last executing test programs: 1.980419068s ago: executing program 0 (id=9709): syz_mount_image$f2fs(&(0x7f0000005700), &(0x7f00000000c0)='./file1\x00', 0x4c2, &(0x7f0000005a00)=ANY=[@ANYBLOB="6e6f657874656e745f63616368652c6a71666d743d7666736f6c642c6e6f71756f74612c6e6f71756f74612c66617374626f6f742c6e6f696e6c696e655f64656e7472792c6a71666d743d76667376312c6673796e635f6d6f64653d7374726963742c6772706a71756f74613d278c006c6c6f635f6d6f64653d64656661756c742c696e6c696e655f78617474722c00a2b4db502b6ba8210424f7f797a6ddd50d26e73f72a841707ea019cc81c223d959a991615e17b58a4e3ec9b2e54b87aafbaf0036421993a261bd97b95beab3b8db73ad782b6009737439da6f1d157405f23efa22e2b774ebcf1fbf96b0f516775ed21aecaa6ba0f6d45e7116d6b8e7ba106e1bc013fe42d92ac1dfb7a083be457d767f9c35564b3bec3688b7271abc48c68f836e85c938f9421f94852a1663d51e28131dc06f3283e4177f9c00588bdb206ab8133754c6df320e574f43807d7febd123f46625af37dea6e822fbc470034588d31a4f90aeba747e687159"], 0x5, 0x550f, &(0x7f00000001c0)="$eJzs3M9rI+UbAPAn7XZ/f/dbxIO3HViEFjZh0x+L3qru4g/sUlY9eNI0SUN2k0xp0rT25MGjePA/EQVPHv0bPHj2Jh4Ub0IlM1PdqgtC08RtPx+YPPO+efPM84Zl4ZkpCeDcmk9+/bkUN+JKRMxGxPWI7LxUHJm1PLwQETcjYuaJo1TM/zFxMSKuRsSNUfI8Z6l46/Pbw1urP731yzffXbpw7Yuvv5/eroFpezEiutv5+V43j2krj4+K+dqwncXuyrCI+Rvdx8U4zeNeczPLsFc7WlfL4nIrX59u7/ZHcatTq49iq72VzW/38gv2h62jPNkHHtV2snGjuZnFdj/NYusgr2v/IP+/7aA/yPM0inwfZeljMDiK+Xxzv5nvZ/txFuu9QTGf500bzf1RHBaxuFzU004jq2PzJN/0f9vb7d7ufjJs7vTbaS9ZrVRfqlTvlqs7aaM5aK6Ua93G3ZVkodUZLSsPmrXuWitNW51mpZ52F5OFVr1erlaThXvNzXatl1SrleXKnfLqYnF2O3n9wXtJp5EsjOKr7d7uoN3pJ1vpTpJ/YjFZqiy/vJjcqibvrG8kGw/v31/feDfuvf/glfU3XysW/a2sZGHpztJSuXqnvFRdPIP7/+Ap+/+kKHqM+4cTKU27AIBnj/4fmIbT6/93HsbhYTZ/mv1/6P/HYlz97+Ek+t/z3v+fwv7hRPT/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn1g9zX76Rnczn42vF/P+KqeeKcSkiZiLi8B/MxsVjOWeLPHNPWT/3lxq+LUWWYXSNS8VxNSLWiuO3/5/2twAAAABn11cf3/ws79bzl/lpF8Qk5TdtZq5/OKZ8pYiYm/9xTNlmRi/PjylZ9u/7QuyPKVt2A+vymJLlt9wujCvbvzJ7LFx+IpTyMDPRcgAAgIk43glMtgsBAABgkj6ddgFMRymOHmUePQvO/vL+zweCV46NAAAAgGdQadoFAAAAAKcu6//9/h8AAACcbfnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/M7O/dyoDURxAH62cSD/FBTlnla4QRkpIcccIwpIE5RAWkgD1EBuKSGCFR4vWlbsaiWP7d3V90kwjAU/ZhA+zBtpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjT33q7+v3z66+uOYdjN3lmAwAAAFyzr7er5sU89d+31z+2lz63/SIiyoi4tnav4s1FZtXm1A+8v743hj8RTcLpO6bt411ELKqIRUT8/9T3rwAAAACv1269WabVenqajz0ghpSKNuWHb5nyioio5/8ypZWnvC+Zwpr/9yR+ZEprClizTGGp5DbJlfYkze1+rtrN7jRFasrHP59t7gAAwICqi2bYVQgAAABD+j72ABhHEbdbmeetwGlq2u29txc9AAAA4AUqxh4AAAAA0Ltm/f+sz/8L5/8BAABAV+n8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPq0r7er3Xqz7JpzOHaTZzYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3LA/7ygQAmEQBnvXdyZz/8NKg6amJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxc79u0ZSxQEAfzOzs/FOxTXKFhFRsNDGy+2dd14nFkqw8E8QQm7vjLcqnim84xDS2Enqa0RLEUGJ3f0PVyeQJnYptohgYbUyszPJ5Ae4/prZZD8fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKXh24dxkh064zguzm3tP1jJ+u1jfebRxs5C1rI4qjPps+HF6oeo21wiAAAAzI6krO9DCLvp5lLWx528/k/La7Ka/9unx3FZzx+v+8u+rP2z9svPe88fDNQZj5Pd9NbqoH/5ZCqt/2+W0+2Zv7yilT/5/N1Lkn8h8Xvrzw3T/HlGXz9+/E47D+fqyBYA+CculX0RlL8PZX2vycQAmBmtSuFd1v9Jp9mcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOowXA9PlnEUQlhoHcaZ7f0HK6f1jzZ2Fsp2/eHDjeo9s1ukIYRbq4P+5RrnMu0+v3f/zvJg0L9bf/BSCKGp0d8qpn/ngwkuDqGR5yP4j4K4+LKnJZ+zETT4QwkAgHMpLVpW1++mm0vZuWg+hNF3R+v/VytxmLD+3/vw+lZ1rGr936tthg2am+yyxbU/RqPRvfuvr368fLt/u//JG1d6b/au3rh27cZi/q5k0RsTAAAA/p120ar1fzx/cv3/YiUOE9b/n33T+7I6VjJr9f+EDhf9ms4EAABgtj378u+/Raecj9rt8MXy2trd3vh48PnK+NhAqn/bXNGq9X8y33RWAAAAQB2G69GR9f+blThMuP7/1Pcv/Fi9ZxJCuFCs/19a+XRws77pTLU6/py46TkCAADQrAtFq67/p/n+//hgy0McQnjtlXFc/BvAier/5N2vfqiOVd3/f7W+KU6luDt+HnnfDaHVbTojAAAAzrMnipYV+7+mm0sf/XTx/bb9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1+zMAAP//H1NCtw==") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') sendfile(r0, r0, &(0x7f0000000040)=0xfff, 0x2) 1.927030779s ago: executing program 2 (id=9710): unshare(0x20000400) r0 = socket$inet6(0xa, 0x3, 0x40) bind$inet6(r0, &(0x7f0000000540)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) 1.866668889s ago: executing program 2 (id=9713): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f0000000040), 0x3b) 1.803865461s ago: executing program 2 (id=9714): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.722436932s ago: executing program 2 (id=9715): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x2904c, 0x5, 0x10003, '\x00', [{0x0, 0x4, 0x8, 0x9, 0x0, 0x1}, {0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x5}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) 1.666947823s ago: executing program 2 (id=9718): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1.596239054s ago: executing program 2 (id=9721): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x7, "8041d8da"}, @global=@item_012={0x1, 0x1, 0x2, "19"}]}}, 0x0}, 0x0) 1.322854549s ago: executing program 0 (id=9725): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') inotify_init1(0x0) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') 1.054352063s ago: executing program 0 (id=9738): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_lock', 0x202, 0x40) write$binfmt_elf32(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x10, 0xf1, 0x5, 0x0, 0x80, 0x2, 0x6, 0xd6b4a0, 0xfc, 0x38, 0x16e, 0x8, 0x400, 0x20, 0x1, 0x7, 0x3, 0x6}, [{0x1, 0x80, 0x8, 0x3, 0x9, 0x7, 0x4, 0xff}]}, 0x58) write$cgroup_pressure(r0, 0x0, 0x0) 1.011828643s ago: executing program 0 (id=9741): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) 720.632378ms ago: executing program 3 (id=9750): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r0) 657.291269ms ago: executing program 3 (id=9753): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000}, 0x0, 0x6e6bc0, 0x0, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 602.29718ms ago: executing program 3 (id=9755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x18, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x4000) 602.05884ms ago: executing program 3 (id=9757): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x3ea49000) 595.10837ms ago: executing program 3 (id=9759): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000040)=ANY=[], 0x5000) 577.37398ms ago: executing program 3 (id=9761): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="02010000000000406a05420000000000000109022400010000a000090400000103020000092100000001220700090581e30f000000001bdb8cabc359703b3705006f82c668767c7de0c211a9431126c075023c86a63a3bbcc56bcb374a596887a83a3ce3eb03ef6e265a313c92d1be5fc8645a5f97a000877d817ca00fe2c97866920375"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="a70007"], 0x0, 0x0, 0x0, 0x0}, 0x0) 523.522461ms ago: executing program 1 (id=9765): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r0, 0x0, 0x2) 466.689832ms ago: executing program 1 (id=9766): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@norecovery}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000080)={0x4, 0xffe, 0xf, 0xff, 0x0, 0xfffc, 0x2401}) 426.733343ms ago: executing program 4 (id=9768): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x9, &(0x7f00000001c0)=0x0) io_submit(r1, 0x2, &(0x7f0000000300)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}]) 361.195014ms ago: executing program 1 (id=9769): unshare(0x24020400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) 220.818726ms ago: executing program 4 (id=9770): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) r0 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r0, 0x111, 0x32, 0x0, 0x0) 138.962138ms ago: executing program 1 (id=9771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f0000000340)=r0, 0x1000000}, 0x20) 138.681678ms ago: executing program 4 (id=9772): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/4093, 0xffd}, {&(0x7f0000000280)=""/110, 0x6e}], 0x3}}], 0x2, 0x0, 0x0) 138.551377ms ago: executing program 1 (id=9773): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x4c}}, 0x0) 138.427138ms ago: executing program 4 (id=9774): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mlockall(0x6) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 123.992447ms ago: executing program 1 (id=9775): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$eJzs3d9rHFsdAPDvTLK3v3JNrvpwveBtsZW0aHeTxrbBh1pB7FPBWt9rTDYhZJMN2U3bhCIpviuIqOCTT74I/gGC9E8QoaDvUkURbfXBB3VlZ2drG3eTlG52LsnnA9M5M2d3v9/TsGfmzBx2Aji2zkXEzYgYiYhLETGe70/z5Va7/k7ndS+eP5pvL0m0Wnf/mkSS7+t+VpKvz0TETkScjIiv34r4VvL/cRtb2ytztVp1I9+uNFfXK42t7cvLq3NL1aXq2szM9LXZ67NXZ6cG0s6JiLjxlT/+8Hs/++qNX33+we/v/fnit9tpjeX1r7ZjkDpNL2X/F12jEbFxGMEKMJKvS33qvzsyxGQAANhX+xz/4xHxmez8fzxGsrNTAAAA4ChpfWks/pVEtAAAAIAjK83mwCZpOZ8LMBZpWi535vB+Mk6ntXqj+bnF+ubaQmeu7ESU0sXlWnUqnys8EaWkvT2dz7Htbl/ZtT0TEe9FxA/GT2Xb5fl6baHoix8AAABwTJzZNf7/x3g2/j9RdF4AAADAgE0UnQAAAABw6Iz/AQAA4Ogz/gcAAIAj7Wu3b7eXVvf51wv3tzZX6vcvL1QbK+XVzfnyfH1jvbxUry9lv9m3ut/n1er19S/E2ubDSrPaaFYaW9v3Vuuba817y689AhsAAAAYovfOPvldEhE7XzyVLW3vFJ0UMBTJPvXZQ0Ke5Rt/GEJCwNCMFJ0AUJjRohMAClMqOgGgcPtdB+g7eefXg88FAAA4HJOf6n//37UBONrSohMAAIbO/X84vkqvzwC8WlwmQFE+tk/929//b7XeKCEAAGDgxrIlScv5vcCxSNNyOeLd7LEApWRxuVadyscHvx0vnWhvT2fvTPadMwwAAAAAAAAAAAAAAAAAAAAAAAAAdLRaSbQAAACAIy0i/VOS/Zp/xOT4hbHd1wfeSf45nq0j4sFP7v7o4VyzuTHd3v+3l/ubP873XyniCgYAAACwW3ec3h3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAgvXj+aL67DDPuX74cERM94589ma1ORikiTv89idFX3pdExMgA4u88joj3e8VP2mnFRHSy6BX/VIHx04g4M4D4cJw9afc/N3t9/9I4l617f/9G8+Vt9e//0uj2fyN9+p93Dxjjg6e/qPSN/zjig9He/U83ftIn/vkDxv/mN7a3+9W1fhox2fP4k7wWq9JcXa80trYvL6/OLVWXqmszM9PXZq/PXp2dqiwu16r5vz1jfP/Tv/zPXu0/3Sf+xD7tv3DA9v/76cPnn+gUS73iXzzf+/j7fp/4aX7s+2xebtdPdss7nfKrPvz5bz7cq/0Lfdr/8u/f40DbjnnxgO2/dOc7zw74UgBgCBpb2ytztVp1460Kg/qcNyykUUBQhUMqnPhopKHQKezVayTD66AAAICB+d9Jf9GZAAAAAAAAAAAAAAAAAAAAwPE1jJ8T2x1zp5imAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs6b8BAAD///JI2KQ=") newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', r0, 0xee01) 116.858948ms ago: executing program 4 (id=9776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) 97.940508ms ago: executing program 0 (id=9777): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xc0060, &(0x7f0000000180)=ANY=[@ANYBLOB="6d6f64653d3030d80d3032303030303030303030312c"]) 38.980829ms ago: executing program 4 (id=9778): socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000600)=""/75, 0x4b}], 0x1, 0x7, 0x101) 0s ago: executing program 0 (id=9779): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0xfec0ffff00000000, 0xff02}, 0x0, r1}) kernel console output (not intermixed with test programs): ed [ 392.311252][T16622] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7327'. [ 392.315050][T16617] FAT-fs (loop3): Directory bread(block 67) failed [ 392.322549][ T465] print_req_error: 2135 callbacks suppressed [ 392.322562][ T465] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 392.337260][T16617] FAT-fs (loop3): Directory bread(block 68) failed [ 392.346674][ T1128] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 392.356219][ T1181] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 392.409847][ T1128] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.422050][ T1181] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.442521][T16617] FAT-fs (loop3): Directory bread(block 69) failed [ 392.457181][ T465] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.474161][ T1128] buffer_io_error: 1900 callbacks suppressed [ 392.474184][ T1128] Buffer I/O error on dev loop0p3, logical block 8, async page read [ 392.479819][T16617] FAT-fs (loop3): Directory bread(block 70) failed [ 392.490892][ T1181] Buffer I/O error on dev loop0p2, logical block 8, async page read [ 392.501609][ T465] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 392.511226][ T1128] blk_update_request: I/O error, dev loop0, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.532810][ T1181] blk_update_request: I/O error, dev loop0, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.545955][T16617] FAT-fs (loop3): Directory bread(block 71) failed [ 392.548262][ T1128] Buffer I/O error on dev loop0p3, logical block 9, async page read [ 392.559704][ T465] blk_update_request: I/O error, dev loop0, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.569468][ T1181] Buffer I/O error on dev loop0p2, logical block 9, async page read [ 392.585258][T16617] FAT-fs (loop3): Directory bread(block 72) failed [ 392.589863][ T1128] blk_update_request: I/O error, dev loop0, sector 1010 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 392.602510][ T465] Buffer I/O error on dev loop0p1, logical block 9, async page read [ 392.608536][ T1181] Buffer I/O error on dev loop0p2, logical block 10, async page read [ 392.618354][T16617] FAT-fs (loop3): Directory bread(block 73) failed [ 392.635049][ T1128] Buffer I/O error on dev loop0p3, logical block 10, async page read [ 392.639183][ T465] Buffer I/O error on dev loop0p1, logical block 10, async page read [ 392.644061][ T1181] Buffer I/O error on dev loop0p2, logical block 11, async page read [ 392.885912][T16648] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 392.959210][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7342'. [ 392.971149][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7342'. [ 393.141880][ T386] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 393.233402][ T23] kauditd_printk_skb: 282 callbacks suppressed [ 393.233412][ T23] audit: type=1400 audit(1744715257.859:17603): avc: denied { map_create } for pid=16682 comm="syz.3.7356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 393.301228][T16689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7358'. [ 393.317031][T16689] tc_dump_action: action bad kind [ 393.322083][ T23] audit: type=1400 audit(1744715257.887:17604): avc: denied { map_read map_write } for pid=16682 comm="syz.3.7356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 393.380943][ T23] audit: type=1400 audit(1744715257.999:17605): avc: denied { module_request } for pid=16694 comm="syz.0.7361" kmod=6E65746465762DE73B782029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 393.435936][ T23] audit: type=1400 audit(1744715258.027:17606): avc: denied { read write } for pid=356 comm="syz-executor" name="loop3" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 393.461019][ T23] audit: type=1400 audit(1744715258.027:17607): avc: denied { open } for pid=356 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 393.485237][ T23] audit: type=1400 audit(1744715258.027:17608): avc: denied { ioctl } for pid=356 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=154 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 393.512189][ T23] audit: type=1400 audit(1744715258.065:17609): avc: denied { read } for pid=146 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 393.536794][ T23] audit: type=1400 audit(1744715258.065:17610): avc: denied { search } for pid=146 comm="syslogd" name="/" dev="tmpfs" ino=410 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 393.558855][ T23] audit: type=1400 audit(1744715258.065:17611): avc: denied { append } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=112154 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 393.558878][ T386] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 393.581462][ T23] audit: type=1400 audit(1744715258.065:17612): avc: denied { open } for pid=146 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=112154 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 393.590387][ T386] usb 3-1: config 220 has an invalid descriptor of length 125, skipping remainder of the config [ 393.622386][ T386] usb 3-1: config 220 has no interface number 2 [ 393.625978][T16697] EXT4-fs (loop3): 1 orphan inode deleted [ 393.630151][ T386] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 393.634714][T16697] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 393.656566][T16697] ext4 filesystem being mounted at /1437/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 393.677545][T16611] F2FS-fs (loop4): Found nat_bits in checkpoint [ 393.698633][T16703] FAT-fs (loop0): Directory bread(block 64) failed [ 393.704986][T16703] FAT-fs (loop0): Directory bread(block 65) failed [ 393.711940][ T386] usb 3-1: config 220 interface 0 has no altsetting 0 [ 393.740821][T16703] FAT-fs (loop0): Directory bread(block 66) failed [ 393.756214][ T386] usb 3-1: config 220 interface 76 has no altsetting 0 [ 393.757192][T16703] FAT-fs (loop0): Directory bread(block 67) failed [ 393.763153][ T386] usb 3-1: config 220 interface 1 has no altsetting 0 [ 393.770974][T16703] FAT-fs (loop0): Directory bread(block 68) failed [ 393.777907][T16611] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 393.784221][T16703] FAT-fs (loop0): Directory bread(block 69) failed [ 393.804760][T16703] FAT-fs (loop0): Directory bread(block 70) failed [ 393.812400][T16703] FAT-fs (loop0): Directory bread(block 71) failed [ 393.818909][T16703] FAT-fs (loop0): Directory bread(block 72) failed [ 393.825346][T16703] FAT-fs (loop0): Directory bread(block 73) failed [ 393.969452][ T386] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 393.991644][ T386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.000234][ T386] usb 3-1: Product: syz [ 394.004523][ T386] usb 3-1: Manufacturer: syz [ 394.008980][ T386] usb 3-1: SerialNumber: syz [ 394.288581][T16766] netlink: 'syz.3.7394': attribute type 14 has an invalid length. [ 394.392928][ T386] usb 3-1: selecting invalid altsetting 0 [ 394.398602][ T386] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 394.420779][ T386] uvcvideo: No valid video chain found. [ 394.471345][T16786] xt_socket: unknown flags 0x58 [ 394.529694][ T386] usb 3-1: USB disconnect, device number 114 [ 394.695802][T16810] x_tables: unsorted underflow at hook 3 [ 394.838133][T16828] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.883743][T16836] xt_bpf: check failed: parse error [ 395.292241][T16882] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 395.334187][T16882] EXT4-fs (loop0): orphan cleanup on readonly fs [ 395.354479][T16882] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 395.368957][T16882] EXT4-fs (loop0): Cannot turn on quotas: error -5 [ 395.376133][T16882] EXT4-fs (loop0): 1 truncate cleaned up [ 395.382662][T16882] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 395.435389][T16882] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2227: inode #15: comm syz.0.7447: corrupted in-inode xattr [ 395.508830][T16913] xt_socket: unknown flags 0x58 [ 395.694719][T16919] FAT-fs (loop4): Directory bread(block 64) failed [ 395.710605][T16919] FAT-fs (loop4): Directory bread(block 65) failed [ 395.737404][T16919] FAT-fs (loop4): Directory bread(block 66) failed [ 395.763417][T16919] FAT-fs (loop4): Directory bread(block 67) failed [ 395.769816][T16919] FAT-fs (loop4): Directory bread(block 68) failed [ 395.793184][T16919] FAT-fs (loop4): Directory bread(block 69) failed [ 395.799907][T16919] FAT-fs (loop4): Directory bread(block 70) failed [ 395.826051][T16919] FAT-fs (loop4): Directory bread(block 71) failed [ 395.846726][T16919] FAT-fs (loop4): Directory bread(block 72) failed [ 395.884189][T16919] FAT-fs (loop4): Directory bread(block 73) failed [ 395.997497][T16850] F2FS-fs (loop3): Found nat_bits in checkpoint [ 396.062458][T16961] x_tables: unsorted underflow at hook 4 [ 396.143003][T16850] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 396.168789][T16971] netlink: 'syz.0.7490': attribute type 13 has an invalid length. [ 396.208001][T16971] €Â: refused to change device tx_queue_len [ 396.214094][T16971] A link change request failed with some changes committed already. Interface €Â may have been left with an inconsistent configuration, please check. [ 396.379663][T16987] __nla_validate_parse: 3 callbacks suppressed [ 396.379672][T16987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7508'. [ 396.872713][T17018] SELinux: truncated policydb string identifier [ 396.884551][T17019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7511'. [ 396.901563][T17018] SELinux: failed to load policy [ 396.974601][T17027] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 397.066050][T17030] FAT-fs (loop4): Directory bread(block 64) failed [ 397.075490][T17030] FAT-fs (loop4): Directory bread(block 65) failed [ 397.099306][T17030] FAT-fs (loop4): Directory bread(block 66) failed [ 397.123241][T17030] FAT-fs (loop4): Directory bread(block 67) failed [ 397.140213][T17030] FAT-fs (loop4): Directory bread(block 68) failed [ 397.157606][T17030] FAT-fs (loop4): Directory bread(block 69) failed [ 397.164322][T17030] FAT-fs (loop4): Directory bread(block 70) failed [ 397.181455][T17030] FAT-fs (loop4): Directory bread(block 71) failed [ 397.192262][T17030] FAT-fs (loop4): Directory bread(block 72) failed [ 397.199690][T17048] IPv6: NLM_F_CREATE should be specified when creating new route [ 397.209270][T17030] FAT-fs (loop4): Directory bread(block 73) failed [ 397.336054][T16943] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 150994945) [ 397.373445][T16943] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 397.412352][T16943] F2FS-fs (loop1): invalid crc value [ 397.465476][T16943] F2FS-fs (loop1): Found nat_bits in checkpoint [ 397.491605][T16943] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 397.533238][T16943] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 397.540356][T16943] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 397.566392][T17082] netlink: 'syz.3.7538': attribute type 13 has an invalid length. [ 397.606791][T17082] gretap0: refused to change device tx_queue_len [ 397.621259][T17082] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 397.803903][T17099] FAT-fs (loop3): Directory bread(block 64) failed [ 397.810448][T17099] FAT-fs (loop3): Directory bread(block 65) failed [ 397.819982][T17099] FAT-fs (loop3): Directory bread(block 66) failed [ 397.827263][T17099] FAT-fs (loop3): Directory bread(block 67) failed [ 397.837172][T17099] FAT-fs (loop3): Directory bread(block 68) failed [ 397.844482][T17099] FAT-fs (loop3): Directory bread(block 69) failed [ 397.857861][T17099] FAT-fs (loop3): Directory bread(block 70) failed [ 397.864568][T17099] FAT-fs (loop3): Directory bread(block 71) failed [ 397.871399][T17099] FAT-fs (loop3): Directory bread(block 72) failed [ 397.882574][T17099] FAT-fs (loop3): Directory bread(block 73) failed [ 397.971556][ T465] print_req_error: 1743 callbacks suppressed [ 397.971571][ T465] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 397.996964][ T1181] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 398.004844][ T465] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 398.010280][ T1128] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 398.034192][ T1181] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 398.059681][ T465] buffer_io_error: 1547 callbacks suppressed [ 398.059690][ T465] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 398.091664][ T1181] Buffer I/O error on dev loop0p2, logical block 8, async page read [ 398.098762][ T1128] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 398.106127][ T465] blk_update_request: I/O error, dev loop0, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 398.125150][ T1181] blk_update_request: I/O error, dev loop0, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 398.140085][ T1128] Buffer I/O error on dev loop0p3, logical block 8, async page read [ 398.155940][ T1181] Buffer I/O error on dev loop0p2, logical block 9, async page read [ 398.156006][ T1181] blk_update_request: I/O error, dev loop0, sector 60 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 398.156122][ T1181] Buffer I/O error on dev loop0p2, logical block 10, async page read [ 398.156161][ T1181] blk_update_request: I/O error, dev loop0, sector 61 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 398.156168][ T1181] Buffer I/O error on dev loop0p2, logical block 11, async page read [ 398.156198][ T1181] Buffer I/O error on dev loop0p2, logical block 12, async page read [ 398.156228][ T1181] Buffer I/O error on dev loop0p2, logical block 13, async page read [ 398.156257][ T1181] Buffer I/O error on dev loop0p2, logical block 14, async page read [ 398.156286][ T1181] Buffer I/O error on dev loop0p2, logical block 15, async page read [ 398.270843][T17135] netlink: 'syz.3.7564': attribute type 1 has an invalid length. [ 398.337549][ T379] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 398.448104][T17149] xt_bpf: check failed: parse error [ 398.586189][T17158] FAT-fs (loop1): Directory bread(block 64) failed [ 398.593192][ T23] kauditd_printk_skb: 211 callbacks suppressed [ 398.593202][ T23] audit: type=1400 audit(1744715262.873:17823): avc: denied { create } for pid=17160 comm="syz.4.7576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 398.604818][T17158] FAT-fs (loop1): Directory bread(block 65) failed [ 398.628551][T17158] FAT-fs (loop1): Directory bread(block 66) failed [ 398.644888][T17158] FAT-fs (loop1): Directory bread(block 67) failed [ 398.660549][T17158] FAT-fs (loop1): Directory bread(block 68) failed [ 398.667973][ T23] audit: type=1400 audit(1744715262.901:17824): avc: denied { write } for pid=17160 comm="syz.4.7576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 398.699108][T17158] FAT-fs (loop1): Directory bread(block 69) failed [ 398.709491][T17158] FAT-fs (loop1): Directory bread(block 70) failed [ 398.716735][T17158] FAT-fs (loop1): Directory bread(block 71) failed [ 398.725936][ T23] audit: type=1400 audit(1744715262.901:17825): avc: denied { nlmsg_write } for pid=17160 comm="syz.4.7576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 398.756695][T17158] FAT-fs (loop1): Directory bread(block 72) failed [ 398.761634][T17177] netlink: 'syz.3.7593': attribute type 3 has an invalid length. [ 398.766413][T17158] FAT-fs (loop1): Directory bread(block 73) failed [ 398.782637][ T23] audit: type=1400 audit(1744715262.920:17826): avc: denied { read write } for pid=357 comm="syz-executor" name="loop4" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 398.807148][ T379] usb 3-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 398.816487][ T23] audit: type=1400 audit(1744715262.920:17827): avc: denied { open } for pid=357 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 398.857557][ T379] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 398.875362][ T379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 122, changing to 10 [ 398.889722][ T379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 24947, setting to 1024 [ 398.901066][ T23] audit: type=1400 audit(1744715262.957:17828): avc: denied { ioctl } for pid=17116 comm="syz.2.7567" path="/dev/raw-gadget" dev="devtmpfs" ino=289 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 398.930630][ T23] audit: type=1400 audit(1744715263.022:17829): avc: denied { read } for pid=146 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 398.960120][ T23] audit: type=1400 audit(1744715263.022:17830): avc: denied { search } for pid=146 comm="syslogd" name="/" dev="tmpfs" ino=410 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.982086][ T23] audit: type=1400 audit(1744715263.022:17831): avc: denied { append } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=112154 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 399.004746][ T23] audit: type=1400 audit(1744715263.022:17832): avc: denied { open } for pid=146 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=112154 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 399.107365][ T379] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 399.116439][ T379] usb 3-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 399.124490][ T379] usb 3-1: Product: syz [ 399.128408][ T379] usb 3-1: Manufacturer: syz [ 399.132850][ T379] usb 3-1: SerialNumber: syz [ 399.138245][ T379] usb 3-1: config 0 descriptor?? [ 399.420438][ T379] usb 3-1: USB disconnect, device number 115 [ 399.642389][ T1181] udevd[1181]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 399.974057][T17192] xt_CT: You must specify a L4 protocol and not use inversions on it [ 400.079980][T17211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7600'. [ 400.259043][T17225] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 400.397577][T17257] xt_NFQUEUE: number of queues (65535) out of range (got 65541) [ 400.578410][T17278] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7631'. [ 400.709224][T17289] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 400.734821][T17299] bridge_slave_0: mtu less than device minimum [ 400.826187][T17315] xt_bpf: check failed: parse error [ 401.140229][T17379] xt_TCPMSS: Only works on TCP SYN packets [ 401.178947][T17387] netlink: 'syz.0.7685': attribute type 1 has an invalid length. [ 401.546914][T17453] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 401.559217][T17453] FAT-fs (loop4): Filesystem has been set read-only [ 401.676986][T17471] netlink: 172 bytes leftover after parsing attributes in process `syz.4.7726'. [ 401.833320][ T125] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 401.901114][T17486] netlink: 2068 bytes leftover after parsing attributes in process `syz.1.7732'. [ 401.915925][T17488] xt_ecn: cannot match TCP bits for non-tcp packets [ 402.250330][ T125] usb 4-1: config 0 has an invalid interface number: 54 but max is 1 [ 402.258296][ T125] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.268567][ T125] usb 4-1: config 0 has no interface number 1 [ 402.274555][ T125] usb 4-1: config 0 interface 54 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 402.284135][ T125] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 402.295090][ T125] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 402.308158][ T125] usb 4-1: config 0 interface 0 has no altsetting 0 [ 402.485542][ T125] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice=c7.66 [ 402.494963][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.510208][T17522] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7750'. [ 402.513848][ T125] usb 4-1: Product: syz [ 402.530952][ T125] usb 4-1: Manufacturer: syz [ 402.535367][ T125] usb 4-1: SerialNumber: syz [ 402.550110][ T125] usb 4-1: config 0 descriptor?? [ 402.581677][T17522] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7750'. [ 402.604170][ T125] usb 4-1: selecting invalid altsetting 0 [ 402.614489][T17535] netlink: 'syz.2.7756': attribute type 4 has an invalid length. [ 402.632812][T17535] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.7756'. [ 402.695900][T17547] SELinux: policydb string does not match my string SE Linux [ 402.721196][T17547] SELinux: failed to load policy [ 402.758573][T17559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7768'. [ 402.849351][ T5] usb 4-1: USB disconnect, device number 110 [ 402.888588][T17584] xt_CT: No such helper "snmp_trap" [ 402.916366][T17579] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 402.919522][T17591] binder: 17590:17591 ioctl c018620c 200000000140 returned -22 [ 402.956463][T17579] EXT4-fs error (device loop4): ext4_get_journal_inode:4880: inode #32: comm syz.4.7777: iget: special inode unallocated [ 402.978306][T17579] EXT4-fs (loop4): no journal found [ 402.984708][T17579] EXT4-fs (loop4): can't get journal size [ 403.023790][T17579] EXT4-fs (loop4): filesystem is read-only [ 403.031821][T17579] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier, [ 403.114782][T17604] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 403.126158][T17604] ext4 filesystem being mounted at /1447/bus supports timestamps until (%ptR?) (0x7fffffff) [ 403.273104][T17631] netlink: 'syz.1.7799': attribute type 3 has an invalid length. [ 403.306935][T17631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7799'. [ 403.321189][T17638] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7805'. [ 403.326527][ T465] print_req_error: 1228 callbacks suppressed [ 403.326612][ T465] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 403.335534][T17638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7805'. [ 403.340355][ T1181] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 403.365206][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7805'. [ 403.387445][ T465] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 403.424046][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7805'. [ 403.431161][ T465] buffer_io_error: 1093 callbacks suppressed [ 403.431170][ T465] Buffer I/O error on dev loop0p2, logical block 8, async page read [ 403.465590][ T465] blk_update_request: I/O error, dev loop0, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 403.472082][ T1181] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 403.523550][ T465] Buffer I/O error on dev loop0p2, logical block 9, async page read [ 403.530224][ T1181] Buffer I/O error on dev loop0p3, logical block 8, async page read [ 403.553361][T17667] device gretap2 entered promiscuous mode [ 403.556403][ T465] blk_update_request: I/O error, dev loop0, sector 60 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 403.559352][ T1181] blk_update_request: I/O error, dev loop0, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 403.609700][T17663] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue [ 403.618640][ T465] Buffer I/O error on dev loop0p2, logical block 10, async page read [ 403.628354][T17680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.635957][T17680] IPv6: NLM_F_CREATE should be set when creating new route [ 403.645653][ T1181] Buffer I/O error on dev loop0p3, logical block 9, async page read [ 403.668004][T17663] ext4 filesystem being mounted at /1591/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 403.733007][T17663] fscrypt (loop0, inode 15): Error -61 getting encryption context [ 403.855843][ T465] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 403.870811][ T1181] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 403.884283][ T1128] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 403.905465][ T465] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 403.913082][ T1181] Buffer I/O error on dev loop0p2, logical block 8, async page read [ 403.939016][ T1128] Buffer I/O error on dev loop0p3, logical block 8, async page read [ 403.947212][ T1181] Buffer I/O error on dev loop0p2, logical block 9, async page read [ 403.947976][ T465] Buffer I/O error on dev loop0p1, logical block 9, async page read [ 404.056801][ T23] kauditd_printk_skb: 286 callbacks suppressed [ 404.056813][ T23] audit: type=1400 audit(1744715267.980:18119): avc: denied { mounton } for pid=17727 comm="syz.1.7848" path="/1457/file0" dev="tmpfs" ino=151146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 404.119511][T17730] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002c11c, mo2=0002] [ 404.134350][T17730] System zones: 0-2, 18-18, 34-34 [ 404.153744][T17730] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.7848: bg 0: block 248: padding at end of block bitmap is not set [ 404.183294][T17740] FAT-fs (loop0): Directory bread(block 64) failed [ 404.196032][T17730] Quota error (device loop1): write_blk: dquota write failed [ 404.210313][ T23] audit: type=1400 audit(1744715268.008:18120): avc: denied { write } for pid=17735 comm="syz.4.7850" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 404.234635][T17730] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 404.259700][T17740] FAT-fs (loop0): Directory bread(block 65) failed [ 404.278266][T17730] EXT4-fs (loop1): 1 truncate cleaned up [ 404.281681][T17740] FAT-fs (loop0): Directory bread(block 66) failed [ 404.291512][T17740] FAT-fs (loop0): Directory bread(block 67) failed [ 404.292197][T17730] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,nodelalloc,norecovery,,errors=continue [ 404.306638][ T23] audit: type=1400 audit(1744715268.036:18121): avc: denied { create } for pid=17745 comm="syz.4.7855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 404.335078][T17740] FAT-fs (loop0): Directory bread(block 68) failed [ 404.341421][T17740] FAT-fs (loop0): Directory bread(block 69) failed [ 404.357967][T17730] ext4 filesystem being mounted at /1457/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 404.368284][T17740] FAT-fs (loop0): Directory bread(block 70) failed [ 404.409466][ T23] audit: type=1400 audit(1744715268.036:18122): avc: denied { bind } for pid=17745 comm="syz.4.7855" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 404.422817][T17740] FAT-fs (loop0): Directory bread(block 71) failed [ 404.469391][T17730] syz.1.7848 (17730) used greatest stack depth: 18392 bytes left [ 404.493229][ T23] audit: type=1400 audit(1744715268.036:18123): avc: denied { name_bind } for pid=17745 comm="syz.4.7855" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 404.538043][ T9] Quota error (device loop1): remove_tree: Getting block too big (0 >= 6) [ 404.555751][T17740] FAT-fs (loop0): Directory bread(block 72) failed [ 404.567353][ T23] audit: type=1400 audit(1744715268.036:18124): avc: denied { node_bind } for pid=17745 comm="syz.4.7855" saddr=fe88::5 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 404.573246][T17740] FAT-fs (loop0): Directory bread(block 73) failed [ 404.589851][ T23] audit: type=1400 audit(1744715268.064:18125): avc: denied { read } for pid=146 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 404.699993][T17793] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 404.733166][T17793] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,noauto_da_alloc,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf,bsddf,usrjquota=, [ 404.867028][T17816] xt_TPROXY: Can be used only with -p tcp or -p udp [ 405.025262][T17834] usb usb8: usbfs: process 17834 (syz.0.7895) did not claim interface 0 before use [ 405.080623][T17842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.425376][ T5] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 405.430154][T17866] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue [ 405.453805][T17866] ext4 filesystem being mounted at /1471/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 405.523719][T17866] fscrypt (loop1, inode 15): Error -61 getting encryption context [ 405.672944][T17806] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 150994945) [ 405.680946][T17806] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 405.692678][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 405.697823][T17806] F2FS-fs (loop4): invalid crc value [ 405.753447][T17806] F2FS-fs (loop4): Found nat_bits in checkpoint [ 405.823672][T17915] netlink: 'syz.0.7932': attribute type 3 has an invalid length. [ 405.842755][ T5] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 405.851290][ T5] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 405.889847][ T5] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.915138][T17806] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 405.938919][T17806] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 405.946024][T17806] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 406.078408][ T5] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 406.078706][T17924] EXT4-fs (loop0): Test dummy encryption mode enabled [ 406.095447][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.099246][T17924] EXT4-fs (loop0): Can't change test_dummy_encryption on remount [ 406.111679][ T5] usb 4-1: Product: syz [ 406.116036][ T5] usb 4-1: Manufacturer: syz [ 406.129724][ T5] usb 4-1: SerialNumber: syz [ 406.527794][T17950] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 406.549289][T17953] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 406.564783][T17953] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 406.577673][T17953] EXT4-fs error (device loop4): ext4_get_journal_inode:4880: inode #5: comm syz.4.7949: unexpected bad inode w/o EXT4_IGET_BAD [ 406.599557][T17961] xt_CONNSECMARK: invalid mode: 0 [ 406.609266][T17953] EXT4-fs (loop4): no journal found [ 406.630091][T17953] EXT4-fs (loop4): can't get journal size [ 406.638324][T17965] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 406.659602][T17965] overlayfs: missing 'lowerdir' [ 406.665000][T17953] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,data_err=abort,norecovery,min_batch_time=0x000000000000071d,init_itable,,errors=continue [ 406.676316][ T5] usb 4-1: 0:2 : does not exist [ 406.707065][T17971] netlink: 'syz.1.7956': attribute type 4 has an invalid length. [ 406.709418][ T5] usb 4-1: USB disconnect, device number 111 [ 406.718986][T17953] incfs: Can't find or create .index dir in ./file0 [ 406.730234][T17953] incfs: mount failed -30 [ 406.764603][T17968] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 406.783215][T17968] ext4 filesystem being mounted at /1629/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 406.882562][T17968] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #15: comm syz.0.7955: corrupted xattr block 19 [ 406.905078][T17968] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 406.934676][T17968] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #15: comm syz.0.7955: corrupted xattr block 19 [ 406.966422][T17968] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 406.991300][T17968] EXT4-fs error (device loop0): ext4_xattr_block_list:717: inode #15: comm syz.0.7955: corrupted xattr block 19 [ 407.011701][ T1181] udevd[1181]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 407.508765][T18077] x_tables: duplicate underflow at hook 2 [ 407.725853][T18110] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 407.734329][T18110] EXT4-fs (loop3): invalid journal inode [ 407.741956][T18110] EXT4-fs (loop3): can't get journal size [ 407.748627][T18113] __nla_validate_parse: 10 callbacks suppressed [ 407.748634][T18113] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8025'. [ 407.766884][T18113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8025'. [ 407.777359][T18110] EXT4-fs (loop3): 1 truncate cleaned up [ 407.782841][T18110] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 407.786859][T18113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8025'. [ 407.829270][T18113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8025'. [ 407.852168][ T74] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 407.942828][T18139] netlink: 'syz.1.8036': attribute type 3 has an invalid length. [ 408.011807][T18153] netlink: 'syz.3.8043': attribute type 30 has an invalid length. [ 408.108766][ T74] usb 1-1: Using ep0 maxpacket: 16 [ 408.119434][ T386] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 408.202286][T18188] device wireguard0 entered promiscuous mode [ 408.208283][T18188] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 408.247758][ T74] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 408.260882][ T74] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.275731][ T74] usb 1-1: config 0 has no interface number 0 [ 408.279988][T18203] netlink: 'syz.3.8067': attribute type 4 has an invalid length. [ 408.289240][T18203] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.8067'. [ 408.369071][T18215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8072'. [ 408.386891][ T386] usb 5-1: Using ep0 maxpacket: 16 [ 408.461668][ T74] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 408.474575][ T74] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.498377][ T74] usb 1-1: Product: syz [ 408.502411][ T74] usb 1-1: Manufacturer: syz [ 408.507614][ T74] usb 1-1: SerialNumber: syz [ 408.536614][ T74] usb 1-1: config 0 descriptor?? [ 408.588934][T18251] netlink: 'syz.3.8088': attribute type 9 has an invalid length. [ 408.596545][T18251] netlink: 'syz.3.8088': attribute type 7 has an invalid length. [ 408.601147][ T74] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 408.604929][T18251] netlink: 'syz.3.8088': attribute type 8 has an invalid length. [ 408.707508][ T386] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 408.716435][ T386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.724958][ T386] usb 5-1: Product: syz [ 408.729255][ T386] usb 5-1: Manufacturer: syz [ 408.733651][ T386] usb 5-1: SerialNumber: syz [ 408.846539][T18276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8101'. [ 408.985418][ T74] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 409.029226][ T74] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 409.060226][ T74] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 409.068972][ T74] uvcvideo: No valid video chain found. [ 409.077808][ T74] usb 1-1: USB disconnect, device number 111 [ 409.096681][T18296] FAT-fs (loop1): Directory bread(block 64) failed [ 409.115933][T18296] FAT-fs (loop1): Directory bread(block 65) failed [ 409.124170][T18296] FAT-fs (loop1): Directory bread(block 66) failed [ 409.131090][T18296] FAT-fs (loop1): Directory bread(block 67) failed [ 409.135229][ T386] snd-usb-audio: probe of 5-1:222.0 failed with error -71 [ 409.137631][T18296] FAT-fs (loop1): Directory bread(block 68) failed [ 409.151270][ T386] usb 5-1: USB disconnect, device number 112 [ 409.172403][T18296] FAT-fs (loop1): Directory bread(block 69) failed [ 409.183306][T18296] FAT-fs (loop1): Directory bread(block 70) failed [ 409.190136][T18296] FAT-fs (loop1): Directory bread(block 71) failed [ 409.196786][T18296] FAT-fs (loop1): Directory bread(block 72) failed [ 409.203149][T18296] FAT-fs (loop1): Directory bread(block 73) failed [ 409.257614][T18310] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002c11c, mo2=0002] [ 409.270455][T18310] System zones: 0-2, 18-18, 34-34 [ 409.285530][T18310] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz.3.8116: bg 0: block 248: padding at end of block bitmap is not set [ 409.313781][T18310] EXT4-fs (loop3): 1 truncate cleaned up [ 409.319317][T18310] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,nodelalloc,norecovery,,errors=continue [ 409.330871][T18310] ext4 filesystem being mounted at /1606/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 409.408239][T18332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8128'. [ 409.424570][ T23] kauditd_printk_skb: 323 callbacks suppressed [ 409.424580][ T23] audit: type=1400 audit(1744715273.012:18446): avc: denied { read } for pid=146 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 409.448260][T18334] usb usb1: usbfs: process 18334 (syz.3.8127) did not claim interface 0 before use [ 409.461864][ T23] audit: type=1400 audit(1744715273.012:18447): avc: denied { search } for pid=146 comm="syslogd" name="/" dev="tmpfs" ino=410 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.489806][ T23] audit: type=1400 audit(1744715273.012:18448): avc: denied { append } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=112154 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 409.515739][ T23] audit: type=1400 audit(1744715273.012:18449): avc: denied { open } for pid=146 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=112154 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 409.544040][ T23] audit: type=1400 audit(1744715273.012:18450): avc: denied { getattr } for pid=146 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=112154 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 409.586165][ T23] audit: type=1400 audit(1744715273.012:18451): avc: denied { append } for pid=18333 comm="syz.3.8127" name="001" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 409.623661][ T23] audit: type=1400 audit(1744715273.069:18452): avc: denied { read write } for pid=354 comm="syz-executor" name="loop1" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 409.673911][ T23] audit: type=1400 audit(1744715273.069:18453): avc: denied { open } for pid=354 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 409.697939][ T23] audit: type=1400 audit(1744715273.069:18454): avc: denied { ioctl } for pid=354 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=152 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 409.723371][ T23] audit: type=1400 audit(1744715273.190:18455): avc: denied { create } for pid=18349 comm="syz.1.8136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 409.801298][T18365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8143'. [ 409.812601][T18357] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002c11c, mo2=0002] [ 409.822249][T18357] System zones: 0-2, 18-18, 34-34 [ 409.828982][T18357] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.8138: bg 0: block 248: padding at end of block bitmap is not set [ 409.843937][T18357] EXT4-fs (loop4): 1 truncate cleaned up [ 409.849398][T18357] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,nodelalloc,norecovery,,errors=continue [ 409.849733][T18357] ext4 filesystem being mounted at /1541/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 409.873177][T18371] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 409.895815][T18376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8147'. [ 409.913649][ T103] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 410.199995][ T465] print_req_error: 921 callbacks suppressed [ 410.200010][ T465] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 410.220175][ T1181] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 410.224562][ T1128] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 410.258663][ T465] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 410.261875][T18443] binfmt_misc: register: failed to install interpreter file ./file0 [ 410.270958][ T1128] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 410.281650][ T1181] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 410.310431][ T465] buffer_io_error: 818 callbacks suppressed [ 410.310441][ T465] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 410.344074][ T1128] Buffer I/O error on dev loop0p3, logical block 8, async page read [ 410.355635][ T465] blk_update_request: I/O error, dev loop0, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 410.377080][ T1128] blk_update_request: I/O error, dev loop0, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 410.389383][ T465] Buffer I/O error on dev loop0p1, logical block 9, async page read [ 410.404588][ T1128] Buffer I/O error on dev loop0p3, logical block 9, async page read [ 410.410819][ T1181] Buffer I/O error on dev loop0p2, logical block 8, async page read [ 410.412535][ T465] blk_update_request: I/O error, dev loop0, sector 110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 410.412544][ T465] Buffer I/O error on dev loop0p1, logical block 10, async page read [ 410.412581][ T465] blk_update_request: I/O error, dev loop0, sector 111 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 410.412598][ T465] Buffer I/O error on dev loop0p1, logical block 11, async page read [ 410.457634][ T1181] Buffer I/O error on dev loop0p2, logical block 9, async page read [ 410.475063][ T1128] Buffer I/O error on dev loop0p3, logical block 10, async page read [ 410.492782][ T1181] Buffer I/O error on dev loop0p2, logical block 10, async page read [ 410.593519][T18479] netlink: 'syz.2.8199': attribute type 3 has an invalid length. [ 410.929205][T18540] netlink: 'syz.1.8227': attribute type 16 has an invalid length. [ 410.949842][T18540] netlink: 'syz.1.8227': attribute type 17 has an invalid length. [ 411.010788][T18540] bridge0: port 3(veth1) entered disabled state [ 411.017131][T18540] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.024182][T18540] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.102318][T18559] x_tables: duplicate underflow at hook 4 [ 411.336984][T18595] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 411.384623][T18595] device bridge2 entered promiscuous mode [ 411.612451][T18630] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 411.648828][T18630] ext4 filesystem being mounted at /1661/bus supports timestamps until (%ptR?) (0x7fffffff) [ 411.694625][T18658] binfmt_misc: register: failed to install interpreter file ./file1 [ 411.836221][T18681] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 411.852846][T18694] cgroup1: No subsys list or none specified [ 411.931002][T18708] xt_l2tp: v2 sid > 0xffff: 262144 [ 411.961260][T18713] ------------[ cut here ]------------ [ 411.966566][T18713] WARNING: CPU: 0 PID: 18713 at mm/page_alloc.c:4875 __alloc_pages_nodemask+0x5d5/0x840 [ 411.976231][T18713] Modules linked in: [ 411.979968][T18713] CPU: 0 PID: 18713 Comm: syz.4.8311 Not tainted 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 411.989682][T18713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 411.999596][T18713] RIP: 0010:__alloc_pages_nodemask+0x5d5/0x840 [ 412.005575][T18713] Code: e1 07 80 c1 03 38 c1 0f 8c 12 fd ff ff 4c 89 f7 89 74 24 38 e8 9c 27 04 00 8b 74 24 38 48 8d bc 24 a0 00 00 00 e9 f5 fc ff ff <0f> 0b 31 db e9 ef fd ff ff 43 80 7c 3d 00 00 74 0a 48 8b 7c 24 48 [ 412.025010][T18713] RSP: 0018:ffff8881cca778e0 EFLAGS: 00010246 [ 412.030913][T18713] RAX: ffff8881cca77990 RBX: 0000000000040d40 RCX: 0000000000000000 [ 412.038719][T18713] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffff8881cca779a8 [ 412.046541][T18713] RBP: ffff8881cca77a30 R08: dffffc0000000000 R09: ffff8881cca77990 [ 412.054344][T18713] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1103994ef2c [ 412.062157][T18713] R13: dffffc0000000000 R14: 000000000000000c R15: dffffc0000000000 [ 412.069979][T18713] FS: 00007fec4af7f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 412.078854][T18713] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.085278][T18713] CR2: 0000200000001000 CR3: 00000001ec05b000 CR4: 00000000003406b0 [ 412.093093][T18713] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 412.100907][T18713] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 412.108710][T18713] Call Trace: [ 412.111939][T18713] ? __warn+0x162/0x250 [ 412.115925][T18713] ? report_bug+0x3a1/0x4e0 [ 412.120266][T18713] ? __alloc_pages_nodemask+0x5d5/0x840 [ 412.125644][T18713] ? __alloc_pages_nodemask+0x5d5/0x840 [ 412.131021][T18713] ? do_invalid_op+0x6e/0x110 [ 412.135533][T18713] ? invalid_op+0x1e/0x30 [ 412.139791][T18713] ? __alloc_pages_nodemask+0x5d5/0x840 [ 412.145178][T18713] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 412.150598][T18713] kmalloc_order_trace+0x2a/0x100 [ 412.155422][T18713] incfs_realloc_mount_info+0x93/0x480 [ 412.160713][T18713] incfs_alloc_mount_info+0x462/0x520 [ 412.165919][T18713] incfs_mount_fs+0x406/0xa00 [ 412.170432][T18713] ? incfs_unlink+0x80/0x80 [ 412.174773][T18713] ? vfs_parse_fs_string+0x178/0x1f0 [ 412.179891][T18713] ? cap_capable+0x1b1/0x250 [ 412.184405][T18713] legacy_get_tree+0xdf/0x170 [ 412.188920][T18713] ? incfs_unlink+0x80/0x80 [ 412.193344][T18713] vfs_get_tree+0x85/0x260 [ 412.197605][T18713] do_new_mount+0x292/0x570 [ 412.201942][T18713] ? do_move_mount_old+0x160/0x160 [ 412.206885][T18713] ? security_capable+0x86/0xb0 [ 412.211639][T18713] do_mount+0x688/0xe10 [ 412.215569][T18713] ? copy_mount_string+0x30/0x30 [ 412.220348][T18713] ? copy_mount_options+0x1c6/0x300 [ 412.225463][T18713] ? copy_mount_options+0x29a/0x300 [ 412.230493][T18713] ksys_mount+0xc2/0xf0 [ 412.234487][T18713] __x64_sys_mount+0xb1/0xc0 [ 412.238915][T18713] do_syscall_64+0xca/0x1c0 [ 412.243254][T18713] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 412.248983][T18713] RIP: 0033:0x7fec4c916169 [ 412.253235][T18713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.272675][T18713] RSP: 002b:00007fec4af7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 412.280923][T18713] RAX: ffffffffffffffda RBX: 00007fec4cb3dfa0 RCX: 00007fec4c916169 [ 412.288736][T18713] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000200000000080 [ 412.296810][T18713] RBP: 00007fec4c998a68 R08: 0000200000000180 R09: 0000000000000000 [ 412.304617][T18713] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000 [ 412.312430][T18713] R13: 0000000000000000 R14: 00007fec4cb3dfa0 R15: 00007ffee8b27f08 [ 412.320334][T18713] ---[ end trace b1de9c990d699f22 ]--- [ 412.415630][T18713] incfs: Error allocating mount info. -12 [ 412.451002][T18713] incfs: mount failed -12 [ 412.499903][T18728] FAT-fs (loop1): Directory bread(block 64) failed [ 412.515557][T18728] FAT-fs (loop1): Directory bread(block 65) failed [ 412.543675][T18728] FAT-fs (loop1): Directory bread(block 66) failed [ 412.563625][T18728] FAT-fs (loop1): Directory bread(block 67) failed [ 412.581689][T18728] FAT-fs (loop1): Directory bread(block 68) failed [ 412.605770][T18747] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 412.617150][T18728] FAT-fs (loop1): Directory bread(block 69) failed [ 412.644741][T18728] FAT-fs (loop1): Directory bread(block 70) failed [ 412.662964][T18728] FAT-fs (loop1): Directory bread(block 71) failed [ 412.669384][T18728] FAT-fs (loop1): Directory bread(block 72) failed [ 412.681503][T18728] FAT-fs (loop1): Directory bread(block 73) failed [ 412.747353][T18728] FAT-fs (loop1): error, invalid access to FAT (entry 0x00006c61) [ 412.765106][T18728] FAT-fs (loop1): Filesystem has been set read-only [ 412.953620][T18811] x_tables: unsorted underflow at hook 3 [ 413.040365][T18826] netlink: 'syz.3.8365': attribute type 30 has an invalid length. [ 413.078017][T18837] netlink: 'syz.0.8371': attribute type 2 has an invalid length. [ 413.097163][T18837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.222233][T18860] xt_CT: No such helper "netbios-ns" [ 413.347102][ T386] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 413.614518][ T386] usb 2-1: Using ep0 maxpacket: 32 [ 413.742799][ T386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.753744][ T386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.763369][ T386] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 413.778040][ T386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.792365][ T386] usb 2-1: config 0 descriptor?? [ 413.828430][T18942] netlink: 'syz.2.8421': attribute type 16 has an invalid length. [ 413.836161][T18942] netlink: 'syz.2.8421': attribute type 17 has an invalid length. [ 413.844528][ T386] hub 2-1:0.0: USB hub found [ 413.865239][T18946] binder: 18945:18946 ioctl c0306201 2000000001c0 returned -22 [ 413.894616][T18942] bridge0: port 3(ip6gretap0) entered disabled state [ 413.905484][T18942] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.912533][T18942] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.023822][T18960] tipc: Trying to set illegal importance in message [ 414.063463][ T386] hub 2-1:0.0: 1 port detected [ 414.200846][T18997] __nla_validate_parse: 6 callbacks suppressed [ 414.200854][T18997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8448'. [ 414.298760][ T386] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 414.308774][ T386] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 414.339897][T19023] xt_TCPMSS: Only works on TCP SYN packets [ 414.358623][T19018] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 414.368031][T19018] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 414.378943][T19018] System zones: 0-1, 15-15, 18-18, 34-34 [ 414.389905][T19018] EXT4-fs (loop3): orphan cleanup on readonly fs [ 414.398219][T19018] EXT4-fs warning (device loop3): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 414.414521][T19018] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 414.423149][T19018] EXT4-fs error (device loop3): ext4_orphan_get:1262: comm syz.3.8458: bad orphan inode 16 [ 414.426945][ T386] usbhid 2-1:0.0: can't add hid device: -71 [ 414.433749][T19018] ext4_test_bit(bit=15, block=18) = 1 [ 414.447832][T19018] is_bad_inode(inode)=0 [ 414.452420][T19018] NEXT_ORPHAN(inode)=0 [ 414.452882][ T386] usbhid: probe of 2-1:0.0 failed with error -71 [ 414.456842][T19018] max_ino=32 [ 414.465710][T19018] i_nlink=2 [ 414.486105][T19018] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue [ 414.496023][ T386] usb 2-1: USB disconnect, device number 113 [ 414.503937][T19018] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 414.517390][T19018] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e018, mo2=0002] [ 414.706577][T19057] EXT4-fs (loop3): Ignoring removed nobh option [ 414.749510][T19057] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 414.763585][T19057] EXT4-fs (loop3): Remounting filesystem read-only [ 414.776968][T19057] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 414.791079][T19057] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 414.799982][T19057] EXT4-fs error (device loop3) in ext4_orphan_del:3257: error 27 [ 414.821556][T19057] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 414.839526][T19057] EXT4-fs error (device loop3) in ext4_orphan_cleanup:2816: error 27 [ 414.848635][T19057] EXT4-fs (loop3): 1 truncate cleaned up [ 414.865918][T16001] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 414.883300][T19057] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobh, [ 414.895407][T16001] __quota_error: 299 callbacks suppressed [ 414.895415][T16001] Quota error (device loop3): write_blk: dquota write failed [ 414.910092][ T23] audit: type=1400 audit(1744715278.138:18751): avc: denied { mount } for pid=19055 comm="syz.3.8476" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 414.935811][T19075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8482'. [ 414.936742][T19057] ext4 filesystem being mounted at /1675/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 414.951246][T16001] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 414.955149][ T23] audit: type=1400 audit(1744715278.148:18752): avc: denied { write } for pid=19076 comm="syz.1.8483" name="dev_mcast" dev="proc" ino=4026532374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 414.987610][T16001] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 415.014285][ T23] audit: type=1400 audit(1744715278.204:18753): avc: denied { read write } for pid=19055 comm="syz.3.8476" name="loop3" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 415.033556][T16001] Quota error (device loop3): write_blk: dquota write failed [ 415.078078][T16001] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 415.087994][ T23] audit: type=1400 audit(1744715278.204:18754): avc: denied { open } for pid=19055 comm="syz.3.8476" path="/dev/loop3" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 415.100400][T16001] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 415.120325][T19087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8489'. [ 415.153331][ T23] audit: type=1400 audit(1744715278.204:18755): avc: denied { ioctl } for pid=19055 comm="syz.3.8476" path="/dev/loop3" dev="devtmpfs" ino=154 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 415.169371][T16001] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 415.315934][T19107] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 415.336225][T19110] xt_TCPMSS: Only works on TCP SYN packets [ 415.453209][T19039] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 150994945) [ 415.478128][T19039] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 415.498381][T19125] netlink: 'syz.3.8505': attribute type 30 has an invalid length. [ 415.510491][T19039] F2FS-fs (loop4): invalid crc value [ 415.557683][T19039] F2FS-fs (loop4): Found nat_bits in checkpoint [ 415.607296][ T465] print_req_error: 1523 callbacks suppressed [ 415.607310][ T465] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 415.628350][ T1181] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 415.645256][ T1128] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 415.679334][ T1181] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.699690][ T1128] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.713321][ T465] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.733589][T19039] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 415.740548][ T1181] buffer_io_error: 1354 callbacks suppressed [ 415.740557][ T1181] Buffer I/O error on dev loop0p2, logical block 8, async page read [ 415.758567][ T465] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 415.760340][ T1128] Buffer I/O error on dev loop0p3, logical block 8, async page read [ 415.766605][ T1181] blk_update_request: I/O error, dev loop0, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.785683][T19039] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 415.785736][ T465] blk_update_request: I/O error, dev loop0, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.795913][T19039] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 415.811098][ T465] Buffer I/O error on dev loop0p1, logical block 9, async page read [ 415.831150][ T1128] blk_update_request: I/O error, dev loop0, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.842427][ T1181] Buffer I/O error on dev loop0p2, logical block 9, async page read [ 415.850300][ T465] blk_update_request: I/O error, dev loop0, sector 110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 415.859436][ T1181] Buffer I/O error on dev loop0p2, logical block 10, async page read [ 415.869137][ T465] Buffer I/O error on dev loop0p1, logical block 10, async page read [ 415.877045][ T1128] Buffer I/O error on dev loop0p3, logical block 9, async page read [ 415.877101][ T1128] Buffer I/O error on dev loop0p3, logical block 10, async page read [ 415.877131][ T1128] Buffer I/O error on dev loop0p3, logical block 11, async page read [ 415.924146][T19164] FAT-fs (loop1): Directory bread(block 64) failed [ 415.943559][T19164] FAT-fs (loop1): Directory bread(block 65) failed [ 415.980424][T19164] FAT-fs (loop1): Directory bread(block 66) failed [ 416.001523][T19164] FAT-fs (loop1): Directory bread(block 67) failed [ 416.052824][T19164] FAT-fs (loop1): Directory bread(block 68) failed [ 416.091300][T19164] FAT-fs (loop1): Directory bread(block 69) failed [ 416.093396][T19181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8530'. [ 416.113161][T19164] FAT-fs (loop1): Directory bread(block 70) failed [ 416.128331][T19164] FAT-fs (loop1): Directory bread(block 71) failed [ 416.134718][T19164] FAT-fs (loop1): Directory bread(block 72) failed [ 416.147295][T19164] FAT-fs (loop1): Directory bread(block 73) failed [ 416.393307][T19188] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 416.433078][T19199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8536'. [ 416.446708][T19188] EXT4-fs (loop3): orphan cleanup on readonly fs [ 416.453086][T19188] EXT4-fs error (device loop3): ext4_ext_check_inode:543: inode #4: comm syz.3.8532: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1(1) [ 416.515623][T19188] EXT4-fs error (device loop3): ext4_quota_enable:6059: comm syz.3.8532: Bad quota inode: 4, type: 1 [ 416.542764][T19188] EXT4-fs warning (device loop3): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 416.583062][T19188] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 416.597073][T19188] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,jqfmt=vfsv0,,errors=continue [ 416.638962][T19188] EXT4-fs error (device loop3): ext4_lookup:1814: inode #2: comm syz.3.8532: 'file0' linked to parent dir [ 416.848831][T19147] F2FS-fs (loop0): Invalid segment/section count (31, 24 x 150994945) [ 416.896383][T19147] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 416.927724][T19147] F2FS-fs (loop0): invalid crc value [ 416.984614][T19147] F2FS-fs (loop0): Found nat_bits in checkpoint [ 417.126178][T19147] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 417.158758][T19147] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 417.180948][T19147] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 417.250138][T19289] netlink: 'syz.2.8577': attribute type 1 has an invalid length. [ 417.429019][T19316] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 417.458956][T19320] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.8595'. [ 417.480064][T19316] device bridge4 entered promiscuous mode [ 417.554935][T19332] binfmt_misc: register: failed to install interpreter file ./file1 [ 417.565675][T19334] xt_hashlimit: size too large, truncated to 1048576 [ 417.573699][T19336] usb usb8: usbfs: process 19336 (syz.4.8602) did not claim interface 0 before use [ 417.577690][T19334] xt_hashlimit: max too large, truncated to 1048576 [ 417.637302][T19344] xt_hashlimit: size too large, truncated to 1048576 [ 417.646018][T19344] xt_hashlimit: max too large, truncated to 1048576 [ 417.653679][T19344] xt_hashlimit: overflow, try lower: 0/0 [ 417.704070][T19342] FAT-fs (loop1): Directory bread(block 64) failed [ 417.728832][T19342] FAT-fs (loop1): Directory bread(block 65) failed [ 417.756498][T19342] FAT-fs (loop1): Directory bread(block 66) failed [ 417.778588][T19342] FAT-fs (loop1): Directory bread(block 67) failed [ 417.798464][T19342] FAT-fs (loop1): Directory bread(block 68) failed [ 417.804816][T19342] FAT-fs (loop1): Directory bread(block 69) failed [ 417.815665][T19342] FAT-fs (loop1): Directory bread(block 70) failed [ 417.822277][T19342] FAT-fs (loop1): Directory bread(block 71) failed [ 417.828927][T19342] FAT-fs (loop1): Directory bread(block 72) failed [ 417.835247][T19342] FAT-fs (loop1): Directory bread(block 73) failed [ 417.999716][T19366] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 418.013739][T19366] ext4 filesystem being mounted at /1638/bus supports timestamps until (%ptR?) (0x7fffffff) [ 418.141208][T19391] cgroup1: No subsys list or none specified [ 418.231321][T19409] netlink: 'syz.0.8635': attribute type 3 has an invalid length. [ 418.358980][T19424] FAT-fs (loop0): Directory bread(block 64) failed [ 418.362578][T19437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.389538][T19424] FAT-fs (loop0): Directory bread(block 65) failed [ 418.414538][T19424] FAT-fs (loop0): Directory bread(block 66) failed [ 418.420891][T19424] FAT-fs (loop0): Directory bread(block 67) failed [ 418.457483][T19424] FAT-fs (loop0): Directory bread(block 68) failed [ 418.457499][T19424] FAT-fs (loop0): Directory bread(block 69) failed [ 418.457540][T19424] FAT-fs (loop0): Directory bread(block 70) failed [ 418.457554][T19424] FAT-fs (loop0): Directory bread(block 71) failed [ 418.464158][T19424] FAT-fs (loop0): Directory bread(block 72) failed [ 418.464175][T19424] FAT-fs (loop0): Directory bread(block 73) failed [ 418.618446][T19471] netlink: 'syz.4.8665': attribute type 3 has an invalid length. [ 418.639712][T19476] netlink: 'syz.2.8670': attribute type 11 has an invalid length. [ 418.655586][T19478] netlink: 'syz.1.8669': attribute type 3 has an invalid length. [ 418.746651][T19485] attempt to access beyond end of device [ 418.746651][T19485] loop3: rw=0, want=276, limit=256 [ 418.768175][T19485] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 418.776779][T19485] FAT-fs (loop3): Filesystem has been set read-only [ 418.783545][T19485] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 418.803943][T19490] EXT4-fs (loop1): Ignoring removed nobh option [ 418.835574][T19490] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 418.844460][T19490] EXT4-fs (loop1): Remounting filesystem read-only [ 418.850962][T19490] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 418.869931][T19490] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 418.891560][T19490] EXT4-fs error (device loop1) in ext4_orphan_del:3257: error 27 [ 418.900132][T19516] netlink: 'syz.3.8686': attribute type 16 has an invalid length. [ 418.907920][T19514] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 418.917683][T19516] netlink: 'syz.3.8686': attribute type 17 has an invalid length. [ 418.927843][T19490] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27 [ 418.937443][T19490] EXT4-fs error (device loop1) in ext4_orphan_cleanup:2816: error 27 [ 418.957346][T19490] EXT4-fs (loop1): 1 truncate cleaned up [ 418.966104][T19490] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh, [ 418.986423][T19516] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.993519][T19516] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.007246][T19490] ext4 filesystem being mounted at /1589/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 419.360014][T19559] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 419.375797][T19567] netlink: 'syz.0.8709': attribute type 16 has an invalid length. [ 419.383481][T19567] netlink: 'syz.0.8709': attribute type 17 has an invalid length. [ 419.396400][T19567] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.403446][T19567] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.427350][T19558] EXT4-fs (loop4): Ignoring removed nobh option [ 419.456226][T19558] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 419.489958][T19558] EXT4-fs (loop4): Remounting filesystem read-only [ 419.517626][T19558] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 419.553795][T19558] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 419.592785][T19558] EXT4-fs error (device loop4) in ext4_orphan_del:3257: error 27 [ 419.613710][T19558] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 419.634462][T19558] EXT4-fs error (device loop4) in ext4_orphan_cleanup:2816: error 27 [ 419.647067][T19558] EXT4-fs (loop4): 1 truncate cleaned up [ 419.653013][T19558] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobh, [ 419.678849][T19558] ext4 filesystem being mounted at /1656/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 419.852380][T19623] netlink: 'syz.4.8736': attribute type 16 has an invalid length. [ 419.865239][T19623] netlink: 'syz.4.8736': attribute type 17 has an invalid length. [ 419.938303][T19623] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.945409][T19623] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.978807][T19640] EXT4-fs (loop0): Ignoring removed nobh option [ 420.000509][T19640] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 420.015254][T19640] EXT4-fs (loop0): Remounting filesystem read-only [ 420.019351][T19646] device ip6gre1 entered promiscuous mode [ 420.021895][T19640] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 420.035393][T19640] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 420.058334][T19640] EXT4-fs error (device loop0) in ext4_orphan_del:3257: error 27 [ 420.071541][ T13] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 420.102241][T19655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8751'. [ 420.105121][T19640] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 420.137248][T19655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8751'. [ 420.178533][T19640] EXT4-fs error (device loop0) in ext4_orphan_cleanup:2816: error 27 [ 420.204300][T19640] EXT4-fs (loop0): 1 truncate cleaned up [ 420.240093][T19640] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobh, [ 420.257096][ T23] kauditd_printk_skb: 291 callbacks suppressed [ 420.257106][ T23] audit: type=1400 audit(1744715283.143:19047): avc: denied { mount } for pid=19638 comm="syz.0.8744" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 420.257137][T19640] ext4 filesystem being mounted at /1733/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 420.334482][ T23] audit: type=1400 audit(1744715283.208:19048): avc: denied { read } for pid=19673 comm="syz.3.8759" name="event0" dev="devtmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 420.360131][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 420.395846][ T23] audit: type=1400 audit(1744715283.236:19049): avc: denied { open } for pid=19673 comm="syz.3.8759" path="/dev/input/event0" dev="devtmpfs" ino=291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 420.471309][ T23] audit: type=1400 audit(1744715283.236:19050): avc: denied { ioctl } for pid=19673 comm="syz.3.8759" path="/dev/input/event0" dev="devtmpfs" ino=291 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 420.498173][ T23] audit: type=1400 audit(1744715283.255:19051): avc: denied { ioctl } for pid=19611 comm="syz.2.8730" path="/dev/raw-gadget" dev="devtmpfs" ino=289 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 420.528395][ T13] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 420.541597][T19689] netlink: 'syz.0.8767': attribute type 16 has an invalid length. [ 420.546296][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.546308][ T13] usb 3-1: config 0 has no interface number 0 [ 420.560831][ T23] audit: type=1400 audit(1744715283.293:19052): avc: denied { write } for pid=19638 comm="syz.0.8744" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 420.560849][ T23] audit: type=1400 audit(1744715283.302:19053): avc: denied { unmount } for pid=353 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 420.560865][ T23] audit: type=1400 audit(1744715283.302:19054): avc: denied { read write } for pid=356 comm="syz-executor" name="loop3" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 420.560882][ T23] audit: type=1400 audit(1744715283.302:19055): avc: denied { open } for pid=356 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 420.560900][ T23] audit: type=1400 audit(1744715283.302:19056): avc: denied { ioctl } for pid=356 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=154 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 420.585318][T19692] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 420.729991][T19692] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsv0,minixdf,,errors=continue [ 420.742094][T19692] ext4 filesystem being mounted at /1736/bus supports timestamps until (%ptR?) (0x7fffffff) [ 420.787851][ T5] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 420.798678][ T13] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 420.807663][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.815766][ T13] usb 3-1: Product: syz [ 420.820022][ T13] usb 3-1: Manufacturer: syz [ 420.824643][ T13] usb 3-1: SerialNumber: syz [ 420.831982][ T13] usb 3-1: config 0 descriptor?? [ 420.876157][ T13] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 421.044354][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 421.172740][ T5] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 421.183272][ T5] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.215454][ T13] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 421.236844][ T13] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 421.258209][ T13] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 421.266926][ T13] uvcvideo: No valid video chain found. [ 421.273285][ T13] usb 3-1: USB disconnect, device number 116 [ 421.294168][T19697] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 150994945) [ 421.303685][T19697] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 421.313962][T19697] F2FS-fs (loop4): invalid crc value [ 421.321050][T19697] F2FS-fs (loop4): Found nat_bits in checkpoint [ 421.345286][T19697] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 421.352192][T19697] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 421.354550][ T5] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.359313][T19697] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 421.368516][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.387585][ T5] usb 4-1: Product: syz [ 421.391765][ T5] usb 4-1: Manufacturer: syz [ 421.396324][ T5] usb 4-1: SerialNumber: syz [ 421.739376][ T5] usb 4-1: 0:2 : does not exist [ 421.800116][ T5] usb 4-1: USB disconnect, device number 112 [ 421.852571][T19727] IPv6: sit2: Disabled Multicast RS [ 421.856375][ T1181] print_req_error: 653 callbacks suppressed [ 421.856389][ T1181] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 421.884112][ T1128] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 421.888172][T19731] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 421.903516][ T1128] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 421.918097][ T399] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 421.931877][ T1181] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 421.947090][ T399] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 421.952004][ T1128] buffer_io_error: 581 callbacks suppressed [ 421.952012][ T1128] Buffer I/O error on dev loop0p2, logical block 8, async page read [ 421.975265][ T1181] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 421.992703][ T399] Buffer I/O error on dev loop0p3, logical block 8, async page read [ 422.002039][ T1128] blk_update_request: I/O error, dev loop0, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 422.022313][ T399] blk_update_request: I/O error, dev loop0, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 422.023912][ T1181] blk_update_request: I/O error, dev loop0, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 422.050042][ T465] udevd[465]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 422.060511][ T1128] Buffer I/O error on dev loop0p2, logical block 9, async page read [ 422.077956][ T399] Buffer I/O error on dev loop0p3, logical block 9, async page read [ 422.116695][ T399] blk_update_request: I/O error, dev loop0, sector 1010 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 422.127745][ T1181] Buffer I/O error on dev loop0p1, logical block 9, async page read [ 422.141661][ T1128] Buffer I/O error on dev loop0p2, logical block 10, async page read [ 422.150878][ T1181] Buffer I/O error on dev loop0p1, logical block 10, async page read [ 422.158937][ T1128] Buffer I/O error on dev loop0p2, logical block 11, async page read [ 422.166900][ T1181] Buffer I/O error on dev loop0p1, logical block 11, async page read [ 422.237263][T19777] SELinux: policydb string length 1048584 does not match expected length 8 [ 422.255939][T19777] SELinux: failed to load policy [ 422.292311][T19783] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 422.321623][T19783] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 422.343813][T19797] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8814'. [ 422.345140][T19783] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 422.363672][T19783] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002] [ 422.406614][T19783] System zones: 0-2, 18-18, 34-34 [ 422.420084][T19783] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 422.474733][T19810] netlink: 360 bytes leftover after parsing attributes in process `syz.3.8821'. [ 422.478875][T19783] EXT4-fs (loop4): 1 truncate cleaned up [ 422.539330][T19783] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 422.566963][T19821] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 422.661819][T19830] IPv6: sit1: Disabled Multicast RS [ 422.952389][T19888] xt_l2tp: invalid flags combination: 0 [ 423.025779][T19886] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 40 vs 41 free clusters [ 423.055546][T19886] EXT4-fs (loop0): 1 truncate cleaned up [ 423.061056][T19886] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 423.083268][T19886] ext4 filesystem being mounted at /1760/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 423.339088][T19937] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 423.371508][T19937] ext4 filesystem being mounted at /1761/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until (%ptR?) (0x7fffffff) [ 423.546672][T19962] EXT4-fs (loop4): orphan cleanup on readonly fs [ 423.549447][T19937] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 18: comm syz.0.8877: lblock 23 mapped to illegal pblock 18 (length 1) [ 423.576115][T19962] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.8894: bg 0: block 248: padding at end of block bitmap is not set [ 423.638806][T19962] EXT4-fs (loop4): 1 truncate cleaned up [ 423.681694][T19962] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 423.729705][T19986] netlink: 188 bytes leftover after parsing attributes in process `syz.1.8904'. [ 423.756974][T19962] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 423.817864][T19962] EXT4-fs (loop4): re-mounted. Opts: (null) [ 423.832334][T19962] ext4 filesystem being remounted at /1687/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 424.021290][T20034] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 424.180015][T20059] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 424.215843][T20075] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.8947'. [ 424.236128][T20081] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8951'. [ 424.909085][T20212] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.990136][T20218] EXT4-fs (loop0): orphan cleanup on readonly fs [ 425.011891][T20218] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz.0.9024: bg 0: block 248: padding at end of block bitmap is not set [ 425.027367][T20233] fuse: Bad value for 'user_id' [ 425.062244][T20218] EXT4-fs (loop0): 1 truncate cleaned up [ 425.088072][T20218] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 425.126526][T20218] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 425.174523][T20218] EXT4-fs (loop0): re-mounted. Opts: (null) [ 425.180302][T20218] ext4 filesystem being remounted at /1782/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 425.220384][T20270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.347121][T20291] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9049'. [ 425.422079][T20297] binder: 20296:20297 ioctl 400c620e 2000000001c0 returned -22 [ 425.441347][T20304] device ip6gre1 entered promiscuous mode [ 425.464144][T20298] EXT4-fs (loop1): orphan cleanup on readonly fs [ 425.487373][T20298] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.9056: bg 0: block 248: padding at end of block bitmap is not set [ 425.552246][T20298] EXT4-fs (loop1): 1 truncate cleaned up [ 425.561520][T20298] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 425.583909][T20298] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 425.613099][T20298] EXT4-fs (loop1): re-mounted. Opts: (null) [ 425.620193][T20298] ext4 filesystem being remounted at /1673/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 425.633790][ T23] kauditd_printk_skb: 373 callbacks suppressed [ 425.633801][ T23] audit: type=1400 audit(1744715288.166:19420): avc: denied { read write } for pid=355 comm="syz-executor" name="loop2" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 425.679972][ T23] audit: type=1400 audit(1744715288.166:19421): avc: denied { open } for pid=355 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 425.703926][ T23] audit: type=1400 audit(1744715288.166:19422): avc: denied { ioctl } for pid=355 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=153 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 425.729811][ T23] audit: type=1400 audit(1744715288.166:19423): avc: denied { unmount } for pid=354 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 425.750392][ T23] audit: type=1400 audit(1744715288.203:19424): avc: denied { create } for pid=20343 comm="syz.0.9077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 425.826859][ T23] audit: type=1400 audit(1744715288.203:19425): avc: denied { write } for pid=20343 comm="syz.0.9077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 425.894976][ T23] audit: type=1400 audit(1744715288.213:19426): avc: denied { prog_load } for pid=20342 comm="syz.2.9075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 425.973161][ T23] audit: type=1400 audit(1744715288.213:19427): avc: denied { prog_run } for pid=20342 comm="syz.2.9075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 426.048069][ T23] audit: type=1400 audit(1744715288.278:19428): avc: denied { read write } for pid=354 comm="syz-executor" name="loop1" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.083230][T20394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9100'. [ 426.125683][ T23] audit: type=1400 audit(1744715288.278:19429): avc: denied { open } for pid=354 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.153661][T20400] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9104'. [ 426.188534][T20400] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9104'. [ 426.512887][T20435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9122'. [ 426.523458][T20436] validate_nla: 4 callbacks suppressed [ 426.523466][T20436] netlink: 'syz.2.9120': attribute type 30 has an invalid length. [ 426.654126][T20457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9142'. [ 426.710118][T20457] tc_dump_action: action bad kind [ 426.834124][T20477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9140'. [ 426.883731][T20477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9140'. [ 426.902138][T20477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9140'. [ 426.920788][T20477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9140'. [ 426.930531][T20477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9140'. [ 427.002648][T20498] netlink: 'syz.0.9152': attribute type 27 has an invalid length. [ 427.039087][T20502] netlink: 'syz.3.9153': attribute type 2 has an invalid length. [ 427.073144][T20506] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=94 sclass=netlink_xfrm_socket pid=20506 comm=syz.2.9155 [ 427.091957][T20508] x_tables: duplicate underflow at hook 2 [ 427.202274][ T13] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 427.225724][ T1128] print_req_error: 1604 callbacks suppressed [ 427.225739][ T1128] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 427.225827][ T465] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.231629][ T1128] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.244771][ T1181] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 427.280848][ T465] blk_update_request: I/O error, dev loop0, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.303055][ T465] buffer_io_error: 1428 callbacks suppressed [ 427.303064][ T465] Buffer I/O error on dev loop0p1, logical block 9, async page read [ 427.317597][ T1181] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.322748][ T1128] Buffer I/O error on dev loop0p3, logical block 8, async page read [ 427.330399][ T1181] Buffer I/O error on dev loop0p2, logical block 8, async page read [ 427.337182][ T465] blk_update_request: I/O error, dev loop0, sector 110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.345062][ T1181] blk_update_request: I/O error, dev loop0, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.355203][T20541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 427.366041][ T1181] Buffer I/O error on dev loop0p2, logical block 9, async page read [ 427.373650][ T465] Buffer I/O error on dev loop0p1, logical block 10, async page read [ 427.386930][ T1128] blk_update_request: I/O error, dev loop0, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.391086][ T465] blk_update_request: I/O error, dev loop0, sector 111 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 427.411143][ T1128] Buffer I/O error on dev loop0p3, logical block 9, async page read [ 427.411354][ T1181] Buffer I/O error on dev loop0p2, logical block 10, async page read [ 427.420718][ T1128] Buffer I/O error on dev loop0p3, logical block 10, async page read [ 427.431101][ T1181] Buffer I/O error on dev loop0p2, logical block 11, async page read [ 427.436338][ T1128] Buffer I/O error on dev loop0p3, logical block 11, async page read [ 427.456961][T20538] EXT4-fs (loop3): Ignoring removed orlov option [ 427.479117][T20538] EXT4-fs (loop3): orphan cleanup on readonly fs [ 427.498593][T20538] EXT4-fs error (device loop3): ext4_find_extent:974: inode #4: comm syz.3.9172: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 427.578697][T20538] EXT4-fs warning (device loop3): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 427.602003][T20538] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 427.617730][T20538] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,dioread_nolock,,errors=continue [ 427.630227][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.644526][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 427.676453][ T13] usb 2-1: config 1 has no interface number 0 [ 427.682747][ T13] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 427.711679][T20538] EXT4-fs error (device loop3): ext4_lookup:1814: inode #2: comm syz.3.9172: 'file0' linked to parent dir [ 427.817424][T20594] xt_l2tp: missing protocol rule (udp|l2tpip) [ 427.874110][T20590] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001000,grpjquota=,noauto_da_alloc,dioread_lock,,errors=continue [ 427.890397][T20590] ext4 filesystem being mounted at /1827/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 427.931901][ T13] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 427.949255][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.968325][ T13] usb 2-1: Product: syz [ 427.989846][ T13] usb 2-1: Manufacturer: syz [ 428.000630][ T13] usb 2-1: SerialNumber: syz [ 428.047207][ T13] cdc_ncm 2-1:1.1: bind() failure [ 428.183616][T20649] netlink: 'syz.2.9223': attribute type 30 has an invalid length. [ 428.194641][T20648] xt_TPROXY: Can be used only with -p tcp or -p udp [ 428.275770][ T13] usb 2-1: USB disconnect, device number 114 [ 428.365253][T20675] binfmt_misc: register: failed to install interpreter file ./file0 [ 429.008020][T20752] EXT4-fs (loop1): Ignoring removed orlov option [ 429.042985][T20752] EXT4-fs (loop1): orphan cleanup on readonly fs [ 429.062493][T20752] EXT4-fs error (device loop1): ext4_find_extent:974: inode #4: comm syz.1.9274: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 429.105698][T20752] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 429.126312][T20768] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.9281' sets config #-1534 [ 429.173762][T20752] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 429.219932][T20752] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,dioread_nolock,,errors=continue [ 429.264047][T20788] xt_TPROXY: Can be used only with -p tcp or -p udp [ 429.286484][T20752] EXT4-fs error (device loop1): ext4_lookup:1814: inode #2: comm syz.1.9274: 'file0' linked to parent dir [ 429.392301][T20804] device sit0 left promiscuous mode [ 429.402456][T20798] FAT-fs (loop0): Directory bread(block 64) failed [ 429.402506][T20804] device bridge2 left promiscuous mode [ 429.415125][T20798] FAT-fs (loop0): Directory bread(block 65) failed [ 429.421642][T20798] FAT-fs (loop0): Directory bread(block 66) failed [ 429.435213][T20798] FAT-fs (loop0): Directory bread(block 67) failed [ 429.440139][T20804] device ip6gre1 left promiscuous mode [ 429.447245][T20798] FAT-fs (loop0): Directory bread(block 68) failed [ 429.457050][T20798] FAT-fs (loop0): Directory bread(block 69) failed [ 429.465539][T20801] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,barrier=0x0000000000001003,errors=remount-ro,noauto_da_alloc,dioread_lock, [ 429.480440][T20798] FAT-fs (loop0): Directory bread(block 70) failed [ 429.486778][T20798] FAT-fs (loop0): Directory bread(block 71) failed [ 429.493556][T20801] ext4 filesystem being mounted at /1860/file1 supports timestamps until (%ptR?) (0x7fffffff) [ 429.504033][T20798] FAT-fs (loop0): Directory bread(block 72) failed [ 429.524951][T20798] FAT-fs (loop0): Directory bread(block 73) failed [ 429.556558][T20801] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #15: comm syz.3.9297: corrupted xattr block 19 [ 429.598942][T20801] EXT4-fs (loop3): Remounting filesystem read-only [ 429.613778][T20801] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 429.627913][T20801] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #15: comm syz.3.9297: corrupted xattr block 19 [ 429.656478][T20801] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 429.667329][T20820] netlink: 'syz.2.9304': attribute type 11 has an invalid length. [ 429.677793][T20801] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #15: comm syz.3.9297: corrupted xattr block 19 [ 429.678089][T20801] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 429.721912][T20801] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #15: comm syz.3.9297: corrupted xattr block 19 [ 429.822490][T20689] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 429.830705][T20689] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 429.841590][T20689] F2FS-fs (loop4): invalid crc value [ 429.848920][T20689] F2FS-fs (loop4): Found nat_bits in checkpoint [ 429.889545][T20689] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 429.896487][T20689] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 429.914411][T20837] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 429.933236][T20848] netlink: 'syz.3.9316': attribute type 3 has an invalid length. [ 429.934403][T20837] erofs: (device loop1): erofs_parse_options: Unrecognized mount option "/" or missing value [ 429.964160][T20689] fscrypt (loop4, inode 8): Error -61 getting encryption context [ 430.282786][T20879] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 430.330910][T20879] ext4 filesystem being mounted at /1751/bus supports timestamps until (%ptR?) (0x7fffffff) [ 430.775320][T20981] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 430.775320][T20981] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 430.775320][T20981] [ 430.846386][T20981] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 430.880709][T20981] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 430.923327][T21002] netlink: 'syz.2.9389': attribute type 1 has an invalid length. [ 430.929537][T21003] device gretap2 left promiscuous mode [ 431.105139][ T23] kauditd_printk_skb: 275 callbacks suppressed [ 431.105150][ T23] audit: type=1400 audit(1744715293.292:19703): avc: denied { open } for pid=353 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 431.232553][ T23] audit: type=1400 audit(1744715293.292:19704): avc: denied { ioctl } for pid=353 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=151 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 431.317869][ T23] audit: type=1400 audit(1744715293.292:19705): avc: denied { read write } for pid=355 comm="syz-executor" name="loop2" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 431.410635][ T23] audit: type=1400 audit(1744715293.301:19706): avc: denied { read write } for pid=21024 comm="syz.2.9400" name="ppp" dev="devtmpfs" ino=10755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 431.455865][ T23] audit: type=1400 audit(1744715293.301:19707): avc: denied { open } for pid=21024 comm="syz.2.9400" path="/dev/ppp" dev="devtmpfs" ino=10755 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 431.505157][ T23] audit: type=1400 audit(1744715293.301:19708): avc: denied { ioctl } for pid=21024 comm="syz.2.9400" path="/dev/ppp" dev="devtmpfs" ino=10755 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 431.572136][ T23] audit: type=1400 audit(1744715293.339:19709): avc: denied { create } for pid=21023 comm="syz.0.9401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 431.572155][ T23] audit: type=1400 audit(1744715293.348:19710): avc: denied { write } for pid=21023 comm="syz.0.9401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 431.572173][ T23] audit: type=1400 audit(1744715293.348:19711): avc: denied { read } for pid=21030 comm="syz.2.9403" name="uinput" dev="devtmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 431.572191][ T23] audit: type=1400 audit(1744715293.348:19712): avc: denied { open } for pid=21030 comm="syz.2.9403" path="/dev/uinput" dev="devtmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 431.933347][T21104] __nla_validate_parse: 361 callbacks suppressed [ 431.933355][T21104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9438'. [ 431.963875][T21104] device bridge_slave_1 left promiscuous mode [ 431.976607][T21104] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.985781][T21104] device bridge_slave_0 left promiscuous mode [ 431.991762][T21109] usb usb8: usbfs: process 21109 (syz.0.9440) did not claim interface 3 before use [ 431.992839][T21104] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.025758][T20965] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 150994945) [ 432.042366][T20965] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 432.064241][T20965] F2FS-fs (loop3): invalid crc value [ 432.094971][T20965] F2FS-fs (loop3): Found nat_bits in checkpoint [ 432.147413][T20965] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 432.174401][T20965] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 432.182265][T20965] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 432.329711][T21148] fuse: Bad value for 'user_id' [ 432.371068][T21152] netlink: 'syz.1.9461': attribute type 3 has an invalid length. [ 432.382872][T21154] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 432.610376][T21163] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 432.620357][T21163] EXT4-fs (loop4): invalid journal inode [ 432.626309][T21163] EXT4-fs (loop4): can't get journal size [ 432.634347][T21163] EXT4-fs (loop4): 1 truncate cleaned up [ 432.640313][T21163] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 432.643942][ T1181] print_req_error: 1515 callbacks suppressed [ 432.643955][ T1181] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 432.672588][ T465] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 432.687815][ T1128] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 432.710601][ T1128] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.732485][ T465] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.757697][T21181] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9473'. [ 432.762641][ T1181] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.768736][ T465] buffer_io_error: 1346 callbacks suppressed [ 432.768745][ T465] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 432.782440][ T1128] Buffer I/O error on dev loop0p3, logical block 8, async page read [ 432.792392][ T465] blk_update_request: I/O error, dev loop0, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.812826][ T1181] Buffer I/O error on dev loop0p2, logical block 8, async page read [ 432.827171][T21187] netlink: 'syz.2.9475': attribute type 27 has an invalid length. [ 432.838636][ T1128] blk_update_request: I/O error, dev loop0, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.857640][ T1181] blk_update_request: I/O error, dev loop0, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.860745][ T465] Buffer I/O error on dev loop0p1, logical block 9, async page read [ 432.884648][ T1128] Buffer I/O error on dev loop0p3, logical block 9, async page read [ 432.904433][ T465] blk_update_request: I/O error, dev loop0, sector 110 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 432.907860][ T1181] Buffer I/O error on dev loop0p2, logical block 9, async page read [ 432.928482][ T1128] Buffer I/O error on dev loop0p3, logical block 10, async page read [ 432.939275][ T465] Buffer I/O error on dev loop0p1, logical block 10, async page read [ 432.939337][ T465] Buffer I/O error on dev loop0p1, logical block 11, async page read [ 432.939366][ T465] Buffer I/O error on dev loop0p1, logical block 12, async page read [ 433.274680][T21225] FAT-fs (loop4): Directory bread(block 64) failed [ 433.283168][T21230] netlink: 1100 bytes leftover after parsing attributes in process `syz.1.9495'. [ 433.284041][T21225] FAT-fs (loop4): Directory bread(block 65) failed [ 433.299543][T21225] FAT-fs (loop4): Directory bread(block 66) failed [ 433.310246][T21225] FAT-fs (loop4): Directory bread(block 67) failed [ 433.317759][T21225] FAT-fs (loop4): Directory bread(block 68) failed [ 433.324102][T21225] FAT-fs (loop4): Directory bread(block 69) failed [ 433.331456][T21225] FAT-fs (loop4): Directory bread(block 70) failed [ 433.338072][T21225] FAT-fs (loop4): Directory bread(block 71) failed [ 433.344741][T21225] FAT-fs (loop4): Directory bread(block 72) failed [ 433.350983][T21236] xt_l2tp: missing protocol rule (udp|l2tpip) [ 433.351496][T21225] FAT-fs (loop4): Directory bread(block 73) failed [ 433.501044][T21253] netlink: 168 bytes leftover after parsing attributes in process `syz.4.9505'. [ 433.726596][T21260] F2FS-fs (loop1): Insane cp_payload (553648128 > 510) [ 433.733471][T21260] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 433.743853][T21260] F2FS-fs (loop1): invalid crc value [ 433.750787][T21260] F2FS-fs (loop1): Found nat_bits in checkpoint [ 433.775770][T21260] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 433.782918][T21260] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 433.804461][ T354] attempt to access beyond end of device [ 433.804461][ T354] loop1: rw=2049, want=45104, limit=40427 [ 433.819836][ T456] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 434.076202][ T456] usb 5-1: Using ep0 maxpacket: 8 [ 434.158238][T21301] binfmt_misc: register: failed to install interpreter file ./file0 [ 434.204693][ T456] usb 5-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 434.213648][ T456] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.232630][ T456] usb 5-1: config 0 descriptor?? [ 434.290701][ T456] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 434.435917][T21304] F2FS-fs (loop1): invalid crc value [ 434.444026][T21304] F2FS-fs (loop1): Found nat_bits in checkpoint [ 434.472867][T21304] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 434.479549][T21304] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 434.517676][ T354] attempt to access beyond end of device [ 434.517676][ T354] loop1: rw=2049, want=45104, limit=40427 [ 434.528972][ T456] usb 5-1: Detected FT232BM [ 434.749792][ T456] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 434.771198][ T456] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 434.779434][ T456] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 434.800180][ T456] usb 5-1: USB disconnect, device number 113 [ 434.807173][ T456] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 434.816911][ T456] ftdi_sio 5-1:0.0: device disconnected [ 435.730753][T21385] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.9564' sets config #-1534 [ 435.779836][T21387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9565'. [ 435.811842][T21387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9565'. [ 435.991742][T21333] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 150994945) [ 435.999790][T21333] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 436.021755][T21333] F2FS-fs (loop3): invalid crc value [ 436.029036][T21333] F2FS-fs (loop3): Found nat_bits in checkpoint [ 436.073961][T21333] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 436.086723][T21333] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 436.093638][T21333] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 436.118121][ T456] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 436.327928][T21422] sock: process `syz.2.9578' is using obsolete getsockopt SO_BSDCOMPAT [ 436.369416][T21424] xt_CT: No such helper "pptp" [ 436.396162][ T456] usb 2-1: Using ep0 maxpacket: 8 [ 436.471300][ T23] kauditd_printk_skb: 237 callbacks suppressed [ 436.471311][ T23] audit: type=1400 audit(1744715298.307:19950): avc: denied { ioctl } for pid=21390 comm="syz.1.9567" path="/dev/raw-gadget" dev="devtmpfs" ino=289 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 436.514650][ T23] audit: type=1400 audit(1744715298.335:19951): avc: denied { read write } for pid=355 comm="syz-executor" name="loop2" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 436.538894][ T23] audit: type=1400 audit(1744715298.335:19952): avc: denied { open } for pid=355 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 436.563115][ T456] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.573918][ T456] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.594152][ T23] audit: type=1400 audit(1744715298.410:19953): avc: denied { mounton } for pid=21419 comm="syz.4.9577" path="/1806/bus" dev="tmpfs" ino=180121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 436.623622][T21420] F2FS-fs (loop4): invalid crc value [ 436.634661][ T456] usb 2-1: config 0 interface 0 has no altsetting 0 [ 436.641240][ T456] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 436.654018][ T456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.667920][ T456] usb 2-1: config 0 descriptor?? [ 436.676495][T21420] F2FS-fs (loop4): Found nat_bits in checkpoint [ 436.684736][ T23] audit: type=1400 audit(1744715298.410:19954): avc: denied { ioctl } for pid=355 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=153 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 436.695873][ T23] audit: type=1400 audit(1744715298.522:19955): avc: denied { ioctl } for pid=21390 comm="syz.1.9567" path="/dev/raw-gadget" dev="devtmpfs" ino=289 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 436.741341][T21420] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 436.770106][ T23] audit: type=1400 audit(1744715298.578:19956): avc: denied { mount } for pid=21419 comm="syz.4.9577" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 436.770134][ T23] audit: type=1400 audit(1744715298.578:19957): avc: denied { read write } for pid=21419 comm="syz.4.9577" name="loop4" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 436.770152][ T23] audit: type=1400 audit(1744715298.578:19958): avc: denied { open } for pid=21419 comm="syz.4.9577" path="/dev/loop4" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 436.770172][ T23] audit: type=1400 audit(1744715298.578:19959): avc: denied { ioctl } for pid=21419 comm="syz.4.9577" path="/dev/loop4" dev="devtmpfs" ino=155 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 436.800300][ T357] attempt to access beyond end of device [ 436.800300][ T357] loop4: rw=2049, want=45104, limit=40427 [ 437.116194][T21475] x_tables: duplicate entry at hook 3 [ 437.188670][ T456] sony 0003:1345:3008.0001: unbalanced delimiter at end of report description [ 437.199645][ T456] sony 0003:1345:3008.0001: parse failed [ 437.205760][ T456] sony: probe of 0003:1345:3008.0001 failed with error -22 [ 437.283956][T21498] netlink: 'syz.3.9613': attribute type 3 has an invalid length. [ 437.315482][ T74] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 437.402849][ T456] usb 2-1: USB disconnect, device number 115 [ 437.682185][T21534] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 437.691313][T21534] ext4 filesystem being mounted at /1926/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 437.766123][T21541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9631'. [ 437.871485][ T74] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 437.880560][ T74] usb 3-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 437.888523][ T74] usb 3-1: Product: syz [ 437.892505][ T74] usb 3-1: Manufacturer: syz [ 437.897136][ T74] usb 3-1: SerialNumber: syz [ 437.902601][ T74] usb 3-1: config 0 descriptor?? [ 437.953009][T21547] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9634'. [ 437.966173][T21547] netlink: 'syz.3.9634': attribute type 6 has an invalid length. [ 437.974193][T21547] netlink: 'syz.3.9634': attribute type 5 has an invalid length. [ 437.982035][T21547] netlink: 'syz.3.9634': attribute type 4 has an invalid length. [ 438.115421][T21564] EXT4-fs (loop4): Test dummy encryption mode enabled [ 438.127164][T21564] EXT4-fs (loop4): Ignoring removed orlov option [ 438.136974][T21564] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,test_dummy_encryption,nolazytime,orlov,data_err=abort,errors=remount-ro,nobarrier,quota, [ 438.164600][T21564] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 438.229141][T21579] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 438.237708][T21579] EXT4-fs (loop1): invalid journal inode [ 438.243888][T21579] EXT4-fs (loop1): can't get journal size [ 438.254070][T21579] EXT4-fs (loop1): 1 truncate cleaned up [ 438.262282][T21579] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 438.392254][ T456] usb 3-1: USB disconnect, device number 117 [ 438.581827][T21609] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 438.588148][T21609] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 438.598123][T21609] F2FS-fs (loop1): invalid crc value [ 438.628595][T21609] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 438.635512][T21609] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 438.676472][ T354] attempt to access beyond end of device [ 438.676472][ T354] loop1: rw=2049, want=45104, limit=40427 [ 438.848986][ T1181] print_req_error: 553 callbacks suppressed [ 438.848999][ T1181] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 438.849076][ T1128] blk_update_request: I/O error, dev loop0, sector 1008 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.865690][ T1181] blk_update_request: I/O error, dev loop0, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.868248][ T465] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 438.886953][ T1181] buffer_io_error: 494 callbacks suppressed [ 438.886962][ T1181] Buffer I/O error on dev loop0p2, logical block 8, async page read [ 438.888314][ T1128] Buffer I/O error on dev loop0p3, logical block 8, async page read [ 438.908386][ T1181] blk_update_request: I/O error, dev loop0, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.917136][ T465] blk_update_request: I/O error, dev loop0, sector 108 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.942759][T21619] netlink: 'syz.0.9663': attribute type 6 has an invalid length. [ 438.953138][ T1181] Buffer I/O error on dev loop0p2, logical block 9, async page read [ 438.961010][ T1181] blk_update_request: I/O error, dev loop0, sector 60 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 438.985796][T21619] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9663'. [ 438.989006][ T465] Buffer I/O error on dev loop0p1, logical block 8, async page read [ 439.004047][ T1128] blk_update_request: I/O error, dev loop0, sector 1009 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 439.009131][ T465] blk_update_request: I/O error, dev loop0, sector 109 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 439.026303][ T1181] Buffer I/O error on dev loop0p2, logical block 10, async page read [ 439.035443][ T465] Buffer I/O error on dev loop0p1, logical block 9, async page read [ 439.036327][ T1128] Buffer I/O error on dev loop0p3, logical block 9, async page read [ 439.048831][ T1181] blk_update_request: I/O error, dev loop0, sector 61 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 439.051602][ T1128] Buffer I/O error on dev loop0p3, logical block 10, async page read [ 439.064900][ T465] Buffer I/O error on dev loop0p1, logical block 10, async page read [ 439.070814][ T1128] Buffer I/O error on dev loop0p3, logical block 11, async page read [ 439.109243][T21626] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 439.123409][T21626] ext4 filesystem being mounted at /1782/bus supports timestamps until (%ptR?) (0x7fffffff) [ 439.327198][T21648] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 439.368238][T21648] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 439.379310][T21648] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 439.400174][T21648] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 439.421750][T21648] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 439.443108][T21648] EXT4-fs error (device loop0) in ext4_setattr:5884: error 27 [ 439.455542][T21673] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 439.492032][T21673] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 439.527971][T21673] EXT4-fs warning (device loop0): ext4_evict_inode:304: couldn't mark inode dirty (err -27) [ 439.554391][T21645] F2FS-fs (loop1): Found nat_bits in checkpoint [ 439.654255][T21645] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 439.667468][ T13] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 439.765478][ T354] attempt to access beyond end of device [ 439.765478][ T354] loop1: rw=2049, want=45104, limit=40427 [ 439.829661][T21705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9699'. [ 439.945479][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 440.073749][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.100326][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.137792][ T13] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 440.155384][T21720] EXT4-fs (loop0): Ignoring removed oldalloc option [ 440.162056][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.184561][T21720] EXT4-fs (loop0): Ignoring removed orlov option [ 440.188070][ T13] usb 5-1: config 0 descriptor?? [ 440.195798][T21720] EXT4-fs (loop0): Ignoring removed oldalloc option [ 440.206726][T21720] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 440.261156][T21720] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,usrquota,sysvgroups,norecovery,oldalloc,orlov,oldalloc,auto_da_alloc,nomblk_io_submit,,errors=continue [ 440.426632][T21716] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 440.434210][T21716] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 440.463531][T21716] F2FS-fs (loop3): invalid crc value [ 440.512363][T21716] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 440.596593][T21716] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 440.603652][T21716] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 440.759320][ T13] gt683r_led 0003:1770:FF00.0002: unknown main item tag 0x0 [ 440.774291][ T13] gt683r_led 0003:1770:FF00.0002: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 440.834748][T21739] F2FS-fs (loop0): invalid crc value [ 440.849280][T21739] F2FS-fs (loop0): Found nat_bits in checkpoint [ 440.873469][T21739] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 440.880329][T21739] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 440.979818][ T13] usb 5-1: USB disconnect, device number 114 [ 440.990009][ T5] gt683r_led 0003:1770:FF00.0002: failed to send set report request: -19 [ 440.998380][ T125] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 441.260298][ T125] usb 3-1: Using ep0 maxpacket: 32 [ 441.388897][ T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.407580][ T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.427415][ T125] usb 3-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 441.438045][T21822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9746'. [ 441.447391][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.464969][ T125] usb 3-1: config 0 descriptor?? [ 441.508662][T21824] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue [ 441.522760][T21824] ext4 filesystem being mounted at /1968/bus supports timestamps until (%ptR?) (0x7fffffff) [ 441.832701][T21868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9767'. [ 441.841768][T21868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9767'. [ 441.850359][T21865] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue [ 441.866943][ T23] kauditd_printk_skb: 346 callbacks suppressed [ 441.866954][ T23] audit: type=1400 audit(1744715303.348:20306): avc: denied { read write } for pid=357 comm="syz-executor" name="loop4" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 441.875205][T21865] ext4 filesystem being mounted at /1797/bus supports timestamps until (%ptR?) (0x7fffffff) [ 441.897483][ T23] audit: type=1400 audit(1744715303.348:20307): avc: denied { open } for pid=357 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 441.930994][ T23] audit: type=1400 audit(1744715303.348:20308): avc: denied { ioctl } for pid=357 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=155 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 441.956475][ T23] audit: type=1400 audit(1744715303.358:20309): avc: denied { mount } for pid=21864 comm="syz.1.9766" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 441.978385][ T23] audit: type=1400 audit(1744715303.405:20310): avc: denied { unmount } for pid=354 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 441.998934][ T23] audit: type=1400 audit(1744715303.442:20311): avc: denied { ioctl } for pid=21760 comm="syz.2.9721" path="/dev/raw-gadget" dev="devtmpfs" ino=289 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 442.024151][ T125] logitech 0003:046D:C287.0003: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.2-1/input0 [ 442.035863][ T5] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 442.043400][ T125] logitech 0003:046D:C287.0003: no inputs found [ 442.062150][ T23] audit: type=1400 audit(1744715303.526:20312): avc: denied { create } for pid=21874 comm="syz.4.9770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 442.082793][ T23] audit: type=1400 audit(1744715303.536:20313): avc: denied { ioctl } for pid=21853 comm="syz.3.9761" path="/dev/raw-gadget" dev="devtmpfs" ino=289 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 442.108410][ T23] audit: type=1400 audit(1744715303.545:20314): avc: denied { getopt } for pid=21874 comm="syz.4.9770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 442.128773][ T23] audit: type=1400 audit(1744715303.554:20315): avc: denied { read write } for pid=354 comm="syz-executor" name="loop1" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 442.198578][ T125] usb 3-1: USB disconnect, device number 118 [ 442.296720][T21889] ================================================================== [ 442.304631][T21889] BUG: KASAN: use-after-free in __ext4_iget+0x384/0x4330 [ 442.311476][T21889] Read of size 8 at addr ffff8881dd26d0e0 by task syz.1.9775/21889 [ 442.319285][T21889] [ 442.321455][T21889] CPU: 0 PID: 21889 Comm: syz.1.9775 Tainted: G W 5.4.290-syzkaller-00002-g41adfeb3d639 #0 [ 442.332559][T21889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 442.342451][T21889] Call Trace: [ 442.345587][T21889] dump_stack+0x1d8/0x241 [ 442.349750][T21889] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 442.355475][T21889] ? printk+0xd1/0x111 [ 442.359385][T21889] ? __ext4_iget+0x384/0x4330 [ 442.363896][T21889] print_address_description+0x8c/0x600 [ 442.369279][T21889] ? _raw_spin_lock+0xa4/0x1b0 [ 442.373881][T21889] ? _raw_spin_trylock_bh+0x190/0x190 [ 442.379087][T21889] ? __ext4_iget+0x384/0x4330 [ 442.383602][T21889] __kasan_report+0xf3/0x120 [ 442.388112][T21889] ? __ext4_iget+0x384/0x4330 [ 442.392629][T21889] kasan_report+0x30/0x60 [ 442.396793][T21889] __ext4_iget+0x384/0x4330 [ 442.401236][T21889] ? idr_replace+0x230/0x230 [ 442.405655][T21889] ? ext4_get_projid+0x140/0x140 [ 442.410435][T21889] ? _raw_write_lock+0xa4/0x170 [ 442.415116][T21889] ? __proc_create+0x65a/0xa00 [ 442.419721][T21889] ext4_enable_quotas+0x528/0x940 [ 442.424581][T21889] ? ext4_fill_flex_info+0x5e0/0x5e0 [ 442.429698][T21889] ? proc_create+0x230/0x230 [ 442.434128][T21889] ? ext4_fill_flex_info+0x53b/0x5e0 [ 442.439248][T21889] ? ext4_register_sysfs+0x1d9/0x210 [ 442.444367][T21889] ext4_fill_super+0x84f0/0x8d90 [ 442.449153][T21889] ? ext4_mount+0x40/0x40 [ 442.453310][T21889] ? vscnprintf+0x80/0x80 [ 442.457543][T21889] mount_bdev+0x267/0x370 [ 442.461650][T21889] ? ext4_mount+0x40/0x40 [ 442.465809][T21889] legacy_get_tree+0xdf/0x170 [ 442.470326][T21889] ? ext4_lazyinit_thread+0xc60/0xc60 [ 442.475530][T21889] vfs_get_tree+0x85/0x260 [ 442.479783][T21889] do_new_mount+0x292/0x570 [ 442.484126][T21889] ? do_move_mount_old+0x160/0x160 [ 442.489071][T21889] ? security_capable+0x86/0xb0 [ 442.493759][T21889] do_mount+0x688/0xe10 [ 442.497751][T21889] ? copy_mount_string+0x30/0x30 [ 442.502527][T21889] ? copy_mount_options+0x29a/0x300 [ 442.507561][T21889] ksys_mount+0xc2/0xf0 [ 442.511560][T21889] __x64_sys_mount+0xb1/0xc0 [ 442.515981][T21889] do_syscall_64+0xca/0x1c0 [ 442.520321][T21889] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 442.526046][T21889] RIP: 0033:0x7f54ac56090a [ 442.530301][T21889] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.549741][T21889] RSP: 002b:00007f54aabc7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 442.557988][T21889] RAX: ffffffffffffffda RBX: 00007f54aabc7ef0 RCX: 00007f54ac56090a [ 442.565800][T21889] RDX: 0000200000000080 RSI: 0000200000000140 RDI: 00007f54aabc7eb0 [ 442.573609][T21889] RBP: 0000200000000080 R08: 00007f54aabc7ef0 R09: 0000000002000040 [ 442.581422][T21889] R10: 0000000002000040 R11: 0000000000000246 R12: 0000200000000140 [ 442.589234][T21889] R13: 00007f54aabc7eb0 R14: 00000000000004dc R15: 0000200000000280 [ 442.597047][T21889] [ 442.599213][T21889] Allocated by task 21333: [ 442.603472][T21889] __kasan_kmalloc+0x171/0x210 [ 442.608071][T21889] kmem_cache_alloc+0xd9/0x250 [ 442.612675][T21889] f2fs_alloc_inode+0x22/0x3c0 [ 442.617270][T21889] iget_locked+0x143/0x790 [ 442.621524][T21889] f2fs_iget+0x52/0x4cf0 [ 442.625603][T21889] f2fs_lookup+0x416/0xee0 [ 442.629856][T21889] __lookup_hash+0x117/0x240 [ 442.634285][T21889] do_renameat2+0x66a/0x1250 [ 442.638710][T21889] __x64_sys_renameat2+0xb1/0xc0 [ 442.643485][T21889] do_syscall_64+0xca/0x1c0 [ 442.647825][T21889] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 442.653550][T21889] [ 442.655720][T21889] Freed by task 356: [ 442.659455][T21889] __kasan_slab_free+0x1b5/0x270 [ 442.664229][T21889] kmem_cache_free+0x10b/0x2c0 [ 442.668831][T21889] rcu_do_batch+0x492/0xa00 [ 442.673169][T21889] rcu_core+0x4c8/0xcb0 [ 442.677162][T21889] __do_softirq+0x23b/0x6b7 [ 442.681498][T21889] [ 442.683681][T21889] The buggy address belongs to the object at ffff8881dd26cc20 [ 442.683681][T21889] which belongs to the cache f2fs_inode_cache of size 1264 [ 442.698086][T21889] The buggy address is located 1216 bytes inside of [ 442.698086][T21889] 1264-byte region [ffff8881dd26cc20, ffff8881dd26d110) [ 442.711355][T21889] The buggy address belongs to the page: [ 442.716833][T21889] page:ffffea0007749a00 refcount:1 mapcount:0 mapping:ffff8881f0fccc80 index:0xffff8881dd26a0a0 compound_mapcount: 0 [ 442.728897][T21889] flags: 0x8000000000010200(slab|head) [ 442.734198][T21889] raw: 8000000000010200 dead000000000100 dead000000000122 ffff8881f0fccc80 [ 442.742613][T21889] raw: ffff8881dd26a0a0 0000000080170014 00000001ffffffff 0000000000000000 [ 442.751023][T21889] page dumped because: kasan: bad access detected [ 442.757276][T21889] page_owner tracks the page as allocated [ 442.762838][T21889] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE) [ 442.780024][T21889] prep_new_page+0x18f/0x370 [ 442.784448][T21889] get_page_from_freelist+0x2d13/0x2d90 [ 442.789828][T21889] __alloc_pages_nodemask+0x393/0x840 [ 442.795038][T21889] alloc_slab_page+0x39/0x3c0 [ 442.799551][T21889] new_slab+0x97/0x440 [ 442.803454][T21889] ___slab_alloc+0x2fe/0x490 [ 442.807883][T21889] __slab_alloc+0x62/0xa0 [ 442.812051][T21889] kmem_cache_alloc+0x109/0x250 [ 442.816736][T21889] f2fs_alloc_inode+0x22/0x3c0 [ 442.821337][T21889] iget_locked+0x143/0x790 [ 442.825589][T21889] f2fs_iget+0x52/0x4cf0 [ 442.829674][T21889] f2fs_fill_super+0x4d1b/0x8330 [ 442.834443][T21889] mount_bdev+0x267/0x370 [ 442.838611][T21889] legacy_get_tree+0xdf/0x170 [ 442.843124][T21889] vfs_get_tree+0x85/0x260 [ 442.847376][T21889] do_new_mount+0x292/0x570 [ 442.851713][T21889] page_owner free stack trace missing [ 442.856918][T21889] [ 442.859091][T21889] Memory state around the buggy address: [ 442.864561][T21889] ffff8881dd26cf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 442.872460][T21889] ffff8881dd26d000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 442.880358][T21889] >ffff8881dd26d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 442.888431][T21889] ^ [ 442.895472][T21889] ffff8881dd26d100: fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 442.903362][T21889] ffff8881dd26d180: fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 442.911258][T21889] ================================================================== [ 442.919154][T21889] Disabling lock debugging due to kernel taint [ 442.940364][T21889] EXT4-fs error (device loop1): ext4_quota_enable:6056: inode #3: comm syz.1.9775: unexpected EA_INODE flag [ 442.956191][T21889] EXT4-fs error (device loop1): ext4_quota_enable:6059: comm syz.1.9775: Bad quota inode: 3, type: 0 [ 442.968789][T21889] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 442.985774][T21889] EXT4-fs (loop1): mount failed [ 443.045742][ T5] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.058880][ T5] usb 4-1: New USB device found, idVendor=056a, idProduct=0042, bcdDevice= 0.00 [ 443.068050][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.078231][ T5] usb 4-1: config 0 descriptor?? [ 443.592417][ T5] wacom 0003:056A:0042.0004: unknown main item tag 0x0 [ 443.599097][ T5] wacom 0003:056A:0042.0004: unknown main item tag 0x0 [ 443.605967][ T5] wacom 0003:056A:0042.0004: unknown main item tag 0x0 [ 443.612651][ T5] wacom 0003:056A:0042.0004: unknown main item tag 0x0 [ 443.619368][ T5] wacom 0003:056A:0042.0004: unknown main item tag 0x0 [ 443.626063][ T5] wacom 0003:056A:0042.0004: unknown main item tag 0x0 [ 443.632824][ T5] wacom 0003:056A:0042.0004: unknown main item tag 0x0 [ 443.639962][ T5] wacom 0003:056A:0042.0004: Unknown device_type for 'HID 056a:0042'. Assuming pen. [ 443.650022][ T5] wacom 0003:056A:0042.0004: hidraw0: USB HID v0.00 Device [HID 056a:0042] on usb-dummy_hcd.3-1/input0 [ 443.661888][ T5] input: Wacom Intuos2 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0042.0004/input/input30 [ 443.826701][ T5] usb 4-1: USB disconnect, device number 113 [ 449.378174][ T23] kauditd_printk_skb: 42 callbacks suppressed [ 449.378185][ T23] audit: type=1400 audit(1744715310.383:20358): avc: denied { read } for pid=146 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1