last executing test programs: 13.811120691s ago: executing program 3 (id=137): r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) 13.742101322s ago: executing program 3 (id=141): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4, &(0x7f00000000c0)={[{@checkpoint_diasble}, {@noinline_dentry}, {@usrjquota={'usrjquota', 0x3d, '\x00'}}, {@block_mode}, {@noheap}, {@jqfmt_vfsold}, {@inline_xattr}, {@whint_mode_off}]}, 0x1, 0x5521, &(0x7f00000004c0)="$eJzs3M1rI2UYAPA36Xa/XYt48ObAIrSwCZt+LHqrusUP7FJWPYigpsk0ZDfJlCZNa08ePIoH/wb/AVHw5NG/wYNnb+JB8SYomXeiWz9Ad9PGtr8fTJ6ZN2+eed6hFJ6ZkACcWXPJzz+WwrVwKYQwE0K4GkK+Xyq23GoMTxVbOW7vfFrMGY2NB8P5EMLlEMK1UfKYs1S89cmN4fXyD6/+9NU3F85d+ezLb6e3amDangkhdLfj/l43xqwV471ivD5s57G7PCxifKN7vzjOYtxLN/MMe/XxvHoel1pxfra92x/FrU69MYqt9lY+vt2LJ+wPW+M8+Qfu1Xfy42a6mcd2P8tj6yDWtX8Q/7cd9AcxT7PI936ePgwG4xjH0/00rmf7fh4bvUExHvNmzXR/FIdFLE4XGlmnmdex+ftlW3v74S73/9Zr7d7ufjJMd/rtrJesVGvPVmu3KrWdrJkO0uVKvdu8tZzMtzqjaZVBWu+utrKs1Umrjay7kMy3Go1KrZbM30432/VeUqtVl6o3KysLxd6N5KU7byadZjI/ii+0e7uDdqefbGU7SfzEQrJYXXpuIbleS15f30g27q6trW+88e7tt+48v/7Ki8Wkv5SVzC/eXFys1G5WFmsLZ2j9HxZFT3D98EhK0y4A4OT5r/1/8kCrX36I/n9F/w8caf+/czeEo+//w3T6/1PnRPW/Z73/P4L1wyPR/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnFnfzX7+cr4zF4+vFOOPFUNPFMelEEI5hPDr35gJ5w/lnCnyzP7D/Nk/1fB1KeQZRue4UGyXQwirxfbL40d9FQAAAOD0+uKDpz+O3Xp8mZt2QRyneNOmfPW9CeUrhRBm576fULby6OXJCSXL/77Phf0JZctvYF2cULJ4y+3cpLL9KzOHwsUHQimG8rGWAwAAHIvDncDxdiEAAAAcp4+mXQDTUQrjR5njZ8H5N+//eCB46dARAAAAcAKVpl0AAAAAcOTy/t/v/wEAAMDpFn//DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA39i5g9y0gSgMwM8GF0pbFVXd9yrdwTF6hC67rDhAL8EBuiBXyAU4A9lln00EER6HQMQiigc7ir5PMoMt++cNgsXMSAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwSTfVan7198e/tjnbXTt5egMAAACcs6lW8/rNNJ1/aq5/aS59a86LiCgj4tzYfRAfTjIHTU71dP//4/urZzVcR9QJ+88YNcckIn42x/3XS38LAAAA8H6tF8tZGq2nl2nfBdGlNGlTfv6VKa+IiGp6mymt3Od9zxRW/76H8SdTWj2BNc4UlqbchrnSXqT+ux9m7cZHTZGa8uxjhyKz9R0AAOjQ4KTpdhQCAABAl373XQD9KOJxKfOwFDhKTbO89/HkDAAAAOjP5O6VDxaZCwEAAADennr839H+fzv7/wEAAEA/0v5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXNKmWs3Xi+Wsbc52106e3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAA/vzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9LCoRAEETBnPG/k77/YSVBzyBCBDQ8qqhFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7Ny/b9xUHADwZ/t8pQXEEdANQQgkBljo9VpauiEGUMTAn4AUpdcSeuVHm4FWFSILG8rcBcGIEBIobP0fMidSlrBluCFIzCD77JzzQ+KAYB/J5yM9v+9Z1nvf51OrfP2cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQGr09iZPs0BnHcXFuc+/hUtZvHeozj9e257OWxVGdSf8/vFj9EHWbSwQAAICzIynr+xDCTrq+kPVxJ6//0/KarOb/9ulxXNbzh+v+si9r/6z98vPu8/sTdcbzZIPeXB4OLh1NpfXfrXK2PfOXV7TyO58/e0nyLyR+b/W5UZrfz+jrjY132nl4ro5sAYB/4mLZF0H581DW95tMDIAzo1UpvMv6P+k0mxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAHUar4ckyjkII861JnNnae7h0XP94bXu+bNcePVoLX07GzIZIQwg3l4eDS7WuZrbdu//g9uJwOLhbf/BSCKGp2d8qln/7gykuDqGR+yM4oSAuvuyTHbnV5L+dGoIG/1MCAOBUSouW1fU76fpCdi6aC+GP7w7W/69W4jBl/b/74bXN6lzV+r9f2wpnX2/lzqe9e/cfvL58Z/HW4Nbg4zcu99/sX7l+9er1Xv6spOeJCQAAAP9Ou2jV+j+eO7r/f6EShynr/8++6X9RnStR/x9rsunXdCYAAABn27Mv//5bdMz5qN0Ony+urNztj4/7ny+Pjw2k+redK1q1/k/mms4KAAAAqMNoNTqw/3+jEocp9/+f+v6FH6tjJiGE88X+/8WlT4Y36lvOTKvj14mbXiMAAADNOl+06v5/mr//H++/8hCHEF57ZRwXfwZwqvo/eferH6pzVd//v1LfEmdS3B3fj7zvhtDqNp0RAAAAp9kTRcuK/V/T9YWPfrrwftv7/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1+zMAAP//9ENAJw==") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 12.925768363s ago: executing program 3 (id=153): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x40, 0x0, 0x7, {0x7, 0x0, "b1d28c9ac9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 10.670569164s ago: executing program 3 (id=182): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000980)='./file2\x00', 0x41, &(0x7f0000000a00), 0x64, 0x50b, &(0x7f0000000200)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x46, 0x43, 0x4f, 0x50, 0x43]}, 0x2f) 10.525563226s ago: executing program 3 (id=186): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa000000e8ffffff002000000000000000000000000700000044047300010000003313cb434aa043fa90bc038f763c9e6bbd04efbf8b1425a7652617a4376d5d7c110ba2751273d9208115b76aee6ba9b915d16648d33eb79a08cf"], 0x40}, 0x0) 10.426919287s ago: executing program 3 (id=188): r0 = syz_io_uring_setup(0x2def, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_uring_enter(r0, 0x0, 0xfb68, 0x1, &(0x7f0000000040), 0x8) 10.426839157s ago: executing program 32 (id=188): r0 = syz_io_uring_setup(0x2def, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) io_uring_enter(r0, 0x0, 0xfb68, 0x1, &(0x7f0000000040), 0x8) 7.981970611s ago: executing program 0 (id=234): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x9da, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2000, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x1, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x40, 0xf, 0x5, {0x5, 0x23, "ee5094"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.076987246s ago: executing program 0 (id=260): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9401070800000083"], 0x0}, 0x0) 4.105836933s ago: executing program 0 (id=287): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022140000000000445df6abf415117e47a475b83567"], 0x0}, 0x0) 2.15895925s ago: executing program 0 (id=322): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x0, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) 2.123255151s ago: executing program 0 (id=324): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ac0565020000000000010902240001000000030904000001030002000921000000012207000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xb, "bd"}, @global=@item_4={0x3, 0x1, 0x4, '#X\x00\b'}]}}, 0x0}, 0x0) 2.051276932s ago: executing program 5 (id=327): unshare(0x400) r0 = inotify_init() inotify_add_watch(r0, 0x0, 0xb5000002) 2.027033482s ago: executing program 5 (id=329): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x808000, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) 1.768243096s ago: executing program 5 (id=331): r0 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$lock(r0, 0x7, &(0x7f0000002200)={0x0, 0x0, 0xd, 0xffffffffffffffff}) close(0x3) 1.594447888s ago: executing program 5 (id=333): r0 = memfd_create(&(0x7f0000000000)='y\x105%\xfa,\x1f\x99\xa2\xc9\x8e\xcd\xfc\xfa\xf6\x12\x95^\xdfT\xe2=\x0e~F\xcds', 0x2) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0xa998) 1.539001049s ago: executing program 5 (id=335): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0x80, 0x36}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x8884) 1.511620539s ago: executing program 5 (id=338): prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440810000000109025c0002010000000904000801020d0000052406000105240000000dff0f0100000000000000000018241a0000000905810300020000000904010000020900000904010102020d000009058202"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.46560165s ago: executing program 2 (id=341): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0xfffffffe, 0x4) getsockopt$inet6_tcp_buf(r0, 0x6, 0x8, 0x0, &(0x7f0000001040)) 1.45498515s ago: executing program 2 (id=342): unshare(0x20000400) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') 1.44379248s ago: executing program 2 (id=343): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xc, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @random="241afea0e5d0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @info_request={0xf, 0x0, 0x0, 0x1, 0xaebd}}}}}, 0x0) 1.195512503s ago: executing program 2 (id=344): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ioctl$TCSETS(r0, 0x5452, &(0x7f0000000000)={0xffffff7f, 0x20000000, 0xfffffffc, 0x0, 0xff, "74ac00"}) 1.183597514s ago: executing program 2 (id=345): unshare(0x64000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000540)={'raw\x00', 0x2, [{}, {}]}, 0x48) 1.140788184s ago: executing program 2 (id=346): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000005c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 368.385234ms ago: executing program 1 (id=364): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080), 0x0, 0x0, 0x2) 354.502375ms ago: executing program 1 (id=366): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\n\x00'], 0x50) write$selinux_user(r0, &(0x7f0000000040)=ANY=[], 0x27) 338.766355ms ago: executing program 1 (id=367): unshare(0x20000400) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) 315.900195ms ago: executing program 1 (id=369): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000d00)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x64010102}, {{0x0, 0x8035, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc1}}}}}}, 0x0) 291.666276ms ago: executing program 1 (id=371): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f0000000040)={[{@nobarrier}, {@noblock_validity}, {@nombcache}, {@nouser_xattr}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@noacl}, {@nodiscard}, {@noauto_da_alloc}, {@resgid, 0x32}]}, 0x9b, 0x4d8, &(0x7f0000000a40)="$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") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x8) 284.245456ms ago: executing program 4 (id=372): setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0xee00) 259.554096ms ago: executing program 4 (id=373): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000000c0)=0x7, 0x1) 216.928267ms ago: executing program 4 (id=374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="09268a92", 0x4, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) 193.316927ms ago: executing program 4 (id=375): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r1, 0x2, &(0x7f0000000240)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000006c0)="5810235a8c132d765b", 0x9, 0x1}]) 101.170028ms ago: executing program 0 (id=376): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 88.779339ms ago: executing program 4 (id=377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4004800) 82.734569ms ago: executing program 1 (id=378): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) umount2(&(0x7f0000000040)='.\x00', 0x2) 0s ago: executing program 4 (id=379): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@mcast2={0xff, 0x5}, 0x0, r1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 27.610117][ T23] audit: type=1400 audit(1747835622.120:81): avc: denied { mounton } for pid=329 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.612025][ T329] cgroup1: Unknown subsys name 'net' [ 27.632866][ T23] audit: type=1400 audit(1747835622.120:82): avc: denied { mount } for pid=329 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.638455][ T329] cgroup1: Unknown subsys name 'net_prio' [ 27.666203][ T329] cgroup1: Unknown subsys name 'devices' [ 27.672691][ T23] audit: type=1400 audit(1747835622.190:83): avc: denied { unmount } for pid=329 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.806655][ T329] cgroup1: Unknown subsys name 'hugetlb' [ 27.812494][ T329] cgroup1: Unknown subsys name 'rlimit' [ 27.953477][ T23] audit: type=1400 audit(1747835622.470:84): avc: denied { setattr } for pid=329 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=10259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.976841][ T23] audit: type=1400 audit(1747835622.470:85): avc: denied { mounton } for pid=329 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.983721][ T331] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.001950][ T23] audit: type=1400 audit(1747835622.470:86): avc: denied { mount } for pid=329 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.033679][ T23] audit: type=1400 audit(1747835622.530:87): avc: denied { relabelto } for pid=331 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.059325][ T23] audit: type=1400 audit(1747835622.530:88): avc: denied { write } for pid=331 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.084924][ T23] audit: type=1400 audit(1747835622.570:89): avc: denied { read } for pid=329 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.110811][ T23] audit: type=1400 audit(1747835622.570:90): avc: denied { open } for pid=329 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.110902][ T329] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.622284][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.629704][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.637256][ T341] device bridge_slave_0 entered promiscuous mode [ 28.647113][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.654205][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.661596][ T341] device bridge_slave_1 entered promiscuous mode [ 28.700644][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.707992][ T340] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.715647][ T340] device bridge_slave_0 entered promiscuous mode [ 28.728540][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.735930][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.743543][ T339] device bridge_slave_0 entered promiscuous mode [ 28.753329][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.760371][ T340] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.768007][ T340] device bridge_slave_1 entered promiscuous mode [ 28.785332][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.792396][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.800030][ T338] device bridge_slave_0 entered promiscuous mode [ 28.806996][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.814113][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.821565][ T339] device bridge_slave_1 entered promiscuous mode [ 28.844608][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.851824][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.859699][ T338] device bridge_slave_1 entered promiscuous mode [ 28.900514][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.907582][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.915207][ T342] device bridge_slave_0 entered promiscuous mode [ 28.922113][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.929395][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.936858][ T342] device bridge_slave_1 entered promiscuous mode [ 29.066571][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.073645][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.080937][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.087992][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.100582][ T340] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.107757][ T340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.115026][ T340] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.122063][ T340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.144971][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.152099][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.159389][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.166521][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.177789][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.184846][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.192106][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.199177][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.211594][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.218662][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.225975][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.233104][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.269391][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.276898][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.284661][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.292307][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.299981][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.307294][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.314628][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.321805][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.329620][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.337110][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.344385][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.378619][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.387283][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.394329][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.401690][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.410583][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.417643][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.426005][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.433795][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.446219][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.464027][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.472420][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.479692][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.487289][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.495738][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.503997][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.511102][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.518663][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.529277][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.536847][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.555444][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.578412][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.586769][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.595045][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.602072][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.610223][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.618430][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.626770][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.633815][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.641152][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.649419][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.656462][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.663842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.683424][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.691878][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.700561][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.708889][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.717261][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.725889][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.734330][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.741358][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.748935][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.757973][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.766524][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.773743][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.781127][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.789564][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.813760][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.822280][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.831501][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.839918][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.848199][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.857202][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.865235][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.873518][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.882080][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.890551][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.898898][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.906053][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.929274][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.937922][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.947086][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.955615][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.975667][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.984417][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.992359][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.001395][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.010153][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.018979][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.027353][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.035793][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.044161][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.052140][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.080806][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.088950][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.097436][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.105926][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.114145][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.122435][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.130950][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.139440][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.147838][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.156202][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.167322][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.175647][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.198596][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.207164][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.215972][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.224296][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.232567][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.240662][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.269317][ T341] request_module fs-gadgetfs succeeded, but still no fs? [ 30.271910][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.285570][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.294727][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.302984][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.311602][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.320711][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.329935][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.338373][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.346917][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.355413][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.366771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.375515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.386614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.396411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.405443][ T361] tipc: Enabling of bearer rejected, failed to enable media [ 30.462877][ T366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 30.802271][ T409] ====================================================== [ 30.802271][ T409] WARNING: the mand mount option is being deprecated and [ 30.802271][ T409] will be removed in v5.15! [ 30.802271][ T409] ====================================================== [ 30.951253][ T409] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 30.970906][ T409] ext4 filesystem being mounted at /5/bus supports timestamps until (%ptR?) (0x7fffffff) [ 30.993268][ T363] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.061849][ T425] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 31.071380][ T409] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 31.079836][ T425] ext4 filesystem being mounted at /10/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 31.103511][ T409] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 31.145090][ T409] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 31.164651][ T409] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 31.213016][ T409] EXT4-fs error (device loop2) in ext4_do_update_inode:5534: error 27 [ 31.375418][ T421] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 31.391949][ T421] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 31.400767][ T363] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.421831][ T363] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 31.433860][ T421] F2FS-fs (loop3): invalid crc value [ 31.439280][ T363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.451520][ T363] usb 1-1: config 0 descriptor?? [ 31.486045][ T421] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 31.494576][ T421] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 31.576975][ T369] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 31.583869][ T341] attempt to access beyond end of device [ 31.583869][ T341] loop3: rw=2049, want=45104, limit=40427 [ 31.606932][ T369] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 31.631555][ T369] F2FS-fs (loop4): invalid crc value [ 31.648824][ T369] F2FS-fs (loop4): Found nat_bits in checkpoint [ 31.707044][ T369] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 31.714357][ T369] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 31.745153][ T451] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 31.756596][ T451] ext4 filesystem being mounted at /9/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 31.824570][ T451] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 31.983192][ T363] usbhid 1-1:0.0: can't add hid device: -71 [ 31.989200][ T363] usbhid: probe of 1-1:0.0 failed with error -71 [ 32.004590][ T363] usb 1-1: USB disconnect, device number 2 [ 32.119703][ T470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42'. [ 32.569911][ T527] [ 32.572268][ T527] ********************************************************** [ 32.587989][ T527] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 32.605150][ T531] tmpfs: Too few inodes for current use [ 32.605806][ T527] ** ** [ 32.619873][ T23] kauditd_printk_skb: 78 callbacks suppressed [ 32.619885][ T23] audit: type=1400 audit(1747835627.130:169): avc: denied { unmount } for pid=341 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 32.638398][ T527] ** trace_printk() being used. Allocating extra memory. ** [ 32.681548][ T527] ** ** [ 32.690322][ T527] ** This means that this is a DEBUG kernel and it is ** [ 32.698326][ T527] ** unsafe for production use. ** [ 32.706580][ T527] ** ** [ 32.714448][ T527] ** If you see this message and you are not debugging ** [ 32.721809][ T527] ** the kernel, report this immediately to your vendor! ** [ 32.729224][ T527] ** ** [ 32.736732][ T527] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 32.755453][ T527] ********************************************************** [ 32.772470][ T535] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 32.791045][ T23] audit: type=1400 audit(1747835627.300:170): avc: denied { setattr } for pid=533 comm="syz.1.71" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 32.815585][ T538] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,block_validity,inode_readahead_blks=0x0000000000000020,sb=0x0000000000000401,nouid32,lazytime,init_itable=0x0000000000000005,jqfmt=vfsold,grpjquota=,,errors=continue [ 32.863167][ T23] audit: type=1400 audit(1747835627.370:171): avc: denied { rmdir } for pid=537 comm="syz.2.73" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.863285][ T5] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 32.901907][ T23] audit: type=1400 audit(1747835627.370:172): avc: denied { rename } for pid=537 comm="syz.2.73" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.990487][ T557] capability: warning: `syz.0.79' uses deprecated v2 capabilities in a way that may be insecure [ 33.143151][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 33.153784][ T23] audit: type=1400 audit(1747835627.670:173): avc: denied { getopt } for pid=572 comm="syz.2.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.203000][ T571] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 33.239332][ T23] audit: type=1400 audit(1747835627.750:174): avc: denied { write } for pid=582 comm="syz.3.89" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.247941][ T571] fs-verity (loop0, inode 16): Unknown hash algorithm number: 0 [ 33.273392][ T5] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 33.290117][ T5] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 33.302665][ T23] audit: type=1400 audit(1747835627.750:175): avc: denied { read } for pid=570 comm="syz.0.84" name="file3" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.343097][ T23] audit: type=1400 audit(1747835627.750:176): avc: denied { open } for pid=570 comm="syz.0.84" path="/10/file3/file3" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.366311][ T23] audit: type=1400 audit(1747835627.750:177): avc: denied { ioctl } for pid=570 comm="syz.0.84" path="/10/file3/file3" dev="loop0" ino=16 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.391038][ T23] audit: type=1400 audit(1747835627.750:178): avc: denied { write } for pid=570 comm="syz.0.84" name="file3" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 33.483173][ T5] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 33.493284][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.501382][ T5] usb 5-1: Product: syz [ 33.510857][ T5] usb 5-1: Manufacturer: syz [ 33.516089][ T5] usb 5-1: SerialNumber: syz [ 33.562755][ T581] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 33.569463][ T592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 33.575646][ T581] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 33.600578][ T581] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 33.608978][ T581] F2FS-fs (loop2): Found nat_bits in checkpoint [ 33.649974][ T581] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 33.657501][ T581] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 33.713857][ T581] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 33.743204][ T125] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.912511][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 33.920629][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 33.928520][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 33.936531][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 33.944464][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 33.952205][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 33.959981][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 33.967820][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 33.975607][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 33.975890][ T5] usb 5-1: cannot find UAC_HEADER [ 33.983387][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 33.996283][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 33.996455][ T5] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 34.004073][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.004090][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.023123][ T125] usb 2-1: Using ep0 maxpacket: 32 [ 34.030063][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.039392][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.051162][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.059186][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.074336][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.082400][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.090631][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.098508][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.106385][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.114230][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.121972][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.130060][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.140226][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.148367][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.161809][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.163588][ T125] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.173655][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.188040][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.195961][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.204033][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.221375][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.229735][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.237695][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.246866][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.254749][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.262660][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.270734][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.278619][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.285636][ T5] usb 5-1: USB disconnect, device number 2 [ 34.287836][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.300679][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.308532][ T108] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 34.317234][ T627] EXT4-fs (loop3): Test dummy encryption mode enabled [ 34.324467][ T627] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 34.332544][ T108] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 34.363204][ T125] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 34.372867][ T125] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 34.381603][ T125] usb 2-1: Product: syz [ 34.386178][ T125] usb 2-1: Manufacturer: syz [ 34.390777][ T125] usb 2-1: SerialNumber: syz [ 34.408833][ T125] usb 2-1: config 0 descriptor?? [ 34.453568][ T125] hub 2-1:0.0: bad descriptor, ignoring hub [ 34.459542][ T125] hub: probe of 2-1:0.0 failed with error -5 [ 34.673147][ T365] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 34.683373][ T619] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 150994945) [ 34.691786][ T619] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 34.701492][ T619] F2FS-fs (loop0): invalid crc value [ 34.708379][ T619] F2FS-fs (loop0): Found nat_bits in checkpoint [ 34.738561][ T619] F2FS-fs (loop0): recover fsync data on readonly fs [ 34.745494][ T619] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 34.752139][ T619] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 34.759388][ T619] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 34.963092][ T444] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 35.053190][ T365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.064456][ T365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.074977][ T365] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 35.091398][ T365] usb 3-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 35.100690][ T365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.109553][ T365] usb 3-1: config 0 descriptor?? [ 35.135867][ T655] FAT-fs (loop0): Directory bread(block 64) failed [ 35.142511][ T655] FAT-fs (loop0): Directory bread(block 65) failed [ 35.149279][ T655] FAT-fs (loop0): Directory bread(block 66) failed [ 35.156084][ T655] FAT-fs (loop0): Directory bread(block 67) failed [ 35.162626][ T655] FAT-fs (loop0): Directory bread(block 68) failed [ 35.169586][ T655] FAT-fs (loop0): Directory bread(block 69) failed [ 35.176421][ T655] FAT-fs (loop0): Directory bread(block 70) failed [ 35.182935][ T655] FAT-fs (loop0): Directory bread(block 71) failed [ 35.189757][ T655] FAT-fs (loop0): Directory bread(block 72) failed [ 35.196601][ T655] FAT-fs (loop0): Directory bread(block 73) failed [ 35.213107][ T444] usb 2-1: Using ep0 maxpacket: 32 [ 35.545824][ T666] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 35.552266][ T666] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 35.560742][ T5] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 35.570221][ T669] erofs: (device loop4): mounted with opts: , root inode @ nid 36. [ 35.583641][ T666] F2FS-fs (loop3): invalid crc value [ 35.590252][ T669] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress, in[46, 4050] out[9000] [ 35.601063][ T669] ------------[ cut here ]------------ [ 35.605102][ T365] wacom 0003:056A:0027.0002: unknown main item tag 0x0 [ 35.606745][ T669] WARNING: CPU: 1 PID: 669 at fs/erofs/decompressor.c:174 z_erofs_lz4_decompress+0x954/0xd40 [ 35.623195][ T365] wacom 0003:056A:0027.0002: unknown main item tag 0x0 [ 35.623833][ T669] Modules linked in: [ 35.623870][ T669] CPU: 1 PID: 669 Comm: syz.4.124 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 35.639680][ T365] wacom 0003:056A:0027.0002: Unknown device_type for 'HID 056a:0027'. Assuming pen. [ 35.644294][ T669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 35.644316][ T669] RIP: 0010:z_erofs_lz4_decompress+0x954/0xd40 [ 35.644327][ T669] Code: 48 8b 5d b8 0f 85 67 03 00 00 44 8b 0b 48 c7 c6 11 89 3c 85 48 c7 c2 c0 af d7 84 44 8b 6d a4 44 89 e9 45 89 f0 e8 bc 6f 30 02 <0f> 0b 44 89 e8 48 c7 c7 20 b0 d7 84 48 c7 c6 40 b0 d7 84 ba 02 00 [ 35.644346][ T669] RSP: 0018:ffff8881e223ebd8 EFLAGS: 00010246 [ 35.644358][ T669] RAX: ae653bdaaf308e00 RBX: ffff8881e223f1e0 RCX: ae653bdaaf308e00 [ 35.644373][ T669] RDX: ffffc9000314e000 RSI: 000000000000a8a0 RDI: 000000000000a8a1 [ 35.657064][ T666] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 35.663930][ T669] RBP: ffff8881e223ec90 R08: dffffc0000000000 R09: ffffed103edea9b8 [ 35.663940][ T669] R10: ffffed103edea9b8 R11: 1ffff1103edea9b7 R12: 1ffff1103c447e3c [ 35.663947][ T669] R13: 000000000000002e R14: 0000000000000fd2 R15: ffff8881e22b0fd2 [ 35.663957][ T669] FS: 00007ffaae8a36c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 35.663964][ T669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.663972][ T669] CR2: 0000001b3121bff8 CR3: 00000001e274e000 CR4: 00000000003406a0 [ 35.663980][ T669] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.663996][ T669] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.670925][ T666] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 35.689834][ T669] Call Trace: [ 35.689863][ T669] ? z_erofs_lz4_prepare_destpages+0x650/0x650 [ 35.689875][ T669] z_erofs_decompress+0x49e/0xf80 [ 35.689890][ T669] z_erofs_vle_unzip_all+0x137a/0x1980 [ 35.689902][ T669] ? __kasan_check_read+0x11/0x20 [ 35.689921][ T669] ? z_erofs_onlinepage_endio+0x140/0x140 [ 35.689954][ T669] ? __kasan_check_write+0x14/0x20 [ 35.689966][ T669] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 35.689976][ T669] ? _raw_spin_lock+0xe0/0xe0 [ 35.689989][ T669] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 35.690000][ T669] ? finish_wait+0x17f/0x190 [ 35.690013][ T669] z_erofs_submit_and_unzip+0x1254/0x12c0 [ 35.690033][ T669] ? z_erofs_do_read_page+0x2430/0x2430 [ 35.690049][ T669] ? init_wait_entry+0xe0/0xe0 [ 35.690062][ T669] ? z_erofs_vle_normalaccess_readpages+0xa60/0xa60 [ 35.690073][ T669] ? lru_cache_add+0x15/0x20 [ 35.690088][ T669] z_erofs_vle_normalaccess_readpages+0x7b6/0xa60 [ 35.690101][ T669] ? preempt_count_add+0x90/0x1b0 [ 35.690116][ T669] ? z_erofs_vle_normalaccess_readpage+0x540/0x540 [ 35.690133][ T669] ? should_fail+0x196/0x7e0 [ 35.690147][ T669] ? blk_start_plug+0x5a/0x140 [ 35.690167][ T669] ? z_erofs_vle_normalaccess_readpage+0x540/0x540 [ 35.697624][ T125] usb 2-1: USB disconnect, device number 2 [ 35.704201][ T669] read_pages+0x117/0x3f0 [ 35.704217][ T669] ? switch_mm_irqs_off+0x33e/0x9b0 [ 35.704228][ T669] ? __do_page_cache_readahead+0x4b0/0x4b0 [ 35.704257][ T669] __do_page_cache_readahead+0x41e/0x4b0 [ 35.718534][ T365] wacom 0003:056A:0027.0002: hidraw0: USB HID v0.00 Device [HID 056a:0027] on usb-dummy_hcd.2-1/input0 [ 35.719318][ T669] ? xas_load+0x511/0x580 [ 35.730169][ T365] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0027.0002/input/input4 [ 35.735351][ T669] ? read_cache_pages_invalidate_pages+0x1b0/0x1b0 [ 35.735362][ T669] ? find_get_entry+0x342/0x3c0 [ 35.735375][ T669] ? page_cache_prev_miss+0x270/0x270 [ 35.735394][ T669] ondemand_readahead+0x6ae/0xad0 [ 35.823161][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 35.827619][ T669] ? futex_wait_queue_me+0x2ee/0x5b0 [ 35.827635][ T669] page_cache_sync_readahead+0x1f7/0x460 [ 35.827655][ T669] generic_file_read_iter+0x632/0x2100 [ 35.876150][ T125] usb 3-1: USB disconnect, device number 2 [ 35.882602][ T669] ? try_to_wake_up+0x78f/0x1580 [ 35.963216][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.964627][ T669] ? find_get_pages_range_tag+0x7a0/0x7a0 [ 35.971284][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.975970][ T669] ? iov_iter_init+0x88/0x160 [ 35.975984][ T669] __vfs_read+0x47d/0x5c0 [ 35.975997][ T669] ? rw_verify_area+0x360/0x360 [ 35.976007][ T669] ? avc_policy_seqno+0x1b/0x70 [ 35.976027][ T669] ? rw_verify_area+0x1c0/0x360 [ 35.982333][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 35.986662][ T669] vfs_read+0x15a/0x370 [ 35.986675][ T669] ksys_read+0x140/0x240 [ 35.986688][ T669] ? vfs_write+0x4c0/0x4c0 [ 35.986699][ T669] ? task_work_run+0x15e/0x170 [ 35.986719][ T669] ? __kasan_check_read+0x11/0x20 [ 35.992485][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 35.997097][ T669] __x64_sys_read+0x7b/0x90 [ 35.997110][ T669] do_syscall_64+0xcf/0x170 [ 35.997123][ T669] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 35.997133][ T669] RIP: 0033:0x7ffab023a969 [ 35.997144][ T669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.997151][ T669] RSP: 002b:00007ffaae8a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 35.997162][ T669] RAX: ffffffffffffffda RBX: 00007ffab0461fa0 RCX: 00007ffab023a969 [ 35.997168][ T669] RDX: 0000000000002020 RSI: 000020000000ce00 RDI: 0000000000000004 [ 35.997175][ T669] RBP: 00007ffab02bcab1 R08: 0000000000000000 R09: 0000000000000000 [ 35.997180][ T669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.997186][ T669] R13: 0000000000000000 R14: 00007ffab0461fa0 R15: 00007ffee48d4028 [ 35.997196][ T669] ---[ end trace 42900cc6f61e003f ]--- [ 36.005120][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.019178][ T5] usb 1-1: config 0 descriptor?? [ 36.227166][ T669] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress, in[46, 4050] out[8192] [ 36.237764][ T669] ------------[ cut here ]------------ [ 36.243252][ T669] WARNING: CPU: 0 PID: 669 at fs/erofs/decompressor.c:174 z_erofs_lz4_decompress+0x954/0xd40 [ 36.253403][ T669] Modules linked in: [ 36.257430][ T669] CPU: 0 PID: 669 Comm: syz.4.124 Tainted: G W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 36.268524][ T669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 36.278591][ T669] RIP: 0010:z_erofs_lz4_decompress+0x954/0xd40 [ 36.284873][ T669] Code: 48 8b 5d b8 0f 85 67 03 00 00 44 8b 0b 48 c7 c6 11 89 3c 85 48 c7 c2 c0 af d7 84 44 8b 6d a4 44 89 e9 45 89 f0 e8 bc 6f 30 02 <0f> 0b 44 89 e8 48 c7 c7 20 b0 d7 84 48 c7 c6 40 b0 d7 84 ba 02 00 [ 36.304649][ T669] RSP: 0018:ffff8881e223ef78 EFLAGS: 00010246 [ 36.310712][ T669] RAX: ae653bdaaf308e00 RBX: ffff8881e223f580 RCX: ae653bdaaf308e00 [ 36.318677][ T669] RDX: ffffc9000314e000 RSI: 000000000007ffff RDI: 0000000000080000 [ 36.326722][ T669] RBP: ffff8881e223f030 R08: 0000000000000004 R09: 0000000000000003 [ 36.334683][ T669] R10: ffffed103c447d38 R11: 1ffff1103c447d38 R12: 1ffff1103c447eb0 [ 36.342641][ T669] R13: 000000000000002e R14: 0000000000000fd2 R15: ffff8881e22b0fd2 [ 36.350599][ T669] FS: 00007ffaae8a36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 36.359534][ T669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.366126][ T669] CR2: 000020000000d000 CR3: 00000001e274e000 CR4: 00000000003406b0 [ 36.374088][ T669] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.382057][ T669] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.390014][ T669] Call Trace: [ 36.393303][ T669] ? z_erofs_lz4_prepare_destpages+0x650/0x650 [ 36.399449][ T669] z_erofs_decompress+0xc1e/0xf80 [ 36.404661][ T669] z_erofs_vle_unzip_all+0x137a/0x1980 [ 36.410103][ T669] ? stack_trace_snprint+0x170/0x170 [ 36.415380][ T669] ? __reset_page_owner+0x110/0x110 [ 36.420564][ T669] ? z_erofs_onlinepage_endio+0x140/0x140 [ 36.426318][ T669] ? handle_mm_fault+0x1cd6/0x3930 [ 36.431486][ T669] ? __kasan_check_write+0x14/0x20 [ 36.436590][ T669] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 36.442037][ T669] ? _raw_spin_lock+0xe0/0xe0 [ 36.446724][ T669] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 36.452530][ T669] ? z_erofs_vle_unzip_kickoff+0xd9/0xf0 [ 36.458241][ T669] z_erofs_submit_and_unzip+0x113d/0x12c0 [ 36.464048][ T669] ? z_erofs_do_read_page+0x2430/0x2430 [ 36.469586][ T669] ? z_erofs_vle_normalaccess_readpages+0xa60/0xa60 [ 36.476180][ T669] z_erofs_vle_normalaccess_readpage+0x24e/0x540 [ 36.482494][ T669] ? z_erofs_rcu_callback+0x30/0x30 [ 36.487696][ T669] generic_file_read_iter+0xcf9/0x2100 [ 36.493143][ T669] ? try_to_wake_up+0x78f/0x1580 [ 36.498073][ T669] ? find_get_pages_range_tag+0x7a0/0x7a0 [ 36.503817][ T669] ? iov_iter_init+0x88/0x160 [ 36.508660][ T669] __vfs_read+0x47d/0x5c0 [ 36.512983][ T669] ? rw_verify_area+0x360/0x360 [ 36.518004][ T669] ? avc_policy_seqno+0x1b/0x70 [ 36.522940][ T669] ? rw_verify_area+0x1c0/0x360 [ 36.527868][ T669] vfs_read+0x15a/0x370 [ 36.532012][ T669] ksys_read+0x140/0x240 [ 36.536238][ T669] ? vfs_write+0x4c0/0x4c0 [ 36.540638][ T669] ? task_work_run+0x15e/0x170 [ 36.545402][ T669] ? __kasan_check_read+0x11/0x20 [ 36.550410][ T669] __x64_sys_read+0x7b/0x90 [ 36.554901][ T669] do_syscall_64+0xcf/0x170 [ 36.559392][ T669] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 36.565266][ T669] RIP: 0033:0x7ffab023a969 [ 36.569667][ T669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.589359][ T669] RSP: 002b:00007ffaae8a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 36.597866][ T669] RAX: ffffffffffffffda RBX: 00007ffab0461fa0 RCX: 00007ffab023a969 [ 36.605855][ T669] RDX: 0000000000002020 RSI: 000020000000ce00 RDI: 0000000000000004 [ 36.613810][ T669] RBP: 00007ffab02bcab1 R08: 0000000000000000 R09: 0000000000000000 [ 36.621862][ T669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.629850][ T669] R13: 0000000000000000 R14: 00007ffab0461fa0 R15: 00007ffee48d4028 [ 36.637815][ T669] ---[ end trace 42900cc6f61e0040 ]--- [ 36.884714][ T5] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 36.907130][ T5] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 36.908548][ T5] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 36.933124][ T5] microsoft 0003:045E:07DA.0003: no inputs found [ 36.935567][ T700] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 36.939740][ T5] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 36.963280][ T697] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 37.054547][ T697] EXT4-fs (loop4): 1 orphan inode deleted [ 37.060365][ T697] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 37.069643][ T697] ext4 filesystem being mounted at /17/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 37.101119][ T706] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 37.136423][ T706] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 37.155032][ T706] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 37.165179][ T5] usb 1-1: USB disconnect, device number 3 [ 37.166172][ T697] EXT4-fs error (device loop4): ext4_lookup:1817: inode #14: comm syz.4.135: iget: bogus i_mode (0) [ 37.183107][ T706] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 37.201935][ T706] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 37.218934][ T706] EXT4-fs error (device loop1) in ext4_setattr:5884: error 27 [ 37.246919][ T715] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 37.549889][ T704] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 37.557818][ T714] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(3584) blocks(83968) [ 37.567469][ T704] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 37.576083][ T714] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 37.589147][ T714] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 37.598389][ T704] F2FS-fs (loop2): invalid crc value [ 37.602513][ T714] F2FS-fs (loop3): invalid crc value [ 37.610978][ T704] F2FS-fs (loop2): Found nat_bits in checkpoint [ 37.611324][ T714] F2FS-fs (loop3): Found nat_bits in checkpoint [ 37.656814][ T704] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 37.659014][ T714] F2FS-fs (loop3): Start checkpoint disabled! [ 37.663969][ T704] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 37.671214][ T714] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 37.692311][ T23] kauditd_printk_skb: 21 callbacks suppressed [ 37.692323][ T23] audit: type=1400 audit(1747835632.200:200): avc: denied { mount } for pid=703 comm="syz.2.139" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.722518][ T714] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 37.787641][ T23] audit: type=1400 audit(1747835632.300:201): avc: denied { audit_read } for pid=737 comm="syz.0.148" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.841975][ T23] audit: type=1400 audit(1747835632.340:202): avc: denied { create } for pid=713 comm="syz.3.141" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 37.868444][ T23] audit: type=1400 audit(1747835632.350:203): avc: denied { mounton } for pid=713 comm="syz.3.141" path="/38/file0/file0" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 37.891605][ T23] audit: type=1400 audit(1747835632.380:204): avc: denied { append } for pid=703 comm="syz.2.139" path="/33/bus/blkio.bfq.avg_queue_size" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.913416][ T7] attempt to access beyond end of device [ 37.913416][ T7] loop3: rw=2049, want=45104, limit=40427 [ 37.915934][ T23] audit: type=1400 audit(1747835632.390:205): avc: denied { setattr } for pid=703 comm="syz.2.139" name="blkio.bfq.avg_queue_size" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.973199][ T746] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 38.001502][ T746] FAT-fs (loop1): Filesystem has been set read-only [ 38.095700][ T762] syz.1.161 uses obsolete (PF_INET,SOCK_PACKET) [ 38.113594][ T23] audit: type=1400 audit(1747835632.630:206): avc: denied { getopt } for pid=761 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.260808][ T768] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,norecovery,noload,errors=remount-ro,dioread_lock, [ 38.294465][ T768] ext4 filesystem being mounted at /24/bus supports timestamps until (%ptR?) (0x7fffffff) [ 38.328505][ T768] EXT4-fs error (device loop4): ext4_ext_check_inode:543: inode #2: comm syz.4.163: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 38.347540][ T768] EXT4-fs (loop4): Remounting filesystem read-only [ 38.349384][ T23] audit: type=1400 audit(1747835632.870:207): avc: denied { create } for pid=784 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.394519][ T764] F2FS-fs (loop0): fault_injection options not supported [ 38.407341][ T764] F2FS-fs (loop0): invalid crc value [ 38.414525][ T764] F2FS-fs (loop0): Found nat_bits in checkpoint [ 38.443114][ T108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 38.451942][ T764] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 38.502590][ T23] audit: type=1400 audit(1747835633.010:208): avc: denied { mounton } for pid=763 comm="syz.0.162" path="/32/file0" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.533018][ T23] audit: type=1400 audit(1747835633.050:209): avc: denied { mount } for pid=763 comm="syz.0.162" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 38.593128][ T363] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.623162][ T444] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.823196][ T108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.834362][ T363] usb 3-1: Using ep0 maxpacket: 16 [ 38.843351][ T108] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.863170][ T108] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 38.878657][ T108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.887107][ T444] usb 2-1: Using ep0 maxpacket: 16 [ 38.893707][ T108] usb 4-1: config 0 descriptor?? [ 38.923884][ T792] F2FS-fs (loop4): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 38.932501][ T792] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 38.943374][ T792] F2FS-fs (loop4): invalid crc value [ 38.951631][ T792] F2FS-fs (loop4): Found nat_bits in checkpoint [ 38.953189][ T363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.993961][ T792] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 39.001017][ T792] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 39.002519][ T363] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.018644][ T444] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 39.029958][ T444] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 39.063468][ T363] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 39.083152][ T363] usb 3-1: New USB device found, idVendor=0400, idProduct=07da, bcdDevice= 0.00 [ 39.102612][ T363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.116426][ T363] usb 3-1: config 0 descriptor?? [ 39.233190][ T444] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 39.242597][ T444] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.251154][ T444] usb 2-1: Product: syz [ 39.255885][ T444] usb 2-1: Manufacturer: syz [ 39.260926][ T444] usb 2-1: SerialNumber: syz [ 39.269998][ T444] usb 2-1: config 0 descriptor?? [ 39.314030][ T444] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 39.363949][ T794] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 150994945) [ 39.372631][ T108] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 39.374089][ T794] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 39.403813][ T794] F2FS-fs (loop0): invalid crc value [ 39.424988][ T794] F2FS-fs (loop0): Found nat_bits in checkpoint [ 39.465272][ T794] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 39.472363][ T794] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 39.479740][ T794] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 39.535808][ T108] usb 2-1: USB disconnect, device number 3 [ 39.595933][ T359] usb 4-1: USB disconnect, device number 2 [ 39.606358][ T363] hid (null): report_id 375521560 is invalid [ 39.624131][ T363] hid-generic 0003:0400:07DA.0005: ignoring exceeding usage max [ 39.634387][ T363] hid-generic 0003:0400:07DA.0005: report_id 375521560 is invalid [ 39.642214][ T363] hid-generic 0003:0400:07DA.0005: item 0 4 1 8 parsing failed [ 39.660744][ T363] hid-generic: probe of 0003:0400:07DA.0005 failed with error -22 [ 39.669785][ T815] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 39.680340][ T815] ext4 filesystem being mounted at /29/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 39.832053][ T820] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,bsddf, [ 39.851931][ T820] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until (%ptR?) (0x7fffffff) [ 39.855311][ T108] usb 3-1: USB disconnect, device number 3 [ 39.890508][ T794] F2FS-fs (loop0): Start checkpoint disabled! [ 39.913866][ T820] EXT4-fs error (device loop4): ext4_xattr_inode_iget:402: comm syz.4.176: inode #64: comm syz.4.176: iget: illegal inode # [ 39.927308][ T820] EXT4-fs (loop4): Remounting filesystem read-only [ 39.934034][ T820] EXT4-fs error (device loop4): ext4_xattr_inode_iget:407: comm syz.4.176: error while reading EA inode 64 err=-117 [ 39.946488][ T820] EXT4-fs error (device loop4): ext4_xattr_inode_iget:402: comm syz.4.176: inode #64: comm syz.4.176: iget: illegal inode # [ 39.959839][ T820] EXT4-fs error (device loop4): ext4_xattr_inode_iget:407: comm syz.4.176: error while reading EA inode 64 err=-117 [ 39.988947][ T364] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 39.999793][ T364] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.010779][ T364] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 40.161614][ T831] EXT4-fs (loop3): orphan cleanup on readonly fs [ 40.181261][ T831] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.182: bg 0: block 248: padding at end of block bitmap is not set [ 40.196282][ T831] EXT4-fs (loop3): 1 truncate cleaned up [ 40.223614][ T831] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 40.255299][ T341] EXT4-fs error (device loop3): ext4_lookup:1821: inode #2: comm syz-executor: deleted inode referenced: 12 [ 40.268469][ T341] EXT4-fs error (device loop3): ext4_lookup:1821: inode #2: comm syz-executor: deleted inode referenced: 12 [ 40.314139][ T341] syz-executor (341) used greatest stack depth: 21120 bytes left [ 40.407260][ T847] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.414549][ T847] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.422010][ T847] device bridge_slave_0 entered promiscuous mode [ 40.430636][ T847] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.433157][ T108] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 40.438096][ T847] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.452769][ T847] device bridge_slave_1 entered promiscuous mode [ 40.503089][ T359] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 40.526058][ T847] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.533379][ T847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.540759][ T847] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.543140][ T444] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.547867][ T847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.591681][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.600286][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.609912][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.632173][ T866] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.640376][ T866] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 40.657687][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.666745][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.672591][ T866] syz.2.197 (866) used greatest stack depth: 20832 bytes left [ 40.673916][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.682785][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.689218][ T108] usb 2-1: Using ep0 maxpacket: 8 [ 40.700482][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.709217][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.722563][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.732218][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.748577][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.773080][ T359] usb 5-1: Using ep0 maxpacket: 16 [ 40.778703][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.804086][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.819249][ T511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.827597][ T444] usb 1-1: Using ep0 maxpacket: 16 [ 40.833342][ T108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.844831][ T108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.854919][ T108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 40.868183][ T108] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 40.877576][ T108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.888118][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.893575][ T108] usb 2-1: config 0 descriptor?? [ 40.896768][ T359] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.913739][ T359] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 40.923187][ T359] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.932490][ T359] usb 5-1: config 0 descriptor?? [ 40.963197][ T444] usb 1-1: New USB device found, idVendor=056a, idProduct=00b7, bcdDevice= 0.00 [ 40.982645][ T444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.983566][ T364] device bridge_slave_1 left promiscuous mode [ 40.997700][ T444] usb 1-1: config 0 descriptor?? [ 41.012160][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.021231][ T364] device bridge_slave_0 left promiscuous mode [ 41.027808][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.052994][ T872] F2FS-fs (loop2): invalid crc value [ 41.081098][ T872] F2FS-fs (loop2): Found nat_bits in checkpoint [ 41.135539][ T872] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 41.171560][ T339] attempt to access beyond end of device [ 41.171560][ T339] loop2: rw=2049, want=45104, limit=40427 [ 41.374321][ T108] logitech 0003:046D:C293.0006: bogus close delimiter [ 41.383105][ T5] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 41.391282][ T108] logitech 0003:046D:C293.0006: item 0 1 2 10 parsing failed [ 41.399215][ T108] logitech 0003:046D:C293.0006: parse failed [ 41.413402][ T108] logitech: probe of 0003:046D:C293.0006 failed with error -22 [ 41.414310][ T359] pantherlord 0003:0E8F:0003.0007: item fetching failed at offset 4/5 [ 41.443418][ T359] pantherlord 0003:0E8F:0003.0007: parse failed [ 41.449789][ T359] pantherlord: probe of 0003:0E8F:0003.0007 failed with error -22 [ 41.464690][ T444] wacom 0003:056A:00B7.0008: unknown main item tag 0x5 [ 41.473862][ T444] wacom 0003:056A:00B7.0008: Unknown device_type for 'HID 056a:00b7'. Assuming pen. [ 41.485254][ T444] wacom 0003:056A:00B7.0008: hidraw0: USB HID v20.00 Device [HID 056a:00b7] on usb-dummy_hcd.0-1/input0 [ 41.497327][ T444] input: Wacom Intuos3 4x6 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B7.0008/input/input8 [ 41.613476][ T444] usb 2-1: USB disconnect, device number 4 [ 41.645889][ T359] usb 5-1: USB disconnect, device number 3 [ 41.693758][ T108] usb 1-1: USB disconnect, device number 4 [ 41.726508][ T893] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 41.734327][ T893] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 41.746233][ T893] F2FS-fs (loop2): Found nat_bits in checkpoint [ 41.763174][ T5] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.774295][ T5] usb 6-1: config 0 interface 0 has no altsetting 0 [ 41.780996][ T5] usb 6-1: New USB device found, idVendor=0463, idProduct=1215, bcdDevice= 0.00 [ 41.790616][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.800257][ T5] usb 6-1: config 0 descriptor?? [ 41.803310][ T893] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 41.812305][ T893] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 42.240546][ T902] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 42.254538][ T902] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 42.255680][ T912] capability: warning: `syz.0.213' uses 32-bit capabilities (legacy support in use) [ 42.272461][ T902] F2FS-fs (loop2): invalid crc value [ 42.274951][ T5] hid-generic 0003:0463:1215.0009: hidraw0: USB HID v0.04 Device [HID 0463:1215] on usb-dummy_hcd.5-1/input0 [ 42.294966][ T902] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.354189][ T902] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 42.361922][ T902] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 42.397570][ T922] xt_hashlimit: size too large, truncated to 1048576 [ 42.430912][ T929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'. [ 42.496132][ T9] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 42.508020][ T9] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 42.534404][ T444] usb 6-1: USB disconnect, device number 2 [ 42.925920][ T965] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 43.010023][ T974] netlink: 277 bytes leftover after parsing attributes in process `syz.1.239'. [ 43.057952][ T976] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 43.071719][ T976] ext4 filesystem being mounted at /53/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 43.093089][ T444] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 43.203102][ T365] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 43.242887][ T23] kauditd_printk_skb: 36 callbacks suppressed [ 43.242899][ T23] audit: type=1400 audit(1747835637.750:238): avc: denied { unlink } for pid=339 comm="syz-executor" name="file6" dev="tmpfs" ino=17824 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 43.311102][ T995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.246'. [ 43.320076][ T995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.246'. [ 43.333095][ T444] usb 1-1: Using ep0 maxpacket: 16 [ 43.453335][ T444] usb 1-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 43.466780][ T444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.473096][ T365] usb 5-1: Using ep0 maxpacket: 32 [ 43.480592][ T444] usb 1-1: config 0 descriptor?? [ 43.593228][ T365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.604357][ T365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.614433][ T365] usb 5-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 43.623641][ T365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.636171][ T365] usb 5-1: config 0 descriptor?? [ 43.955053][ T444] a4tech 0003:09DA:0006.000A: hidraw0: USB HID v20.00 Device [HID 09da:0006] on usb-dummy_hcd.0-1/input0 [ 43.974523][ T1007] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 43.994665][ T1007] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,bsddf,,errors=continue [ 44.009127][ T1007] ext4 filesystem being mounted at /8/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 44.030647][ T1007] EXT4-fs error (device loop5): ext4_xattr_block_get:544: inode #15: comm syz.5.252: corrupted xattr block 32 [ 44.042687][ T1007] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 44.051758][ T1007] EXT4-fs error (device loop5): ext4_xattr_block_get:544: inode #15: comm syz.5.252: corrupted xattr block 32 [ 44.063848][ T1007] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 44.072981][ T23] audit: type=1400 audit(1747835638.580:239): avc: denied { execute } for pid=1006 comm="syz.5.252" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.072992][ T1007] EXT4-fs error (device loop5): ext4_xattr_block_get:544: inode #15: comm syz.5.252: corrupted xattr block 32 [ 44.107993][ T365] thrustmaster 0003:044F:B654.000B: unknown main item tag 0x0 [ 44.115792][ T1007] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 44.115830][ T365] thrustmaster 0003:044F:B654.000B: unbalanced collection at end of report description [ 44.125177][ T23] audit: type=1400 audit(1747835638.650:240): avc: denied { read open } for pid=1006 comm="syz.5.252" path="/8/file0/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.135048][ T365] thrustmaster 0003:044F:B654.000B: parse failed [ 44.163450][ T1007] process 'syz.5.252' launched './file1' with NULL argv: empty string added [ 44.172919][ T1007] EXT4-fs error (device loop5): ext4_xattr_block_get:544: inode #15: comm syz.5.252: corrupted xattr block 32 [ 44.173138][ T365] thrustmaster: probe of 0003:044F:B654.000B failed with error -22 [ 44.192523][ T889] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 44.210371][ T5] usb 1-1: USB disconnect, device number 5 [ 44.343602][ T23] audit: type=1400 audit(1747835638.860:241): avc: denied { read write } for pid=1023 comm="syz.5.259" name="uinput" dev="devtmpfs" ino=10263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.370832][ T23] audit: type=1400 audit(1747835638.880:242): avc: denied { open } for pid=1023 comm="syz.5.259" path="/dev/uinput" dev="devtmpfs" ino=10263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.377674][ T365] usb 5-1: USB disconnect, device number 4 [ 44.563167][ T889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.574313][ T889] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 44.583531][ T889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.592158][ T889] usb 2-1: config 0 descriptor?? [ 44.603146][ T108] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 44.643143][ T444] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 44.917835][ T23] audit: type=1400 audit(1747835639.430:243): avc: denied { read } for pid=1027 comm="syz.4.261" dev="nsfs" ino=4026532615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.939231][ T23] audit: type=1400 audit(1747835639.430:244): avc: denied { open } for pid=1027 comm="syz.4.261" path="net:[4026532615]" dev="nsfs" ino=4026532615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.963177][ T108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 44.974862][ T108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 44.985993][ T108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 44.993213][ T365] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 44.999017][ T108] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 45.015541][ T444] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.025749][ T108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.033774][ T444] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.035713][ T1030] EXT4-fs (loop4): Test dummy encryption mode enabled [ 45.043697][ T108] usb 3-1: config 0 descriptor?? [ 45.054867][ T1030] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 45.054867][ T1030] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 45.054867][ T1030] [ 45.073205][ T1022] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 45.075133][ T1030] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,sb=0x000000000000d69a,lazytime,test_dummy_encryption=v1,grpid,noacl,grpjquota=,sb=0x0000000000000005,init_itable=0x0000000000000001,errors=remount-ro, [ 45.081259][ T889] hkems 0003:2006:0118.000C: item fetching failed at offset 5/7 [ 45.111842][ T889] hkems 0003:2006:0118.000C: parse failed [ 45.114484][ T444] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 45.119751][ T889] hkems: probe of 0003:2006:0118.000C failed with error -22 [ 45.134016][ T444] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 45.151661][ T444] usb 6-1: SerialNumber: syz [ 45.216877][ T23] audit: type=1400 audit(1747835639.730:245): avc: denied { write } for pid=1035 comm="syz.4.264" name="ip6_tables_matches" dev="proc" ino=4026532674 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 45.253177][ T365] usb 1-1: Using ep0 maxpacket: 16 [ 45.282986][ T1038] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 45.291654][ T1038] EXT4-fs (loop4): invalid journal inode [ 45.297548][ T1038] EXT4-fs (loop4): can't get journal size [ 45.304911][ T1038] EXT4-fs (loop4): 1 truncate cleaned up [ 45.310640][ T1038] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 45.321677][ T889] usb 2-1: USB disconnect, device number 5 [ 45.334714][ T1038] EXT4-fs warning (device loop4): verify_group_input:147: Cannot add at group 9 (only 1 groups) [ 45.373222][ T365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.384294][ T365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.394143][ T365] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 45.407207][ T365] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 45.416285][ T365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.424979][ T365] usb 1-1: config 0 descriptor?? [ 45.433898][ T444] usb 6-1: 0:2 : does not exist [ 45.438925][ T444] usb 6-1: unit 255 not found! [ 45.445190][ T444] usb 6-1: USB disconnect, device number 3 [ 45.553917][ T108] aureal 0003:0755:2626.000D: unknown main item tag 0x6 [ 45.560923][ T108] aureal 0003:0755:2626.000D: report_id 29495 is invalid [ 45.568001][ T108] aureal 0003:0755:2626.000D: item 0 2 1 8 parsing failed [ 45.575591][ T108] aureal: probe of 0003:0755:2626.000D failed with error -22 [ 45.663123][ T18] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 45.777874][ T444] usb 3-1: USB disconnect, device number 4 [ 45.887472][ T23] audit: type=1400 audit(1747835640.400:246): avc: denied { connect } for pid=1050 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.909220][ T365] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 45.917176][ T365] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 45.924770][ T365] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 45.940848][ T365] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 45.955106][ T365] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 45.963466][ T365] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 45.972692][ T365] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 45.983302][ T365] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 45.992218][ T365] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 46.000699][ T365] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 46.013208][ T365] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000E/input/input11 [ 46.063129][ T18] usb 5-1: unable to get BOS descriptor or descriptor too short [ 46.101644][ T365] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 46.118709][ T365] usb 1-1: USB disconnect, device number 6 [ 46.153204][ T18] usb 5-1: too many endpoints for config 1 interface 1 altsetting 64: 159, using maximum allowed: 30 [ 46.173247][ T18] usb 5-1: config 1 interface 1 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 159 [ 46.186475][ T18] usb 5-1: config 1 interface 1 has no altsetting 0 [ 46.353112][ T889] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 46.353149][ T18] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.380542][ T18] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.389391][ T18] usb 5-1: Product: syz [ 46.394093][ T18] usb 5-1: Manufacturer: syz [ 46.410475][ T18] usb 5-1: SerialNumber: syz [ 46.442860][ T23] audit: type=1400 audit(1747835640.950:247): avc: denied { listen } for pid=1083 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 46.470349][ T1086] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 46.603167][ T889] usb 6-1: Using ep0 maxpacket: 32 [ 46.693163][ T108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 46.723186][ T889] usb 6-1: config 0 interface 0 has no altsetting 0 [ 46.730069][ T889] usb 6-1: New USB device found, idVendor=056a, idProduct=0047, bcdDevice= 0.00 [ 46.739206][ T889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.747908][ T889] usb 6-1: config 0 descriptor?? [ 46.793240][ T18] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 46.801777][ T18] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 46.865520][ T18] usb 5-1: USB disconnect, device number 5 [ 46.953163][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 47.073180][ T108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 47.084772][ T108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.084778][ T412] udevd[412]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.110280][ T108] usb 3-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 47.119341][ T108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.127964][ T108] usb 3-1: config 0 descriptor?? [ 47.214970][ T889] wacom 0003:056A:0047.000F: Unknown device_type for 'HID 056a:0047'. Assuming pen. [ 47.225850][ T889] wacom 0003:056A:0047.000F: hidraw0: USB HID v0.07 Device [HID 056a:0047] on usb-dummy_hcd.5-1/input0 [ 47.238347][ T889] input: Wacom Intuos2 6x8 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0047.000F/input/input12 [ 47.323210][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 47.334761][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 47.347035][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 47.356886][ T1098] F2FS-fs (loop4): invalid crc value [ 47.361878][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 47.374896][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.383897][ T24] usb 1-1: config 0 descriptor?? [ 47.435452][ T1098] F2FS-fs (loop4): Start checkpoint disabled! [ 47.443634][ T1098] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 47.460601][ T18] usb 6-1: USB disconnect, device number 4 [ 47.511856][ T7] attempt to access beyond end of device [ 47.511856][ T7] loop4: rw=2049, want=40976, limit=40427 [ 47.605220][ T108] hid-generic 0003:1E71:200F.0010: hidraw0: USB HID v0.00 Device [HID 1e71:200f] on usb-dummy_hcd.2-1/input0 [ 47.741889][ T1107] F2FS-fs (loop1): Insane cp_payload (553648128 > 510) [ 47.750455][ T1107] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 47.762972][ T1107] F2FS-fs (loop1): invalid crc value [ 47.772722][ T1107] F2FS-fs (loop1): Found nat_bits in checkpoint [ 47.803813][ T1107] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 47.810962][ T1107] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 47.838057][ T18] usb 3-1: USB disconnect, device number 5 [ 47.857719][ T338] attempt to access beyond end of device [ 47.857719][ T338] loop1: rw=2049, want=45104, limit=40427 [ 47.864303][ T24] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 47.879900][ T24] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 47.887682][ T24] plantronics 0003:047F:FFFF.0011: unbalanced delimiter at end of report description [ 47.897905][ T24] plantronics 0003:047F:FFFF.0011: parse failed [ 47.905285][ T24] plantronics: probe of 0003:047F:FFFF.0011 failed with error -22 [ 48.105034][ T1127] EXT4-fs (loop5): 1 orphan inode deleted [ 48.108656][ T18] usb 1-1: USB disconnect, device number 7 [ 48.112348][ T1127] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 48.127449][ T1136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.301'. [ 48.135487][ T1127] ext4 filesystem being mounted at /20/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 48.213090][ T365] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 48.257176][ T1148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.307'. [ 48.373235][ T1154] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,usrquota,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 48.428398][ T23] kauditd_printk_skb: 6 callbacks suppressed [ 48.428409][ T23] audit: type=1400 audit(1747835642.940:254): avc: denied { set_context_mgr } for pid=1163 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 48.454123][ T365] usb 5-1: Using ep0 maxpacket: 32 [ 48.532637][ T1174] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 48.539988][ T1174] FAT-fs (loop2): Filesystem has been set read-only [ 48.547063][ T1174] FAT-fs (loop2): error, clusters badly computed (1 != 129) [ 48.554476][ T1174] FAT-fs (loop2): error, clusters badly computed (2 != 130) [ 48.561916][ T1174] FAT-fs (loop2): error, clusters badly computed (3 != 131) [ 48.569317][ T1174] FAT-fs (loop2): error, clusters badly computed (4 != 132) [ 48.583210][ T365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.595795][ T1177] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.598808][ T365] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.616254][ T365] usb 5-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 48.625504][ T365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.662161][ T365] usb 5-1: config 0 descriptor?? [ 48.721135][ T23] audit: type=1400 audit(1747835643.230:255): avc: denied { setopt } for pid=1183 comm="syz.5.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.745722][ T23] audit: type=1400 audit(1747835643.230:256): avc: denied { bind } for pid=1183 comm="syz.5.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.765250][ T23] audit: type=1400 audit(1747835643.230:257): avc: denied { node_bind } for pid=1183 comm="syz.5.323" saddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 48.788272][ T23] audit: type=1400 audit(1747835643.260:258): avc: denied { setopt } for pid=1187 comm="syz.2.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.798924][ T1190] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 48.823162][ T1190] EXT4-fs (loop1): invalid journal inode [ 48.829009][ T1190] EXT4-fs (loop1): can't get journal size [ 48.836094][ T1190] EXT4-fs (loop1): 1 truncate cleaned up [ 48.841754][ T1190] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 48.855539][ T1197] EXT4-fs (loop2): Test dummy encryption mode enabled [ 48.875924][ T1197] EXT4-fs (loop2): 1 orphan inode deleted [ 48.881674][ T1197] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000000,test_dummy_encryption=v1,bsdgroups,errors=remount-ro,inlinecrypt,barrier,noquota,minixdf, [ 48.886854][ T1196] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 48.905859][ T1197] ext4 filesystem being mounted at /76/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 48.938098][ T1190] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 25 (only 1 groups) [ 48.949075][ T1196] EXT4-fs (loop5): invalid journal inode [ 48.954896][ T1196] EXT4-fs (loop5): can't get journal size [ 48.957966][ T1197] EXT4-fs error (device loop2): ext4_lookup:1821: inode #2: comm syz.2.328: deleted inode referenced: 16 [ 48.968480][ T1196] EXT4-fs (loop5): 1 truncate cleaned up [ 48.977922][ T1196] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue [ 48.978218][ T1197] EXT4-fs (loop2): Remounting filesystem read-only [ 48.997880][ T18] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 49.056035][ T23] audit: type=1326 audit(1747835643.570:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1204 comm="syz.1.330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f53275bc969 code=0x0 [ 49.116363][ T23] audit: type=1400 audit(1747835643.630:260): avc: denied { create } for pid=1207 comm="syz.5.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.120984][ T1210] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 49.136265][ T23] audit: type=1400 audit(1747835643.630:261): avc: denied { load_policy } for pid=1209 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.143829][ T1210] SELinux: failed to load policy [ 49.163815][ T23] audit: type=1400 audit(1747835643.660:262): avc: denied { lock } for pid=1207 comm="syz.5.331" path="socket:[19720]" dev="sockfs" ino=19720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.204120][ T365] apple 0003:05AC:029C.0012: unbalanced collection at end of report description [ 49.218858][ T365] apple 0003:05AC:029C.0012: parse failed [ 49.220380][ T23] audit: type=1400 audit(1747835643.730:263): avc: denied { create } for pid=1213 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 49.230799][ T365] apple: probe of 0003:05AC:029C.0012 failed with error -22 [ 49.273171][ T18] usb 1-1: Using ep0 maxpacket: 32 [ 49.393149][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.413682][ T18] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.433123][ T18] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 49.442193][ T18] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.470532][ T24] usb 5-1: USB disconnect, device number 6 [ 49.477026][ T18] usb 1-1: config 0 descriptor?? [ 49.623099][ T444] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 49.923264][ T108] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 49.957040][ T18] magicmouse 0003:05AC:0265.0013: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0 [ 49.969090][ T18] magicmouse 0003:05AC:0265.0013: magicmouse input not registered [ 49.979592][ T18] magicmouse: probe of 0003:05AC:0265.0013 failed with error -12 [ 49.988029][ T444] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.001020][ T444] usb 6-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 50.014244][ T444] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 50.024731][ T444] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 50.036370][ T444] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.050256][ T444] usb 6-1: config 1 interface 0 has no altsetting 0 [ 50.057065][ T444] usb 6-1: config 1 interface 1 has no altsetting 0 [ 50.063862][ T444] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=81.40 [ 50.073541][ T444] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.140117][ T1260] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 50.151440][ T1260] EXT4-fs (loop1): group descriptors corrupted! [ 50.176406][ T18] usb 1-1: USB disconnect, device number 8 [ 50.283208][ T108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.293480][ T108] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.373178][ T108] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 50.389200][ T108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 50.403639][ T108] usb 3-1: SerialNumber: syz [ 50.521487][ T1296] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 50.521487][ T1296] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 50.521487][ T1296] [ 50.540216][ T1296] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 50.540216][ T1296] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 50.540216][ T1296] [ 50.568431][ T1296] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.575502][ T18] usb 6-1: USB disconnect, device number 5 [ 50.605817][ T1296] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=80032019, mo2=0000] [ 50.615647][ T1296] EXT4-fs (loop1): 1 truncate cleaned up [ 50.621565][ T1296] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,nouser_xattr,barrier=0x000000000000000c,noacl,nodiscard,noauto_da_alloc,resgid=0x00000000000000002,errors=continue [ 50.665044][ T1296] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 50.693915][ T108] usb 3-1: 0:2 : does not exist [ 50.709059][ T338] EXT4-fs error (device loop1): ext4_ext_check_inode:543: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 50.716002][ T108] usb 3-1: USB disconnect, device number 6 [ 50.733201][ T1307] netlink: 9 bytes leftover after parsing attributes in process `syz.0.376'. [ 50.743975][ T338] EXT4-fs error (device loop1): ext4_ext_check_inode:543: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 50.763995][ T1307] device gretap0 entered promiscuous mode [ 50.780515][ T1307] netlink: 5 bytes leftover after parsing attributes in process `syz.0.376'. [ 50.792688][ T338] ------------[ cut here ]------------ [ 50.795030][ T1307] 0ªX¹¦D: renamed from gretap0 [ 50.798426][ T338] kernel BUG at fs/namei.c:2894! [ 50.808624][ T338] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 50.809200][ T1307] device 30ªX¹¦D left promiscuous mode [ 50.814703][ T338] CPU: 1 PID: 338 Comm: syz-executor Tainted: G W 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 50.814708][ T338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.814725][ T338] RIP: 0010:may_delete+0x7b1/0x7c0 [ 50.814737][ T338] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff ff 48 89 df e8 90 bf f6 ff e9 d0 fd ff ff e8 76 c5 c8 ff 0f 0b e8 6f c5 c8 ff <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 56 53 [ 50.814743][ T338] RSP: 0018:ffff8881d8ebfa70 EFLAGS: 00010293 [ 50.814754][ T338] RAX: ffffffff8196b971 RBX: ffff8881dd1d3990 RCX: ffff8881f2bfbf00 [ 50.814761][ T338] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 50.814768][ T338] RBP: ffff8881d8ebfaf0 R08: 0000000000000004 R09: 0000000000000003 [ 50.814776][ T338] R10: ffffed103b1d7f34 R11: 1ffff1103b1d7f34 R12: ffff8881dd0c15a0 [ 50.814785][ T338] R13: 1ffff1103ba3a732 R14: ffff8881dd1d39a8 R15: ffff8881e9f06cf0 [ 50.814795][ T338] FS: 0000555592584500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 50.814803][ T338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.814811][ T338] CR2: 00007f5328316710 CR3: 00000001d7805000 CR4: 00000000003406a0 [ 50.814820][ T338] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.814827][ T338] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.814830][ T338] Call Trace: [ 50.814853][ T338] ? __kasan_check_write+0x14/0x20 [ 50.960535][ T338] ? up_write+0x5b/0x160 [ 50.964761][ T338] vfs_rmdir+0x2c/0x3e0 [ 50.968901][ T338] incfs_kill_sb+0xfe/0x210 [ 50.973402][ T338] deactivate_locked_super+0xa0/0x100 [ 50.978845][ T338] deactivate_super+0x14f/0x1d0 [ 50.983693][ T338] ? __kasan_check_write+0x14/0x20 [ 50.988941][ T338] ? deactivate_locked_super+0x100/0x100 [ 50.994558][ T338] ? fast_dput+0x83/0x290 [ 50.998960][ T338] cleanup_mnt+0x446/0x500 [ 51.003359][ T338] __cleanup_mnt+0x19/0x20 [ 51.007764][ T338] task_work_run+0x146/0x170 [ 51.012347][ T338] do_exit+0xa43/0x2660 [ 51.016541][ T338] ? put_task_struct+0x90/0x90 [ 51.021300][ T338] ? check_preemption_disabled+0x118/0x300 [ 51.027095][ T338] ? debug_smp_processor_id+0x20/0x20 [ 51.032480][ T338] ? ksys_write+0x1da/0x240 [ 51.036980][ T338] ? __ia32_sys_read+0x90/0x90 [ 51.041824][ T338] do_group_exit+0x13e/0x300 [ 51.046409][ T338] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 51.052722][ T338] __x64_sys_exit_group+0x3f/0x40 [ 51.057734][ T338] do_syscall_64+0xcf/0x170 [ 51.062221][ T338] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 51.068095][ T338] RIP: 0033:0x7f53275bc969 [ 51.072494][ T338] Code: Bad RIP value. [ 51.076542][ T338] RSP: 002b:00007ffc20208ae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 51.084937][ T338] RAX: ffffffffffffffda RBX: 00007f532763e8c2 RCX: 00007f53275bc969 [ 51.092980][ T338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 51.100937][ T338] RBP: 0000000000000075 R08: 00007ffc20206885 R09: 00007ffc20209da0 [ 51.109170][ T338] R10: 000000000000000b R11: 0000000000000246 R12: 00007ffc20209da0 [ 51.117130][ T338] R13: 00007f532763e89d R14: 000000000000c5d1 R15: 00007ffc2020ae70 [ 51.125085][ T338] Modules linked in: [ 51.134054][ T338] ---[ end trace 42900cc6f61e0041 ]--- [ 51.139591][ T338] RIP: 0010:may_delete+0x7b1/0x7c0 [ 51.145113][ T338] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff ff 48 89 df e8 90 bf f6 ff e9 d0 fd ff ff e8 76 c5 c8 ff 0f 0b e8 6f c5 c8 ff <0f> 0b 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 56 53 [ 51.171620][ T338] RSP: 0018:ffff8881d8ebfa70 EFLAGS: 00010293 [ 51.177832][ T338] RAX: ffffffff8196b971 RBX: ffff8881dd1d3990 RCX: ffff8881f2bfbf00 [ 51.185947][ T338] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 51.194118][ T338] RBP: ffff8881d8ebfaf0 R08: 0000000000000004 R09: 0000000000000003 [ 51.202316][ T338] R10: ffffed103b1d7f34 R11: 1ffff1103b1d7f34 R12: ffff8881dd0c15a0 [ 51.210788][ T338] R13: 1ffff1103ba3a732 R14: ffff8881dd1d39a8 R15: ffff8881e9f06cf0 [ 51.218996][ T338] FS: 0000555592584500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 51.227999][ T338] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.235023][ T338] CR2: 00007ffab042c178 CR3: 00000001e0b67000 CR4: 00000000003406b0 [ 51.243139][ T338] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.251138][ T338] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.259448][ T338] Kernel panic - not syncing: Fatal exception [ 51.265800][ T338] Kernel Offset: disabled [ 51.270125][ T338] Rebooting in 86400 seconds..