comm syz.0.3719: corrupted inode contents [ 149.876030][ T8804] netlink: 'syz.2.3726': attribute type 12 has an invalid length. [ 149.887657][ T8784] EXT4-fs error (device loop0): ext4_truncate:4310: inode #11: comm syz.0.3719: mark_inode_dirty error [ 149.907683][ T8784] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 149.923155][ T8784] EXT4-fs (loop0): 1 truncate cleaned up [ 149.929205][ T8784] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.037696][ T30] audit: type=1400 audit(149.996:790): avc: denied { mount } for pid=8824 comm="syz.0.3737" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 150.069747][ T26] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 150.085539][ T8827] loop4: detected capacity change from 0 to 16 [ 150.130776][ T8827] erofs: (device loop4): mounted with root inode @ nid 36. [ 150.464599][ T8827] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 151.229632][ C0] sched: RT throttling activated [ 151.230154][ T8827] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 151.239914][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 151.251403][ T8827] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 151.266708][ T8827] overlayfs: failed to get redirect (-117) [ 151.273605][ T8827] overlayfs: failed to resolve './file0/file0': -117 [ 151.288894][ T2061] udevd[2061]: symlink '../../loop2' '/dev/disk/by-diskseq/799.tmp-b7:2' failed: Read-only file system [ 151.320729][ T373] udevd[373]: symlink '../../loop0' '/dev/disk/by-diskseq/805.tmp-b7:0' failed: Read-only file system [ 151.365206][ T2061] udevd[2061]: symlink '../../loop0' '/dev/disk/by-diskseq/805.tmp-b7:0' failed: Read-only file system [ 151.379785][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.396860][ T8850] loop0: detected capacity change from 0 to 512 [ 151.411990][ T373] udevd[373]: symlink '../../loop4' '/dev/disk/by-diskseq/806.tmp-b7:4' failed: Read-only file system [ 151.413414][ T8850] EXT4-fs (loop0): Ignoring removed bh option [ 151.429058][ T375] udevd[375]: symlink '../../loop3' '/dev/disk/by-diskseq/801.tmp-b7:3' failed: Read-only file system [ 151.444101][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.450924][ T321] udevd[321]: symlink '../../loop2' '/dev/disk/by-diskseq/799.tmp-b7:2' failed: Read-only file system [ 151.466395][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 151.483188][ T26] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 151.493561][ T8850] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 151.495495][ T373] udevd[373]: symlink '../../loop4' '/dev/disk/by-diskseq/806.tmp-b7:4' failed: Read-only file system [ 151.519528][ T375] udevd[375]: symlink '../../loop2' '/dev/disk/by-diskseq/799.tmp-b7:2' failed: Read-only file system [ 151.533063][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.533822][ T2061] udevd[2061]: symlink '../../loop0' '/dev/disk/by-diskseq/808.tmp-b7:0' failed: Read-only file system [ 151.545063][ T26] usb 2-1: config 0 descriptor?? [ 151.558993][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 151.559005][ T30] audit: type=1326 audit(151.516:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8862 comm="syz.4.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3b728819 code=0x7ffc0000 [ 151.561889][ T373] udevd[373]: symlink '../../loop4' '/dev/disk/by-diskseq/807.tmp-b7:4' failed: Read-only file system [ 151.565724][ T30] audit: type=1326 audit(151.516:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8862 comm="syz.4.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3b728819 code=0x7ffc0000 [ 151.595102][ T8850] EXT4-fs (loop0): 1 truncate cleaned up [ 151.638212][ T30] audit: type=1326 audit(151.596:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8862 comm="syz.4.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3b728819 code=0x7ffc0000 [ 151.654123][ T8864] loop4: detected capacity change from 0 to 1024 [ 151.668903][ T30] audit: type=1326 audit(151.596:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8862 comm="syz.4.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3b728819 code=0x7ffc0000 [ 151.678429][ T8850] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 151.693292][ T30] audit: type=1326 audit(151.616:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8862 comm="syz.4.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6a3b728819 code=0x7ffc0000 [ 151.735439][ T30] audit: type=1326 audit(151.616:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8862 comm="syz.4.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6a3b728582 code=0x7ffc0000 [ 151.760384][ T30] audit: type=1326 audit(151.616:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8862 comm="syz.4.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6a3b6e904e code=0x7ffc0000 [ 151.784766][ T30] audit: type=1326 audit(151.616:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8862 comm="syz.4.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6a3b728647 code=0x7ffc0000 [ 151.812152][ T30] audit: type=1326 audit(151.616:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8862 comm="syz.4.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a3b6e904e code=0x7ffc0000 [ 151.870977][ T8864] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,minixdf,,errors=continue. Quota mode: none. [ 151.899934][ T30] audit: type=1326 audit(151.616:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8862 comm="syz.4.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a3b7284ab code=0x7ffc0000 [ 151.926212][ T8878] loop2: detected capacity change from 0 to 256 [ 151.952798][ T8882] netlink: 'syz.0.3772': attribute type 3 has an invalid length. [ 151.981269][ T8878] FAT-fs (loop2): Directory bread(block 64) failed [ 152.006817][ T8878] FAT-fs (loop2): Directory bread(block 65) failed [ 152.024542][ T8878] FAT-fs (loop2): Directory bread(block 66) failed [ 152.024582][ T8878] FAT-fs (loop2): Directory bread(block 67) failed [ 152.024617][ T8878] FAT-fs (loop2): Directory bread(block 68) failed [ 152.024635][ T8878] FAT-fs (loop2): Directory bread(block 69) failed [ 152.024754][ T8878] FAT-fs (loop2): Directory bread(block 70) failed [ 152.024772][ T8878] FAT-fs (loop2): Directory bread(block 71) failed [ 152.024804][ T8878] FAT-fs (loop2): Directory bread(block 72) failed [ 152.024822][ T8878] FAT-fs (loop2): Directory bread(block 73) failed [ 152.060931][ T26] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 152.060968][ T26] microsoft 0003:045E:07DA.001B: ignoring exceeding usage max [ 152.063992][ T26] microsoft 0003:045E:07DA.001B: implement() called with n (56) > 32! (kworker/1:0) [ 152.147837][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3773'. [ 152.211566][ T8912] netlink: 'syz.3.3777': attribute type 3 has an invalid length. [ 152.271218][ T26] microsoft 0003:045E:07DA.001B: No inputs registered, leaving [ 152.285467][ T26] microsoft 0003:045E:07DA.001B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 152.318604][ T26] microsoft 0003:045E:07DA.001B: no inputs found [ 152.329740][ T26] microsoft 0003:045E:07DA.001B: could not initialize ff, continuing anyway [ 152.371528][ T26] usb 2-1: USB disconnect, device number 15 [ 152.395687][ T8925] fido_id[8925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 152.571590][ T8936] netlink: 'syz.3.3787': attribute type 1 has an invalid length. [ 152.755853][ T8955] netlink: 'syz.2.3796': attribute type 5 has an invalid length. [ 152.917219][ T8980] bridge0: port 1(veth0_macvtap) entered blocking state [ 152.935377][ T8980] bridge0: port 1(veth0_macvtap) entered disabled state [ 152.948371][ T8980] device veth0_macvtap entered promiscuous mode [ 152.966888][ T8980] bridge0: port 1(veth0_macvtap) entered blocking state [ 152.974196][ T8980] bridge0: port 1(veth0_macvtap) entered forwarding state [ 153.171926][ T9013] loop3: detected capacity change from 0 to 512 [ 153.206804][ T9013] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.3824: inode has both inline data and extents flags [ 153.259920][ T9013] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.3824: couldn't read orphan inode 15 (err -117) [ 153.260393][ T9023] loop1: detected capacity change from 0 to 128 [ 153.272927][ T9013] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.281820][ T8986] loop2: detected capacity change from 0 to 40427 [ 153.344286][ T8986] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 153.354220][ T9027] loop3: detected capacity change from 0 to 512 [ 153.365705][ T9023] EXT4-fs (loop1): Test dummy encryption mode enabled [ 153.380010][ T8986] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 153.395188][ T9027] EXT4-fs (loop3): 1 truncate cleaned up [ 153.404242][ T9027] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 153.426510][ T9023] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nodioread_nolock,errors=continue,inlinecrypt,,errors=continue. Quota mode: none. [ 153.471597][ T8986] F2FS-fs (loop2): Found nat_bits in checkpoint [ 153.564812][ T8986] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 153.585047][ T8986] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 153.767554][ T9065] loop1: detected capacity change from 0 to 512 [ 153.805959][ T9065] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 153.837871][ T9065] EXT4-fs error (device loop1): mb_free_blocks:1874: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 153.853646][ T9065] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #11: comm syz.1.3845: corrupted inode contents [ 153.861685][ T9074] loop3: detected capacity change from 0 to 256 [ 153.873062][ T9065] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #11: comm syz.1.3845: mark_inode_dirty error [ 153.890251][ T9065] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.3845: invalid indirect mapped block 1 (level 1) [ 153.914183][ T9074] FAT-fs (loop3): Directory bread(block 64) failed [ 153.921592][ T9065] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #11: comm syz.1.3845: corrupted inode contents [ 153.935011][ T9074] FAT-fs (loop3): Directory bread(block 65) failed [ 153.942834][ T9065] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 153.952097][ T9074] FAT-fs (loop3): Directory bread(block 66) failed [ 153.959080][ T9065] EXT4-fs error (device loop1): ext4_do_update_inode:5253: inode #11: comm syz.1.3845: corrupted inode contents [ 153.966825][ T9074] FAT-fs (loop3): Directory bread(block 67) failed [ 153.972341][ T9065] EXT4-fs error (device loop1): ext4_truncate:4310: inode #11: comm syz.1.3845: mark_inode_dirty error [ 153.988870][ T9074] FAT-fs (loop3): Directory bread(block 68) failed [ 153.996389][ T9074] FAT-fs (loop3): Directory bread(block 69) failed [ 154.003099][ T9074] FAT-fs (loop3): Directory bread(block 70) failed [ 154.006733][ T9065] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 154.009782][ T9074] FAT-fs (loop3): Directory bread(block 71) failed [ 154.023606][ T9065] EXT4-fs (loop1): 1 truncate cleaned up [ 154.029861][ T9074] FAT-fs (loop3): Directory bread(block 72) failed [ 154.038474][ T9065] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 154.038592][ T9074] FAT-fs (loop3): Directory bread(block 73) failed [ 156.267995][ T9093] loop0: detected capacity change from 0 to 2048 [ 156.292996][ T373] udevd[373]: symlink '../../loop4' '/dev/disk/by-diskseq/812.tmp-b7:4' failed: Read-only file system [ 156.314468][ T2061] udevd[2061]: symlink '../../loop0' '/dev/disk/by-diskseq/826.tmp-b7:0' failed: Read-only file system [ 156.330296][ T373] udevd[373]: symlink '../../loop2' '/dev/disk/by-diskseq/821.tmp-b7:2' failed: Read-only file system [ 156.337742][ T2061] udevd[2061]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 156.360738][ T9093] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 156.387357][ T2061] udevd[2061]: symlink '../../loop0' '/dev/disk/by-diskseq/826.tmp-b7:0' failed: Read-only file system [ 156.404989][ T2061] udevd[2061]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 156.411208][ T373] udevd[373]: symlink '../../loop3' '/dev/disk/by-diskseq/824.tmp-b7:3' failed: Read-only file system [ 156.443426][ T2061] udevd[2061]: symlink '../../loop2' '/dev/disk/by-diskseq/821.tmp-b7:2' failed: Read-only file system [ 156.446412][ T375] udevd[375]: symlink '../../loop4' '/dev/disk/by-diskseq/812.tmp-b7:4' failed: Read-only file system [ 156.494065][ T2061] udevd[2061]: symlink '../../loop2' '/dev/disk/by-diskseq/821.tmp-b7:2' failed: Read-only file system [ 156.517504][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3868'. [ 156.523606][ T9122] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3869'. [ 156.537039][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3868'. [ 156.614346][ T9132] loop0: detected capacity change from 0 to 512 [ 156.702685][ T9132] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 156.754345][ T9132] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.3874: iget: bogus i_mode (2) [ 156.770265][ T9146] loop3: detected capacity change from 0 to 8192 [ 156.820054][ T9132] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3874: couldn't read orphan inode 15 (err -117) [ 156.836803][ T9151] loop4: detected capacity change from 0 to 256 [ 156.854800][ T9132] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 156.872226][ T9146] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.947287][ T9132] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 156.979789][ T9132] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 3: comm syz.0.3874: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 157.052207][ T9084] loop1: detected capacity change from 0 to 131072 [ 157.052946][ T9153] netlink: 'syz.4.3885': attribute type 2 has an invalid length. [ 157.077227][ T9084] F2FS-fs (loop1): invalid crc value [ 157.117521][ T9084] F2FS-fs (loop1): Found nat_bits in checkpoint [ 157.197566][ T9084] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 157.302606][ T9136] loop2: detected capacity change from 0 to 131072 [ 157.324403][ T9136] F2FS-fs (loop2): Test dummy encryption mode enabled [ 157.350013][ T26] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 157.358444][ T9136] F2FS-fs (loop2): invalid crc value [ 157.381933][ T9136] F2FS-fs (loop2): Found nat_bits in checkpoint [ 157.465907][ T9136] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 157.508376][ T9136] fscrypt (loop2, inode 3): Unsupported encryption flags (0x08) [ 157.525127][ T9188] loop1: detected capacity change from 0 to 512 [ 157.577685][ T9188] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 157.719873][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.842788][ T9181] loop4: detected capacity change from 0 to 131072 [ 157.854602][ T9181] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 157.877336][ T9181] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 157.886782][ T9181] F2FS-fs (loop4): invalid crc value [ 157.889780][ T26] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 157.906921][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.909073][ T9181] F2FS-fs (loop4): Found nat_bits in checkpoint [ 157.915996][ T26] usb 4-1: Product: syz [ 157.927104][ T26] usb 4-1: Manufacturer: syz [ 157.931914][ T26] usb 4-1: SerialNumber: syz [ 157.946677][ T9181] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 157.955017][ T9181] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 158.110431][ T9216] loop2: detected capacity change from 0 to 16 [ 158.159878][ T9216] erofs: (device loop2): mounted with root inode @ nid 36. [ 158.189787][ T9216] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=86 [ 158.193656][ T9220] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3910'. [ 158.199049][ T9216] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=86 [ 158.262401][ T9228] loop4: detected capacity change from 0 to 256 [ 158.318720][ T9228] FAT-fs (loop4): Directory bread(block 64) failed [ 158.325598][ T9228] FAT-fs (loop4): Directory bread(block 65) failed [ 158.332593][ T9228] FAT-fs (loop4): Directory bread(block 66) failed [ 158.345523][ T9228] FAT-fs (loop4): Directory bread(block 67) failed [ 158.352619][ T9228] FAT-fs (loop4): Directory bread(block 68) failed [ 158.359248][ T9228] FAT-fs (loop4): Directory bread(block 69) failed [ 158.366405][ T9228] FAT-fs (loop4): Directory bread(block 70) failed [ 158.373927][ T9228] FAT-fs (loop4): Directory bread(block 71) failed [ 158.381521][ T9228] FAT-fs (loop4): Directory bread(block 72) failed [ 158.388336][ T9228] FAT-fs (loop4): Directory bread(block 73) failed [ 158.512670][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 158.512685][ T30] audit: type=1400 audit(158.476:832): avc: denied { bind } for pid=9245 comm="syz.4.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.569671][ T30] audit: type=1400 audit(158.526:833): avc: denied { listen } for pid=9253 comm="syz.4.3926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.622595][ T9265] loop4: detected capacity change from 0 to 512 [ 158.659764][ T26] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 158.666169][ T26] cdc_ncm 4-1:1.0: bind() failure [ 158.673128][ T26] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 158.680301][ T26] cdc_ncm 4-1:1.1: bind() failure [ 158.687212][ T26] usb 4-1: USB disconnect, device number 13 [ 158.700398][ T9265] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 158.705166][ T9271] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 158.732820][ T9271] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 127 (only 1 groups) [ 158.743751][ T9265] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.3930: bad orphan inode 131083 [ 158.765426][ T9265] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000002,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 159.145356][ T9278] F2FS-fs (loop1): invalid crc value [ 159.157652][ T9278] F2FS-fs (loop1): Found nat_bits in checkpoint [ 159.169753][ T1630] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 159.199148][ T30] audit: type=1400 audit(159.156:834): avc: denied { execstack } for pid=9284 comm="syz.2.3937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 159.229279][ T9278] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 159.249528][ T9278] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 159.541890][ T9326] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 159.555539][ T9326] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.3965: bad orphan inode 131083 [ 159.567240][ T9326] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 159.629783][ T1630] usb 5-1: unable to get BOS descriptor or descriptor too short [ 159.709793][ T1630] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 159.879830][ T1630] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 159.889414][ T1630] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.897917][ T1630] usb 5-1: Product: syz [ 159.902376][ T1630] usb 5-1: Manufacturer: syz [ 159.907048][ T1630] usb 5-1: SerialNumber: syz [ 160.230522][ T1630] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 160.249779][ T1630] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 160.258880][ T1630] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 160.279752][ T1630] usb 5-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 160.315775][ T1630] usb 5-1: USB disconnect, device number 21 [ 160.471950][ T9350] FAT-fs (loop2): Directory bread(block 64) failed [ 160.489531][ T9350] FAT-fs (loop2): Directory bread(block 65) failed [ 160.502017][ T9350] FAT-fs (loop2): Directory bread(block 66) failed [ 160.519088][ T9350] FAT-fs (loop2): Directory bread(block 67) failed [ 160.534357][ T9350] FAT-fs (loop2): Directory bread(block 68) failed [ 160.549704][ T9350] FAT-fs (loop2): Directory bread(block 69) failed [ 160.559962][ T9350] FAT-fs (loop2): Directory bread(block 70) failed [ 160.571415][ T9334] F2FS-fs (loop3): invalid crc value [ 160.577149][ T9350] FAT-fs (loop2): Directory bread(block 71) failed [ 160.593867][ T9350] FAT-fs (loop2): Directory bread(block 72) failed [ 160.602674][ T9350] FAT-fs (loop2): Directory bread(block 73) failed [ 160.620290][ T9334] F2FS-fs (loop3): Found nat_bits in checkpoint [ 160.665829][ T9334] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 160.960453][ T9348] F2FS-fs (loop1): invalid crc value [ 160.966740][ T9350] attempt to access beyond end of device [ 160.966740][ T9350] loop2: rw=2049, want=1768, limit=256 [ 160.992150][ T9350] attempt to access beyond end of device [ 160.992150][ T9350] loop2: rw=2049, want=1928, limit=256 [ 161.011661][ T9348] F2FS-fs (loop1): Found nat_bits in checkpoint [ 161.030012][ T9350] attempt to access beyond end of device [ 161.030012][ T9350] loop2: rw=2049, want=12520, limit=256 [ 161.073338][ T9348] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 161.092018][ T9348] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 161.092203][ T9350] attempt to access beyond end of device [ 161.092203][ T9350] loop2: rw=2049, want=19776, limit=256 [ 161.186875][ T9350] attempt to access beyond end of device [ 161.186875][ T9350] loop2: rw=2049, want=24592, limit=256 [ 161.230283][ T9350] attempt to access beyond end of device [ 161.230283][ T9350] loop2: rw=2049, want=28248, limit=256 [ 161.259273][ T9350] attempt to access beyond end of device [ 161.259273][ T9350] loop2: rw=2049, want=31952, limit=256 [ 161.318442][ T9350] attempt to access beyond end of device [ 161.318442][ T9350] loop2: rw=2049, want=33800, limit=256 [ 161.431523][ T311] attempt to access beyond end of device [ 161.431523][ T311] loop2: rw=1, want=1296, limit=256 [ 161.495824][ T2061] udevd[2061]: symlink '../../loop1' '/dev/disk/by-diskseq/858.tmp-b7:1' failed: Read-only file system [ 161.501223][ T9389] EXT4-fs (loop1): Ignoring removed oldalloc option [ 161.515972][ T9389] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 161.527977][ T2061] udevd[2061]: symlink '../../loop1' '/dev/disk/by-diskseq/859.tmp-b7:1' failed: Read-only file system [ 161.541063][ T2061] udevd[2061]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 161.565182][ T9389] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,user_xattr,inlinecrypt,oldalloc,data_err=ignore,nojournal_checksum,errors=remount-ro,mblk_io_submit,noblock_validity,noinit_itable,nombcache,norecovery,. Quota mode: none. [ 161.605237][ T2061] udevd[2061]: symlink '../../loop1' '/dev/disk/by-diskseq/859.tmp-b7:1' failed: Read-only file system [ 161.642388][ T2061] udevd[2061]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 161.666411][ T373] udevd[373]: symlink '../../loop2' '/dev/disk/by-diskseq/854.tmp-b7:2' failed: Read-only file system [ 161.687039][ T375] udevd[375]: symlink '../../loop4' '/dev/disk/by-diskseq/848.tmp-b7:4' failed: Read-only file system [ 161.703411][ T373] udevd[373]: symlink '../../loop2' '/dev/disk/by-diskseq/854.tmp-b7:2' failed: Read-only file system [ 161.720148][ T2061] udevd[2061]: symlink '../../loop1' '/dev/disk/by-diskseq/859.tmp-b7:1' failed: Read-only file system [ 161.745938][ T373] udevd[373]: symlink '../../loop2' '/dev/disk/by-diskseq/860.tmp-b7:2' failed: Read-only file system [ 161.780762][ T30] audit: type=1400 audit(161.746:835): avc: denied { connect } for pid=9408 comm="syz.2.3990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.955504][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3999'. [ 162.000436][ T9433] tipc: Enabling of bearer rejected, already enabled [ 162.083284][ T9387] set_capacity_and_notify: 7 callbacks suppressed [ 162.083302][ T9387] loop3: detected capacity change from 0 to 131072 [ 162.163701][ T9387] F2FS-fs (loop3): invalid crc value [ 162.215008][ T9387] F2FS-fs (loop3): Found nat_bits in checkpoint [ 162.233541][ T30] audit: type=1326 audit(162.196:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.0.4009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa97ea819 code=0x7ffc0000 [ 162.306527][ T9458] loop0: detected capacity change from 0 to 256 [ 162.329719][ T30] audit: type=1326 audit(162.196:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.0.4009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8aa97ea819 code=0x7ffc0000 [ 162.370039][ T9387] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 162.423630][ T30] audit: type=1326 audit(162.196:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.0.4009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa97ea819 code=0x7ffc0000 [ 162.490782][ T30] audit: type=1326 audit(162.196:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.0.4009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f8aa97ea819 code=0x7ffc0000 [ 162.575230][ T30] audit: type=1326 audit(162.196:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.0.4009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa97ea819 code=0x7ffc0000 [ 162.600928][ T9454] loop1: detected capacity change from 0 to 40427 [ 162.612578][ T9454] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 162.645827][ T9454] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 162.670623][ T9454] F2FS-fs (loop1): invalid crc value [ 162.690026][ T9454] F2FS-fs (loop1): Found nat_bits in checkpoint [ 162.727915][ T9454] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 162.735270][ T9454] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 162.899198][ T9427] loop2: detected capacity change from 0 to 131072 [ 162.907529][ T9476] bridge_slave_1: default FDB implementation only supports local addresses [ 162.953812][ T9427] F2FS-fs (loop2): invalid crc value [ 163.011610][ T9427] F2FS-fs (loop2): Found nat_bits in checkpoint [ 163.107924][ T9493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4025'. [ 163.117465][ T9427] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 163.145704][ T9474] loop4: detected capacity change from 0 to 40427 [ 163.153790][ T9427] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 163.207596][ T9474] F2FS-fs (loop4): invalid crc value [ 163.239827][ T9474] F2FS-fs (loop4): Found nat_bits in checkpoint [ 163.278637][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4031'. [ 163.302740][ T9474] F2FS-fs (loop4): Start checkpoint disabled! [ 163.316375][ T9474] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 163.413141][ T8] attempt to access beyond end of device [ 163.413141][ T8] loop4: rw=2049, want=40976, limit=40427 [ 163.459787][ T6] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 163.558626][ T316] kernel write not supported for file /input/event2 (pid: 316 comm: kworker/1:3) [ 163.670258][ T30] audit: type=1400 audit(163.636:841): avc: denied { mount } for pid=9547 comm="syz.4.4051" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 163.728483][ T9557] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 163.729954][ T30] audit: type=1400 audit(163.676:842): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 163.759911][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 163.781131][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4057'. [ 163.929825][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.949724][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.967076][ T9482] loop0: detected capacity change from 0 to 131072 [ 163.980762][ T9482] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 164.019564][ T9482] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 164.052837][ T9482] F2FS-fs (loop0): invalid crc value [ 164.067417][ T9564] loop3: detected capacity change from 0 to 40427 [ 164.085746][ T9482] F2FS-fs (loop0): Found nat_bits in checkpoint [ 164.129292][ T9482] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 164.136813][ T6] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.146700][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.155476][ T9482] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 164.164324][ T6] usb 3-1: Product: syz [ 164.164449][ T9564] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 164.177009][ T6] usb 3-1: Manufacturer: syz [ 164.181933][ T6] usb 3-1: SerialNumber: syz [ 164.187127][ T9564] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 164.199701][ T30] audit: type=1400 audit(164.156:843): avc: denied { mount } for pid=9587 comm="syz.4.4068" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 164.235477][ T9564] F2FS-fs (loop3): invalid crc value [ 164.255633][ T9593] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 164.295737][ T9564] F2FS-fs (loop3): Found nat_bits in checkpoint [ 164.359101][ T9607] netlink: 'syz.4.4077': attribute type 1 has an invalid length. [ 164.392683][ T9564] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 164.400225][ T9564] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 164.462819][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 164.487596][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 164.549924][ T6] usb 3-1: 0:2 : does not exist [ 164.570148][ T6] usb 3-1: USB disconnect, device number 13 [ 164.669742][ T9636] loop3: detected capacity change from 0 to 128 [ 164.672383][ T9637] loop0: detected capacity change from 0 to 16 [ 164.728963][ T9637] erofs: (device loop0): mounted with root inode @ nid 36. [ 164.760733][ T60] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 164.779757][ T316] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 164.854699][ T9651] loop0: detected capacity change from 0 to 512 [ 164.891590][ T9651] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,grpjquota=,lazytime,,errors=continue. Quota mode: writeback. [ 164.925697][ T9658] FAT-fs (loop3): Directory bread(block 64) failed [ 164.933425][ T9658] FAT-fs (loop3): Directory bread(block 65) failed [ 164.944262][ T9658] FAT-fs (loop3): Directory bread(block 66) failed [ 164.952882][ T9658] FAT-fs (loop3): Directory bread(block 67) failed [ 164.960590][ T9658] FAT-fs (loop3): Directory bread(block 68) failed [ 164.968938][ T9658] FAT-fs (loop3): Directory bread(block 69) failed [ 164.977440][ T9658] FAT-fs (loop3): Directory bread(block 70) failed [ 164.984471][ T9658] FAT-fs (loop3): Directory bread(block 71) failed [ 164.991970][ T9658] FAT-fs (loop3): Directory bread(block 72) failed [ 165.009749][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 165.010113][ T9658] FAT-fs (loop3): Directory bread(block 73) failed [ 165.039755][ T316] usb 5-1: Using ep0 maxpacket: 32 [ 165.129890][ T60] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 165.218072][ T9682] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 165.230342][ T316] usb 5-1: unable to get BOS descriptor or descriptor too short [ 165.231434][ T9684] netlink: 'syz.2.4102': attribute type 30 has an invalid length. [ 165.249814][ T9682] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 165.267035][ T9682] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 165.279159][ T9680] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 165.296035][ T9680] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #2: comm syz.3.4112: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 165.310032][ T316] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.333554][ T60] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 165.344956][ T316] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.354415][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.364272][ T60] usb 2-1: Product: syz [ 165.369100][ T60] usb 2-1: Manufacturer: syz [ 165.374879][ T60] usb 2-1: SerialNumber: syz [ 165.382977][ T60] r8152-cfgselector 2-1: config 0 descriptor?? [ 165.394596][ T9687] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 165.422798][ T9687] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.4113: bad orphan inode 131083 [ 165.440181][ T9687] EXT4-fs (loop2): mounted filesystem without journal. Opts: stripe=0x0000000000000002,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 165.486650][ T30] audit: type=1400 audit(165.446:844): avc: denied { read } for pid=9694 comm="syz.0.4116" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=45357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 165.552582][ T30] audit: type=1326 audit(165.516:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9702 comm="syz.0.4120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8aa97ea819 code=0x0 [ 165.601239][ T9707] EXT4-fs (loop2): Ignoring removed nobh option [ 165.608080][ T9707] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 165.609776][ T316] usb 5-1: string descriptor 0 read error: -22 [ 165.630807][ T316] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 165.641411][ T316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.655094][ T9707] EXT4-fs (loop2): 1 truncate cleaned up [ 165.662049][ T9707] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,jqfmt=vfsold,max_batch_time=0x0000000000000009,dioread_lock,. Quota mode: none. [ 165.690556][ T9707] EXT4-fs warning (device loop2): ext4_group_extend:1852: can't read last block, resize aborted [ 165.690703][ T316] usb 5-1: unit 6 not found! [ 165.869899][ T60] r8152-cfgselector 2-1: Unknown version 0x0000 [ 165.879027][ T9723] xt_hashlimit: size too large, truncated to 1048576 [ 165.883576][ T60] r8152-cfgselector 2-1: USB disconnect, device number 16 [ 165.983146][ T1630] usb 5-1: USB disconnect, device number 22 [ 166.174859][ T9715] F2FS-fs (loop3): Invalid log_blocksize (65535), supports only 12 [ 166.184246][ T9715] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 166.194402][ T9715] F2FS-fs (loop3): Test dummy encryption mode enabled [ 166.205525][ T9715] F2FS-fs (loop3): invalid crc value [ 166.215131][ T9715] F2FS-fs (loop3): Found nat_bits in checkpoint [ 166.241782][ T9715] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 166.249250][ T9715] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 166.443812][ T569] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 166.502689][ T2061] udevd[2061]: symlink '../../loop0' '/dev/disk/by-diskseq/887.tmp-b7:0' failed: Read-only file system [ 166.522777][ T373] udevd[373]: symlink '../../loop4' '/dev/disk/by-diskseq/870.tmp-b7:4' failed: Read-only file system [ 166.575966][ T2061] udevd[2061]: symlink '../../loop3' '/dev/disk/by-diskseq/893.tmp-b7:3' failed: Read-only file system [ 166.603350][ T373] udevd[373]: symlink '../../loop4' '/dev/disk/by-diskseq/870.tmp-b7:4' failed: Read-only file system [ 166.679407][ T2061] udevd[2061]: symlink '../../loop4' '/dev/disk/by-diskseq/870.tmp-b7:4' failed: Read-only file system [ 166.716110][ T2061] udevd[2061]: symlink '../../loop4' '/dev/disk/by-diskseq/870.tmp-b7:4' failed: Read-only file system [ 166.729684][ T569] usb 3-1: Using ep0 maxpacket: 16 [ 166.757785][ T2061] udevd[2061]: symlink '../../loop0' '/dev/disk/by-diskseq/887.tmp-b7:0' failed: Read-only file system [ 166.858773][ T2061] udevd[2061]: symlink '../../loop0' '/dev/disk/by-diskseq/887.tmp-b7:0' failed: Read-only file system [ 166.870994][ T569] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.899682][ T569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.923159][ T2061] udevd[2061]: symlink '../../loop0' '/dev/disk/by-diskseq/894.tmp-b7:0' failed: Read-only file system [ 166.929680][ T569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.958300][ T2061] udevd[2061]: symlink '../../loop0' '/dev/disk/by-diskseq/894.tmp-b7:0' failed: Read-only file system [ 166.967618][ T569] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 166.981074][ T9748] F2FS-fs (loop3): invalid crc value [ 167.000161][ T9748] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 167.024024][ T569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.054601][ T569] usb 3-1: config 0 descriptor?? [ 167.081399][ T9748] F2FS-fs (loop3): recover fsync data on readonly fs [ 167.098665][ T9748] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 167.119250][ T9748] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 167.256934][ T9734] set_capacity_and_notify: 8 callbacks suppressed [ 167.256951][ T9734] loop1: detected capacity change from 0 to 131072 [ 167.308163][ T9778] loop3: detected capacity change from 0 to 256 [ 167.364869][ T9778] FAT-fs (loop3): Directory bread(block 64) failed [ 167.379790][ T9778] FAT-fs (loop3): Directory bread(block 65) failed [ 167.388179][ T9734] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 167.395704][ T9734] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 167.409726][ T9778] FAT-fs (loop3): Directory bread(block 66) failed [ 167.427198][ T9778] FAT-fs (loop3): Directory bread(block 67) failed [ 167.434240][ T9734] F2FS-fs (loop1): invalid crc value [ 167.449948][ T9778] FAT-fs (loop3): Directory bread(block 68) failed [ 167.457256][ T9778] FAT-fs (loop3): Directory bread(block 69) failed [ 167.474858][ T9778] FAT-fs (loop3): Directory bread(block 70) failed [ 167.478434][ T9776] loop0: detected capacity change from 0 to 40427 [ 167.489781][ T9778] FAT-fs (loop3): Directory bread(block 71) failed [ 167.497141][ T9734] F2FS-fs (loop1): Found nat_bits in checkpoint [ 167.500006][ T9776] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 167.514977][ T9776] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 167.520087][ T9778] FAT-fs (loop3): Directory bread(block 72) failed [ 167.524342][ T9776] F2FS-fs (loop0): invalid crc value [ 167.538164][ T9756] loop4: detected capacity change from 0 to 131072 [ 167.544995][ T9778] FAT-fs (loop3): Directory bread(block 73) failed [ 167.554892][ T9756] F2FS-fs (loop4): Test dummy encryption mode enabled [ 167.569972][ T9756] F2FS-fs (loop4): invalid crc value [ 167.576125][ T9734] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 167.584333][ T9776] F2FS-fs (loop0): Found nat_bits in checkpoint [ 167.600056][ T9734] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 167.600128][ T569] hid-picolcd 0003:04D8:F002.001C: No report with id 0xf3 found [ 167.635946][ T569] hid-picolcd 0003:04D8:F002.001C: No report with id 0xf4 found [ 167.640119][ T9734] F2FS-fs (loop1): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0 [ 167.657250][ T9756] F2FS-fs (loop4): Found nat_bits in checkpoint [ 167.679727][ T9776] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 167.686981][ T9776] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 167.735252][ T9756] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 167.740870][ T6] usb 3-1: USB disconnect, device number 14 [ 167.902549][ T9778] attempt to access beyond end of device [ 167.902549][ T9778] loop3: rw=2049, want=1768, limit=256 [ 167.940000][ T9778] attempt to access beyond end of device [ 167.940000][ T9778] loop3: rw=2049, want=1928, limit=256 [ 167.995387][ T9778] attempt to access beyond end of device [ 167.995387][ T9778] loop3: rw=2049, want=32928, limit=256 [ 168.053536][ T9778] attempt to access beyond end of device [ 168.053536][ T9778] loop3: rw=2049, want=33800, limit=256 [ 168.099643][ T9802] device bridge0 entered promiscuous mode [ 168.189471][ T9816] loop1: detected capacity change from 0 to 512 [ 168.197022][ T384] attempt to access beyond end of device [ 168.197022][ T384] loop3: rw=1, want=1296, limit=256 [ 168.250353][ T9816] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 168.302128][ T9816] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.4166: bad orphan inode 131083 [ 168.325947][ T9816] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 168.345437][ T9841] loop2: detected capacity change from 0 to 512 [ 168.395929][ T9841] ================================================================== [ 168.404256][ T9841] BUG: KASAN: use-after-free in __ext4_iget+0x2bb/0x3e50 [ 168.411785][ T9841] Read of size 8 at addr ffff888137b3ec18 by task syz.2.4178/9841 [ 168.415708][ T9849] loop3: detected capacity change from 0 to 2048 [ 168.419781][ T9841] [ 168.419792][ T9841] CPU: 0 PID: 9841 Comm: syz.2.4178 Tainted: G W syzkaller #0 [ 168.419812][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 168.419823][ T9841] Call Trace: [ 168.419830][ T9841] [ 168.419837][ T9841] __dump_stack+0x21/0x30 [ 168.459483][ T9841] dump_stack_lvl+0x110/0x170 [ 168.464250][ T9841] ? show_regs_print_info+0x20/0x20 [ 168.469798][ T9841] ? load_image+0x3e0/0x3e0 [ 168.474384][ T9841] ? _raw_spin_lock+0x94/0xf0 [ 168.479147][ T9841] print_address_description+0x7f/0x2c0 [ 168.485477][ T9841] ? __ext4_iget+0x2bb/0x3e50 [ 168.490410][ T9841] kasan_report+0xf1/0x140 [ 168.494918][ T9841] ? __ext4_iget+0x2bb/0x3e50 [ 168.499763][ T9841] __asan_report_load8_noabort+0x14/0x20 [ 168.505751][ T9841] __ext4_iget+0x2bb/0x3e50 [ 168.510244][ T9841] ? ext4_init_orphan_info+0x162/0x11e0 [ 168.516121][ T9841] ? __kasan_check_write+0x14/0x20 [ 168.521308][ T9841] ? _raw_write_trylock+0x150/0x150 [ 168.526597][ T9841] ? __proc_create+0x570/0x8e0 [ 168.531437][ T9841] ? ext4_get_projid+0x140/0x140 [ 168.536536][ T9841] ? _raw_write_unlock+0x2b/0x60 [ 168.541486][ T9841] ? ext4_orphan_file_block_trigger+0x460/0x460 [ 168.547893][ T9841] ext4_enable_quotas+0x33c/0x6d0 [ 168.553110][ T9841] ext4_fill_super+0x82fa/0x8bd0 [ 168.558047][ T9841] ? ext4_mount+0x40/0x40 [ 168.562463][ T9841] ? set_blocksize+0x1eb/0x370 [ 168.567321][ T9841] ? sb_set_blocksize+0xaa/0xf0 [ 168.572243][ T9841] ? ext4_mount+0x40/0x40 [ 168.577317][ T9841] mount_bdev+0x2ae/0x3e0 [ 168.582938][ T9841] ? ext4_mount+0x40/0x40 [ 168.587643][ T9841] ext4_mount+0x34/0x40 [ 168.592183][ T9841] legacy_get_tree+0xed/0x190 [ 168.597028][ T9841] ? ext4_errno_to_code+0x160/0x160 [ 168.602839][ T9841] vfs_get_tree+0x89/0x260 [ 168.607977][ T9841] do_new_mount+0x25a/0xa20 [ 168.612752][ T9841] path_mount+0x659/0xff0 [ 168.617531][ T9841] ? user_path_at_empty+0x161/0x1c0 [ 168.622930][ T9841] __se_sys_mount+0x320/0x390 [ 168.628236][ T9841] ? __x64_sys_mount+0xd0/0xd0 [ 168.633897][ T9841] __x64_sys_mount+0xbf/0xd0 [ 168.638580][ T9841] x64_sys_call+0x6bf/0x9a0 [ 168.643290][ T9841] do_syscall_64+0x4c/0xa0 [ 168.647993][ T9841] ? clear_bhb_loop+0x50/0xa0 [ 168.652852][ T9841] ? clear_bhb_loop+0x50/0xa0 [ 168.657776][ T9841] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.664369][ T9841] RIP: 0033:0x7fcd2d295a8a [ 168.668777][ T9841] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.688904][ T9841] RSP: 002b:00007fcd2bceee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 168.697483][ T9841] RAX: ffffffffffffffda RBX: 00007fcd2bceeee0 RCX: 00007fcd2d295a8a [ 168.705883][ T9841] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 00007fcd2bceeea0 [ 168.714206][ T9841] RBP: 0000200000000080 R08: 00007fcd2bceeee0 R09: 0000000002008042 [ 168.722355][ T9841] R10: 0000000002008042 R11: 0000000000000246 R12: 0000200000000040 [ 168.730858][ T9841] R13: 00007fcd2bceeea0 R14: 0000000000000571 R15: 00002000000000c0 [ 168.739262][ T9841] [ 168.742358][ T9841] [ 168.744763][ T9841] Allocated by task 8986: [ 168.749265][ T9841] __kasan_slab_alloc+0xbd/0xf0 [ 168.754195][ T9841] slab_post_alloc_hook+0x4f/0x2b0 [ 168.759743][ T9841] kmem_cache_alloc+0xf7/0x260 [ 168.764527][ T9841] f2fs_alloc_inode+0x26/0x330 [ 168.769546][ T9841] iget_locked+0x16c/0x7e0 [ 168.774040][ T9841] f2fs_iget+0x55/0x5060 [ 168.778704][ T9841] f2fs_fill_super+0x48c9/0x6dc0 [ 168.784230][ T9841] mount_bdev+0x2ae/0x3e0 [ 168.788724][ T9841] f2fs_mount+0x34/0x40 [ 168.792864][ T9841] legacy_get_tree+0xed/0x190 [ 168.797626][ T9841] vfs_get_tree+0x89/0x260 [ 168.802052][ T9841] do_new_mount+0x25a/0xa20 [ 168.806719][ T9841] path_mount+0x659/0xff0 [ 168.811119][ T9841] __se_sys_mount+0x320/0x390 [ 168.815964][ T9841] __x64_sys_mount+0xbf/0xd0 [ 168.820812][ T9841] x64_sys_call+0x6bf/0x9a0 [ 168.825300][ T9841] do_syscall_64+0x4c/0xa0 [ 168.829897][ T9841] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.836084][ T9841] [ 168.838655][ T9841] Last potentially related work creation: [ 168.844632][ T9841] kasan_save_stack+0x3a/0x60 [ 168.849484][ T9841] __kasan_record_aux_stack+0xd2/0x100 [ 168.854973][ T9841] kasan_record_aux_stack_noalloc+0xb/0x10 [ 168.860777][ T9841] call_rcu+0x10b/0xf80 [ 168.865037][ T9841] evict+0x834/0x8d0 [ 168.869029][ T9841] iput+0x635/0x7c0 [ 168.872887][ T9841] f2fs_put_super+0x661/0xc10 [ 168.877661][ T9841] generic_shutdown_super+0x151/0x330 [ 168.883309][ T9841] kill_block_super+0x7f/0xf0 [ 168.888295][ T9841] kill_f2fs_super+0x303/0x3b0 [ 168.893254][ T9841] deactivate_locked_super+0xa0/0x100 [ 168.898964][ T9841] deactivate_super+0xaf/0xe0 [ 168.903935][ T9841] cleanup_mnt+0x45b/0x510 [ 168.908577][ T9841] __cleanup_mnt+0x19/0x20 [ 168.913023][ T9841] task_work_run+0x127/0x190 [ 168.917780][ T9841] exit_to_user_mode_loop+0xd0/0xe0 [ 168.923199][ T9841] exit_to_user_mode_prepare+0x87/0xd0 [ 168.929302][ T9841] syscall_exit_to_user_mode+0x1a/0x30 [ 168.935544][ T9841] do_syscall_64+0x58/0xa0 [ 168.940721][ T9841] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.948000][ T9841] [ 168.950399][ T9841] Second to last potentially related work creation: [ 168.957498][ T9841] kasan_save_stack+0x3a/0x60 [ 168.962722][ T9841] __kasan_record_aux_stack+0xd2/0x100 [ 168.968896][ T9841] kasan_record_aux_stack_noalloc+0xb/0x10 [ 168.975375][ T9841] call_rcu+0x10b/0xf80 [ 168.980011][ T9841] evict+0x834/0x8d0 [ 168.984609][ T9841] iput+0x635/0x7c0 [ 168.988677][ T9841] f2fs_put_super+0x6a2/0xc10 [ 168.993698][ T9841] generic_shutdown_super+0x151/0x330 [ 168.999244][ T9841] kill_block_super+0x7f/0xf0 [ 169.004181][ T9841] kill_f2fs_super+0x303/0x3b0 [ 169.009430][ T9841] deactivate_locked_super+0xa0/0x100 [ 169.015074][ T9841] deactivate_super+0xaf/0xe0 [ 169.019936][ T9841] cleanup_mnt+0x45b/0x510 [ 169.024647][ T9841] __cleanup_mnt+0x19/0x20 [ 169.029075][ T9841] task_work_run+0x127/0x190 [ 169.033756][ T9841] exit_to_user_mode_loop+0xd0/0xe0 [ 169.039279][ T9841] exit_to_user_mode_prepare+0x87/0xd0 [ 169.044829][ T9841] syscall_exit_to_user_mode+0x1a/0x30 [ 169.050545][ T9841] do_syscall_64+0x58/0xa0 [ 169.054980][ T9841] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.060978][ T9841] [ 169.063601][ T9841] The buggy address belongs to the object at ffff888137b3e710 [ 169.063601][ T9841] which belongs to the cache f2fs_inode_cache of size 1424 [ 169.079410][ T9841] The buggy address is located 1288 bytes inside of [ 169.079410][ T9841] 1424-byte region [ffff888137b3e710, ffff888137b3eca0) [ 169.094960][ T9841] The buggy address belongs to the page: [ 169.101067][ T9841] page:ffffea0004dece00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888137b3aa70 pfn:0x137b38 [ 169.114271][ T9841] head:ffffea0004dece00 order:3 compound_mapcount:0 compound_pincount:0 [ 169.124284][ T9841] flags: 0x4000000000010200(slab|head|zone=1) [ 169.130560][ T9841] raw: 4000000000010200 ffffea0004263400 0000000200000002 ffff8881081f9e00 [ 169.141520][ T9841] raw: ffff888137b3aa70 0000000080150007 00000001ffffffff 0000000000000000 [ 169.151281][ T9841] page dumped because: kasan: bad access detected [ 169.158837][ T9841] page_owner tracks the page as allocated [ 169.165807][ T9841] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4848, ts 83512522955, free_ts 31277696838 [ 169.190601][ T9841] post_alloc_hook+0x192/0x1b0 [ 169.195592][ T9841] prep_new_page+0x1c/0x110 [ 169.200608][ T9841] get_page_from_freelist+0x2d3a/0x2dc0 [ 169.206793][ T9841] __alloc_pages+0x1a2/0x460 [ 169.211824][ T9841] new_slab+0xa1/0x4d0 [ 169.215967][ T9841] ___slab_alloc+0x381/0x810 [ 169.220756][ T9841] __slab_alloc+0x49/0x90 [ 169.225377][ T9841] kmem_cache_alloc+0x138/0x260 [ 169.230313][ T9841] f2fs_alloc_inode+0x26/0x330 [ 169.236074][ T9841] new_inode_pseudo+0x62/0x210 [ 169.241166][ T9841] new_inode+0x28/0x1e0 [ 169.245662][ T9841] f2fs_new_inode+0xe8/0x12b0 [ 169.250333][ T9841] f2fs_create+0x178/0x15f0 [ 169.254834][ T9841] path_openat+0x119b/0x2f20 [ 169.259504][ T9841] do_filp_open+0x1e2/0x410 [ 169.264172][ T9841] do_sys_openat2+0x15e/0x7f0 [ 169.269204][ T9841] page last free stack trace: [ 169.273994][ T9841] free_unref_page_prepare+0x542/0x550 [ 169.279744][ T9841] free_unref_page+0xae/0x540 [ 169.284627][ T9841] __free_pages+0x6c/0x100 [ 169.289222][ T9841] __vunmap+0x86d/0xa00 [ 169.293390][ T9841] vfree+0x8b/0xc0 [ 169.297347][ T9841] packet_set_ring+0x18ec/0x2430 [ 169.302770][ T9841] packet_release+0x73a/0xc90 [ 169.307555][ T9841] sock_close+0xe0/0x270 [ 169.312173][ T9841] __fput+0x20b/0x8b0 [ 169.316490][ T9841] ____fput+0x15/0x20 [ 169.320541][ T9841] task_work_run+0x127/0x190 [ 169.325492][ T9841] exit_to_user_mode_loop+0xd0/0xe0 [ 169.330951][ T9841] exit_to_user_mode_prepare+0x87/0xd0 [ 169.336988][ T9841] syscall_exit_to_user_mode+0x1a/0x30 [ 169.342752][ T9841] do_syscall_64+0x58/0xa0 [ 169.347286][ T9841] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.353743][ T9841] [ 169.356075][ T9841] Memory state around the buggy address: [ 169.361955][ T9841] ffff888137b3eb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.370428][ T9841] ffff888137b3eb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.381065][ T9841] >ffff888137b3ec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 169.390249][ T9841] ^ [ 169.395100][ T9841] ffff888137b3ec80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 169.403802][ T9841] ffff888137b3ed00: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 [ 169.412473][ T9841] ================================================================== [ 169.421016][ T9841] Disabling lock debugging due to kernel taint [ 169.441436][ T30] audit: type=1400 audit(169.406:846): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 169.471154][ T9841] EXT4-fs error (device loop2): ext4_quota_enable:6433: inode #3: comm syz.2.4178: unexpected EA_INODE flag [ 169.473907][ T30] audit: type=1400 audit(169.426:847): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.491899][ T9841] EXT4-fs error (device loop2): ext4_quota_enable:6436: comm syz.2.4178: Bad quota inode: 3, type: 0 [ 169.507278][ T9849] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 169.517453][ T30] audit: type=1400 audit(169.426:848): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.542719][ T9841] EXT4-fs warning (device loop2): ext4_enable_quotas:6477: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 169.554657][ T30] audit: type=1400 audit(169.426:849): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 169.567292][ T9841] EXT4-fs (loop2): mount failed [ 169.585619][ T30] audit: type=1400 audit(169.426:850): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 169.611281][ T30] audit: type=1400 audit(169.426:851): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 169.634666][ T30] audit: type=1400 audit(169.426:852): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1