last executing test programs: 5m19.164433539s ago: executing program 32 (id=1172): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvfrom(r0, 0x0, 0x0, 0x60, 0x0, 0x0) 5m15.63974598s ago: executing program 33 (id=1255): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8}], @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x40}}, 0x0) 4m35.853775213s ago: executing program 34 (id=2254): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000880), 0xfd, 0x444, &(0x7f0000001400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x8c, 0xa0c}) 4m27.091101404s ago: executing program 35 (id=2494): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000100001040000829445ffd9002ec800", @ANYRES32=0x0, @ANYBLOB="5d58000000000000140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c00028006"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x17c, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xfff}, {}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x4}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x5e21, 0x0, @in=@rand_addr=0x64010101}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m4.891747954s ago: executing program 36 (id=3037): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 3m52.171405469s ago: executing program 37 (id=3489): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00', 0x7}, 0x1c) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f0000000040)) 3m38.599590758s ago: executing program 38 (id=3844): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010700000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001c40)={&(0x7f0000001cc0)='kmem_cache_free\x00', r0}, 0x10) clock_getres(0x8, 0x0) 3m20.795665403s ago: executing program 39 (id=4448): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000290000003b00000000000000000000002800"], 0x40}, 0x0) 2m34.712190232s ago: executing program 40 (id=5599): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 2m16.495206619s ago: executing program 41 (id=6094): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) r2 = epoll_create(0x85) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)={0x8000001c}) 2m13.330046208s ago: executing program 42 (id=6174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='leases_conflict\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) fcntl$setlease(r1, 0x400, 0x1) fchown(r1, 0x0, 0xffffffffffffffff) 2m0.360119584s ago: executing program 0 (id=6439): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r1, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 2m0.224461474s ago: executing program 0 (id=6440): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0xf00) 2m0.224200924s ago: executing program 0 (id=6442): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x2, r0}, 0x38) 1m59.604944898s ago: executing program 0 (id=6456): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2001442, 0x0) mount$9p_virtio(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m59.590527068s ago: executing program 0 (id=6457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 1m59.496481099s ago: executing program 0 (id=6460): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x8, "8200279ea9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m59.496371339s ago: executing program 43 (id=6460): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x8, "8200279ea9"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m31.760548911s ago: executing program 4 (id=7006): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 1m31.692560692s ago: executing program 4 (id=7009): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x80000001, 0x0, 0x5, 0x3, 0xfffff124, 0x2, 0x5}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000b0000e1400101c0"]) 1m31.692178742s ago: executing program 4 (id=7011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000000000000000000200000000010000000000000e0100000000000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 1m31.691903222s ago: executing program 4 (id=7012): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000280)={[{@inlinecrypt}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0x5ff}}, {@resuid}]}, 0xfe, 0x47a, &(0x7f0000000440)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 1m31.557000202s ago: executing program 4 (id=7013): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) unshare(0x22020600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) flistxattr(r1, 0x0, 0x0) 1m31.249293694s ago: executing program 4 (id=7014): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x9}, 0x6, 0x7e, 0xf3, 0x1956, 0x21, 'syz1\x00', "da55111a7843e7c0338db4285e7e3d99b452bacba6c9a08010ff87794b888ea0", "7bf8dd79a6cef9a525f52091a00c91a9ec1318439574d8c21f98ad11cefb186d", [{0xe, 0x8001, {0x3, 0x2ff}}, {0x1, 0xf54, {0x1, 0x1}}, {0x7, 0xe16, {0x2, 0x9ad}}, {0x8, 0x9fd, {0x0, 0x8}}, {0x52f, 0x7, {0x3}}, {0x8, 0x7, {0x0, 0x13}}, {0x101, 0xd4ee, {0x2, 0x3}}, {0x24, 0x5, {0x2, 0x88}}, {0x3, 0x8b8, {0x1, 0x5}}, {0x0, 0x1, {0x1, 0x8000}}, {0xd, 0x3, {0x3, 0x400}}, {0xd5, 0x2, {0x1, 0xb9ca}}, {0x8, 0x6, {0x2, 0x7f4}}, {0xe2, 0x9, {0x1, 0xc7b7}}, {0x2f, 0x7, {0x1, 0x3}}, {0x7ff, 0x7, {0x1, 0x7}}, {0xe00, 0x8000, {0x0, 0x1}}, {0x80, 0x4, {0x0, 0x7}}, {0x2, 0x0, {0x0, 0x3}}, {0x5, 0xb, {0x2, 0x1}}, {0x5, 0xf, {0x0, 0x4}}, {0xd, 0x3, {0x1, 0xaa0}}, {0x9, 0x8, {0x0, 0x6}}, {0x1ff, 0x636a, {0x1, 0x4}}, {0x8, 0x9, {0x2, 0xc}}, {0x6e53, 0x8, {0x2c5c7c1dd87d2863, 0x9}}, {0x7fff, 0x3, {0x1, 0x4}}, {0x4, 0x5, {0x2, 0x9}}, {0x400, 0x101, {0x2, 0x5}}, {0x1000, 0x9, {0x1}}, {0x5, 0x5, {0x1, 0x8}}, {0x6, 0x15d8, {0x1, 0x3}}, {0x5471, 0x5, {0x2, 0x6}}, {0x4, 0x8, {0x0, 0x8}}, {0x6, 0x4, {0x3, 0xa80}}, {0x8, 0x0, {0x0, 0x5}}, {0x4, 0x3, {0x3, 0x8}}, {0x95, 0x9, {0x2, 0x80000001}}, {0xa9, 0x6, {0x1, 0x5}}, {0x81, 0x7cc9, {0x3, 0xe}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x200080c5}, 0x8000) unshare(0x20000400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m31.227765484s ago: executing program 44 (id=7014): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x9}, 0x6, 0x7e, 0xf3, 0x1956, 0x21, 'syz1\x00', "da55111a7843e7c0338db4285e7e3d99b452bacba6c9a08010ff87794b888ea0", "7bf8dd79a6cef9a525f52091a00c91a9ec1318439574d8c21f98ad11cefb186d", [{0xe, 0x8001, {0x3, 0x2ff}}, {0x1, 0xf54, {0x1, 0x1}}, {0x7, 0xe16, {0x2, 0x9ad}}, {0x8, 0x9fd, {0x0, 0x8}}, {0x52f, 0x7, {0x3}}, {0x8, 0x7, {0x0, 0x13}}, {0x101, 0xd4ee, {0x2, 0x3}}, {0x24, 0x5, {0x2, 0x88}}, {0x3, 0x8b8, {0x1, 0x5}}, {0x0, 0x1, {0x1, 0x8000}}, {0xd, 0x3, {0x3, 0x400}}, {0xd5, 0x2, {0x1, 0xb9ca}}, {0x8, 0x6, {0x2, 0x7f4}}, {0xe2, 0x9, {0x1, 0xc7b7}}, {0x2f, 0x7, {0x1, 0x3}}, {0x7ff, 0x7, {0x1, 0x7}}, {0xe00, 0x8000, {0x0, 0x1}}, {0x80, 0x4, {0x0, 0x7}}, {0x2, 0x0, {0x0, 0x3}}, {0x5, 0xb, {0x2, 0x1}}, {0x5, 0xf, {0x0, 0x4}}, {0xd, 0x3, {0x1, 0xaa0}}, {0x9, 0x8, {0x0, 0x6}}, {0x1ff, 0x636a, {0x1, 0x4}}, {0x8, 0x9, {0x2, 0xc}}, {0x6e53, 0x8, {0x2c5c7c1dd87d2863, 0x9}}, {0x7fff, 0x3, {0x1, 0x4}}, {0x4, 0x5, {0x2, 0x9}}, {0x400, 0x101, {0x2, 0x5}}, {0x1000, 0x9, {0x1}}, {0x5, 0x5, {0x1, 0x8}}, {0x6, 0x15d8, {0x1, 0x3}}, {0x5471, 0x5, {0x2, 0x6}}, {0x4, 0x8, {0x0, 0x8}}, {0x6, 0x4, {0x3, 0xa80}}, {0x8, 0x0, {0x0, 0x5}}, {0x4, 0x3, {0x3, 0x8}}, {0x95, 0x9, {0x2, 0x80000001}}, {0xa9, 0x6, {0x1, 0x5}}, {0x81, 0x7cc9, {0x3, 0xe}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x200080c5}, 0x8000) unshare(0x20000400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 51.488314869s ago: executing program 8 (id=8217): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 51.476472769s ago: executing program 8 (id=8207): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x0) 51.393979889s ago: executing program 8 (id=8220): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 51.33244212s ago: executing program 8 (id=8209): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x14fc, &(0x7f0000001540)="$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") mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000002480)='./file0\x00', 0x0, 0x104000, 0x0) 51.28592462s ago: executing program 8 (id=8210): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200), &(0x7f0000000080), &(0x7f0000000000)) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 51.2054076s ago: executing program 8 (id=8212): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)='v', 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100040001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2], 0x30}, 0x0) close(r2) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) 51.19380609s ago: executing program 45 (id=8212): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)='v', 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100040001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2], 0x30}, 0x0) close(r2) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x0) 50.843167892s ago: executing program 3 (id=8222): r0 = epoll_create1(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 50.755074393s ago: executing program 3 (id=8223): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f50f0472ff9657865635f743a7330202f7362696e2f6468636c69656e742030"], 0x47) 50.704660353s ago: executing program 3 (id=8224): syz_open_procfs(0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x54, 0x75, 0x4e, 0x8, 0x5ac, 0x5b13, 0x9239, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xfd, 0x1}}]}}]}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 49.703190849s ago: executing program 6 (id=8243): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x3000840, &(0x7f0000000900)=ANY=[@ANYBLOB='shortname=win95,nonumtail=0,nonumtail=0,iocharset=cp737,shortname=mixed,uni_xlate=0,rodir,codepage=949,uni_xlate=1,rodir,shortname=winnt,utf8=0,\x00b'], 0x3, 0x36e, &(0x7f0000000580)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 49.55273543s ago: executing program 6 (id=8244): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = epoll_create(0x4) epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x0) 49.47229513s ago: executing program 6 (id=8246): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1c, 0x6, 0x400, 0x9, 0x443c4, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)) 49.472177141s ago: executing program 6 (id=8247): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001b80)=ANY=[@ANYBLOB='allow_utime=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=cp861,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="004b8704a39ec4ecba7f0274f152a4c76d2777397dba6073bd43f93f24f2cfb6eac22c83063bed99f3519f7c0e162ba9ffa617964d688673fa8311", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp869,errors=continue,\x00'], 0x1, 0x1538, &(0x7f0000003980)="$eJzs3AuYTtUaOPD3XWvtMSbxNcllWGu9my+5LJMkuSTJJUkqSZJbQtIkRxISQ0jSkITkMiaJISSXiUnu9/stIUmaJAnJLVn/Z5K/0+mcf51z+h/nOfP+nmc/1mvvd+13f+988629mfmm69DaTerUaERE8G/BC38kA0AsAAwEgHwAEABAhfgK8dn7c0tM/vdOwv5cD6Rf7grY5cT9z9m4/zkb9z9n4/7nbNz/nI37n7Nx/3M27j9jOdmmqYWv4i3nbvz8Pyfjz///IVllx36xpuw13QBi/mgK9z9n4/7/zwr+yEHc/5yN+59TxV7uAth/AX7/5wS5/uEe7n/Oxv1nLCe73M+fL/cGkf+y1+BI7guN+U9dP2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wx9h9w2l+iAODi+HLXxRhjjDHGGGOMsT+Pz3W5K2CMMcYYY4wxxtj/fwgCJCgIIAZyQSzkhjgQAHAl5IV8EIGrIB6uhvxwDRSAglAICkMCFIGioMGABYIQikFxiMK1UAKug5JQCkpDGXBQFhLheigHN0B5uBEqwE1QEW6GSlAZqkBVuAWqwa1QHW6DGnA71IRaUBvqwB1QF+6EenAX1Ie7oQHcA/fCfdAQ7odG8AA0hgehCTwETeFhaAbNoQW0hFb/Uv5z0BOeh17QG5KhD/SFF6Af9IcB8CIMhJdgELwMg+EVSIEhMBRehWHwGgyH12EEjIRR8AaMhjdhDIyFcTAeUmECpMFbMBHehknwDkyGKZAOU2EavAvTYQbMhPdgFrwPs2EOzIV5kAEfwHxYAJnwISyEj2ARLIYlsBSWwXJYASthFayGNbAW1sF62ABpsAk2wxbYCttgO+yAj2EnfAK7YDfsgU9hL3z2O/kb/yb/1N/kd0NAQIECFSqMwRiMxViMwzjMg3kwL+bFCEYwHuMxP+bHAlgAC2EhTMAELIpF0aBBQsJiWAyjGMUSWAJLYkksjaXRocNETMRyeAOWx/JYAStgRayIlbAyVsaqWBWrYTWsjtWxBtbAmlgTa2NtvAPvwD5YD+thfayPDbDBxcdT2AgbYWNsjE2wCTbFptgMm2ELbIGtsBW2xtbYBttgO2yH7bE9dsAOmIRJ2BE7YifshJ2xM3bBLtgVu2I37I7ds57LBfg8Po+9sabog32xL/bDlFwD8EV8EV/CQfgyvoyvYAoOwaH4Kr6Kr+FwPIkjcCSOwlFYTbyJY3AskhiPqZiKaZiGE3EiZhf6Dk7BdJyK03AaTscZOAPfw1n4Pr6Pc3AOzsMMzMD5uAAzMRMX4ilchItxCS7FZbgcl+FKXIUrcQ2uxTW4HtfjRtyIm3EzbsWtuB2348eoAPAT3I27MQX34l7ch/twP+7HA3gAszALD+JBPISH8DAexiN4BI/iMTyOx/AEnsCTeApP42k8i2fxHD6T8FXjj0utTgGRTQklYkSMiBWxIk7EiTwij8gr8oqIiIh4ES/yi/yigCggColCIkEkiKKiqDDCCBJhDACIqIiKEqKEKClKitKitHDCiUSRKMqJcqK8KC8qiJtERXGzqCQqi7auqqgqqol2rrq4TdQQNURNUUvUFnVEHVFX1BX1RD1RX9QXDUQDca+4TzQUfXAAPiCyO9NEDMGmYig2E82F/OU7WGsxHNuItqKdeEyMxBHYQbR2SeJJ0VGMwU7iL2IsPi26iPHYVTwruonuood4TvQUbVwv0VtMwj6ir5iC/UR/MUC8KKZjLfEezspdW7wiUsQQMVS8Kubha2K4eF2MECPFKPGGGC3eFGPEWDFOjBepYoJIE2+JieJtMUm8IyaLKSJdTBXTxLtiupghZor3xCzxvpgt5oi5Yp7IEB+I+WKByBQfioXiI1FHLBZLxFKxTCwXK8RKsUqsFmvEWrFOrBcbxEaxSWwWW0QsbBPbxQ7xsdgpPhG7xG6xR3wq9orPxD7xudgvvhAHxJciS3wlDoqvxSHxjTgsvhVHxHfiqDgmjovvxQnxgzgpTonT4ow4K34U58RP4rzwAiRKIaVUMpAxMpeMlbllnLxC5pHBL6/uVTJeXi3zy2tkAVlQFpKFZYIsIotKLY20kmQoi8niMiqvlSXkdbKkLCVLyzLSybIyUV4vy8kbZHl5o6wgb5IV5c2ykqwsq8iq8hZZTd4qIXLhHDVlLVlb1pF3yGS4U9aTd8n68m7ZQN4j75X3yYbyftlIPiAbywdlE/mQbCofls1kc9lCtpSt5COytXxUtpFtZTv5mGwvH5cd5BMyST4pO0r/y5fI07KLfEZ2lc/KbrK77CF/kuell71kbwl9QPaVL8h+sr8cEAsA8iU5SL4sB8tXZIocIofKV+Uw+ZocLl+XI+RIOUq+IUfLN+UYOVaOk+Nlqpwg0+RbcqJ8W06S78jJcopMl1PlADnw55lmSvm7+W/9nfzBP599o9wkN8stcqvcJrfLHfJjuVPulLvkLrlH7pF75V65T+6T++V+eUAekFkySx6UB+UheUgeloflEXlEHpXH5Bn5vTwhf5An5Sl5Sp6RZ+VZee6X1wAUKqGkUipQMSqXilW5VZy6QuVRV6q8Kp+KqKtUvLpa5VfXqAKqoCqkCqsEVUQVVVoZZRWpUBVTxVVUXYu/fMGo0qqMcqqsSlTX/zP5qoS6TpVUpX6Vf7G+5H9QXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVJJKUh1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VrJJVX/WC6qf6qwHqRTVQvaQGqUFqsBqsUlSKGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpVqSpNpamJaqKapCapyWqySlfpapqapqar6WqmmqlmqVlqtpqt5qq5KkNlqPlqvspUmWqhWqgWqcVqsVqqlqrlarlaqVaq1Wq1WqvWqvVqvVqkNqlNaovaorapbWqH2qF2qp1ql9il9qg9aq/aq/apfWq/2q8OqAMqS2Wpg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nL/sCEYhABSqICWKC2CA2iAvigjxBniBvkDeIBJEgPogP8gfXBAWCgkGhoHCQEBQJigY6MIENxC9NjwbXBiWC64KSQamgdFAmcEHZIDG4PigX3BCUD24MKgQ3BRWDm4NKQeWgSlA1uCWoFtwaVA9uC2oEtwc1g1pB7aBOcEdQN7gzqBfcFdQP7g4aBPcE9wb3BQ2D+4NGwQNB4+DBoEnwUNA0eDhoFjQPWgQtg1Z/6vzenyz4qOule+tk3Uf31S/ofrq/HqBf1AP1S3qQflkP1q/oFD1ED9Wv6mH6NT1cv65H6JF6lH5Dj9Zv6jF6rB6nx+tUPUGn6bf0RP22nqTf0ZP1FJ2up+pp+l09Xc/QM/V7epZ+X8/Wc/RcPU9n6A/0fL1AZ+oP9UL9kV6kF+sleqleppfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qa36x36Y71Tf6J36d16j/5U79Wf6X36c71ff6EP6C91lv5KH9Rf60P6G31Yf6uP6O/0UX1MH9ff6xP6B31Sn9Kn9Rl9Vv+oz+mf9Hntsxf32R/vRhllYkyMiTWxJs7EmTwmj8lr8pqIiZh4E2/ym/ymgClgCplCJsEkmKKmqMlGhkwxU8xETdSUMCVMSVPSlDaljTPOJJpEU86UM+VNeVPBVDAVTUVTyVQyVUwVc4u5xdxqbjW3mdvM7eZ2U8vUMnVMHVPX1DX1TD1T39Q3DUwDc6+51zQ0DU0j08g0No1NE9PENDVNTTPTzLQwLUwr08q0Nq1NG9PGtDPtTHvT3nQwHUySSTIdTUfTyXQynU1n08V0MV1NV9PNdDM9TA/T0/Q0vUwvk2ySTV/T1/Qz/cwAM8AMNAPNIDPIDDaDTYpJMUPNUDPMDDPDzXAzwow0o7IXquZNM8aMNePMeJNqUk2aSTMTzUQzyUwyk81kk27SzTQzzUw3081MM9PMMrPMbDPbzDVzTYbJMPPNfJNpMs1Cs9AsMovMErPELDPLzAqzwqwyq8was8asg3Vmg9lgNplNZovZYraZbWaH2WF2mp1ml9ll9pg9Zq/Za/aZfWa/2W8OmAMmy2SZg+agOWQOmcPmsDlijpij5qg5bo6bE+aEOWlOmtPmtDlrCv7yeelNrM1t4+wVNo+90ua1+ezfxoVsYZtgi9iiVtsCtuCvYmOtLWlL2dK2jHW2rE201/8mrmQr2yq2qr3FVrO32uq/ievaO209e5etb++2dewdv4ob2Hts9uqkISKAbW4b25a2iX3INrUP22a2uW1hW9r29nHbwT5hk+yTtqN96jfxfLvArrKr7Rq71u6yu+1pe8Yest/Ys/ZH28v2tgPtS3aQfdkOtq/YFDvkN/Eo+4Ydbd+0Y+xYO86O/0082U6x6XaqnWbftdPtjN/EGfYDO8tm2tl2jp1r5/0cZ9eUaT+0C+1HdpENYIldapfZ5XaFXXmxVp/Prrcb7Ea7035it9itdpvdbndcXAjb3XaP/dTutZ/Zg/Zru99+YQ/YwzbLfvVznH19h+239oj9zh61x+xx+709YX9QF7Ozr/17+5M9b70FQgKSpCigGMpFsZSb4ugKykNXUl7KRxG6iuLpaspP11ABKkiFqDAlUBEqSpoMWSIKqRgVpyhdSxfLK01lyFFZSqTrqRzdQOXpRqpAN1FFupkqUWWqQlXpFqpGt1J1uo1q0O1Uk2pRbapDd1BdupPq0V1Un+6mBnQP3Uv3UUO6nxrRA9SYHqQm9BA1pYepGTWnFtSSWtEj1JoepTbUltrRY9SeHqcO9AQl0ZPUkZ6iTvQX6kxPUxd6hrrSs9SNulMPeo560vPUi3pTMvWhvvQC9aP+NIBepIH0Eg2il2kwvUIpNISG0qs0jF6j4fQ6jaCRNIreoNH0Jo2hsTSOxlMqTaA0eosm0ts0id6hyTSF0mkqTaN3aTrNoJn0Hs2i92k2zaG5NI8y6AOaTwsokz6khfQRLaLFtISW0jJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSNtpOO+hj2kmf0C7aTXvoU9pLnxHS57SfvqAD9CVl0Vd0kL6mQ/QNHaZvfW/6jo7SMTpO39MJ+oFO0ik6TWfoLP1I5+gnOk+eIMRQhDJUYRDGhLnC2DB3GBdeEeYJrwzzhvnCSHhVGB9eHeYPrwkLhAXDQmHhMCEsEhYNdWhCG1IYhsXC4mE0vDYsEV4XlgxLhaXDMqELy4aJ4fVhufCGsHx4Y1ghvCmsGN4cVgorhw/dXTW8JawW3hpWD28La4S3hzXDWmHtsE54R1g3vDOsF94V1g/vDsuH94T3hveFDcP7w0bhA2Hj8MGwSfhQ2DR8OGwWNg9bhC3DVuEjYevw0bBN2DZsFz4Wtg8fDzuET4RJ4ZNhx/Cpn/ffs+Af708O+4R9wxfCF0Lv75Jzo/OiGdEPovOjC6KZ0Q+jC6MfRRdFF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+TCxw64aRTLnAxLpeLdbldnLvC5XFXurwun4u4q1y8u9rld9e4Aq6gK+QKuwRXxBV12hlnHbnQFXPFXdRd60q461xJV8qVdmWcc2VdomvpWrlWrrV71LVxbV0795h7zD3uHndPuCfck66je8p1cn9xnd3Trot7xj3jnnXdXHfXwz3neroJeS+8J5NdX9fX9XP93AA3wA10A90gN8gNdoNdiktxQ91QN8wNc8PdcDfCjXCj3Cg32o12Y9wYN86Nc6ku1aW5NDfRTXST3CQ32U126S7dTXPT3HQ33VWbceEss91sN9fNdRkuw8132WvGTLfQLXSL3CK3xC1xy9wyt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfD7XA73U63y+e7MKnb6/a5fW6/2+8OuC9dlvvKHXRfu0PuG3fYfeuOuO/cUXfMHXffuxPuB3fSnXKn3Rl31v3ozrmf3HnnXWpkQiQt8lZkYuTtyKTIO5HJkSmR9MjUyLTIu5HpkRmRmZH3IrMi70dmR+ZE5kbmRTIiH0TmRxZEMiMfRhZGPoosiiyOLIksjSyLLI94X2RL6Iv54j7qr/Ul/HW+pC/lS/sy3vmyPtFf78v5G3x5f6Ov4G/yFf3NvpKv7Kv4h30z39y38C19K/+Ib+0f9W18W9/OP+bb+8d9B/+ET/JP+o7+Kd/J/8V39k/7Lv4Z39U/67v57r6Hf8739M/7Xr63T/Z9fF//gu/n+/sB/kU/0L/kB/mX/WD/ik/xQ/xQ/6of5l/zw/3rfoQf6UfFvOFHX7xFhvE+1U/waf4tP9G/7Sf5d/xkP8Wn+6l+mn/XT/cz/Ez/np/l3/ez/Rw/18/zGf4DP98v8Jn+Q7/Qf+QX+cUXHyr7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x3+Y7/Tf+J3+d1+j//U7/Wf+X3+c7/ff+EP+C99lv/KH/Rf+0P+G3/Yf+uP+O/8UX/MH/ff+xP+B3/Sn/Kn/Rl/1v/oz/mf/Pk/9DNryX/4qThjjDHG2P+qCZeG4td7LjzO7/N3csRfHdwXAK7cWjjrr/dnryjXFbgw7i8S2kcA4MneXR+4uNWsmZx8cSW2SEJQfA7AxX8JyhYDl+LF0A4ehyRoC+X+bv39Rfez9DvzR28CiPurnFi4FF+a/3MA/O36sL945LFR8yuGp+P/H/PPAShZ/FJObrgUL4Z2Pz9faQvl/0H9BVv/Tv25v0gFaPNXOXngUnyp/kR4FJ6CpF8dyRhjjDHGGGOMXdBfVOl88f7z4v/4/Hv35wnqUk4uuBT/3v05Y4wxxhhjjDHGLr+nu/d44pGkpLad//lB9d8/Rv1rM/88aAr/amE8+JcG3gP838YBwL85IUD2QP4nr2Lzf+RcKb+8df5217IzPoD/jlb+GYPL/I2JMcYYY4wx9qe7tOj/9d+ry1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWA/27v+MN/sBv6bvc18gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdbv8nAAD//8/q+bs=") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x1}, {0x800}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0}) 49.43443706s ago: executing program 6 (id=8248): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f000005f000/0x4000)=nil, 0x4000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000000000/0xc00000)=nil, 0xc00000}) 49.332348331s ago: executing program 6 (id=8251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x62040200) 49.332119531s ago: executing program 46 (id=8251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x62040200) 48.969180913s ago: executing program 3 (id=8260): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfe, 0x51c, &(0x7f00000008c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x2000001, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lstat(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000180)) 48.726846354s ago: executing program 3 (id=8263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x80}) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000680)) 48.399092457s ago: executing program 3 (id=8265): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000005c0)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@nolazytime}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noextent_cache}, {}, {@fault_type={'fault_type', 0x3d, 0x4}}]}, 0x1, 0x550d, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwCU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+CkpmpbnU9LE037fb3g8kz8+adZ543lMIzExLAuTWX/P5rKa7H5YiYjohrEdl+qdgya3l4KSJuRMTUI1upGP974EJEXImI66Pkec5S8daXt4Y3V39557fvfrg4c/Wrb3+c3KqBSXs5Irrb+f5eN49pK48PivHasJ3F7sqwiPkb3YfFcZrHveZmlmGvdjivlsXlVj4/3d7tj+JWp1YfxVZ7Kxvf7uUX7A9bh3myEx7UdrLjRnMzi+1+msXWQV7X/kH+v+2gP8jzNIp8n2TpYzA4jPl4c7+Zr2f7YRbrvUExnudNG839URwWsbhc1NNOI6tj8zif9On2bru3u58Mmzv9dtpLVivVVyrV2+XqTtpoDpor5Vq3cXslmW91RtPKg2atu9ZK01anWamn3YVkvlWvl6vVZP5Oc7Nd6yXVamW5slheXSj2biVv3vsg6TSS+VF8vd3bHbQ7/WQr3UnyMxaSpcryqwvJzWry3vpGsnH/7t31jfc/uvPhvdfW336jmPSfspL5pcWlpXJ1sbxUXThH6/+sKHqM64djKU26AICzR/8PTMLJ9f879yNOvv8P/f9YnKn+97z3/yewfjgW/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLn10+zXb2U7c/nx1WL8uWLoheK4FBFTEfHnY0zHhSM5p4s8s/8zf/ZfNXxfiizD6BoXi+1KRKwV2x/Pn/SnAAAAAM+ubz698UXerecvc5MuiKcpv2kzde3jMeUrRcTs3M9jyjY1enlxTMmyv++Z2B9TtuwG1qUxJctvuc08wQlPMvfxpo+ES4+EUh6mjn0JAADg1DnaCRy/swAAAOC0+nzSBTAZpTh8lHn4LDj75v0/DwQvHzkCAAAAzqDSpAsAAAAATlzW//v9PwAAAHi25b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwF/s3M9t4kAUB+Bngxf2nxat9r6t7A3K2BL2uMeIAtIEBeRAWkgD1EBuKSGCCI9DIOIQyWNbib5PciZjmR9vEBxmRhoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABP7M87CoRAGITB3vWdydz/sNKgqalJFQgff2MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxPy8pEAJBEAVzxv9O+v6HlQQ9gwgR0PCoohYNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxc/+8cZNhAMAf2+crLSBCQBmKEEgMsND0Wlq6IQZQxMBHQIrSSwm98qfNQKsKkYUNZe6CYEQICRS2fofOrdSlbB1uKBJzkX32xS2ROP7Zl+T3k16/z/mce5/XlqI8fp0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA2vjt3TgrNguTOK323X5wfa3o7zzWF25u3z1etCJO2kx6f3ix+SJZ6i4RAAAADo+sru8j4l6+s1L06UJZ/+f1MUXN/+3Tk7iu5x+v++u+rv2L9svP95+fDrQwGaf40PWN0fDkn1Pp/X+znG/P/OURvfLMl/desvKCpO9tPTfOy/OZfH3r1jv9MjzSRrYAwD9xou6roP57qOgHXSYGwKHRaxTedf2fLXSbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbxlvxZBUebe5Pqv7Og+tre/U3t+8er9vZGze248vdn+1FRB4R6xuj4cm2JrIPXLl67eLqaDS83H7wUkR0Nfpb1fQvfjDDwRGdnB/BfxSk1cWel3z2R9DhLyUAAA6kvGpFXX8v31mJhxHJYsTD76b1f/neq404Zqz/73949nZzrGb9P2hvinNvefPSp8tXrl57fePS6oXhheHHb5wavDk4fe7MmXPL5b2SZXdMAAAA+Hf6VZvW/xGRLj6y/l++d6wRx4z1/2ffDL5ojpWp//e0u+jXdSYAAACH27Mv//5bssf+pN+Pz1c3Ny8PJtvp61OTbQep/m1Hqtas/7PFrrMCAAAA2jDeSh5Z/z/fiGPG9f+nvn/hx+ZnZtWXCaxvjIYn1j4ZnW9vOnOtjX8n7nqOAAAAdOto1Zrr/3n5/H86feQhjYjXXpnEvWrfLPV/9u5XPzTHaj7/f7q9Kc6ldGlyPsp+KaK31HVGAAAAHGRPVK0o9n/Nd1Y++unY+33P/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07Y8AAAD//+qZP38=") 48.398864637s ago: executing program 47 (id=8265): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000005c0)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@nolazytime}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noextent_cache}, {}, {@fault_type={'fault_type', 0x3d, 0x4}}]}, 0x1, 0x550d, &(0x7f00000079c0)="$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") 21.120537686s ago: executing program 2 (id=9012): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000ffffffffa000903626e43925", 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.120372926s ago: executing program 2 (id=9013): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 21.120257896s ago: executing program 2 (id=9014): r0 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x11) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 21.115263507s ago: executing program 2 (id=9015): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nolazytime}, {@errors_continue}, {@grpjquota}, {@errors_remount}, {@nobarrier}, {@debug}]}, 0x1, 0x46a, &(0x7f0000000980)="$eJzs289vFFUcAPDvzLZFQWhFFEFUFI2NP1paUDl40WjiQRMTPeCxtoUACzW0JkKIVmPwaEi8G48m/gWe9GLUk4lXvBsSolxAT2tmd6Zsl93tLpRd6H4+yTbv7bzpe9+deTNv5s0EMLD2Zn+SiPsi4mJEjNayKyp5oazctSvnZv+9cm42iUrl3b+TarmrV87NFmWL9bbkmfE0Iv0iyStZbfHM2RMz5fL86Tw/uXTyw8nFM2dfOHZy5uj80flT04cOHTww9fJL0y+uS5xZfFd3f7KwZ9eb7194e/bwhQ9+/T7Jv4+GODox3EGZvVng/1SqGpc93U1ld4GtdelkqI8NoSuliBjK9+eLMRqluL7xRuONz/vaOOC2ys5Nm1ovXq4AG1gS/W4B0B/FiT67/i0+PRp63BEuv1q7AMrivpZ/akuGIs3LDDdc366nvRFxePm/b7JP3MR9CACAbv2YjX+ebzb+S6N+jLgtnxsai4j7I2J7RDwQETsi4sGIeCgidkbEw51Ve7xINE4N3Tj+SS/daoztZOO/V/K5rdXjv2L0F2OlPLe1Gv9wcuRYeX5//puMx/CmLD/Vpo6fXv/jq1bL6sd/2Ser//CqyaX00lDDDbq5maWZjiagOnD5s4jdQ83iT1ZmApKI2BURu7v719uKxLFnv9vTqlDT+POx8JrWYZ6p8m3EM7XtvxwN8ReS9vOTk/dEeX7/ZLFX3Oi338+/06r+W4p/HWTbf/Pq/b+xyFhSP1+72H0d5//8suU1zdrxN9//R5L3qsejkfy7j2eWlk5PRYwkb9XWqv9++vq6Rb4on8U/vq95/9+er5PF/0hEZDvxoxHxWEQ8nrf9iYh4MiL2tYn/l9eeOt5l/Embf7eusvjnmh7/VprQsP27T5RO/PxDq/o72/4Hq6nx/Jvq8W8NnTbwVn47AAAAuFuk1Wfgk3RiJZ2mExO1Z/h3xOa0vLC49NyRhY9OzdWelR+L4bS40zVadz90KlnOnyaO6tX3dH6vuFh+IL9v/HXp3mp+YnahPNfn2GHQbanr/9t3Xu//mb9Kq8uuzIh4vwM2Dv0ZBldj/0/71A6g95z/YXDp/zC49H8YXM36/6cN+VKP2gL0lvM/DK61+n/P3kYCes75HwaX/g8Dqd278cnNv/Iv0d9ELN/+KtI7ItLblRjpoINs6MSNx4oh4wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAu9H8AAAD//xjg70M=") r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000480)='./file0\x00') 21.009004797s ago: executing program 2 (id=9016): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x0, "fdfe2605dcea9a31f9df7fd000", 0x0, 0xf1}) poll(&(0x7f0000000ac0)=[{r1}], 0x1, 0x0) 20.855949268s ago: executing program 2 (id=9023): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) getpgid(0x0) 20.823323828s ago: executing program 48 (id=9023): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) getpgid(0x0) 9.163645626s ago: executing program 1 (id=9062): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100000000000000010200850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x45) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 7.549213076s ago: executing program 5 (id=9064): gettid() r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendfile(r1, r0, 0x0, 0x4000000000010046) 7.548990736s ago: executing program 1 (id=9065): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 7.548877386s ago: executing program 9 (id=9066): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', r0, &(0x7f0000000880)='./file7\x00', 0x0) 7.548801396s ago: executing program 7 (id=9072): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xf, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) 5.832163106s ago: executing program 5 (id=9067): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = dup(r1) write$tun(r2, 0x0, 0x0) 5.831713716s ago: executing program 1 (id=9068): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.831471476s ago: executing program 9 (id=9069): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000560000000000000000191bda0000200001"], 0x3b) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 5.827608966s ago: executing program 7 (id=9077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) alarm(0x8) 4.024775706s ago: executing program 5 (id=9070): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0xb, 0x6, 0x0, &(0x7f00000002c0)) 4.024442536s ago: executing program 1 (id=9071): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 4.023837236s ago: executing program 9 (id=9073): unshare(0x22020400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 4.023653686s ago: executing program 7 (id=9079): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000014e00000020000000000000000000000000000000000000000000000000049000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 3.986474307s ago: executing program 5 (id=9074): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r2, 0x0, 0x0}, 0x20) 3.936362247s ago: executing program 9 (id=9075): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x1c, r0, 0x9c3fa077fa966179, 0x0, 0x25dfdbfb, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000100}, 0x400c800) 2.075189368s ago: executing program 7 (id=9076): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) 2.075003308s ago: executing program 5 (id=9078): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) 2.074921148s ago: executing program 1 (id=9080): r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0xf, 0x2a0, &(0x7f0000000840)="$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") openat(r0, 0x0, 0x1a3842, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 2.074578698s ago: executing program 9 (id=9081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000070000000100010009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.055060188s ago: executing program 7 (id=9082): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x11000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x3026c25, &(0x7f0000000840)={[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) 393.14µs ago: executing program 7 (id=9083): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x101880a, &(0x7f0000000280)={[{@nodiscard}, {}, {@acl}, {@fsync_mode_strict}, {@inline_xattr}, {@fsync_mode_posix}, {@discard_unit_segment}, {@background_gc_on}, {@noinline_xattr}, {@discard_unit_block}, {@fsync_mode_strict}, {@atgc}, {@extent_cache}, {@fault_injection={'fault_injection', 0x3d, 0x36ce}}]}, 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) write$cgroup_pressure(r0, &(0x7f0000000000)={'some', 0x20, 0x5, 0x20, 0x1}, 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) 171.34µs ago: executing program 5 (id=9084): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = epoll_create(0x20) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) 110.98µs ago: executing program 1 (id=9085): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlockall(0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000587000/0x1000)=nil, 0x1000, 0x5) 0s ago: executing program 9 (id=9086): syz_open_dev$tty1(0xc, 0x4, 0x1) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2) kernel console output (not intermixed with test programs): faces? [ 262.734061][T15767] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6546'. [ 262.736647][ T20] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 262.754776][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.772283][ T20] usb 5-1: config 0 descriptor?? [ 263.015046][T15755] UDC core: couldn't find an available UDC or it's busy: -16 [ 263.029383][T15797] loop8: detected capacity change from 0 to 256 [ 263.031210][T15755] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 263.052583][T15755] UDC core: couldn't find an available UDC or it's busy: -16 [ 263.071420][T15755] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 263.079733][ T3671] usb 5-1: USB disconnect, device number 21 [ 263.081543][T15797] exfat: Deprecated parameter 'utf8' [ 263.091379][T15797] exfat: Deprecated parameter 'namecase' [ 263.096914][T15797] exfat: Deprecated parameter 'utf8' [ 263.111779][T15797] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 263.207270][T15806] loop8: detected capacity change from 0 to 2048 [ 263.253334][T15806] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 263.335508][T15814] loop8: detected capacity change from 0 to 256 [ 263.398546][T15822] input: syz0 as /devices/virtual/input/input42 [ 263.433617][T15827] loop7: detected capacity change from 0 to 512 [ 263.443024][ T3671] kernel write not supported for file bpf-prog (pid: 3671 comm: kworker/0:5) [ 263.443371][T15827] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 263.464220][T15827] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 263.474656][T15827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 263.484298][T15827] System zones: 1-12 [ 263.488867][T15827] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2219: inode #15: comm syz.7.6573: corrupted in-inode xattr [ 263.500875][T15827] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.6573: couldn't read orphan inode 15 (err -117) [ 263.518696][T15827] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue. Quota mode: none. [ 263.551170][ T366] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 263.624136][T15847] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 263.633365][T15847] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 263.773734][T15856] loop8: detected capacity change from 0 to 256 [ 263.818027][T15856] FAT-fs (loop8): Directory bread(block 64) failed [ 263.824605][T15856] FAT-fs (loop8): Directory bread(block 65) failed [ 263.831478][T15856] FAT-fs (loop8): Directory bread(block 66) failed [ 263.837979][T15856] FAT-fs (loop8): Directory bread(block 67) failed [ 263.844615][T15856] FAT-fs (loop8): Directory bread(block 68) failed [ 263.851515][T15856] FAT-fs (loop8): Directory bread(block 69) failed [ 263.857991][T15856] FAT-fs (loop8): Directory bread(block 70) failed [ 263.864936][T15856] FAT-fs (loop8): Directory bread(block 71) failed [ 263.871792][T15856] FAT-fs (loop8): Directory bread(block 72) failed [ 263.878322][T15856] FAT-fs (loop8): Directory bread(block 73) failed [ 263.909451][ T8] attempt to access beyond end of device [ 263.909451][ T8] loop8: rw=1, want=1228, limit=256 [ 263.920234][ T366] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 263.928887][ T366] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.939907][ T366] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 263.948913][ T366] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 263.960160][ T3244] Bluetooth: hci1: command 0x1001 tx timeout [ 263.966146][ T5550] Bluetooth: hci1: sending frame failed (-49) [ 264.062192][T15869] loop8: detected capacity change from 0 to 16 [ 264.072539][T15869] erofs: (device loop8): mounted with root inode @ nid 36. [ 264.080674][T15869] erofs: (device loop8): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 264.090335][T15869] attempt to access beyond end of device [ 264.090335][T15869] loop8: rw=0, want=304, limit=16 [ 264.101007][T15869] erofs: (device loop8): z_erofs_readpage: failed to read, err [-117] [ 264.109060][T15869] erofs: (device loop8): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 264.118401][ T366] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 264.127321][ T366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.135141][ T366] usb 5-1: Product: syz [ 264.139058][ T366] usb 5-1: Manufacturer: syz [ 264.143501][ T366] usb 5-1: SerialNumber: syz [ 264.321158][ T3244] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 264.401758][ T366] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 264.421542][ T366] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 264.429184][ T366] usb 5-1: USB disconnect, device number 22 [ 264.471171][ T355] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 264.691273][ T3244] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.699195][ T3244] usb 2-1: config 0 has no interface number 0 [ 264.705072][ T3244] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.715714][ T3244] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.725281][ T355] usb 9-1: Using ep0 maxpacket: 32 [ 264.730334][ T3244] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 264.739145][ T3244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.747585][ T3244] usb 2-1: config 0 descriptor?? [ 264.841253][ T355] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 264.849567][ T355] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 264.858131][ T355] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 264.867170][ T355] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 264.876764][ T355] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 264.886310][ T355] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 264.899654][ T355] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 264.909004][ T355] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.918289][ T355] usb 9-1: config 0 descriptor?? [ 265.171915][ T355] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 265.222192][ T3244] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0050/input/input43 [ 265.291225][ T291] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 265.303203][ T3244] holtek_kbd 0003:04D9:A055.0050: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 265.374262][ T3671] usb 9-1: USB disconnect, device number 11 [ 265.381141][ T3671] usblp0: removed [ 265.433249][ T3244] usb 2-1: USB disconnect, device number 29 [ 265.651338][ T291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.662528][ T291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.672546][ T291] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 265.681814][ T291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.690695][ T291] usb 5-1: config 0 descriptor?? [ 266.011253][ T3244] Bluetooth: hci1: command 0x1009 tx timeout [ 266.041370][T15894] loop1: detected capacity change from 0 to 1024 [ 266.073448][T15894] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,delalloc,noauto_da_alloc,debug_want_extra_isize=0x000000000000007c,nouid32,resgid=0x0000000000000000,nobarrier,sysvgroups,,errors=continue. Quota mode: none. [ 266.101988][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 266.102004][ T30] audit: type=1400 audit(2000000654.732:13392): avc: denied { rename } for pid=15893 comm="syz.1.6601" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 266.162075][ T291] arvo 0003:1E7D:30D4.0051: global environment stack underflow [ 266.169615][ T291] arvo 0003:1E7D:30D4.0051: item 0 4 1 11 parsing failed [ 266.177421][ T291] arvo 0003:1E7D:30D4.0051: parse failed [ 266.190158][ T291] arvo: probe of 0003:1E7D:30D4.0051 failed with error -22 [ 266.239531][T15903] loop1: detected capacity change from 0 to 8192 [ 266.246323][T15909] syz.8.6607 uses obsolete (PF_INET,SOCK_PACKET) [ 266.265717][ T30] audit: type=1400 audit(2000000654.892:13393): avc: denied { watch watch_reads } for pid=15910 comm="syz.8.6608" path="/31/file0" dev="tmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 266.364762][ T3671] usb 5-1: USB disconnect, device number 23 [ 266.392221][ T30] audit: type=1400 audit(2000000655.022:13394): avc: denied { read write } for pid=15917 comm="syz.1.6610" name="usbmon9" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 266.417644][ T30] audit: type=1400 audit(2000000655.022:13395): avc: denied { open } for pid=15917 comm="syz.1.6610" path="/dev/usbmon9" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 266.462797][T15922] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 266.474005][T15922] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 266.501786][T15926] loop8: detected capacity change from 0 to 2048 [ 266.521934][T15926] EXT4-fs (loop8): Ignoring removed nobh option [ 266.531604][T15930] loop1: detected capacity change from 0 to 128 [ 266.539436][T15926] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,bsdgroups,nobh,mb_optimize_scan=0x0000000000000001,abort,,errors=continue. Quota mode: writeback. [ 266.556017][T15926] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.632591][T15937] loop8: detected capacity change from 0 to 512 [ 266.652164][T15937] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 266.664294][T15937] EXT4-fs (loop8): 1 truncate cleaned up [ 266.670131][T15937] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv0,user_xattr,debug_want_extra_isize=0x000000000000002e,auto_da_alloc,barrier,quota,,errors=continue. Quota mode: writeback. [ 266.733689][ T30] audit: type=1400 audit(2000000655.362:13396): avc: denied { ioctl } for pid=15947 comm="syz.1.6625" path="/dev/fuse" dev="devtmpfs" ino=91 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 266.775084][T15952] loop1: detected capacity change from 0 to 256 [ 266.785858][ T30] audit: type=1400 audit(2000000655.412:13397): avc: denied { ioctl } for pid=15953 comm="syz.8.6627" path="socket:[81674]" dev="sockfs" ino=81674 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 266.817163][T15954] device batadv_slave_1 entered promiscuous mode [ 266.824522][T15954] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 266.831649][T15952] exfat: Deprecated parameter 'namecase' [ 266.849588][T15952] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 266.872384][ T30] audit: type=1400 audit(2000000655.502:13398): avc: denied { mounton } for pid=15951 comm="syz.1.6626" path="/486/file0/bus" dev="loop1" ino=1049087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 266.873998][T15959] syz.8.6629[15959] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.904891][T15959] syz.8.6629[15959] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.931488][ T30] audit: type=1400 audit(2000000655.552:13399): avc: denied { unmount } for pid=10818 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 266.977353][T15965] loop1: detected capacity change from 0 to 256 [ 266.993983][ T291] kernel write not supported for file /ppp (pid: 291 comm: kworker/1:2) [ 267.006010][ T30] audit: type=1326 audit(2000000655.632:13400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15968 comm="syz.7.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 267.036348][T15965] FAT-fs (loop1): Directory bread(block 64) failed [ 267.051072][T15965] FAT-fs (loop1): Directory bread(block 65) failed [ 267.062020][T15965] FAT-fs (loop1): Directory bread(block 66) failed [ 267.068388][T15965] FAT-fs (loop1): Directory bread(block 67) failed [ 267.075131][ T30] audit: type=1326 audit(2000000655.672:13401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15968 comm="syz.7.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 267.091244][T15965] FAT-fs (loop1): Directory bread(block 68) failed [ 267.107196][T15965] FAT-fs (loop1): Directory bread(block 69) failed [ 267.115544][T15965] FAT-fs (loop1): Directory bread(block 70) failed [ 267.122631][T15965] FAT-fs (loop1): Directory bread(block 71) failed [ 267.136361][T15979] loop7: detected capacity change from 0 to 1024 [ 267.143722][T15965] FAT-fs (loop1): Directory bread(block 72) failed [ 267.156653][T15965] FAT-fs (loop1): Directory bread(block 73) failed [ 267.202597][T15979] EXT4-fs (loop7): Ignoring removed orlov option [ 267.208872][T15979] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 267.246478][T15996] loop1: detected capacity change from 0 to 256 [ 267.262196][T15979] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000004,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 267.358369][T16005] syz.1.6647[16005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.358451][T16005] syz.1.6647[16005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.376392][T16004] loop7: detected capacity change from 0 to 1024 [ 267.442466][T16004] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 267.452097][T16004] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 267.462729][T16004] EXT4-fs error (device loop7): ext4_get_journal_inode:5150: inode #5: comm syz.7.6650: unexpected bad inode w/o EXT4_IGET_BAD [ 267.476351][T16004] EXT4-fs (loop7): no journal found [ 267.481838][T16004] EXT4-fs (loop7): can't get journal size [ 267.488420][T16004] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,mb_optimize_scan=0x0000000000000001,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 267.508883][ T291] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 267.519240][T16004] EXT4-fs error (device loop7): ext4_remount:5845: comm syz.7.6650: Abort forced by user [ 267.561230][ T20] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 267.646290][T16027] tipc: Enabling of bearer rejected, failed to enable media [ 267.751216][ T291] usb 9-1: Using ep0 maxpacket: 16 [ 267.810056][T16039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6665'. [ 267.941332][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.952406][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.962312][ T20] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.975031][ T20] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.983803][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.992979][ T20] usb 5-1: config 0 descriptor?? [ 268.031272][ T291] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 268.040284][ T291] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.048196][ T291] usb 9-1: Product: syz [ 268.052283][ T291] usb 9-1: Manufacturer: syz [ 268.056626][ T291] usb 9-1: SerialNumber: syz [ 268.061885][ T291] usb 9-1: config 0 descriptor?? [ 268.091176][ T366] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 268.101851][ T291] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 268.109425][ T291] usb 9-1: Detected FT-X [ 268.311225][ T291] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 268.451286][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.462006][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.471564][ T366] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 268.480365][ T366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.482909][ T20] plantronics 0003:047F:FFFF.0052: No inputs registered, leaving [ 268.496281][ T366] usb 2-1: config 0 descriptor?? [ 268.497227][ T20] plantronics 0003:047F:FFFF.0052: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 268.782459][ T291] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 268.982727][ T366] lg-g15 0003:046D:C222.0053: unknown main item tag 0x0 [ 268.986003][ T20] usb 9-1: USB disconnect, device number 12 [ 268.989765][ T366] lg-g15 0003:046D:C222.0053: unknown main item tag 0x0 [ 268.996940][ T20] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 269.002878][ T366] lg-g15 0003:046D:C222.0053: unknown main item tag 0x0 [ 269.011662][ T20] ftdi_sio 9-1:0.0: device disconnected [ 269.018673][ T366] lg-g15 0003:046D:C222.0053: unknown main item tag 0x0 [ 269.030489][ T366] lg-g15 0003:046D:C222.0053: unknown main item tag 0x0 [ 269.037291][ T366] lg-g15 0003:046D:C222.0053: unknown main item tag 0x0 [ 269.044299][ T366] lg-g15 0003:046D:C222.0053: unknown main item tag 0x0 [ 269.051194][ T366] lg-g15 0003:046D:C222.0053: unknown main item tag 0x0 [ 269.057988][ T366] lg-g15 0003:046D:C222.0053: unknown main item tag 0x0 [ 269.064763][ T366] lg-g15 0003:046D:C222.0053: unknown main item tag 0x0 [ 269.071520][ T366] lg-g15 0003:046D:C222.0053: unknown main item tag 0x0 [ 269.079015][ T366] lg-g15 0003:046D:C222.0053: hidraw1: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 269.199011][ T6] usb 2-1: USB disconnect, device number 30 [ 269.614967][T16044] loop8: detected capacity change from 0 to 40427 [ 269.671786][T16044] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 269.679387][T16044] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 269.690941][T16044] F2FS-fs (loop8): Found nat_bits in checkpoint [ 269.734190][T16044] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 269.741143][T16044] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 269.775999][T15549] attempt to access beyond end of device [ 269.775999][T15549] loop8: rw=2049, want=40968, limit=40427 [ 270.086113][T16075] loop1: detected capacity change from 0 to 1024 [ 270.141677][T16075] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000008,barrier=0x0000000000000004,norecovery,debug_want_extra_isize=0x0000000000000080,nodiscard,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none. [ 270.230900][T16082] loop1: detected capacity change from 0 to 256 [ 270.256551][T16077] loop9: detected capacity change from 0 to 40427 [ 270.278034][T16082] FAT-fs (loop1): Directory bread(block 64) failed [ 270.284453][T16082] FAT-fs (loop1): Directory bread(block 65) failed [ 270.290905][T16082] FAT-fs (loop1): Directory bread(block 66) failed [ 270.297340][T16082] FAT-fs (loop1): Directory bread(block 67) failed [ 270.303879][T16082] FAT-fs (loop1): Directory bread(block 68) failed [ 270.310231][T16082] FAT-fs (loop1): Directory bread(block 69) failed [ 270.316669][T16082] FAT-fs (loop1): Directory bread(block 70) failed [ 270.323635][T16082] FAT-fs (loop1): Directory bread(block 71) failed [ 270.330014][T16077] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 270.337601][T16077] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 270.345601][T16082] FAT-fs (loop1): Directory bread(block 72) failed [ 270.352062][T16082] FAT-fs (loop1): Directory bread(block 73) failed [ 270.382237][T16077] F2FS-fs (loop9): Found nat_bits in checkpoint [ 270.417349][ T317] attempt to access beyond end of device [ 270.417349][ T317] loop1: rw=1, want=1228, limit=256 [ 270.450614][T16077] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 270.457694][T16077] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 270.481658][T16096] input: syz1 as /devices/virtual/input/input45 [ 270.542591][T16102] loop1: detected capacity change from 0 to 256 [ 270.569892][T16102] exfat: Deprecated parameter 'utf8' [ 270.579741][T16102] exfat: Deprecated parameter 'namecase' [ 270.585726][T16102] exfat: Deprecated parameter 'utf8' [ 270.594101][T16102] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 270.643712][T16107] loop9: detected capacity change from 0 to 512 [ 270.663638][T16107] EXT4-fs (loop9): Ignoring removed nobh option [ 270.670248][T16107] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 270.703671][T16107] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 270.705164][T16111] loop7: detected capacity change from 0 to 256 [ 270.723934][T16107] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.741730][T16115] loop1: detected capacity change from 0 to 256 [ 270.756544][T16111] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 270.756845][T16107] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.6691: bg 0: block 224: padding at end of block bitmap is not set [ 270.784122][T16107] EXT4-fs (loop9): Remounting filesystem read-only [ 270.791800][T16107] EXT4-fs error (device loop9) in ext4_evict_inode:258: Readonly filesystem [ 270.823186][T16115] FAT-fs (loop1): Directory bread(block 64) failed [ 270.831011][T16115] FAT-fs (loop1): Directory bread(block 65) failed [ 270.841250][T16115] FAT-fs (loop1): Directory bread(block 66) failed [ 270.848200][T16115] FAT-fs (loop1): Directory bread(block 67) failed [ 270.856793][T16119] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 270.868813][T16115] FAT-fs (loop1): Directory bread(block 68) failed [ 270.893239][T16122] loop9: detected capacity change from 0 to 256 [ 270.899428][T16115] FAT-fs (loop1): Directory bread(block 69) failed [ 270.901265][ T6] usb 5-1: reset high-speed USB device number 24 using dummy_hcd [ 270.919815][T16115] FAT-fs (loop1): Directory bread(block 70) failed [ 270.926261][T16115] FAT-fs (loop1): Directory bread(block 71) failed [ 270.935709][T16115] FAT-fs (loop1): Directory bread(block 72) failed [ 270.942267][T16115] FAT-fs (loop1): Directory bread(block 73) failed [ 270.955535][T16130] loop8: detected capacity change from 0 to 1024 [ 270.963793][ T6] usb 5-1: device reset changed ep0 maxpacket size! [ 270.972800][T16122] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 270.985030][ T3244] usb 5-1: USB disconnect, device number 24 [ 270.997866][T16132] loop7: detected capacity change from 0 to 512 [ 271.031899][T16132] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 271.032485][T16130] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 271.040912][T16132] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 271.062072][ T346] attempt to access beyond end of device [ 271.062072][ T346] loop1: rw=1, want=1228, limit=256 [ 271.074732][T16132] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 271.085554][T16132] System zones: 0-2, 18-18, 34-34 [ 271.099021][T16132] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 271.115364][ T30] kauditd_printk_skb: 118 callbacks suppressed [ 271.115379][ T30] audit: type=1400 audit(2000000659.742:13518): avc: denied { connect } for pid=16137 comm="syz.9.6703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 271.121704][T16132] EXT4-fs (loop7): 1 truncate cleaned up [ 271.147071][ T3244] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 271.161718][T16132] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 271.175486][ T30] audit: type=1400 audit(2000000659.742:13519): avc: denied { read } for pid=16136 comm="syz.1.6702" dev="nsfs" ino=4026532295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 271.221812][ T30] audit: type=1400 audit(2000000659.742:13520): avc: denied { open } for pid=16136 comm="syz.1.6702" path="net:[4026532295]" dev="nsfs" ino=4026532295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 271.267144][ T30] audit: type=1400 audit(2000000659.782:13521): avc: denied { shutdown } for pid=16137 comm="syz.9.6703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 271.288531][ T30] audit: type=1400 audit(2000000659.782:13522): avc: denied { write } for pid=16137 comm="syz.9.6703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 271.308248][T16132] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.6701: corrupted xattr block 19 [ 271.321524][T16132] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 271.343632][T16132] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.6701: corrupted xattr block 19 [ 271.389417][T16132] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 271.399328][ T30] audit: type=1400 audit(2000000660.022:13523): avc: denied { setopt } for pid=16153 comm="syz.1.6709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 271.418734][T16132] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.6701: corrupted xattr block 19 [ 271.430744][ T3244] usb 5-1: Using ep0 maxpacket: 16 [ 271.446552][ T30] audit: type=1400 audit(2000000660.072:13524): avc: denied { write } for pid=16149 comm="syz.8.6707" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 271.452691][T16142] loop9: detected capacity change from 0 to 40427 [ 271.491013][T16132] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 271.532295][T16142] F2FS-fs (loop9): fault_injection options not supported [ 271.540579][T16142] F2FS-fs (loop9): invalid crc value [ 271.548498][T16142] F2FS-fs (loop9): Found nat_bits in checkpoint [ 271.561298][ T3244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.581172][ T3244] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.601185][ T3244] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 271.620229][ T3244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.631560][ T3244] usb 5-1: config 0 descriptor?? [ 271.637829][T16142] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 271.679785][ T30] audit: type=1400 audit(2000000660.302:13525): avc: denied { setattr } for pid=16141 comm="syz.9.6704" name="file0" dev="loop9" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 271.702146][T14878] attempt to access beyond end of device [ 271.702146][T14878] loop9: rw=2049, want=45104, limit=40427 [ 271.762356][ T30] audit: type=1326 audit(2000000660.392:13526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16171 comm="syz.1.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3719952819 code=0x7ffc0000 [ 271.807042][ T30] audit: type=1326 audit(2000000660.392:13527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16171 comm="syz.1.6716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f3719952819 code=0x7ffc0000 [ 271.836362][T16176] loop1: detected capacity change from 0 to 512 [ 271.867268][T16132] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.6701: corrupted xattr block 19 [ 271.880439][T16176] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 271.889264][T16132] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 272.022256][T16194] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 272.102725][ T3244] hid-multitouch 0003:1FD2:6007.0054: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 272.251189][ T366] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 272.306778][ T3244] usb 5-1: USB disconnect, device number 25 [ 272.681270][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.692099][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.701690][ T366] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 272.710675][ T366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.719232][ T366] usb 2-1: config 0 descriptor?? [ 273.000798][T16234] loop4: detected capacity change from 0 to 128 [ 273.023309][T16236] loop9: detected capacity change from 0 to 1024 [ 273.042285][T16234] EXT4-fs (loop4): Test dummy encryption mode enabled [ 273.050498][T16234] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 273.063877][T16236] EXT4-fs (loop9): Test dummy encryption mode enabled [ 273.070675][T16236] EXT4-fs (loop9): Test dummy encryption mode enabled [ 273.071266][T16234] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 273.077460][T16236] EXT4-fs (loop9): Ignoring removed orlov option [ 273.096240][T16236] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000003,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 273.135449][T16236] EXT4-fs (loop9): Test dummy encryption mode enabled [ 273.142283][T16236] EXT4-fs (loop9): Test dummy encryption mode enabled [ 273.148895][T16236] EXT4-fs (loop9): Ignoring removed orlov option [ 273.156365][T16236] EXT4-fs (loop9): re-mounted. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000003,max_dir_size_kb=0x0000000000000004,. Quota mode: writeback. [ 273.202123][ T366] belkin 0003:1020:0006.0055: report_id 0 is invalid [ 273.208736][ T366] belkin 0003:1020:0006.0055: item 0 0 1 8 parsing failed [ 273.214799][T16246] loop8: detected capacity change from 0 to 1024 [ 273.219501][ T366] belkin 0003:1020:0006.0055: parse failed [ 273.229918][ T366] belkin: probe of 0003:1020:0006.0055 failed with error -22 [ 273.242297][T16246] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option [ 273.253827][T16250] loop9: detected capacity change from 0 to 512 [ 273.254330][T16246] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 273.276934][T16250] EXT4-fs (loop9): Mount option "nouser_xattr" will be removed by 3.5 [ 273.276934][T16250] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 273.276934][T16250] [ 273.282686][T16252] loop4: detected capacity change from 0 to 128 [ 273.296777][T16246] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 273.309811][T16246] System zones: 0-1, 3-36 [ 273.314901][T16246] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 273.344064][T16250] EXT4-fs error (device loop9): ext4_do_update_inode:5205: inode #3: comm syz.9.6748: corrupted inode contents [ 273.356228][T16250] EXT4-fs (loop9): Remounting filesystem read-only [ 273.363163][T16250] EXT4-fs error (device loop9): ext4_dirty_inode:6038: inode #3: comm syz.9.6748: mark_inode_dirty error [ 273.375434][T16250] EXT4-fs error (device loop9): ext4_do_update_inode:5205: inode #3: comm syz.9.6748: corrupted inode contents [ 273.389112][T16250] EXT4-fs error (device loop9): __ext4_ext_dirty:183: inode #3: comm syz.9.6748: mark_inode_dirty error [ 273.401117][T16250] EXT4-fs error (device loop9): ext4_acquire_dquot:6187: comm syz.9.6748: Failed to acquire dquot type 0 [ 273.421292][ T366] usb 2-1: USB disconnect, device number 31 [ 273.440159][T16250] EXT4-fs (loop9): 1 truncate cleaned up [ 273.445752][T16250] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,nouid32,max_batch_time=0x0000000000000003,. Quota mode: writeback. [ 273.461689][T16250] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.606004][T16281] loop8: detected capacity change from 0 to 256 [ 273.618904][T16286] device pim6reg1 entered promiscuous mode [ 273.692125][T16296] loop8: detected capacity change from 0 to 256 [ 273.722343][T16296] FAT-fs (loop8): Directory bread(block 1285) failed [ 273.731783][T16296] FAT-fs (loop8): Directory bread(block 1285) failed [ 273.738338][T16296] FAT-fs (loop8): Directory bread(block 1285) failed [ 273.746747][T16296] FAT-fs (loop8): Directory bread(block 1285) failed [ 273.755015][T16296] FAT-fs (loop8): Directory bread(block 1285) failed [ 273.763021][T16296] FAT-fs (loop8): Directory bread(block 1285) failed [ 273.769849][T16296] FAT-fs (loop8): Directory bread(block 1285) failed [ 273.789121][T16296] FAT-fs (loop8): Directory bread(block 1285) failed [ 273.802354][T16296] FAT-fs (loop8): FAT read failed (blocknr 1281) [ 273.810710][T16296] FAT-fs (loop8): Directory bread(block 1285) failed [ 273.826656][T16311] loop4: detected capacity change from 0 to 128 [ 273.840631][T16309] loop9: detected capacity change from 0 to 2048 [ 273.879093][T16309] Alternate GPT is invalid, using primary GPT. [ 273.885626][T16309] loop9: p1 p2 p3 [ 273.934562][T16322] loop8: detected capacity change from 0 to 512 [ 273.982837][T16322] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 274.013711][T16322] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 274.028819][T16322] EXT4-fs (loop8): 1 truncate cleaned up [ 274.034534][T16322] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 274.048768][T16337] loop9: detected capacity change from 0 to 128 [ 274.096397][T16337] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 274.118186][T16337] attempt to access beyond end of device [ 274.118186][T16337] loop9: rw=3, want=6952, limit=128 [ 274.128793][T16337] attempt to access beyond end of device [ 274.128793][T16337] loop9: rw=2051, want=7894, limit=128 [ 274.204627][T16345] loop9: detected capacity change from 0 to 512 [ 274.223887][T16345] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 274.232046][T16345] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 274.240722][T16345] EXT4-fs (loop9): 1 truncate cleaned up [ 274.246292][T16345] EXT4-fs (loop9): mounted filesystem without journal. Opts: usrquota,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 274.268971][T16345] EXT4-fs (loop9): re-mounted. Opts: usrquota,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="grpquota,jqfmt=vfsold,noblock_validity,. Quota mode: writeback. [ 274.391152][ T355] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 274.661161][ T6] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 274.791247][ T355] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.802932][T16359] loop4: detected capacity change from 0 to 256 [ 274.809062][ T355] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.834283][T16359] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 274.843006][T16359] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 274.856708][T16359] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 274.865448][T16359] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 274.874168][T16359] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 274.882759][T16359] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 274.891441][ T355] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 274.900313][ T355] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 274.908737][T16359] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 274.917858][ T355] usb 9-1: SerialNumber: syz [ 274.923774][T16359] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 274.932827][T16359] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 274.942446][T16359] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 275.012353][T16374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6805'. [ 275.021195][ T6] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.037266][ T6] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.051257][ T6] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 275.065162][ T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.074282][ T6] usb 10-1: config 0 descriptor?? [ 275.085173][T16378] SELinux: Context :yz1 is not valid (left unmapped). [ 275.212005][ T355] usb 9-1: 0:2 : does not exist [ 275.452685][ T355] usb 9-1: USB disconnect, device number 13 [ 275.563010][ T6] hid-multitouch 0003:1FD2:6007.0056: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.9-1/input0 [ 275.739380][T16433] input: syz1 as /devices/virtual/input/input46 [ 275.763490][ T6] usb 10-1: USB disconnect, device number 9 [ 275.803116][T16440] loop7: detected capacity change from 0 to 256 [ 275.829186][T16440] FAT-fs (loop7): Directory bread(block 64) failed [ 275.835745][T16440] FAT-fs (loop7): Directory bread(block 65) failed [ 275.849831][T16440] FAT-fs (loop7): Directory bread(block 66) failed [ 275.868592][T16440] FAT-fs (loop7): Directory bread(block 67) failed [ 275.879566][T16440] FAT-fs (loop7): Directory bread(block 68) failed [ 275.887697][T16440] FAT-fs (loop7): Directory bread(block 69) failed [ 275.895975][T16440] FAT-fs (loop7): Directory bread(block 70) failed [ 275.903376][T16443] netlink: 'syz.8.6833': attribute type 4 has an invalid length. [ 275.913771][T16440] FAT-fs (loop7): Directory bread(block 71) failed [ 275.924703][T16440] FAT-fs (loop7): Directory bread(block 72) failed [ 275.933211][T16440] FAT-fs (loop7): Directory bread(block 73) failed [ 275.993690][T16447] ip_tunnel: non-ECT from 0.0.0.224 with TOS=0x3 [ 276.039645][T16453] loop7: detected capacity change from 0 to 512 [ 276.072059][T16453] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 276.091916][T16453] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 276.110770][T16453] EXT4-fs (loop7): 1 orphan inode deleted [ 276.116761][T16459] loop8: detected capacity change from 0 to 512 [ 276.119029][T16453] EXT4-fs (loop7): 1 truncate cleaned up [ 276.125310][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 276.125326][ T30] audit: type=1400 audit(2000000664.752:13779): avc: denied { read write } for pid=16462 comm="syz.4.6842" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 276.128776][T16453] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,noblock_validity,,errors=continue. Quota mode: none. [ 276.159609][ T30] audit: type=1400 audit(2000000664.762:13780): avc: denied { open } for pid=16462 comm="syz.4.6842" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 276.213429][ T30] audit: type=1400 audit(2000000664.762:13781): avc: denied { ioctl } for pid=16462 comm="syz.4.6842" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 276.242149][T16459] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 276.258346][ T30] audit: type=1400 audit(2000000664.812:13782): avc: denied { mount } for pid=16452 comm="syz.7.6838" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 276.292547][T16459] EXT4-fs (loop8): 1 truncate cleaned up [ 276.297356][ T30] audit: type=1326 audit(2000000664.822:13783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.8.6841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd579ca74aa code=0x7ffc0000 [ 276.309302][T16459] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable,auto_da_alloc,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 276.323046][ T30] audit: type=1326 audit(2000000664.822:13784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.8.6841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd579ca74aa code=0x7ffc0000 [ 276.367470][T16476] loop9: detected capacity change from 0 to 512 [ 276.372811][ T30] audit: type=1400 audit(2000000664.832:13785): avc: denied { write } for pid=16452 comm="syz.7.6838" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 276.396320][ T30] audit: type=1400 audit(2000000664.832:13786): avc: denied { add_name } for pid=16452 comm="syz.7.6838" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 276.418684][ T30] audit: type=1400 audit(2000000664.832:13787): avc: denied { create } for pid=16452 comm="syz.7.6838" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 276.440231][ T30] audit: type=1400 audit(2000000664.832:13788): avc: denied { read append open } for pid=16452 comm="syz.7.6838" path="/73/bus/cgroup.controllers" dev="loop7" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 276.499008][T16476] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 276.516090][T16476] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.532871][T16488] loop1: detected capacity change from 0 to 16 [ 276.551133][ T366] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 276.562132][T16488] erofs: (device loop1): mounted with root inode @ nid 36. [ 276.595031][T16493] loop7: detected capacity change from 0 to 1024 [ 276.626882][T16493] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 276.629128][T16497] loop1: detected capacity change from 0 to 128 [ 276.642304][T16493] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 276.650096][T16493] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 276.665444][T16493] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,usrquota,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,grpjquota=,grpid,,errors=continue. Quota mode: writeback. [ 276.692933][T16493] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: writeback. [ 276.702101][T16497] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 276.714009][T16497] ext4 filesystem being mounted at /551/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.724684][T16493] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: writeback. [ 276.822871][T16517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6864'. [ 276.868876][T16523] loop7: detected capacity change from 0 to 256 [ 276.901930][T16523] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 276.930199][T16523] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 276.943027][ T366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 276.955031][ T366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 276.966500][ T366] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 276.982229][ T366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.998348][ T366] usb 5-1: config 0 descriptor?? [ 277.178116][T16554] loop8: detected capacity change from 0 to 128 [ 277.244517][T16554] FAT-fs (loop8): Directory bread(block 32) failed [ 277.261162][T16554] FAT-fs (loop8): Directory bread(block 33) failed [ 277.267580][T16554] FAT-fs (loop8): Directory bread(block 34) failed [ 277.291186][T16554] FAT-fs (loop8): Directory bread(block 35) failed [ 277.307766][T16554] FAT-fs (loop8): Directory bread(block 36) failed [ 277.317829][T16554] FAT-fs (loop8): Directory bread(block 37) failed [ 277.331183][T16554] FAT-fs (loop8): Directory bread(block 38) failed [ 277.341493][T16554] FAT-fs (loop8): Directory bread(block 39) failed [ 277.347871][T16554] FAT-fs (loop8): Directory bread(block 40) failed [ 277.374550][T16554] FAT-fs (loop8): Directory bread(block 41) failed [ 277.405402][T16548] loop1: detected capacity change from 0 to 40427 [ 277.453207][T16548] F2FS-fs (loop1): invalid crc value [ 277.461837][T16554] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 277.462108][ T366] keytouch 0003:0926:3333.0057: fixing up Keytouch IEC report descriptor [ 277.469742][T16554] FAT-fs (loop8): Filesystem has been set read-only [ 277.492157][T16548] F2FS-fs (loop1): Found nat_bits in checkpoint [ 277.492709][ T366] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0057/input/input47 [ 277.539875][T16511] loop9: detected capacity change from 0 to 131072 [ 277.551949][T16548] F2FS-fs (loop1): Start checkpoint disabled! [ 277.558715][T16548] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 277.580368][T16511] F2FS-fs (loop9): Found nat_bits in checkpoint [ 277.603497][ T366] keytouch 0003:0926:3333.0057: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 277.629903][ T1465] attempt to access beyond end of device [ 277.629903][ T1465] loop1: rw=2049, want=40976, limit=40427 [ 277.671277][T16511] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 277.701139][ C1] usb 5-1: input irq status -75 received [ 277.892934][ T366] usb 5-1: USB disconnect, device number 26 [ 278.062693][T16591] loop9: detected capacity change from 0 to 256 [ 278.111914][T16591] exfat: Deprecated parameter 'utf8' [ 278.117128][T16591] exfat: Deprecated parameter 'namecase' [ 278.121152][ T3671] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 278.123257][T16591] exfat: Deprecated parameter 'utf8' [ 278.138014][T16591] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 278.222141][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 278.333963][T16573] loop8: detected capacity change from 0 to 131072 [ 278.361164][ T3671] usb 2-1: Using ep0 maxpacket: 16 [ 278.371779][T16573] F2FS-fs (loop8): Invalid log sectorsize (67108873) [ 278.378274][T16573] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 278.387688][T16573] F2FS-fs (loop8): invalid crc value [ 278.395071][T16573] F2FS-fs (loop8): Found nat_bits in checkpoint [ 278.415221][T16598] loop4: detected capacity change from 0 to 128 [ 278.436652][T16573] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 278.444021][T16573] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 278.452442][T16598] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 278.463095][T16598] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 278.481227][ T3671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.496349][ T3671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.506048][ T3671] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 278.515503][ T3671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.539728][ T3671] usb 2-1: config 0 descriptor?? [ 278.996171][T16616] loop8: detected capacity change from 0 to 512 [ 279.022644][ T3671] hid-multitouch 0003:1FD2:6007.0058: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 279.036103][T16616] EXT4-fs (loop8): Quota format mount options ignored when QUOTA feature is enabled [ 279.053690][T16616] EXT4-fs (loop8): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue. Quota mode: writeback. [ 279.073076][T16616] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.224321][ T366] usb 2-1: USB disconnect, device number 32 [ 279.335616][T16633] loop8: detected capacity change from 0 to 512 [ 279.362160][T16633] EXT4-fs (loop8): Ignoring removed nobh option [ 279.368383][T16633] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 279.380197][T16633] EXT4-fs (loop8): 1 truncate cleaned up [ 279.385963][T16633] EXT4-fs (loop8): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,data_err=abort,,errors=continue. Quota mode: none. [ 279.493019][T16640] loop8: detected capacity change from 0 to 512 [ 279.512167][T16640] EXT4-fs (loop8): Ignoring removed oldalloc option [ 279.518655][T16640] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 279.530359][T16640] EXT4-fs (loop8): 1 truncate cleaned up [ 279.536010][T16640] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 279.737149][T16658] loop8: detected capacity change from 0 to 128 [ 279.794765][T16647] loop4: detected capacity change from 0 to 40427 [ 279.852050][T16647] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 279.859622][T16647] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 279.871036][T16647] F2FS-fs (loop4): Found nat_bits in checkpoint [ 279.903298][T16647] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 279.910264][T16647] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 280.061249][ T366] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 280.116949][T16675] loop7: detected capacity change from 0 to 128 [ 280.123217][ T3244] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 280.143625][T16675] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 280.154170][T16675] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.168531][T16675] EXT4-fs error (device loop7): dx_make_map:1328: inode #2: block 20: comm syz.7.6928: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 280.191477][T16675] EXT4-fs error (device loop7) in do_split:2093: Corrupt filesystem [ 280.251177][ T3671] Bluetooth: hci0: command 0x1003 tx timeout [ 280.257403][ T5550] Bluetooth: hci0: sending frame failed (-49) [ 280.461307][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 280.472637][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 280.483661][ T366] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.496577][ T366] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.505499][ T366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.513370][ T3244] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.524460][ T3244] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.537549][ T366] usb 2-1: config 0 descriptor?? [ 280.543232][ T3244] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.552498][ T3244] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.561234][T16662] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 280.569313][ T3244] usb 9-1: config 0 descriptor?? [ 280.923981][T16717] kvm [16716]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x3030303030303030 [ 281.032258][ T366] plantronics 0003:047F:FFFF.0059: unknown main item tag 0xd [ 281.041257][ T366] plantronics 0003:047F:FFFF.0059: No inputs registered, leaving [ 281.050309][ T366] plantronics 0003:047F:FFFF.0059: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 281.064029][ T3244] plantronics 0003:047F:FFFF.005A: unknown main item tag 0x5 [ 281.072483][ T3244] plantronics 0003:047F:FFFF.005A: No inputs registered, leaving [ 281.081479][ T3244] plantronics 0003:047F:FFFF.005A: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 281.096571][T16722] loop4: detected capacity change from 0 to 40427 [ 281.141764][T16722] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 281.148545][T16722] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 281.158718][T16722] F2FS-fs (loop4): invalid crc value [ 281.165420][T16722] F2FS-fs (loop4): Found nat_bits in checkpoint [ 281.196915][T16722] F2FS-fs (loop4): Start checkpoint disabled! [ 281.204995][T16722] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 281.212138][T16722] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 281.236957][ T30] kauditd_printk_skb: 156 callbacks suppressed [ 281.236975][ T30] audit: type=1400 audit(2000000669.862:13945): avc: denied { create } for pid=16721 comm="syz.4.6949" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 281.237399][T16722] attempt to access beyond end of device [ 281.237399][T16722] loop4: rw=2049, want=53256, limit=40427 [ 281.298508][ T8] attempt to access beyond end of device [ 281.298508][ T8] loop4: rw=2049, want=40992, limit=40427 [ 281.342346][ T355] usb 9-1: USB disconnect, device number 14 [ 281.351529][ T6] usb 2-1: USB disconnect, device number 33 [ 281.400247][T16727] syz.4.6950[16727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.400268][ T30] audit: type=1400 audit(2000000670.022:13946): avc: denied { integrity } for pid=16726 comm="syz.4.6950" lockdown_reason="use of bpf to write user RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 281.400339][T16727] syz.4.6950[16727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.478316][ T30] audit: type=1400 audit(2000000670.102:13947): avc: denied { sys_module } for pid=16730 comm="syz.4.6952" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 281.478636][T16731] Invalid ELF header magic: != ELF [ 281.489650][ T30] audit: type=1400 audit(2000000670.102:13948): avc: denied { module_load } for pid=16730 comm="syz.4.6952" path="/sys/kernel/notes" dev="sysfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 281.875921][ T30] audit: type=1400 audit(2000000670.502:13949): avc: denied { write } for pid=16739 comm="syz.8.6954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 281.975632][T16746] device vlan2 entered promiscuous mode [ 282.047637][ T30] audit: type=1326 audit(2000000670.672:13950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.1.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3719952819 code=0x7ffc0000 [ 282.091672][ T30] audit: type=1326 audit(2000000670.672:13951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.1.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3719952819 code=0x7ffc0000 [ 282.134067][ T30] audit: type=1326 audit(2000000670.722:13952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.1.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3719952819 code=0x7ffc0000 [ 282.178526][ T30] audit: type=1326 audit(2000000670.722:13953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.1.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3719952819 code=0x7ffc0000 [ 282.221192][ T30] audit: type=1326 audit(2000000670.792:13954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16749 comm="syz.1.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3719952819 code=0x7ffc0000 [ 282.341144][ T3671] Bluetooth: hci0: command 0x1001 tx timeout [ 282.347774][ T5550] Bluetooth: hci0: sending frame failed (-49) [ 282.511161][ T366] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 282.695327][T16766] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 282.761122][ T366] usb 2-1: Using ep0 maxpacket: 8 [ 282.881192][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.892714][T16775] loop4: detected capacity change from 0 to 40427 [ 282.899147][ T366] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.908813][ T366] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 282.917699][ T366] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.926330][ T366] usb 2-1: config 0 descriptor?? [ 282.931753][T16775] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 282.938776][T16775] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 282.948389][T16775] F2FS-fs (loop4): invalid crc value [ 282.955642][T16775] F2FS-fs (loop4): Found nat_bits in checkpoint [ 282.988532][T16775] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 282.995544][T16775] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 283.076259][T14691] attempt to access beyond end of device [ 283.076259][T14691] loop4: rw=2049, want=45104, limit=40427 [ 283.412264][ T366] kone 0003:1E7D:2CED.005B: collection stack underflow [ 283.423437][ T366] kone 0003:1E7D:2CED.005B: item 0 4 0 12 parsing failed [ 283.430542][ T366] kone 0003:1E7D:2CED.005B: parse failed [ 283.448054][ T366] kone: probe of 0003:1E7D:2CED.005B failed with error -22 [ 283.476878][T16806] loop7: detected capacity change from 0 to 128 [ 283.523668][T16806] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 283.534527][T16806] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 283.570906][T16806] netlink: 88 bytes leftover after parsing attributes in process `syz.7.6984'. [ 283.591166][T16806] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6984'. [ 283.615742][ T3671] usb 2-1: USB disconnect, device number 34 [ 283.770466][T16816] loop8: detected capacity change from 0 to 128 [ 283.783448][T16816] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 283.793930][T16816] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 284.012318][T16830] loop4: detected capacity change from 0 to 128 [ 284.030015][T16832] loop8: detected capacity change from 0 to 512 [ 284.054354][T16832] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 284.067366][T16832] EXT4-fs (loop8): 1 orphan inode deleted [ 284.073226][T16832] EXT4-fs (loop8): 1 truncate cleaned up [ 284.078868][T16832] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,block_validity,quota,. Quota mode: writeback. [ 284.103630][T16832] EXT4-fs (loop8): shut down requested (2) [ 284.119760][T16836] incfs: iterate_incfs_dir / -22 [ 284.140416][T16839] loop4: detected capacity change from 0 to 128 [ 284.202824][T16852] tipc: Started in network mode [ 284.213171][T16852] tipc: Node identity 1, cluster identity 4711 [ 284.219168][T16852] tipc: Node number set to 1 [ 284.228613][T16852] tipc: Cannot configure node identity twice [ 284.301715][T16871] loop4: detected capacity change from 0 to 512 [ 284.336346][T16871] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 284.344122][T16871] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 284.353401][T16871] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c119, mo2=0002] [ 284.361370][T16871] System zones: 1-12 [ 284.365842][T16871] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #15: comm syz.4.7012: inline data xattr refers to an external xattr inode [ 284.380974][T16871] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.7012: couldn't read orphan inode 15 (err -117) [ 284.392978][T16871] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,data_err=abort,debug,noload,mblk_io_submit,nombcache,init_itable=0x00000000000005ff,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 284.421234][ T6] Bluetooth: hci0: command 0x1009 tx timeout [ 284.428386][T14691] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 284.449053][T14691] EXT4-fs error (device loop4): ext4_empty_dir:3175: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 284.468508][T14691] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 284.488887][T14691] EXT4-fs error (device loop4): ext4_empty_dir:3175: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 284.508421][T14691] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 284.528771][T14691] EXT4-fs error (device loop4): ext4_empty_dir:3175: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 284.550182][T14691] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 284.570339][T14691] EXT4-fs error (device loop4): ext4_empty_dir:3175: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 284.589822][T14691] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 284.609991][T14691] EXT4-fs error (device loop4): ext4_empty_dir:3175: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 284.835291][T16877] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.842512][T16877] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.849957][T16877] device bridge_slave_0 entered promiscuous mode [ 284.860206][T16877] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.867666][T16877] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.875321][T16877] device bridge_slave_1 entered promiscuous mode [ 284.932183][T16877] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.939034][T16877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.946547][T16877] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.953628][T16877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.980361][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 284.988597][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.996322][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.008229][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.016579][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.023447][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.033110][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.041467][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.048337][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.077139][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.089170][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.105904][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 285.129194][T16877] device veth0_vlan entered promiscuous mode [ 285.142522][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.152409][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 285.160135][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 285.178397][T16892] binder: 16891:16892 ioctl c00c620f 0 returned -14 [ 285.194511][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 285.207686][T16877] device veth1_macvtap entered promiscuous mode [ 285.219004][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.247326][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.291369][T16903] loop3: detected capacity change from 0 to 512 [ 285.297771][ T1465] device bridge_slave_1 left promiscuous mode [ 285.303895][ T1465] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.312120][ T1465] device bridge_slave_0 left promiscuous mode [ 285.318068][ T1465] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.326100][ T1465] device veth1_macvtap left promiscuous mode [ 285.331980][ T1465] device veth0_vlan left promiscuous mode [ 285.373484][T16903] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nobarrier,quota,,errors=continue. Quota mode: writeback. [ 285.387088][T16903] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.451663][ T355] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 285.551200][ T291] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 285.761221][ T3671] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 285.791236][ T291] usb 9-1: Using ep0 maxpacket: 8 [ 285.811272][ T355] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD6, skipping [ 285.911282][ T291] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 285.920177][ T291] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 285.928817][ T291] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 285.938047][ T291] usb 9-1: config 250 has no interface number 0 [ 285.945792][ T291] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 285.958332][ T291] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 285.969170][ T291] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 285.979646][ T291] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 285.993323][ T355] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 286.002398][ T291] usb 9-1: config 250 interface 228 has no altsetting 0 [ 286.010189][ T355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.011192][ T3671] usb 4-1: Using ep0 maxpacket: 16 [ 286.018590][ T355] usb 2-1: Product: syz [ 286.027852][ T355] usb 2-1: Manufacturer: syz [ 286.032378][ T355] usb 2-1: SerialNumber: syz [ 286.037911][ T355] usb 2-1: config 0 descriptor?? [ 286.121296][ T291] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 286.130277][ T291] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 286.138809][ T291] usb 9-1: Product: syz [ 286.142861][ T291] usb 9-1: SerialNumber: syz [ 286.181750][ T291] hub 9-1:250.228: bad descriptor, ignoring hub [ 286.187939][ T291] hub: probe of 9-1:250.228 failed with error -5 [ 286.282732][ T6] usb 2-1: USB disconnect, device number 35 [ 286.341288][ T3671] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 286.350171][ T3671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.358021][ T3671] usb 4-1: Product: syz [ 286.361997][ T3671] usb 4-1: Manufacturer: syz [ 286.366372][ T3671] usb 4-1: SerialNumber: syz [ 286.371699][ T3671] r8152-cfgselector 4-1: config 0 descriptor?? [ 286.391966][ T291] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 286.621254][ T3671] r8152-cfgselector 4-1: Unknown version 0x0000 [ 286.831236][ T3671] r8152-cfgselector 4-1: Unknown version 0x0000 [ 286.838311][ T3671] r8152-cfgselector 4-1: bad CDC descriptors [ 286.846309][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 286.846324][ T30] audit: type=1400 audit(2000000675.472:14008): avc: denied { read } for pid=16918 comm="syz.1.7031" name="loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 286.877408][ T30] audit: type=1400 audit(2000000675.472:14009): avc: denied { open } for pid=16918 comm="syz.1.7031" path="/dev/loop-control" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 286.881201][ T3671] r8152-cfgselector 4-1: Unknown version 0x0000 [ 286.903394][ T30] audit: type=1400 audit(2000000675.482:14010): avc: denied { ioctl } for pid=16918 comm="syz.1.7031" path="/dev/loop-control" dev="devtmpfs" ino=111 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 286.918679][ T3671] r8152-cfgselector 4-1: USB disconnect, device number 27 [ 286.941371][ T291] usb 9-1: USB disconnect, device number 15 [ 286.959043][ T291] usblp0: removed [ 286.976597][T16923] loop1: detected capacity change from 0 to 256 [ 287.005754][T16923] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a36, chksum : 0xc21c062c, utbl_chksum : 0xe619d30d) [ 287.020734][ T30] audit: type=1400 audit(2000000675.642:14011): avc: denied { write } for pid=16922 comm="syz.1.7033" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.043485][ T30] audit: type=1400 audit(2000000675.642:14012): avc: denied { add_name } for pid=16922 comm="syz.1.7033" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.043578][T16923] syz.1.7033[16923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.064583][ T30] audit: type=1400 audit(2000000675.642:14013): avc: denied { associate } for pid=16922 comm="syz.1.7033" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 287.065220][T16923] syz.1.7033[16923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.076926][ T30] audit: type=1400 audit(2000000675.672:14014): avc: denied { write } for pid=16922 comm="syz.1.7033" path="/582/file2/bus" dev="loop1" ino=1049119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 287.200770][T16926] loop1: detected capacity change from 0 to 512 [ 287.243617][T16926] EXT4-fs (loop1): orphan cleanup on readonly fs [ 287.251442][T16926] EXT4-fs error (device loop1): ext4_find_extent:929: inode #4: comm syz.1.7034: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 287.269034][ T30] audit: type=1326 audit(2000000675.892:14015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16928 comm="syz.7.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 287.278757][T16926] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 287.301953][T16926] EXT4-fs warning (device loop1): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 287.316606][T16926] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 287.323268][T16926] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 287.331170][ T30] audit: type=1326 audit(2000000675.922:14016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16928 comm="syz.7.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 287.513297][T16951] loop3: detected capacity change from 0 to 128 [ 287.841696][T16944] loop7: detected capacity change from 0 to 40427 [ 287.891661][T16944] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 287.899244][T16944] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 287.959422][T16944] F2FS-fs (loop7): Found nat_bits in checkpoint [ 288.053448][T16944] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 288.060408][T16944] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 288.318295][T16986] loop7: detected capacity change from 0 to 512 [ 288.402743][T16986] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.7059: inode #1: comm syz.7.7059: iget: illegal inode # [ 288.417596][T16933] loop8: detected capacity change from 0 to 131072 [ 288.425961][T16986] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.7059: error while reading EA inode 1 err=-117 [ 288.451385][T16986] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.7059: inode #1: comm syz.7.7059: iget: illegal inode # [ 288.473087][T16933] F2FS-fs (loop8): invalid crc value [ 288.481794][T16986] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.7059: error while reading EA inode 1 err=-117 [ 288.500024][T16933] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 288.531541][T16986] EXT4-fs (loop7): 1 orphan inode deleted [ 288.536705][T16953] loop1: detected capacity change from 0 to 131072 [ 288.537192][T16986] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,nobarrier,usrjquota=,,errors=continue. Quota mode: none. [ 288.579859][T16933] F2FS-fs (loop8): Mounted with checkpoint version = 753bd00b [ 288.600917][T16984] loop3: detected capacity change from 0 to 40427 [ 288.602313][T16953] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 288.617001][T16953] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 288.626724][T16953] F2FS-fs (loop1): invalid crc value [ 288.640593][T16933] syz.8.7038 (pid 16933) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 288.657671][T16953] F2FS-fs (loop1): Found nat_bits in checkpoint [ 288.671934][T16984] F2FS-fs (loop3): invalid crc value [ 288.700888][T16984] F2FS-fs (loop3): Found nat_bits in checkpoint [ 288.719228][T16953] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 288.745599][T16953] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 288.745659][T16984] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 289.021753][T17016] loop3: detected capacity change from 0 to 512 [ 289.045625][T17019] loop7: detected capacity change from 0 to 512 [ 289.062220][T17016] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 289.094116][T17016] EXT4-fs (loop3): 1 truncate cleaned up [ 289.109523][T17016] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,auto_da_alloc,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 289.131981][T17019] EXT4-fs (loop7): Ignoring removed oldalloc option [ 289.141261][T17019] EXT4-fs (loop7): Mount option "nouser_xattr" will be removed by 3.5 [ 289.141261][T17019] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 289.141261][T17019] [ 289.268088][T17019] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 289.284152][T17019] EXT4-fs (loop7): Mount option "commit=0x0000000000000000" incompatible with ext2 [ 289.310827][T17024] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 289.341478][T17024] SELinux: failed to load policy [ 289.471361][T17042] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 289.497853][T17046] loop8: detected capacity change from 0 to 256 [ 289.545985][T17046] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 289.671273][ T60] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 290.921209][ T60] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 290.938456][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.950898][T17094] loop7: detected capacity change from 0 to 2048 [ 290.958752][ T60] usb 4-1: config 0 descriptor?? [ 290.981628][T17094] loop7: p1 < > p2 p3 < p5 > [ 290.986835][T17094] loop7: p2 start 16908804 is beyond EOD, truncated [ 290.993916][T17094] loop7: p5 start 16908804 is beyond EOD, truncated [ 291.041196][ T3244] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 291.052870][T17094] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7099'. [ 291.111142][ T291] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 291.231139][ T366] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 291.431364][ T3244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 291.442643][ T3244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 291.453794][ T3244] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 291.466525][ T3244] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.475400][ T3244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.483879][ T3244] usb 2-1: config 0 descriptor?? [ 291.491270][ T291] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.502028][ T291] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.502074][T17066] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 291.511569][ T291] usb 9-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 291.527885][ T291] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.536464][ T291] usb 9-1: config 0 descriptor?? [ 291.601197][ T366] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.611285][ T366] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.811355][ T366] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.820369][ T366] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.828367][ T366] usb 10-1: Product: syz [ 291.832926][ T366] usb 10-1: Manufacturer: syz [ 291.837373][ T366] usb 10-1: SerialNumber: syz [ 291.942202][ T3244] plantronics 0003:047F:FFFF.005C: unknown main item tag 0xd [ 291.950611][ T3244] plantronics 0003:047F:FFFF.005C: No inputs registered, leaving [ 291.959291][ T3244] plantronics 0003:047F:FFFF.005C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 292.032823][ T291] samsung 0003:0419:0600.005D: hidraw1: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.8-1/input0 [ 292.212228][ T291] usb 2-1: USB disconnect, device number 36 [ 292.237741][ T6] usb 9-1: USB disconnect, device number 16 [ 292.253549][ T30] kauditd_printk_skb: 88 callbacks suppressed [ 292.253565][ T30] audit: type=1400 audit(2000000680.882:14105): avc: denied { create } for pid=17118 comm="syz.7.7110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 292.280447][ T30] audit: type=1400 audit(2000000680.902:14106): avc: denied { connect } for pid=17118 comm="syz.7.7110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 292.300420][ T30] audit: type=1400 audit(2000000680.902:14107): avc: denied { write } for pid=17118 comm="syz.7.7110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 292.332107][ T30] audit: type=1326 audit(2000000680.962:14108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.7.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 292.356269][ T30] audit: type=1326 audit(2000000680.962:14109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.7.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 292.380153][ T30] audit: type=1326 audit(2000000680.982:14110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.7.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 292.411299][ T3244] usb 4-1: USB disconnect, device number 28 [ 292.415217][ T30] audit: type=1326 audit(2000000680.982:14111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.7.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 292.441547][ T30] audit: type=1326 audit(2000000680.982:14112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.7.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 292.469719][ T30] audit: type=1326 audit(2000000680.982:14113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.7.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 292.494927][ T30] audit: type=1326 audit(2000000681.002:14114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.7.7111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 292.534221][T17129] loop3: detected capacity change from 0 to 256 [ 292.704522][T17139] loop3: detected capacity change from 0 to 16 [ 292.734111][T17139] erofs: (device loop3): mounted with root inode @ nid 36. [ 292.742840][T17139] erofs: (device loop3): find_target_block_classic: corrupted dir block 0 @ nid 36 [ 292.791917][T17147] loop3: detected capacity change from 0 to 512 [ 292.818064][T17151] loop8: detected capacity change from 0 to 256 [ 292.835104][T17147] EXT4-fs (loop3): 1 orphan inode deleted [ 292.840903][T17147] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 292.852473][T17147] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.862200][T17151] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 292.911218][T17158] loop3: detected capacity change from 0 to 128 [ 292.971168][ T366] cdc_ncm 10-1:1.0: bind() failure [ 292.991173][ T366] cdc_ncm: probe of 10-1:1.1 failed with error -71 [ 293.011166][ T366] cdc_mbim: probe of 10-1:1.1 failed with error -71 [ 293.021896][ T366] usb 10-1: USB disconnect, device number 10 [ 293.158629][T17156] loop1: detected capacity change from 0 to 40427 [ 293.202244][T17156] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 293.209899][T17156] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 293.219910][T17156] F2FS-fs (loop1): invalid crc value [ 293.232559][T17156] F2FS-fs (loop1): Found nat_bits in checkpoint [ 293.280386][T17156] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 293.287434][T17156] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 293.336449][ T346] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 293.345754][ T346] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 293.447710][T17191] loop3: detected capacity change from 0 to 1024 [ 293.520716][T17203] loop9: detected capacity change from 0 to 1024 [ 293.537946][T17191] incfs_lookup_dentry err:-13 [ 293.543332][T17203] EXT4-fs (loop9): Ignoring removed orlov option [ 293.561922][T17203] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e01c, mo2=0002] [ 293.570256][T17203] System zones: 0-1, 3-12 [ 293.575717][T17203] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsv1,abort,barrier=0x0000000000000001,orlov,debug_want_extra_isize=0x0000000000000080,nouid32,grpid,grpjquota=,debug,,errors=continue. Quota mode: none. [ 293.699073][T17224] loop3: detected capacity change from 0 to 2048 [ 293.727247][T17224] Alternate GPT is invalid, using primary GPT. [ 293.733535][T17224] loop3: p2 p3 p7 [ 293.884637][T17245] netlink: 165 bytes leftover after parsing attributes in process `syz.1.7166'. [ 294.131168][ T42] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 294.521242][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.541106][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.550714][ T42] usb 9-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 294.571104][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.591418][ T42] usb 9-1: config 0 descriptor?? [ 294.611168][ T3244] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 294.871155][ T3244] usb 2-1: Using ep0 maxpacket: 8 [ 295.001214][ T3244] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 295.021819][T17294] loop3: detected capacity change from 0 to 512 [ 295.053420][T17294] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 295.064712][ T42] itetech 0003:258A:6A88.005E: unknown main item tag 0x0 [ 295.082087][ T42] itetech 0003:258A:6A88.005E: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.8-1/input0 [ 295.102381][T17294] EXT4-fs (loop3): 1 truncate cleaned up [ 295.107913][T17294] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,jqfmt=vfsv0,nombcache,quota,,errors=continue. Quota mode: writeback. [ 295.201244][ T3244] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 295.220590][ T3244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.231138][ T3244] usb 2-1: Product: syz [ 295.235185][ T3244] usb 2-1: Manufacturer: syz [ 295.239616][ T3244] usb 2-1: SerialNumber: syz [ 295.246506][ T3244] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 295.255505][ T3244] usb 2-1: no configuration chosen from 1 choice [ 295.276014][ T3244] usb 9-1: USB disconnect, device number 17 [ 297.263353][ T30] kauditd_printk_skb: 243 callbacks suppressed [ 297.263372][ T30] audit: type=1400 audit(2000000685.892:14358): avc: denied { read write } for pid=15590 comm="syz-executor" name="loop7" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 297.328278][ T3671] usb 2-1: USB disconnect, device number 37 [ 297.338546][ T30] audit: type=1400 audit(2000000685.962:14359): avc: denied { read write } for pid=10818 comm="syz-executor" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 297.391194][ T30] audit: type=1400 audit(2000000686.012:14360): avc: denied { read write } for pid=15590 comm="syz-executor" name="loop7" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 297.431142][ T30] audit: type=1400 audit(2000000686.022:14361): avc: denied { read write } for pid=16877 comm="syz-executor" name="loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 297.484769][ T30] audit: type=1400 audit(2000000686.062:14362): avc: denied { read write } for pid=16877 comm="syz-executor" name="loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 297.537243][ T30] audit: type=1400 audit(2000000686.062:14363): avc: denied { read write } for pid=15590 comm="syz-executor" name="loop7" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 297.590223][ T30] audit: type=1400 audit(2000000686.102:14364): avc: denied { create } for pid=17401 comm="syz.3.7235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 297.636897][ T30] audit: type=1400 audit(2000000686.102:14365): avc: denied { read write } for pid=16877 comm="syz-executor" name="loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 297.687692][ T30] audit: type=1400 audit(2000000686.132:14366): avc: denied { read write } for pid=15590 comm="syz-executor" name="loop7" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 297.733939][ T30] audit: type=1400 audit(2000000686.152:14367): avc: denied { read write } for pid=17404 comm="syz.3.7236" name="loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 300.918914][T17553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17553 comm=syz.9.7304 [ 301.008197][T17560] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17560 comm=syz.8.7307 [ 302.286179][ T30] kauditd_printk_skb: 267 callbacks suppressed [ 302.286198][ T30] audit: type=1400 audit(2000000690.912:14635): avc: denied { map_create } for pid=17618 comm="syz.7.7333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 302.331144][ T30] audit: type=1400 audit(2000000690.922:14636): avc: denied { read write } for pid=15590 comm="syz-executor" name="loop7" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 302.376795][ T30] audit: type=1400 audit(2000000690.942:14637): avc: denied { map_create } for pid=17620 comm="syz.7.7334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 302.421655][ T30] audit: type=1400 audit(2000000690.942:14638): avc: denied { prog_load } for pid=17620 comm="syz.7.7334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 302.451444][ T30] audit: type=1400 audit(2000000690.942:14639): avc: denied { create } for pid=17620 comm="syz.7.7334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 302.521140][ T30] audit: type=1400 audit(2000000690.962:14640): avc: denied { read write } for pid=15590 comm="syz-executor" name="loop7" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 302.576279][ T30] audit: type=1400 audit(2000000690.982:14641): avc: denied { map_create } for pid=17623 comm="syz.7.7335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 302.620791][ T30] audit: type=1400 audit(2000000690.992:14642): avc: denied { prog_load } for pid=17623 comm="syz.7.7335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 302.672544][ T30] audit: type=1400 audit(2000000690.992:14643): avc: denied { prog_load } for pid=17623 comm="syz.7.7335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 302.725235][ T30] audit: type=1400 audit(2000000691.002:14644): avc: denied { read write } for pid=15590 comm="syz-executor" name="loop7" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 307.294203][ T30] kauditd_printk_skb: 452 callbacks suppressed [ 307.294222][ T30] audit: type=1400 audit(2000000695.922:15097): avc: denied { map_create } for pid=17959 comm="syz.9.7493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 307.340038][ T30] audit: type=1400 audit(2000000695.962:15098): avc: denied { map_create } for pid=17959 comm="syz.9.7493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 307.390049][ T30] audit: type=1400 audit(2000000695.962:15099): avc: denied { map_create } for pid=17959 comm="syz.9.7493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 307.429818][ T30] audit: type=1400 audit(2000000695.972:15100): avc: denied { read write } for pid=14878 comm="syz-executor" name="loop9" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 307.488076][ T30] audit: type=1400 audit(2000000696.002:15101): avc: denied { prog_load } for pid=17961 comm="syz.9.7494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 307.517598][ T30] audit: type=1400 audit(2000000696.002:15102): avc: denied { map_create } for pid=17961 comm="syz.9.7494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 307.557387][ T30] audit: type=1400 audit(2000000696.002:15103): avc: denied { prog_load } for pid=17961 comm="syz.9.7494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 307.595895][ T30] audit: type=1400 audit(2000000696.012:15104): avc: denied { read write } for pid=14878 comm="syz-executor" name="loop9" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 307.635691][ T30] audit: type=1400 audit(2000000696.032:15105): avc: denied { map_create } for pid=17963 comm="syz.9.7495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 307.666888][ T30] audit: type=1400 audit(2000000696.032:15106): avc: denied { prog_load } for pid=17963 comm="syz.9.7495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 309.365553][T18245] device pim6reg1 entered promiscuous mode [ 310.700207][T18472] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18472 comm=syz.9.7742 [ 311.186422][T18522] device pim6reg1 entered promiscuous mode [ 311.268682][ T346] Bluetooth: hci0: Frame reassembly failed (-84) [ 312.815039][ T30] kauditd_printk_skb: 1028 callbacks suppressed [ 312.815057][ T30] audit: type=1400 audit(2000000701.442:16135): avc: denied { read write } for pid=10818 comm="syz-executor" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 312.849158][ T30] audit: type=1400 audit(2000000701.452:16136): avc: denied { read write } for pid=15549 comm="syz-executor" name="loop8" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 312.875849][ T30] audit: type=1400 audit(2000000701.472:16137): avc: denied { prog_load } for pid=18567 comm="syz.3.7787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 312.896338][ T30] audit: type=1400 audit(2000000701.472:16138): avc: denied { map_create } for pid=18566 comm="syz.7.7796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 312.916001][ T30] audit: type=1400 audit(2000000701.502:16139): avc: denied { create } for pid=18571 comm="syz.8.7788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 312.935967][ T30] audit: type=1400 audit(2000000701.502:16140): avc: denied { prog_load } for pid=18566 comm="syz.7.7796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 312.976939][ T30] audit: type=1400 audit(2000000701.502:16141): avc: denied { prog_load } for pid=18568 comm="syz.1.7786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 313.015055][ T30] audit: type=1400 audit(2000000701.522:16142): avc: denied { create } for pid=18571 comm="syz.8.7788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 313.038252][ T30] audit: type=1326 audit(2000000701.522:16143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18567 comm="syz.3.7787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113c097819 code=0x7ffc0000 [ 313.062821][ T30] audit: type=1326 audit(2000000701.522:16144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18567 comm="syz.3.7787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f113c097819 code=0x7ffc0000 [ 313.301205][ T3244] Bluetooth: hci0: command 0x1003 tx timeout [ 313.307145][ T5550] Bluetooth: hci0: sending frame failed (-49) [ 315.371127][ T3244] Bluetooth: hci0: command 0x1001 tx timeout [ 315.377044][ T5550] Bluetooth: hci0: sending frame failed (-49) [ 317.451579][ T3244] Bluetooth: hci0: command 0x1009 tx timeout [ 317.838215][ T30] kauditd_printk_skb: 720 callbacks suppressed [ 317.838239][ T30] audit: type=1400 audit(2000000706.462:16865): avc: denied { read write } for pid=15590 comm="syz-executor" name="loop7" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 318.086864][ T30] audit: type=1400 audit(2000000706.712:16866): avc: denied { read write } for pid=16877 comm="syz-executor" name="loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 318.111839][ T30] audit: type=1400 audit(2000000706.712:16867): avc: denied { integrity } for pid=19019 comm="syz.3.8003" lockdown_reason="raw io port access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=0 [ 318.138685][ T30] audit: type=1400 audit(2000000706.712:16868): avc: denied { read write } for pid=16877 comm="syz-executor" name="loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 318.163226][ T30] audit: type=1400 audit(2000000706.762:16869): avc: denied { read write } for pid=19021 comm="syz.7.8013" name="loop7" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 318.187941][ T30] audit: type=1400 audit(2000000706.812:16870): avc: denied { execmem } for pid=19021 comm="syz.7.8013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 318.207675][ T30] audit: type=1400 audit(2000000706.812:16871): avc: denied { read write } for pid=15549 comm="syz-executor" name="loop8" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 318.241885][ T30] audit: type=1400 audit(2000000706.862:16872): avc: denied { create } for pid=19025 comm="syz.8.8005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 318.265470][ T30] audit: type=1400 audit(2000000706.862:16873): avc: denied { name_bind } for pid=19025 comm="syz.8.8005" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 318.310892][ T30] audit: type=1400 audit(2000000706.872:16874): avc: denied { read write } for pid=15549 comm="syz-executor" name="loop8" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 322.844664][ T30] kauditd_printk_skb: 442 callbacks suppressed [ 322.844682][ T30] audit: type=1400 audit(2000000711.472:17317): avc: denied { prog_load } for pid=19309 comm="syz.3.8141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 322.886993][ T30] audit: type=1400 audit(2000000711.472:17318): avc: denied { read write } for pid=15549 comm="syz-executor" name="loop8" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 322.961317][ T30] audit: type=1400 audit(2000000711.472:17319): avc: denied { read write } for pid=15590 comm="syz-executor" name="loop7" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 322.990831][ T30] audit: type=1400 audit(2000000711.482:17320): avc: denied { read write } for pid=10818 comm="syz-executor" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 323.018677][ T30] audit: type=1400 audit(2000000711.502:17321): avc: denied { create } for pid=19309 comm="syz.3.8141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 323.039223][ T30] audit: type=1400 audit(2000000711.502:17322): avc: denied { read } for pid=19311 comm="syz.8.8143" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 323.064403][ T30] audit: type=1400 audit(2000000711.502:17323): avc: denied { map_create } for pid=19313 comm="syz.7.8142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 323.085264][ T30] audit: type=1400 audit(2000000711.502:17324): avc: denied { prog_load } for pid=19313 comm="syz.7.8142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 323.106008][ T30] audit: type=1400 audit(2000000711.502:17325): avc: denied { read write } for pid=16877 comm="syz-executor" name="loop3" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 323.106326][T19347] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19347 comm=syz.8.8159 [ 323.130761][ T30] audit: type=1400 audit(2000000711.512:17326): avc: denied { map_create } for pid=19315 comm="syz.3.8145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 323.248125][T19369] loop7: detected capacity change from 0 to 512 [ 323.310031][T19369] EXT4-fs (loop7): 1 orphan inode deleted [ 323.331153][T19369] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 323.352503][T19369] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.366033][T19369] EXT4-fs (loop7): shut down requested (2) [ 323.494657][T19421] input: syz1 as /devices/virtual/input/input50 [ 323.502467][T19419] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8193'. [ 323.611138][ T291] Bluetooth: hci0: command 0x1003 tx timeout [ 323.617140][ T5550] Bluetooth: hci0: sending frame failed (-49) [ 323.672615][T19414] loop8: detected capacity change from 0 to 40427 [ 323.691840][T19414] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 323.698631][T19414] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 323.707164][T19414] F2FS-fs (loop8): fault_injection options not supported [ 323.714139][T19414] F2FS-fs (loop8): fault_type options not supported [ 323.721878][T19414] F2FS-fs (loop8): invalid crc value [ 323.728767][T19414] F2FS-fs (loop8): Found nat_bits in checkpoint [ 323.734962][ T3244] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 323.768175][T19414] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 323.775138][T19414] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 323.796148][T15549] attempt to access beyond end of device [ 323.796148][T15549] loop8: rw=2049, want=45112, limit=40427 [ 324.101192][ T3244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.111983][ T3244] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 324.124750][ T3244] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 324.133639][ T3244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.142198][ T3244] usb 2-1: config 0 descriptor?? [ 324.594751][T19460] loop3: detected capacity change from 0 to 512 [ 324.613232][T19464] loop8: detected capacity change from 0 to 256 [ 324.622077][ T3244] plantronics 0003:047F:FFFF.005F: unknown main item tag 0x0 [ 324.629429][ T3244] plantronics 0003:047F:FFFF.005F: No inputs registered, leaving [ 324.638211][ T3244] plantronics 0003:047F:FFFF.005F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 324.654468][T19460] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 324.662290][T19464] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xff532d92, utbl_chksum : 0xe619d30d) [ 324.670455][T19460] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 324.763084][ T346] tipc: Left network mode [ 324.886219][T19470] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.894639][T19470] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.902206][T19470] device bridge_slave_0 entered promiscuous mode [ 324.909085][ T3244] usb 2-1: USB disconnect, device number 38 [ 324.909205][T19470] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.922037][T19470] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.929476][T19470] device bridge_slave_1 entered promiscuous mode [ 324.932804][T19482] loop3: detected capacity change from 0 to 4096 [ 324.981615][T19482] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 325.002149][T19470] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.009116][T19470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.016367][T19470] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.023229][T19470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.049622][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.061709][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.073126][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.080923][T19486] loop3: detected capacity change from 0 to 128 [ 325.089646][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.097924][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.104790][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.116145][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.124374][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.131234][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.146863][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.155492][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.174052][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 325.187690][T19470] device veth0_vlan entered promiscuous mode [ 325.194594][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 325.205761][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 325.213639][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 325.231809][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 325.247308][T19470] device veth1_macvtap entered promiscuous mode [ 325.268787][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.280493][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.341992][ T346] device bridge_slave_1 left promiscuous mode [ 325.347962][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.356182][ T346] device bridge_slave_0 left promiscuous mode [ 325.362413][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.370249][ T346] device veth1_macvtap left promiscuous mode [ 325.376620][ T346] device veth0_vlan left promiscuous mode [ 325.453796][T19505] kvm: apic: phys broadcast and lowest prio [ 325.491867][T19512] loop6: detected capacity change from 0 to 512 [ 325.500414][T19514] loop1: detected capacity change from 0 to 256 [ 325.512395][T19512] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 325.524724][T19512] EXT4-fs (loop6): 1 truncate cleaned up [ 325.530288][T19512] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 325.551291][ T6] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 325.691116][ T3244] Bluetooth: hci0: command 0x1001 tx timeout [ 325.697059][ T5550] Bluetooth: hci0: sending frame failed (-49) [ 325.791144][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 326.151172][ T6] usb 4-1: New USB device found, idVendor=05ac, idProduct=5b13, bcdDevice=92.39 [ 326.160033][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.167862][ T6] usb 4-1: Product: syz [ 326.171866][ T6] usb 4-1: Manufacturer: syz [ 326.176247][ T6] usb 4-1: SerialNumber: syz [ 326.181855][ T6] usb 4-1: config 0 descriptor?? [ 326.231556][ T6] ipheth 4-1:0.0: Unable to find alternate settings interface [ 326.280736][T19540] loop6: detected capacity change from 0 to 256 [ 326.337736][T19540] FAT-fs (loop6): Directory bread(block 64) failed [ 326.345225][T19540] FAT-fs (loop6): Directory bread(block 65) failed [ 326.351686][T19540] FAT-fs (loop6): Directory bread(block 66) failed [ 326.358044][T19540] FAT-fs (loop6): Directory bread(block 67) failed [ 326.364448][T19540] FAT-fs (loop6): Directory bread(block 68) failed [ 326.370686][T19540] FAT-fs (loop6): Directory bread(block 69) failed [ 326.377117][T19540] FAT-fs (loop6): Directory bread(block 70) failed [ 326.383689][T19540] FAT-fs (loop6): Directory bread(block 71) failed [ 326.390033][T19540] FAT-fs (loop6): Directory bread(block 72) failed [ 326.396476][T19540] FAT-fs (loop6): Directory bread(block 73) failed [ 326.413288][ T20] kernel write not supported for file bpf-prog (pid: 20 comm: kworker/0:1) [ 326.435783][ T42] usb 4-1: USB disconnect, device number 29 [ 326.494349][T19548] loop6: detected capacity change from 0 to 256 [ 326.524546][T19548] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 326.594734][T19550] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8249'. [ 326.741145][ T3244] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 326.757345][T19561] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.764406][T19561] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.766692][T19564] loop7: detected capacity change from 0 to 8192 [ 326.772044][T19561] device bridge_slave_0 entered promiscuous mode [ 326.784752][T19561] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.791878][T19561] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.799167][T19561] device bridge_slave_1 entered promiscuous mode [ 326.881805][T19571] loop7: detected capacity change from 0 to 128 [ 326.889428][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.897680][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.912498][T19571] EXT4-fs (loop7): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nouid32,,errors=continue. Quota mode: none. [ 326.927229][T19571] ext4 filesystem being mounted at /383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 326.960677][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.970723][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.979085][ T1465] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.986113][ T1465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.993665][ T3244] usb 2-1: Using ep0 maxpacket: 16 [ 327.002741][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.014423][T19574] loop3: detected capacity change from 0 to 512 [ 327.020821][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.029046][ T1465] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.035893][ T1465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.043343][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 327.051880][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 327.064588][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 327.071922][T19574] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 327.085050][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 327.091912][T19577] xt_bpf: check failed: parse error [ 327.098015][T19574] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 327.119015][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 327.126756][ T3244] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.138267][ T3244] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 327.148710][T19574] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 327.148848][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 327.156623][T19574] System zones: [ 327.163586][ T3244] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 327.176559][T19574] 0-2, 18-18, 34-34 [ 327.181000][T19574] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1053: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 327.181748][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 327.195238][ T3244] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 166 [ 327.212346][T19574] EXT4-fs (loop3): 1 truncate cleaned up [ 327.217991][T19574] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 327.228405][ T3244] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 327.241765][ T346] device bridge_slave_1 left promiscuous mode [ 327.247870][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.256913][ T346] device bridge_slave_0 left promiscuous mode [ 327.256980][T16877] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /310/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 327.263054][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.290323][ T346] device veth1_macvtap left promiscuous mode [ 327.296285][ T346] device veth0_vlan left promiscuous mode [ 327.341220][ T3244] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 327.350071][ T3244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 327.370529][ T3244] usb 2-1: SerialNumber: syz [ 327.391268][T19544] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 327.414106][ T3244] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 327.422188][T19561] device veth0_vlan entered promiscuous mode [ 327.428744][ T3244] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 327.445570][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 327.472164][T19561] device veth1_macvtap entered promiscuous mode [ 327.491792][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 327.510729][T19583] loop7: detected capacity change from 0 to 1024 [ 327.520369][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 327.544346][T19583] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 327.557898][T19583] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000005,lazytime,jqfmt=vfsold,usrquota,inlinecrypt,,errors=continue. Quota mode: writeback. [ 327.619266][ T3671] usb 2-1: USB disconnect, device number 39 [ 327.690136][T19598] incfs: Options parsing error. -22 [ 327.705427][T19598] incfs: mount failed -22 [ 327.710729][T19590] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.718315][T19590] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.726255][T19590] device bridge_slave_0 entered promiscuous mode [ 327.733969][T19590] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.740941][T19590] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.748537][T19590] device bridge_slave_1 entered promiscuous mode [ 327.771138][ T6] Bluetooth: hci0: command 0x1009 tx timeout [ 327.777097][T19606] loop7: detected capacity change from 0 to 512 [ 327.811917][T19606] EXT4-fs (loop7): Ignoring removed nobh option [ 327.821560][T19606] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 327.845170][T19606] EXT4-fs (loop7): external journal has bad superblock [ 327.946553][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.960020][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.999745][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 328.009960][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.024887][ T1465] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.031815][ T1465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.039981][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.048506][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.057166][ T1465] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.064048][ T1465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.073151][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.094377][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 328.111468][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.115079][T19616] loop7: detected capacity change from 0 to 2048 [ 328.131577][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.158358][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 328.171680][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 328.191322][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 328.202699][T19590] device veth0_vlan entered promiscuous mode [ 328.210218][T19616] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 328.231034][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 328.249553][T19590] device veth1_macvtap entered promiscuous mode [ 328.265416][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 328.278583][ T1465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 328.388190][ T30] kauditd_printk_skb: 272 callbacks suppressed [ 328.388208][ T30] audit: type=1400 audit(2000000717.012:17599): avc: denied { create } for pid=19623 comm="syz.2.8266" dev="anon_inodefs" ino=97549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 328.421135][ T3244] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 328.441131][ T30] audit: type=1400 audit(2000000717.022:17600): avc: denied { ioctl } for pid=19623 comm="syz.2.8266" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=97549 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 328.550633][T19604] loop5: detected capacity change from 0 to 131072 [ 328.572432][ T346] device bridge_slave_1 left promiscuous mode [ 328.578365][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.586446][ T346] device bridge_slave_0 left promiscuous mode [ 328.592602][T19604] F2FS-fs (loop5): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 328.592637][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.601004][T19604] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 328.616834][ T346] device veth1_macvtap left promiscuous mode [ 328.617255][T19604] F2FS-fs (loop5): invalid crc value [ 328.622845][ T346] device veth0_vlan left promiscuous mode [ 328.635142][T19604] F2FS-fs (loop5): Found nat_bits in checkpoint [ 328.680891][T19604] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 328.687909][T19604] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 328.703361][ T30] audit: type=1400 audit(2000000717.332:17601): avc: denied { setattr } for pid=19603 comm="syz.5.8272" name="file1" dev="loop5" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 328.725922][T19604] F2FS-fs (loop5): sanity_check_inode: inode (ino=8) is with extra_attr, but extra_attr feature is off [ 328.801208][ T3244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.821119][ T3244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.830696][ T3244] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 328.861145][ T3244] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 328.870013][ T3244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.894399][ T3244] usb 2-1: config 0 descriptor?? [ 328.986055][ T30] audit: type=1400 audit(2000000717.612:17602): avc: denied { create } for pid=19644 comm="syz.2.8288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 329.027302][ T30] audit: type=1400 audit(2000000717.632:17603): avc: denied { write } for pid=19644 comm="syz.2.8288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 329.069227][ T30] audit: type=1326 audit(2000000717.642:17604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19645 comm="syz.7.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 329.093690][ T30] audit: type=1326 audit(2000000717.642:17605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19645 comm="syz.7.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 329.122688][ T30] audit: type=1326 audit(2000000717.642:17606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19645 comm="syz.7.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 329.148840][ T30] audit: type=1326 audit(2000000717.642:17607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19645 comm="syz.7.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 329.151009][T19657] loop2: detected capacity change from 0 to 1024 [ 329.183247][ T30] audit: type=1326 audit(2000000717.642:17608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19645 comm="syz.7.8289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 329.231374][T19657] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 329.242367][T19657] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 329.301435][T19671] sit: Dst spoofed 0.0.0.0/400:: -> 0.0.0.0/2002:9476:b3ad:dfab:8150:7b25:977f:5d53 [ 329.330341][T19673] loop7: detected capacity change from 0 to 1024 [ 329.360448][T19673] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 329.369120][T19673] EXT4-fs (loop7): orphan cleanup on readonly fs [ 329.377060][T19673] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5834: Corrupt filesystem [ 329.386836][T19673] EXT4-fs (loop7): Remounting filesystem read-only [ 329.394248][ T3244] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 329.401883][T19673] EXT4-fs error (device loop7): ext4_quota_write:6582: inode #3: comm syz.7.8300: mark_inode_dirty error [ 329.413001][ T3244] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 329.420239][ T3244] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 329.427593][ T3244] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 329.434896][T19673] EXT4-fs error (device loop7): ext4_acquire_dquot:6187: comm syz.7.8300: Failed to acquire dquot type 0 [ 329.445993][ T3244] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 329.453259][ T3244] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 329.453974][T19673] EXT4-fs (loop7): 1 truncate cleaned up [ 329.460460][ T3244] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 329.460487][ T3244] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 329.473368][T19673] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000015,stripe=0x0000000000000000,grpid,errors=remount-ro,data_err=ignore,noblock_validity,minixdf,min_batch_time=0x0000000000000013,. Quota mode: none. [ 329.480447][ T3244] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 329.514840][ T3244] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 329.524491][ T3244] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 329.531983][ T3244] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 329.539442][ T3244] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 329.547531][ T3244] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 329.555172][ T3244] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0 [ 329.563092][ T3244] plantronics 0003:047F:FFFF.0060: No inputs registered, leaving [ 329.574753][ T3244] plantronics 0003:047F:FFFF.0060: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 329.589283][T19682] loop7: detected capacity change from 0 to 256 [ 329.612881][T19682] exfat: Deprecated parameter 'utf8' [ 329.623648][T19682] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 329.631577][T19686] device pim6reg1 entered promiscuous mode [ 329.665337][ T3671] usb 2-1: USB disconnect, device number 40 [ 329.724226][T19696] loop7: detected capacity change from 0 to 128 [ 329.972911][T19720] syz.7.8322[19720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.972990][T19720] syz.7.8322[19720] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.987573][T19720] loop7: detected capacity change from 0 to 512 [ 330.041922][T19720] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 330.053895][T19720] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 330.069117][T19720] EXT4-fs (loop7): 1 truncate cleaned up [ 330.074685][T19720] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback. [ 330.232909][T19738] Invalid ELF header magic: != ELF [ 330.385163][T19750] loop2: detected capacity change from 0 to 1024 [ 330.420356][T19730] loop5: detected capacity change from 0 to 40427 [ 330.462214][T19750] EXT4-fs (loop2): Ignoring removed orlov option [ 330.468456][T19730] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 330.491306][T19750] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 330.491635][T19730] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 330.513094][T19750] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 330.536319][T19730] F2FS-fs (loop5): invalid crc value [ 330.574406][T19730] F2FS-fs (loop5): Found nat_bits in checkpoint [ 330.598211][T19756] loop1: detected capacity change from 0 to 512 [ 330.649787][T19756] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 330.670051][T19730] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 330.682289][T19756] EXT4-fs (loop1): 1 truncate cleaned up [ 330.687777][T19756] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 330.714984][T19730] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 330.785521][T19730] attempt to access beyond end of device [ 330.785521][T19730] loop5: rw=2049, want=78368, limit=40427 [ 330.863197][T19561] attempt to access beyond end of device [ 330.863197][T19561] loop5: rw=2049, want=45104, limit=40427 [ 331.005665][T19773] SELinux: Context system_u:object_r:dpkg_var_lib_t:s0 is not valid (left unmapped). [ 331.367988][T19808] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 331.521121][ T291] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 331.600746][T19827] loop2: detected capacity change from 0 to 8192 [ 331.660461][T19827] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 331.761762][T19833] input: syz1 as /devices/virtual/input/input51 [ 331.774814][T19837] syz.1.8373[19837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.774963][T19837] syz.1.8373[19837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.841780][T19840] loop2: detected capacity change from 0 to 8192 [ 331.881220][ T291] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.901125][ T291] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.910702][ T291] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 331.920301][ T291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.929184][ T291] usb 6-1: config 0 descriptor?? [ 331.982980][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8375'. [ 332.001253][T19821] loop7: detected capacity change from 0 to 131072 [ 332.009583][T19845] syz.1.8377[19845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.009647][T19845] syz.1.8377[19845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.032274][T19821] F2FS-fs (loop7): Test dummy encryption mode enabled [ 332.053858][T19821] F2FS-fs (loop7): invalid crc value [ 332.062059][T19821] F2FS-fs (loop7): Found nat_bits in checkpoint [ 332.108833][T19821] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 332.218467][T19872] loop1: detected capacity change from 0 to 512 [ 332.242105][T19872] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 332.265761][T19879] loop9: detected capacity change from 0 to 512 [ 332.274497][T19872] EXT4-fs (loop1): 1 orphan inode deleted [ 332.280120][T19872] EXT4-fs (loop1): 1 truncate cleaned up [ 332.286343][T19872] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 332.333170][T19879] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 332.352969][T19879] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.368871][T19879] EXT4-fs error (device loop9): ext4_get_first_dir_block:3595: inode #12: comm syz.9.8392: Directory hole found for htree leaf block 0 [ 332.412640][ T291] pantherlord 0003:0F30:0111.0061: item fetching failed at offset 6/7 [ 332.420836][ T291] pantherlord 0003:0F30:0111.0061: parse failed [ 332.455783][ T291] pantherlord: probe of 0003:0F30:0111.0061 failed with error -22 [ 332.601190][T19914] syz.1.8405[19914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.601281][T19914] syz.1.8405[19914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 332.615038][ T291] usb 6-1: USB disconnect, device number 26 [ 332.636419][T19914] incfs: Error accessing: ./file0. [ 332.642289][T19914] incfs: mount failed -20 [ 332.678872][T19918] loop7: detected capacity change from 0 to 2048 [ 332.701997][T19918] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 332.713208][T19918] EXT4-fs (loop7): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf,bsddf,usrjquota=,. Quota mode: writeback. [ 332.749064][T19927] input: syz0 as /devices/virtual/input/input52 [ 332.755281][T19918] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.8407: bg 0: block 234: padding at end of block bitmap is not set [ 332.775555][T19918] EXT4-fs (loop7): Remounting filesystem read-only [ 332.791655][ T3671] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 332.824629][T19934] tipc: Started in network mode [ 332.829549][T19934] tipc: Node identity ac14140f, cluster identity 4711 [ 332.836775][T19934] tipc: New replicast peer: 255.255.255.255 [ 332.843213][T19934] tipc: Enabled bearer , priority 10 [ 332.863792][T19936] loop7: detected capacity change from 0 to 4096 [ 332.873702][T19942] loop2: detected capacity change from 0 to 256 [ 332.891947][T19936] EXT4-fs (loop7): Ignoring removed orlov option [ 332.898094][T19936] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 332.908630][T19942] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 332.908951][T19936] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable,orlov,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 332.932091][T19945] device pim6reg1 entered promiscuous mode [ 333.004540][T19948] incfs: Options parsing error. -22 [ 333.010183][T19948] incfs: mount failed -22 [ 333.031135][ T3671] usb 10-1: Using ep0 maxpacket: 32 [ 333.093026][T19963] loop7: detected capacity change from 0 to 512 [ 333.099801][T19955] loop2: detected capacity change from 0 to 8192 [ 333.142577][T19955] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 333.161278][ T3671] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.172854][ T3671] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.183950][ T3671] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 333.194120][ T3671] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.197723][T19963] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 333.213817][ T3671] usb 10-1: config 0 descriptor?? [ 333.219992][T19963] ext4 filesystem being mounted at /446/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.235481][T19974] input: syz0 as /devices/virtual/input/input53 [ 333.282252][T19976] loop2: detected capacity change from 0 to 512 [ 333.290301][T19978] incfs: Options parsing error. -22 [ 333.296016][T19978] incfs: mount failed -22 [ 333.320880][T19976] EXT4-fs (loop2): too many log groups per flexible block group [ 333.341210][T19976] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 333.347878][T19976] EXT4-fs (loop2): mount failed [ 333.388360][T19996] loop1: detected capacity change from 0 to 512 [ 333.396263][ T30] kauditd_printk_skb: 202 callbacks suppressed [ 333.396282][ T30] audit: type=1400 audit(2000001234.024:17809): avc: denied { relabelto } for pid=19997 comm="syz.5.8440" name="" dev="pipefs" ino=98411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 333.444457][T19996] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 333.454157][ T30] audit: type=1326 audit(2000001234.064:17810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.7.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 333.454192][ T30] audit: type=1326 audit(2000001234.064:17811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.7.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 333.454300][ T30] audit: type=1326 audit(2000001234.064:17812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.7.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 333.454352][ T30] audit: type=1326 audit(2000001234.064:17813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.7.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 333.576698][T19996] EXT4-fs (loop1): 1 truncate cleaned up [ 333.609628][T19996] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 333.643965][ T30] audit: type=1326 audit(2000001234.064:17814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.7.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 333.694577][ T30] audit: type=1326 audit(2000001234.074:17815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.7.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 333.741144][ T30] audit: type=1326 audit(2000001234.074:17816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.7.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 333.774372][ T3671] savu 0003:1E7D:2D5A.0062: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 333.791395][ T30] audit: type=1326 audit(2000001234.074:17817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.7.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 333.826908][T20028] loop1: detected capacity change from 0 to 1024 [ 333.855225][ T30] audit: type=1326 audit(2000001234.074:17818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19999 comm="syz.7.8441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fa2ecf1b819 code=0x7ffc0000 [ 333.878940][ T60] tipc: Node number set to 2886997007 [ 333.908927][T20035] loop7: detected capacity change from 0 to 512 [ 333.951809][T20035] SELinux: security_context_str_to_sid() failed for (dev ?, type ?) errno=-22 [ 333.961999][T20028] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,delalloc,noauto_da_alloc,debug_want_extra_isize=0x000000000000007c,nouid32,resgid=0x0000000000000000,nobarrier,sysvgroups,,errors=continue. Quota mode: none. [ 333.990010][T20035] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 334.015629][T20021] loop2: detected capacity change from 0 to 40427 [ 334.023409][T20035] EXT4-fs (loop7): 1 truncate cleaned up [ 334.028887][T20035] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,nouid32,user_xattr,stripe=0x0000000000004002,bsdgroups,max_batch_time=0x0000000000000004,inode_readahead_blks=0x0000000001000000,nolazytime,nojournal_checksum,norecovery,errors=continue. Quota mode: none. [ 334.058918][ T3671] usb 10-1: USB disconnect, device number 11 [ 334.068158][T20021] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 334.070934][T20035] SELinux: security_context_str_to_sid() failed for (dev loop7, type ext4) errno=-22 [ 334.080421][T20021] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 334.103283][T20021] F2FS-fs (loop2): invalid crc value [ 334.140310][T20021] F2FS-fs (loop2): Found nat_bits in checkpoint [ 334.154239][T20056] loop1: detected capacity change from 0 to 2048 [ 334.181014][T20021] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 334.187980][T20021] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 334.202843][T20056] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 334.213479][T20056] ext4 filesystem being mounted at /877/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 334.333551][T20069] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 334.343890][T20069] SELinux: failed to load policy [ 334.466875][T20089] loop2: detected capacity change from 0 to 256 [ 334.518174][T20089] FAT-fs (loop2): Directory bread(block 64) failed [ 334.524762][T20089] FAT-fs (loop2): Directory bread(block 65) failed [ 334.531183][T20089] FAT-fs (loop2): Directory bread(block 66) failed [ 334.537438][T20089] FAT-fs (loop2): Directory bread(block 67) failed [ 334.543833][T20089] FAT-fs (loop2): Directory bread(block 68) failed [ 334.550099][T20089] FAT-fs (loop2): Directory bread(block 69) failed [ 334.556496][T20089] FAT-fs (loop2): Directory bread(block 70) failed [ 334.567307][T20089] FAT-fs (loop2): Directory bread(block 71) failed [ 334.573965][T20089] FAT-fs (loop2): Directory bread(block 72) failed [ 334.580414][T20089] FAT-fs (loop2): Directory bread(block 73) failed [ 334.611116][T20091] loop9: detected capacity change from 0 to 8192 [ 334.614238][T20089] attempt to access beyond end of device [ 334.614238][T20089] loop2: rw=2049, want=1832, limit=256 [ 334.628580][T20089] attempt to access beyond end of device [ 334.628580][T20089] loop2: rw=2049, want=2232, limit=256 [ 334.645974][ T8] attempt to access beyond end of device [ 334.645974][ T8] loop2: rw=1, want=1232, limit=256 [ 334.758749][T20103] loop2: detected capacity change from 0 to 128 [ 334.803505][T20103] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 334.814015][T20103] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 334.848652][T20103] EXT4-fs (loop2): shut down requested (0) [ 335.022969][T20124] loop1: detected capacity change from 0 to 512 [ 335.080091][T20124] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 335.111346][T20124] ext4 filesystem being mounted at /886/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.161449][T20124] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 335.259771][T20138] loop2: detected capacity change from 0 to 7 [ 335.330618][T20134] loop9: detected capacity change from 0 to 40427 [ 335.362477][T20134] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 335.370130][T20134] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 335.390407][T20134] F2FS-fs (loop9): invalid crc value [ 335.401190][T20154] loop1: detected capacity change from 0 to 512 [ 335.423785][T20134] F2FS-fs (loop9): Found nat_bits in checkpoint [ 335.432994][T20154] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 335.462698][T20154] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #17: comm syz.1.8505: iget: bad i_size value: -6917529027641081756 [ 335.483953][T20166] loop2: detected capacity change from 0 to 256 [ 335.490378][T20134] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 335.497678][T20134] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 335.505400][T20154] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.8505: couldn't read orphan inode 17 (err -117) [ 335.520169][T20166] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 335.532488][T20154] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 335.535516][T20166] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 335.552634][T20166] exFAT-fs (loop2): Filesystem has been set read-only [ 335.572108][T20154] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.8505: bg 0: block 65: padding at end of block bitmap is not set [ 335.592709][T20154] EXT4-fs error (device loop1): ext4_acquire_dquot:6187: comm syz.1.8505: Failed to acquire dquot type 0 [ 335.605663][T20173] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8513'. [ 335.673253][T20183] loop1: detected capacity change from 0 to 512 [ 335.694587][T20187] loop2: detected capacity change from 0 to 256 [ 335.721708][T20187] exfat: Deprecated parameter 'namecase' [ 335.729048][T20183] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,noload,,errors=continue. Quota mode: writeback. [ 335.744221][T20187] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 335.744826][T20191] loop9: detected capacity change from 0 to 512 [ 335.756608][T20183] ext4 filesystem being mounted at /890/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.777558][T20183] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 335.802148][T20183] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 335.815406][T20191] EXT4-fs (loop9): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 335.828008][T20191] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.840565][T20191] EXT4-fs error (device loop9): ext4_do_update_inode:5205: inode #2: comm syz.9.8515: corrupted inode contents [ 335.852991][T20191] EXT4-fs error (device loop9): ext4_dirty_inode:6038: inode #2: comm syz.9.8515: mark_inode_dirty error [ 335.864888][T20191] EXT4-fs error (device loop9): ext4_do_update_inode:5205: inode #2: comm syz.9.8515: corrupted inode contents [ 335.877355][T20191] EXT4-fs error (device loop9): __ext4_ext_dirty:183: inode #2: comm syz.9.8515: mark_inode_dirty error [ 335.890677][T20191] EXT4-fs error (device loop9): ext4_get_first_dir_block:3606: inode #18: comm syz.9.8515: directory missing '.' [ 335.941434][ T3671] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 335.956763][T20201] loop2: detected capacity change from 0 to 512 [ 336.000455][T20201] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004735,inode_readahead_blks=0x0000000000000800,norecovery,user_xattr,,errors=continue. Quota mode: writeback. [ 336.030121][T20201] ext4 filesystem being mounted at /82/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 336.148436][T20232] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20232 comm=syz.1.8535 [ 336.179613][T20232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8535'. [ 336.221132][ T3671] usb 6-1: Using ep0 maxpacket: 16 [ 336.257857][T20246] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 336.361189][ T3671] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.370769][ T3671] usb 6-1: config 0 interface 0 has no altsetting 0 [ 336.391111][ T3671] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 336.399990][ T3671] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.421939][ T3671] usb 6-1: config 0 descriptor?? [ 336.901590][ T3671] hid (null): unknown global tag 0xe [ 336.906921][ T3671] hid (null): report_id 58501 is invalid [ 336.916000][ T3671] hid (null): unknown global tag 0x1c [ 336.928513][ T3671] hid (null): unknown global tag 0xe [ 336.937735][ T3671] hid (null): unknown global tag 0xe [ 336.946316][ T3671] hid (null): unknown global tag 0xe [ 336.954667][ T3671] hid (null): unknown global tag 0xe [ 336.961651][ T3671] hid (null): invalid report_count 1640429044 [ 336.973483][ T3671] hid (null): unknown global tag 0x16 [ 336.979014][ T3671] hid (null): unknown global tag 0xd [ 336.988277][ T3671] hid (null): report_id 2384115945 is invalid [ 336.997765][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x0 [ 337.009122][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x0 [ 337.025288][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x0 [ 337.036373][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x0 [ 337.048223][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x0 [ 337.056056][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x0 [ 337.063700][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x0 [ 337.073556][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x0 [ 337.081378][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x0 [ 337.088653][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x0 [ 337.096449][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x0 [ 337.104722][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x0 [ 337.116179][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x0 [ 337.139275][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x0 [ 337.147432][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x0 [ 337.157428][T20267] syz.2.8552[20267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.157540][T20267] syz.2.8552[20267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.170174][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x0 [ 337.197482][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x0 [ 337.212111][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x0 [ 337.223758][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x4 [ 337.231745][ T3671] hid-generic 0003:060B:500A.0063: unknown main item tag 0x6 [ 337.240610][ T3671] hid-generic 0003:060B:500A.0063: unexpected long global item [ 337.249421][ T3671] hid-generic: probe of 0003:060B:500A.0063 failed with error -22 [ 337.263752][ T3671] usb 6-1: USB disconnect, device number 27 [ 337.411810][T20286] loop1: detected capacity change from 0 to 1024 [ 337.482416][T20286] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,min_batch_time=0x00000000000000c0,barrier,noauto_da_alloc,debug_want_extra_isize=0x000000000000007c,nouid32,resgid=0x0000000000000000,nobarrier,sysvgroups,,errors=continue. Quota mode: none. [ 337.962616][T20301] tun0: tun_chr_ioctl cmd 1074025675 [ 337.967759][T20301] tun0: persist enabled [ 337.975819][T20296] loop5: detected capacity change from 0 to 512 [ 337.989032][T20294] loop1: detected capacity change from 0 to 40427 [ 337.995525][T20301] tun0: tun_chr_ioctl cmd 1074025675 [ 338.000633][T20301] tun0: persist enabled [ 338.042101][T20294] F2FS-fs (loop1): invalid crc value [ 338.062620][T20296] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.8565: inode #1: comm syz.5.8565: iget: illegal inode # [ 338.078589][T20294] F2FS-fs (loop1): Found nat_bits in checkpoint [ 338.099353][T20296] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.8565: error while reading EA inode 1 err=-117 [ 338.136399][T20310] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 338.153355][T20296] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.8565: inode #1: comm syz.5.8565: iget: illegal inode # [ 338.191640][T20296] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.8565: error while reading EA inode 1 err=-117 [ 338.223867][T20294] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 338.243547][T20296] EXT4-fs (loop5): 1 orphan inode deleted [ 338.249195][T20296] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,abort,delalloc,usrjquota=,,errors=continue. Quota mode: none. [ 338.272997][T20294] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 338.303302][T20316] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 338.328284][T10818] attempt to access beyond end of device [ 338.328284][T10818] loop1: rw=2049, want=45104, limit=40427 [ 338.331155][T20316] SELinux: failed to load policy [ 338.450578][ T30] kauditd_printk_skb: 199 callbacks suppressed [ 338.450595][ T30] audit: type=1400 audit(2000001239.074:18016): avc: denied { write } for pid=20317 comm="syz.2.8573" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 338.635788][ T30] audit: type=1326 audit(2000001239.264:18017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20333 comm="syz.2.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ab81b819 code=0x7ffc0000 [ 338.669950][ T30] audit: type=1326 audit(2000001239.264:18018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20333 comm="syz.2.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78ab81b819 code=0x7ffc0000 [ 338.711120][ T30] audit: type=1326 audit(2000001239.264:18019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20333 comm="syz.2.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ab81b819 code=0x7ffc0000 [ 338.761129][ T30] audit: type=1326 audit(2000001239.264:18020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20333 comm="syz.2.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78ab81b819 code=0x7ffc0000 [ 338.793248][T20341] loop0: detected capacity change from 0 to 1 [ 338.800637][ T30] audit: type=1326 audit(2000001239.324:18021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20333 comm="syz.2.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ab81b819 code=0x7ffc0000 [ 338.824902][ T30] audit: type=1326 audit(2000001239.324:18022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20333 comm="syz.2.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ab81b819 code=0x7ffc0000 [ 338.841114][ T291] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 338.849458][ T30] audit: type=1326 audit(2000001239.334:18023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20333 comm="syz.2.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f78ab81b819 code=0x7ffc0000 [ 338.890062][ T30] audit: type=1326 audit(2000001239.334:18024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20333 comm="syz.2.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ab81b819 code=0x7ffc0000 [ 338.947223][ T30] audit: type=1326 audit(2000001239.334:18025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20333 comm="syz.2.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78ab81b819 code=0x7ffc0000 [ 339.231186][ T291] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.251189][ T291] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.260768][ T291] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 339.270192][ T291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.279809][ T291] usb 6-1: config 0 descriptor?? [ 339.761583][ T291] hid (null): global environment stack underflow [ 339.769109][ T291] hid-steam 0003:28DE:1142.0064: global environment stack underflow [ 339.777546][ T291] hid-steam 0003:28DE:1142.0064: item 0 1 1 11 parsing failed [ 339.785285][ T291] hid-steam 0003:28DE:1142.0064: steam_probe:parse of hid interface failed [ 339.793783][ T291] hid-steam: probe of 0003:28DE:1142.0064 failed with error -22 [ 339.873582][T20373] loop1: detected capacity change from 0 to 1024 [ 339.891737][T20373] EXT4-fs (loop1): filesystem is read-only [ 339.897537][T20373] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 339.907440][T20373] EXT4-fs error (device loop1): ext4_get_journal_inode:5150: inode #32: comm syz.1.8594: iget: special inode unallocated [ 339.920186][T20373] EXT4-fs (loop1): no journal found [ 339.966859][ T291] usb 6-1: USB disconnect, device number 28 [ 340.052753][T20389] loop2: detected capacity change from 0 to 512 [ 340.092409][T20389] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 340.113356][T20389] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000010,journal_dev=0x000000000000000d,,errors=continue. Quota mode: writeback. [ 340.132786][T20389] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.146261][T20402] incfs: Error accessing: ./file0. [ 340.151740][T20402] incfs: mount failed -20 [ 340.202177][T20406] syz.9.8611[20406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.202268][T20406] syz.9.8611[20406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.398396][T20442] loop9: detected capacity change from 0 to 512 [ 340.462751][T20442] EXT4-fs (loop9): Ignoring removed bh option [ 340.471787][T20442] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 340.486615][T20442] EXT4-fs error (device loop9): __ext4_iget:4903: inode #15: block 1803188595: comm syz.9.8627: invalid block [ 340.499930][T20442] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.8627: couldn't read orphan inode 15 (err -117) [ 340.513597][T20442] EXT4-fs (loop9): mounted filesystem without journal. Opts: data_err=abort,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 340.548134][T20458] loop7: detected capacity change from 0 to 2048 [ 340.769106][T20486] loop7: detected capacity change from 0 to 512 [ 340.831809][T20498] loop2: detected capacity change from 0 to 128 [ 340.852322][T20486] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 340.871264][T20486] ext4 filesystem being mounted at /466/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.910816][T20503] loop5: detected capacity change from 0 to 512 [ 340.972004][T20503] EXT4-fs (loop5): Ignoring removed nobh option [ 340.979342][T20503] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 341.008822][T20503] EXT4-fs (loop5): 1 truncate cleaned up [ 341.020024][T20503] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none. [ 341.082203][T20431] loop1: detected capacity change from 0 to 131072 [ 341.121928][T20431] F2FS-fs (loop1): Test dummy encryption mode enabled [ 341.130277][T20431] F2FS-fs (loop1): invalid crc value [ 341.150206][T20431] F2FS-fs (loop1): Found nat_bits in checkpoint [ 341.196569][T20431] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 341.227101][T20531] loop2: detected capacity change from 0 to 512 [ 341.253233][T20531] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 341.260988][T20531] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 341.269501][T20531] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 341.280015][T20531] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 341.290272][T20531] EXT4-fs (loop2): 1 truncate cleaned up [ 341.296380][T20531] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,data_err=abort,noinit_itable,nouid32,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 341.441117][ T366] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 341.551597][T20568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8681'. [ 341.560468][T20568] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8681'. [ 341.811263][ T366] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 341.829682][ T366] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 341.850856][ T366] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 341.881114][ T366] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.896505][ T366] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.909352][ T366] usb 6-1: config 0 descriptor?? [ 341.931181][T20526] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 342.080935][T20566] loop9: detected capacity change from 0 to 131072 [ 342.131893][T20566] F2FS-fs (loop9): QUOTA feature is enabled, so ignore qf_name [ 342.140374][T20566] F2FS-fs (loop9): invalid crc value [ 342.147424][T20566] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 342.173075][T20566] F2FS-fs (loop9): Mounted with checkpoint version = 753bd00b [ 342.391978][ T366] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0 [ 342.399207][ T366] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0 [ 342.406731][ T366] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0 [ 342.414710][ T366] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0 [ 342.421950][ T366] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0 [ 342.429114][ T366] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0 [ 342.436353][ T366] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0 [ 342.443656][ T366] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0 [ 342.451037][ T366] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0 [ 342.458473][ T366] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0 [ 342.465730][ T366] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0 [ 342.472926][ T366] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0 [ 342.480294][ T366] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0 [ 342.487515][ T366] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0 [ 342.494794][ T366] plantronics 0003:047F:FFFF.0065: unknown main item tag 0x0 [ 342.502182][ T366] plantronics 0003:047F:FFFF.0065: No inputs registered, leaving [ 342.518307][ T366] plantronics 0003:047F:FFFF.0065: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 342.607448][T20616] loop9: detected capacity change from 0 to 128 [ 342.661722][ T60] usb 6-1: USB disconnect, device number 29 [ 342.670445][T20618] Invalid ELF header magic: != ELF [ 342.757847][T20628] loop2: detected capacity change from 0 to 256 [ 343.088095][T20641] loop1: detected capacity change from 0 to 1024 [ 343.132174][T20641] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 343.142924][T20641] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 343.153304][T20641] EXT4-fs (loop1): barriers disabled [ 343.158409][T20641] JBD2: no valid journal superblock found [ 343.164037][T20641] EXT4-fs (loop1): error loading journal [ 343.224476][T20650] loop5: detected capacity change from 0 to 256 [ 343.242310][T20650] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 343.302256][T20659] loop5: detected capacity change from 0 to 256 [ 343.604881][T20685] loop5: detected capacity change from 0 to 40427 [ 343.663409][T20685] F2FS-fs (loop5): invalid crc value [ 343.669922][T20685] F2FS-fs (loop5): Found nat_bits in checkpoint [ 343.735145][T20685] F2FS-fs (loop5): Start checkpoint disabled! [ 343.746633][T20685] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 343.804701][T20703] loop7: detected capacity change from 0 to 512 [ 343.851245][ T30] kauditd_printk_skb: 147 callbacks suppressed [ 343.851264][ T30] audit: type=1400 audit(2000001244.474:18173): avc: denied { rename } for pid=20684 comm="syz.5.8731" name="file0" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 343.864986][T20705] loop_set_status: loop7 () has still dirty pages (nrpages=1) [ 343.918569][ T8] attempt to access beyond end of device [ 343.918569][ T8] loop5: rw=2049, want=40968, limit=40427 [ 343.961114][T20705] loop_set_status: loop7 () has still dirty pages (nrpages=3) [ 343.970836][T20703] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,min_batch_time=0x0000000000000029,minixdf,,errors=continue. Quota mode: writeback. [ 344.006259][T20711] loop2: detected capacity change from 0 to 256 [ 344.011222][T20703] ext4 filesystem being mounted at /467/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.030037][T20692] loop1: detected capacity change from 0 to 40427 [ 344.062051][T20692] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 344.075293][T20711] FAT-fs (loop2): Directory bread(block 64) failed [ 344.084652][T20713] loop9: detected capacity change from 0 to 2048 [ 344.098110][T20692] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 344.107040][T20711] FAT-fs (loop2): Directory bread(block 65) failed [ 344.115570][T20711] FAT-fs (loop2): Directory bread(block 66) failed [ 344.132338][T20692] F2FS-fs (loop1): invalid crc value [ 344.144086][T20711] FAT-fs (loop2): Directory bread(block 67) failed [ 344.150828][T20711] FAT-fs (loop2): Directory bread(block 68) failed [ 344.159281][T20711] FAT-fs (loop2): Directory bread(block 69) failed [ 344.172457][T20692] F2FS-fs (loop1): Found nat_bits in checkpoint [ 344.190267][T20711] FAT-fs (loop2): Directory bread(block 70) failed [ 344.221508][T20711] FAT-fs (loop2): Directory bread(block 71) failed [ 344.227934][T20711] FAT-fs (loop2): Directory bread(block 72) failed [ 344.244968][T20711] FAT-fs (loop2): Directory bread(block 73) failed [ 344.259950][ T30] audit: type=1400 audit(2000001244.884:18174): avc: denied { unlink } for pid=20727 comm="syz.7.8747" name="#15" dev="tmpfs" ino=2482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 344.309020][T20692] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 344.331293][T20692] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 344.411460][ T30] audit: type=1107 audit(2000001245.044:18175): pid=20740 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='÷' [ 344.430227][T20743] loop7: detected capacity change from 0 to 512 [ 344.481962][T20743] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 344.495587][T20749] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 344.504070][T20749] SELinux: failed to load policy [ 344.541352][T20743] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 344.581596][T20743] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #2: comm syz.7.8754: corrupted inode contents [ 344.632480][T20743] EXT4-fs error (device loop7): ext4_dirty_inode:6038: inode #2: comm syz.7.8754: mark_inode_dirty error [ 344.643938][T20743] EXT4-fs error (device loop7): ext4_do_update_inode:5205: inode #2: comm syz.7.8754: corrupted inode contents [ 344.701559][ T30] audit: type=1400 audit(2000001245.334:18176): avc: denied { mounton } for pid=20775 comm="syz.5.8763" path="/81/file0" dev="tmpfs" ino=439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 344.753481][T20724] loop9: detected capacity change from 0 to 40427 [ 344.764971][ T30] audit: type=1400 audit(2000001245.394:18177): avc: denied { write } for pid=20781 comm="syz.1.8765" name="udplite" dev="proc" ino=4026532316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 344.790991][T20784] loop5: detected capacity change from 0 to 256 [ 344.801711][T20724] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 344.809306][T20724] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 344.818271][ T30] audit: type=1326 audit(2000001245.424:18178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20781 comm="syz.1.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3719952819 code=0x7ffc0000 [ 344.843605][T20724] F2FS-fs (loop9): invalid crc value [ 344.849237][ T30] audit: type=1326 audit(2000001245.424:18179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20781 comm="syz.1.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3719952819 code=0x7ffc0000 [ 344.898870][T20724] F2FS-fs (loop9): Found nat_bits in checkpoint [ 344.931147][ T30] audit: type=1326 audit(2000001245.424:18180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20781 comm="syz.1.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3719952819 code=0x7ffc0000 [ 345.011242][ T30] audit: type=1326 audit(2000001245.434:18181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20781 comm="syz.1.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3719952819 code=0x7ffc0000 [ 345.060976][T20724] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 345.081099][T20724] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 345.088773][ T30] audit: type=1326 audit(2000001245.504:18182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20781 comm="syz.1.8765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3719952819 code=0x7ffc0000 [ 345.340219][T14878] attempt to access beyond end of device [ 345.340219][T14878] loop9: rw=2049, want=40968, limit=40427 [ 345.480325][T20797] loop1: detected capacity change from 0 to 40427 [ 345.512074][T20797] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 345.521101][T20797] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 345.540270][T20797] F2FS-fs (loop1): invalid crc value [ 345.561928][T20797] F2FS-fs (loop1): Found nat_bits in checkpoint [ 345.658528][T20797] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 345.665550][T20797] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 345.695153][T20822] loop9: detected capacity change from 0 to 512 [ 345.734000][T10818] attempt to access beyond end of device [ 345.734000][T10818] loop1: rw=2049, want=40968, limit=40427 [ 345.772112][T20822] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 345.809169][T20822] EXT4-fs (loop9): 1 truncate cleaned up [ 345.828477][T20822] EXT4-fs (loop9): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,jqfmt=vfsv0,nombcache,quota,,errors=continue. Quota mode: writeback. [ 345.990352][T20836] loop7: detected capacity change from 0 to 512 [ 346.055269][T20838] loop9: detected capacity change from 0 to 256 [ 346.081784][T20840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8783'. [ 346.092293][T20836] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000040000,minixdf,,errors=continue. Quota mode: writeback. [ 346.108339][T20836] ext4 filesystem being mounted at /480/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 346.121941][T20838] exfat: Deprecated parameter 'utf8' [ 346.127170][T20838] exfat: Deprecated parameter 'namecase' [ 346.133539][T20838] exfat: Deprecated parameter 'utf8' [ 346.141849][T20838] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 346.232614][T20846] loop7: detected capacity change from 0 to 128 [ 346.270148][T20850] loop9: detected capacity change from 0 to 1024 [ 346.285803][T20846] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 346.297627][T20846] ext4 filesystem being mounted at /482/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 346.321941][T20850] EXT4-fs (loop9): Ignoring removed oldalloc option [ 346.362241][T20850] EXT4-fs (loop9): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 346.579015][T20874] loop7: detected capacity change from 0 to 512 [ 346.615530][T20874] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 346.641219][T20874] EXT4-fs (loop7): 1 truncate cleaned up [ 346.651564][T20874] EXT4-fs (loop7): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 346.686725][T20874] EXT4-fs (loop7): re-mounted. Opts: (null). Quota mode: none. [ 346.791106][ T60] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 346.801121][ T6] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 346.971110][ T3244] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 347.051089][ T60] usb 6-1: Using ep0 maxpacket: 16 [ 347.161162][ T6] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.172463][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.188635][ T6] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.198096][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.219033][ T60] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 347.241128][ T3244] usb 2-1: Using ep0 maxpacket: 32 [ 347.251256][ T60] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 347.260349][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.279243][ T60] usb 6-1: config 0 descriptor?? [ 347.291509][ T6] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 347.310684][ T6] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 347.321946][ T6] usb 10-1: SerialNumber: syz [ 347.381218][ T3244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.399294][ T3244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.431106][ T3244] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 347.450080][ T3244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.469135][ T3244] usb 2-1: config 0 descriptor?? [ 347.611881][ T6] usb 10-1: 0:2 : does not exist [ 347.631785][ T6] usb 10-1: USB disconnect, device number 12 [ 347.734921][T20903] loop2: detected capacity change from 0 to 512 [ 347.741723][T20868] syz.5.8800[20868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.741800][T20868] syz.5.8800[20868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.762367][ T60] microsoft 0003:045E:07DA.0066: unknown main item tag 0x0 [ 347.780710][ T60] microsoft 0003:045E:07DA.0066: unknown main item tag 0x0 [ 347.788122][ T60] microsoft 0003:045E:07DA.0066: unknown main item tag 0x0 [ 347.790288][T20903] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.8816: casefold flag without casefold feature [ 347.795221][ T60] microsoft 0003:045E:07DA.0066: unknown main item tag 0x0 [ 347.795247][ T60] microsoft 0003:045E:07DA.0066: unknown main item tag 0x0 [ 347.795269][ T60] microsoft 0003:045E:07DA.0066: unknown main item tag 0x0 [ 347.795291][ T60] microsoft 0003:045E:07DA.0066: unknown main item tag 0x0 [ 347.795314][ T60] microsoft 0003:045E:07DA.0066: unknown main item tag 0x0 [ 347.809012][T20903] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.8816: couldn't read orphan inode 15 (err -117) [ 347.815270][ T60] microsoft 0003:045E:07DA.0066: unknown main item tag 0x0 [ 347.822532][T20903] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 347.828788][ T60] microsoft 0003:045E:07DA.0066: unknown main item tag 0x0 [ 347.885208][ T60] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0066/input/input55 [ 347.897935][ T60] microsoft 0003:045E:07DA.0066: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 347.969299][ T366] usb 6-1: USB disconnect, device number 30 [ 347.976206][ T3244] lua 0003:1E7D:2C2E.0067: item fetching failed at offset 5/7 [ 347.989892][ T3244] lua 0003:1E7D:2C2E.0067: parse failed [ 347.995890][ T3244] lua: probe of 0003:1E7D:2C2E.0067 failed with error -22 [ 348.005725][T20909] devtmpfs: Too few inodes for current use [ 348.035061][T20911] loop2: detected capacity change from 0 to 4096 [ 348.064090][T20911] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 348.077771][T20911] EXT4-fs (loop2): shut down requested (2) [ 348.141737][T20918] loop2: detected capacity change from 0 to 512 [ 348.178874][ T6] usb 2-1: USB disconnect, device number 41 [ 348.184752][T20918] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 348.202768][T20918] EXT4-fs (loop2): 1 orphan inode deleted [ 348.208396][T20918] EXT4-fs (loop2): 1 truncate cleaned up [ 348.214331][T20918] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv1,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 348.429240][T20952] loop2: detected capacity change from 0 to 8192 [ 348.471704][T20952] loop2: p1 p2 p3 p4 [ 348.475624][T20952] loop2: p1 start 17760256 is beyond EOD, truncated [ 348.488386][T20952] loop2: p2 size 64053 extends beyond EOD, truncated [ 348.497618][T20963] device vlan1 entered promiscuous mode [ 348.504168][T20962] device vlan1 left promiscuous mode [ 348.507837][T20952] loop2: p3 start 458496 is beyond EOD, truncated [ 348.517087][T20952] loop2: p4 size 50331648 extends beyond EOD, truncated [ 348.570904][T20975] hub 2-0:1.0: USB hub found [ 348.587659][T20975] hub 2-0:1.0: 1 port detected [ 348.698809][T20992] netlink: 'syz.5.8855': attribute type 25 has an invalid length. [ 348.710373][T20992] netlink: 'syz.5.8855': attribute type 8 has an invalid length. [ 348.894005][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 348.894024][ T30] audit: type=1326 audit(2000001249.524:18255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21021 comm="syz.9.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33b0e1819 code=0x7ffc0000 [ 348.931266][ T366] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 348.970607][ T30] audit: type=1326 audit(2000001249.554:18256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21021 comm="syz.9.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb33b0e1819 code=0x7ffc0000 [ 349.040664][ T30] audit: type=1326 audit(2000001249.554:18257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21021 comm="syz.9.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33b0e1819 code=0x7ffc0000 [ 349.085113][ T30] audit: type=1326 audit(2000001249.554:18258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21028 comm="syz.9.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb33b113905 code=0x7ffc0000 [ 349.117555][T21045] usb usb9: usbfs: process 21045 (syz.9.8879) did not claim interface 0 before use [ 349.146007][T21047] loop1: detected capacity change from 0 to 2048 [ 349.155511][ T30] audit: type=1326 audit(2000001249.574:18259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21021 comm="syz.9.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fb33b0e1819 code=0x7ffc0000 [ 349.201118][ T30] audit: type=1326 audit(2000001249.574:18260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21021 comm="syz.9.8871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb33b0e1819 code=0x7ffc0000 [ 349.220565][T21047] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,nodioread_nolock,journal_ioprio=0x0000000000000003,auto_da_alloc,,errors=continue. Quota mode: none. [ 349.225042][ T30] audit: type=1326 audit(2000001249.574:18261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21030 comm="syz.1.8874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3719952819 code=0x7ffc0000 [ 349.287242][T21059] loop7: detected capacity change from 0 to 128 [ 349.331105][ T30] audit: type=1326 audit(2000001249.574:18262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21030 comm="syz.1.8874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3719952819 code=0x7ffc0000 [ 349.331141][T21062] loop1: detected capacity change from 0 to 512 [ 349.362591][T21059] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 349.386212][T21059] ext4 filesystem being mounted at /502/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 349.420061][T21062] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000010,stripe=0x0000000000000004,dioread_nolock,nodioread_nolock,discard,acl,,errors=continue. Quota mode: none. [ 349.421238][ T366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.449352][ T30] audit: type=1326 audit(2000001249.574:18263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21030 comm="syz.1.8874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3719952819 code=0x7ffc0000 [ 349.451601][ T366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.482434][ T366] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 349.491308][ T366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.499821][ T366] usb 3-1: config 0 descriptor?? [ 349.505088][ T30] audit: type=1326 audit(2000001249.574:18264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21030 comm="syz.1.8874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3719952819 code=0x7ffc0000 [ 349.638306][T21078] tipc: Enabling of bearer rejected, failed to enable media [ 349.688364][T21085] loop9: detected capacity change from 0 to 512 [ 349.742529][T21085] EXT4-fs warning (device loop9): ext4_enable_quotas:6422: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 349.758007][T21085] EXT4-fs (loop9): mount failed [ 349.858007][T21107] loop1: detected capacity change from 0 to 512 [ 349.902229][T21107] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 349.913049][T21107] EXT4-fs (loop1): invalid journal inode [ 349.919272][T21107] EXT4-fs (loop1): can't get journal size [ 349.933040][T21107] EXT4-fs (loop1): 1 truncate cleaned up [ 349.938512][T21107] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 349.960897][T21107] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 1986356271 (only 1 groups) [ 349.982646][ T366] hid-steam 0003:28DE:1142.0068: unknown main item tag 0x0 [ 349.989874][ T366] hid-steam 0003:28DE:1142.0068: unknown main item tag 0x0 [ 349.997390][ T366] hid-steam 0003:28DE:1142.0068: unknown main item tag 0x0 [ 350.004939][ T366] hid-steam 0003:28DE:1142.0068: unknown main item tag 0x0 [ 350.012371][ T366] hid-steam 0003:28DE:1142.0068: unknown main item tag 0x0 [ 350.020379][ T366] hid-steam 0003:28DE:1142.0068: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 350.079261][T21127] loop9: detected capacity change from 0 to 256 [ 350.114932][T21029] loop5: detected capacity change from 0 to 131072 [ 350.130289][T21127] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 350.151176][T21131] loop7: detected capacity change from 0 to 512 [ 350.172861][T21131] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.8916: inode #1: comm syz.7.8916: iget: illegal inode # [ 350.196179][T21131] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.8916: error while reading EA inode 1 err=-117 [ 350.221230][T21029] F2FS-fs (loop5): Found nat_bits in checkpoint [ 350.231189][T21131] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.8916: inode #1: comm syz.7.8916: iget: illegal inode # [ 350.251561][ T3671] usb 3-1: USB disconnect, device number 16 [ 350.262719][T21131] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.8916: error while reading EA inode 1 err=-117 [ 350.281422][T21131] EXT4-fs (loop7): 1 orphan inode deleted [ 350.287016][T21131] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 350.326809][T21029] F2FS-fs (loop5): Mounted with checkpoint version = 753bd00b [ 350.392670][T21129] loop1: detected capacity change from 0 to 40427 [ 350.421628][T21129] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 350.428069][T21129] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 350.467434][T21129] F2FS-fs (loop1): Found nat_bits in checkpoint [ 350.501093][ T366] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 350.542398][T21129] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 350.549329][T21129] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 350.601818][T10818] attempt to access beyond end of device [ 350.601818][T10818] loop1: rw=2049, want=45104, limit=40427 [ 350.679006][T21143] loop7: detected capacity change from 0 to 40427 [ 350.688767][T21155] binfmt_misc: register: failed to install interpreter file ./file0 [ 350.722829][T21143] F2FS-fs (loop7): invalid crc value [ 350.729289][T21143] F2FS-fs (loop7): Found nat_bits in checkpoint [ 350.761212][ T366] usb 10-1: Using ep0 maxpacket: 16 [ 350.787253][T21143] F2FS-fs (loop7): Start checkpoint disabled! [ 350.811733][T21143] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 350.861172][T21143] attempt to access beyond end of device [ 350.861172][T21143] loop7: rw=2049, want=45104, limit=40427 [ 350.881170][ T366] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.895154][ T366] usb 10-1: config 0 has no interfaces? [ 350.948242][ T346] attempt to access beyond end of device [ 350.948242][ T346] loop7: rw=2049, want=40968, limit=40427 [ 350.969682][ T346] attempt to access beyond end of device [ 350.969682][ T346] loop7: rw=2049, want=41008, limit=40427 [ 351.071232][ T366] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 351.090414][ T366] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.099199][T21167] loop2: detected capacity change from 0 to 40427 [ 351.109631][ T366] usb 10-1: Product: syz [ 351.114070][ T366] usb 10-1: Manufacturer: syz [ 351.118569][ T366] usb 10-1: SerialNumber: syz [ 351.134761][ T366] r8152-cfgselector 10-1: config 0 descriptor?? [ 351.151652][T21167] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 351.159291][T21167] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 351.169684][T21167] F2FS-fs (loop2): invalid crc value [ 351.178626][T21167] F2FS-fs (loop2): Found nat_bits in checkpoint [ 351.223717][T21167] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 351.230628][T21167] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 351.260040][ T346] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 351.269360][ T346] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 351.278477][ T3671] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 351.559903][T21173] loop1: detected capacity change from 0 to 131072 [ 351.592541][T21173] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 351.593556][ T60] usb 10-1: USB disconnect, device number 13 [ 351.601358][T21173] F2FS-fs (loop1): invalid crc value [ 351.617249][T21173] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 351.651208][ T3671] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.662160][T21173] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 351.667726][ T3671] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.681806][ T3671] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 351.701413][ T3671] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 351.710276][ T3671] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.719222][ T3671] usb 6-1: config 0 descriptor?? [ 351.913142][T21216] loop2: detected capacity change from 0 to 8192 [ 351.932422][T21216] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 352.025435][T21228] loop1: detected capacity change from 0 to 1024 [ 352.051481][T21228] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 352.140731][T21245] loop9: detected capacity change from 0 to 512 [ 352.157269][T21247] tmpfs: Unknown parameter 'mpo' [ 352.188813][T21245] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 352.202314][ T3671] plantronics 0003:047F:FFFF.0069: No inputs registered, leaving [ 352.212211][T21245] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.224728][ T3671] plantronics 0003:047F:FFFF.0069: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 352.327018][T21241] loop2: detected capacity change from 0 to 40427 [ 352.353088][T21241] F2FS-fs (loop2): invalid crc value [ 352.362663][T21241] F2FS-fs (loop2): Found nat_bits in checkpoint [ 352.409860][T21241] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 352.417008][T21241] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 352.527933][T21257] loop1: detected capacity change from 0 to 40427 [ 352.568212][T21272] loop2: detected capacity change from 0 to 128 [ 352.581699][T21257] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 352.591206][T21257] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 352.603039][T21257] F2FS-fs (loop1): invalid crc value [ 352.608355][T21272] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 352.616230][T21272] FAT-fs (loop2): Filesystem has been set read-only [ 352.625052][T21257] F2FS-fs (loop1): Found nat_bits in checkpoint [ 352.671243][T21257] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 352.678277][T21257] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 352.857678][T21257] attempt to access beyond end of device [ 352.857678][T21257] loop1: rw=2049, want=79872, limit=40427 [ 352.876390][T21257] attempt to access beyond end of device [ 352.876390][T21257] loop1: rw=2049, want=81920, limit=40427 [ 352.893818][T21257] attempt to access beyond end of device [ 352.893818][T21257] loop1: rw=2049, want=51200, limit=40427 [ 352.911903][T21257] attempt to access beyond end of device [ 352.911903][T21257] loop1: rw=2049, want=53248, limit=40427 [ 352.945537][T21257] attempt to access beyond end of device [ 352.945537][T21257] loop1: rw=2049, want=59496, limit=40427 [ 352.992594][T21257] attempt to access beyond end of device [ 352.992594][T21257] loop1: rw=2049, want=63576, limit=40427 [ 353.280747][T21270] loop9: detected capacity change from 0 to 131072 [ 353.289704][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 353.299268][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 353.323123][T21270] F2FS-fs (loop9): invalid crc value [ 353.349472][T21270] F2FS-fs (loop9): Found nat_bits in checkpoint [ 353.411210][T21270] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 353.543837][T21311] loop1: detected capacity change from 0 to 256 [ 353.581611][T21311] exfat: Deprecated parameter 'namecase' [ 353.590158][T21311] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 353.672218][T21313] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 353.961177][ T60] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 354.011115][ T366] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 354.039569][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 354.039586][ T30] audit: type=1326 audit(2000001254.664:18388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.5.8991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c7259819 code=0x7ffc0000 [ 354.069491][ T30] audit: type=1326 audit(2000001254.664:18389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.5.8991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c7259819 code=0x7ffc0000 [ 354.094478][ T30] audit: type=1326 audit(2000001254.674:18390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.5.8991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7ff6c7259819 code=0x7ffc0000 [ 354.118329][ T30] audit: type=1326 audit(2000001254.674:18391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.5.8991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c7259819 code=0x7ffc0000 [ 354.142560][ T30] audit: type=1326 audit(2000001254.674:18392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21322 comm="syz.5.8991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c7259819 code=0x7ffc0000 [ 354.188214][ T30] audit: type=1400 audit(2000001254.744:18393): avc: denied { write } for pid=21324 comm="syz.5.8992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 354.214750][ T30] audit: type=1400 audit(2000001254.844:18394): avc: denied { execute_no_trans } for pid=21328 comm="syz.2.8994" path="/216/file0" dev="tmpfs" ino=1147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 354.238631][ T60] usb 2-1: Using ep0 maxpacket: 8 [ 354.254798][T21334] loop2: detected capacity change from 0 to 512 [ 354.274755][T21337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8998'. [ 354.345882][ T30] audit: type=1326 audit(2000001254.974:18395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.5.9002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c7259819 code=0x7ffc0000 [ 354.369425][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.380651][ T20] usb 6-1: USB disconnect, device number 31 [ 354.397199][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.398453][T21348] loop2: detected capacity change from 0 to 128 [ 354.414472][ T60] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 354.421272][ T30] audit: type=1326 audit(2000001254.974:18396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.5.9002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7ff6c7259819 code=0x7ffc0000 [ 354.431151][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.447354][ T366] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.466573][ T366] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.476684][ T366] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 354.477484][ T60] usb 2-1: config 0 descriptor?? [ 354.489878][ T30] audit: type=1326 audit(2000001254.974:18397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21345 comm="syz.5.9002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6c7259819 code=0x7ffc0000 [ 354.518070][ T366] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 354.527191][ T366] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.536924][ T366] usb 10-1: config 0 descriptor?? [ 354.572192][T21348] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 354.593007][T21341] loop7: detected capacity change from 0 to 40427 [ 354.606571][ T346] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 354.631694][T21341] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 354.639296][T21341] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 354.661925][T21341] F2FS-fs (loop7): Found nat_bits in checkpoint [ 354.701373][T21341] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 354.708308][T21341] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 354.732640][T15590] f2fs_fill_dentries: 25 callbacks suppressed [ 354.732660][T15590] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 354.738644][T15590] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 354.746878][T15590] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 354.754642][T15590] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 354.762537][T15590] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 354.770066][T15590] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 354.777601][T15590] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix. [ 354.871576][T21375] loop2: detected capacity change from 0 to 512 [ 354.913430][T21375] [EXT4 FS bs=1024, gc=1, bpg=255, ipg=32, mo=a815c02c, mo2=0000] [ 354.921394][T21375] System zones: 1-12 [ 354.926837][T21375] EXT4-fs (loop2): 1 truncate cleaned up [ 354.933212][T21375] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,errors=continue,grpjquota=,errors=remount-ro,nobarrier,debug,. Quota mode: writeback. [ 354.970891][T19590] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 355.000513][T19590] EXT4-fs (loop2): Remounting filesystem read-only [ 355.007775][T19590] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 355.026434][T19590] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 355.076690][ T8] tipc: Disabling bearer [ 355.081367][ T60] usbhid 2-1:0.0: can't add hid device: -71 [ 355.082206][ T8] tipc: Left network mode [ 355.093406][ T60] usbhid: probe of 2-1:0.0 failed with error -71 [ 355.102572][ T366] usbhid 10-1:0.0: can't add hid device: -71 [ 355.102726][ T60] usb 2-1: USB disconnect, device number 42 [ 355.108427][ T366] usbhid: probe of 10-1:0.0 failed with error -71 [ 355.146528][ T366] usb 10-1: USB disconnect, device number 14 [ 355.591289][ T8] device bridge_slave_1 left promiscuous mode [ 355.597441][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.604980][ T8] device bridge_slave_0 left promiscuous mode [ 355.610915][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.619145][ T8] device veth1_macvtap left promiscuous mode [ 355.625123][ T8] device veth0_vlan left promiscuous mode [ 356.145770][ T346] Bluetooth: hci0: Frame reassembly failed (-84) [ 358.171119][ T366] Bluetooth: hci0: command 0x1003 tx timeout [ 358.176965][ T5550] Bluetooth: hci0: sending frame failed (-49) [ 359.197102][ T30] kauditd_printk_skb: 102 callbacks suppressed [ 359.197119][ T30] audit: type=1400 audit(2000001259.824:18500): avc: denied { execmem } for pid=21437 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 359.235705][ T30] audit: type=1400 audit(2000001259.834:18501): avc: denied { prog_load } for pid=21439 comm="syz.1.9041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 359.256863][ T30] audit: type=1400 audit(2000001259.834:18502): avc: denied { read write } for pid=10818 comm="syz-executor" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 359.281573][ T30] audit: type=1400 audit(2000001259.854:18503): avc: denied { read write } for pid=21438 comm="syz.7.9040" name="loop7" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 359.305658][ T30] audit: type=1400 audit(2000001259.854:18504): avc: denied { create } for pid=21442 comm="syz.9.9043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 359.326018][ T30] audit: type=1400 audit(2000001259.854:18505): avc: denied { create } for pid=21442 comm="syz.9.9043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 359.345627][ T30] audit: type=1400 audit(2000001259.864:18506): avc: denied { read write } for pid=15590 comm="syz-executor" name="loop7" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 359.369733][ T30] audit: type=1400 audit(2000001259.914:18507): avc: denied { read write } for pid=14878 comm="syz-executor" name="loop9" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 359.395438][ T30] audit: type=1400 audit(2000001259.954:18508): avc: denied { read write } for pid=10818 comm="syz-executor" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 360.246602][ T30] audit: type=1400 audit(2000001260.864:18509): avc: denied { execmem } for pid=21447 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 360.251134][ T366] Bluetooth: hci0: command 0x1001 tx timeout [ 360.277051][ T5550] Bluetooth: hci0: sending frame failed (-49) [ 362.331224][ T366] Bluetooth: hci0: command 0x1009 tx timeout [ 365.279914][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 365.279931][ T30] audit: type=1400 audit(2000001265.904:18540): avc: denied { execmem } for pid=21480 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 365.310538][ T30] audit: type=1400 audit(2000001265.924:18541): avc: denied { read write } for pid=10818 comm="syz-executor" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 365.337169][ T30] audit: type=1400 audit(2000001265.934:18542): avc: denied { prog_load } for pid=21485 comm="syz.1.9059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 365.356381][ T30] audit: type=1400 audit(2000001265.934:18543): avc: denied { read } for pid=21485 comm="syz.1.9059" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 365.379040][ T30] audit: type=1400 audit(2000001265.934:18544): avc: denied { read } for pid=21483 comm="syz.9.9058" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 365.401894][ T30] audit: type=1400 audit(2000001265.934:18545): avc: denied { prog_load } for pid=21487 comm="syz.7.9056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 365.421018][ T30] audit: type=1400 audit(2000001265.934:18546): avc: denied { create } for pid=21487 comm="syz.7.9056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 365.440654][ T30] audit: type=1400 audit(2000001265.954:18547): avc: denied { read write } for pid=10818 comm="syz-executor" name="loop1" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 365.464948][ T30] audit: type=1400 audit(2000001265.964:18548): avc: denied { read write } for pid=15590 comm="syz-executor" name="loop7" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 365.489429][ T30] audit: type=1400 audit(2000001265.964:18549): avc: denied { read write } for pid=14878 comm="syz-executor" name="loop9" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 371.964623][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 371.964642][ T30] audit: type=1400 audit(2000001272.584:18598): avc: denied { prog_load } for pid=21524 comm="syz.1.9071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 372.000228][ T30] audit: type=1400 audit(2000001272.594:18599): avc: denied { map_create } for pid=21525 comm="syz.5.9070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 372.021551][ T30] audit: type=1400 audit(2000001272.594:18600): avc: denied { create } for pid=21527 comm="syz.7.9079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 372.042313][ T30] audit: type=1400 audit(2000001272.594:18601): avc: denied { prog_load } for pid=21525 comm="syz.5.9070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 372.061399][ T30] audit: type=1400 audit(2000001272.594:18602): avc: denied { prog_load } for pid=21525 comm="syz.5.9070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 372.080773][ T30] audit: type=1400 audit(2000001272.594:18603): avc: denied { create } for pid=21525 comm="syz.5.9070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=0 [ 372.100352][ T30] audit: type=1400 audit(2000001272.594:18604): avc: denied { mount } for pid=21530 comm="syz.9.9073" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=0 [ 372.122558][ T30] audit: type=1400 audit(2000001272.614:18605): avc: denied { read write } for pid=19561 comm="syz-executor" name="loop5" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 372.146656][ T30] audit: type=1400 audit(2000001272.614:18606): avc: denied { create } for pid=21527 comm="syz.7.9079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 372.166785][ T30] audit: type=1400 audit(2000001272.624:18607): avc: denied { read write } for pid=14878 comm="syz-executor" name="loop9" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 376.394635][T21555] device syz_tun left promiscuous mode [ 376.399917][T21555] bridge0: port 4(syz_tun) entered disabled state [ 376.972004][ T346] device bridge_slave_1 left promiscuous mode [ 376.977948][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.985440][ T346] device bridge_slave_0 left promiscuous mode [ 376.991457][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.999320][ T346] device veth1_macvtap left promiscuous mode [ 377.005204][ T346] device veth0_vlan left promiscuous mode [ 377.614737][ T346] tipc: Disabling bearer [ 377.620070][ T346] tipc: Left network mode [ 378.292812][ T346] device gretap0 left promiscuous mode [ 378.301234][ T346] device vlan2 left promiscuous mode [ 378.306334][ T346] bridge0: port 3(vlan2) entered disabled state [ 378.572197][ T346] device bridge_slave_1 left promiscuous mode [ 378.578141][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.585619][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.593716][ T346] device bridge_slave_1 left promiscuous mode [ 378.599666][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.607197][ T346] device bridge_slave_0 left promiscuous mode [ 378.613421][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.621454][ T346] device bridge_slave_1 left promiscuous mode [ 378.627384][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.634797][ T346] device bridge_slave_0 left promiscuous mode [ 378.640710][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.649676][ T346] device veth1_macvtap left promiscuous mode [ 378.655729][ T346] device veth1_macvtap left promiscuous mode [ 378.661602][ T346] device veth0_vlan left promiscuous mode [ 378.667454][ T346] device veth1_macvtap left promiscuous mode [ 378.673325][ T346] device veth0_vlan left promiscuous mode