last executing test programs: 8.828373901s ago: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5fb7700"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "23fcb273b504badcdb52587dbdfe7da40ef525"}) 7.854155896s ago: executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) 7.8281103s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) 5.605054922s ago: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r0, 0x0, 0x0, 0xe0) 3.610575838s ago: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0x0) 3.500662636s ago: executing program 1: syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x0) 2.988442017s ago: executing program 2: setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5678c1", 0x8, 0x0, 0x0, @empty, @local, {[@dstopts={0x33}]}}}}}, 0x0) 2.988234417s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) getpgid(0xffffffffffffffff) 2.987692697s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='ext4_es_lookup_extent_exit\x00', r2}, 0x10) open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x40086607, 0x20001412) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) socket(0x8, 0x80000, 0xff) syz_emit_ethernet(0x68, &(0x7f0000000080)={@random="c16d473d990c", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8864}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x4]}}}}}}, 0x0) 2.987489487s ago: executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.84162666s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)={0x78, r2, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4f, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @broadcast, @from_mac=@device_b, {}, @value}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x78}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, r2, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x850) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0xcb8abeb, 0xfffffffffffffff9, 0x2000000}) 2.680611016s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x408e, &(0x7f0000000180)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@barrier_val={'barrier', 0x3d, 0x449}}, {@dioread_lock}, {@discard}, {@errors_remount}, {@nolazytime}]}, 0x3, 0x442, &(0x7f0000000780)="$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") openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', '', [{0x20, 'blkio.bfq.io_merged_recursive\x00!&\x86n7~\xdb\xa1\x17\xb3\x8e\x1d\xf1\xd0\xcb\xea#\\\x8a\x02\xd8d\x9fu\x04\x19\xc3\x87\xb9\xaa\x86e\x13\xb5\xdf\xdd\x1e\xd1\xe7\xd1\x7f\x89&\x10\xc0\xd2Bl\xb1\xe3\xdcP\xd0lD\x03\x8b\xce\x11\xe5\x1b`\xa9\xdfv;\xf1(\xe9)\xd8I\x1a8\xc9-\xd1\xdfL\xe00C]\xde\x94\xf6\xb6cXfg\x88\xbf\x01\xc9\xc1>\xb6\x18c\xdf2Rf\xdf\xa1\x9d\x89\xeb5\xd9\xf1\aW\x80\xb1\x8d\xd7\xdbf\xfb|\x12%\xde\xfc7Ky\xa5d\x14,\xdbF\xb4\xf3\x0f\'\xac\xedU\xc7T\x9bl=$\xa1R\x9b-\xa4\xcf\x89\xc9\x87\x1b\xf3+\xb1\xe6/T\xca1\xe9\xbc\xee,e\x92\xf3U\xd4\xc1\xc8\xcd K\xa8\xd7:7\xc2\xdd(w|\xf20=\x83P\xb7w\xe2\x90.\x93\xfa\xaf\xdb\xe76h\xbfm\xf5\x94\xder\x1fw'}]}, 0xf9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x5452, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) 2.605120778s ago: executing program 2: r0 = geteuid() r1 = signalfd(0xffffffffffffffff, &(0x7f00000033c0), 0x8) fchown(r1, r0, 0x0) 2.542894448s ago: executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) 2.518194972s ago: executing program 2: mkdir(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0xff}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) mlockall(0x3) pipe2(0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x0, &(0x7f0000ffd000/0x1000)=nil) mlock(&(0x7f0000ff6000/0x2000)=nil, 0x2000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x34}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000400)=""/62, 0x3e}], 0x1, 0xffffffff, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1000801, &(0x7f0000000ac0)=ANY=[@ANYRES64=0x0], 0x2, 0x1fb, &(0x7f0000001140)="$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") 1.757387392s ago: executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.13809962s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='ext4_es_lookup_extent_exit\x00', r2}, 0x10) open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x40086607, 0x20001412) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) socket(0x8, 0x80000, 0xff) syz_emit_ethernet(0x68, &(0x7f0000000080)={@random="c16d473d990c", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8864}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x4]}}}}}}, 0x0) 929.231743ms ago: executing program 3: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r2 = dup(r1) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000140)={@broadcast, @remote, @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x0, 0x0, "0e"}}}}}}, 0x0) 889.46387ms ago: executing program 1: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") syz_mount_image$fuse(0x0, &(0x7f0000000640)='./file0/../file0/file0/file0\x00', 0x0, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000480)='\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=@deltaction={0x124, 0x31, 0xd3fe5e30c2737a7, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x94, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x856}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c0000ffffffff00000000000000100000000000c5a33ba01b20e047f4541d85de0e8d36ccb06148161f6dbd9ef18d4898d1d6b2fdf4ee6aa1903fc896fa74de797d4b37d7b4bea56ace250782fc71f2488af7d21108a765d7f50c5ba3895e5d53005c7fd7828195f2fc8da4dfc99c58f3804b14eb3c7f09bab85cf292ca1929fb939b9757a8b3a1c9ca2a552591307f847fc789e28134d29c02f09b5a5e8489f0aec52ca75b41f1e91879e775fd4ea356f5fbeff7ca8a17f7e5006628f5fd61", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e00010069703665727370616e000000180002800400120005001600010000000800050000000000"], 0x4c}}, 0x0) renameat2(r4, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, &(0x7f0000000040)='./file1\x00', 0x0) 867.632923ms ago: executing program 3: r0 = socket(0x11, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000a00)={0x4000000c}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 824.54519ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, 0x16, 0x1, 0x0, 0x0, {0x1}, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}}, 0x0) 763.994399ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000f40)={0x0, 0xfc, &(0x7f0000000f00)={&(0x7f0000000f80)={0x38, r1, 0x135, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x38}}, 0x0) 683.869082ms ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'veth1_to_team\x00', 0x400}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000092900000000000000000001850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) ioctl$EVIOCSKEYCODE_V2(r2, 0x80044501, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "89543f4813385bac70324e5ea07492e2bcc077200c7701a7284b2ebb00174225"}) 529.885147ms ago: executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, 0x0, 0x0) 503.350551ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 339.858796ms ago: executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r0, 0x28, 0x2, 0x0, &(0x7f0000000080)=0x12) 306.334832ms ago: executing program 4: r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f0000000200)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000040)="4ba72c4cfd81685544f46c3f86dd", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 289.310745ms ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x14, 0x5, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) 247.654051ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='ext4_es_lookup_extent_exit\x00', r2}, 0x10) open(&(0x7f0000000040)='./bus\x00', 0x1451c2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x40086607, 0x20001412) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800150000000000050016"], 0x4c}}, 0x0) socket(0x8, 0x80000, 0xff) syz_emit_ethernet(0x68, &(0x7f0000000080)={@random="c16d473d990c", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8864}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x4]}}}}}}, 0x0) 0s ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES32], 0x0) kernel console output (not intermixed with test programs): [ 8.442288][ T161] udevd[161]: starting version 3.2.11 [ 8.524511][ T162] udevd[162]: starting eudev-3.2.11 [ 8.926014][ T163] udevadm (163) used greatest stack depth: 23096 bytes left [ 10.611455][ T194] ip (194) used greatest stack depth: 22968 bytes left [ 18.144483][ T23] kauditd_printk_skb: 49 callbacks suppressed [ 18.144513][ T23] audit: type=1400 audit(1718890153.350:61): avc: denied { transition } for pid=285 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.154153][ T23] audit: type=1400 audit(1718890153.350:62): avc: denied { noatsecure } for pid=285 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.160512][ T23] audit: type=1400 audit(1718890153.360:63): avc: denied { write } for pid=285 comm="sh" path="pipe:[10517]" dev="pipefs" ino=10517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 18.174788][ T23] audit: type=1400 audit(1718890153.360:64): avc: denied { rlimitinh } for pid=285 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.194908][ T23] audit: type=1400 audit(1718890153.360:65): avc: denied { siginh } for pid=285 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts. 2024/06/20 13:29:24 fuzzer started 2024/06/20 13:29:24 dialing manager at 10.128.0.163:30000 [ 28.982894][ T23] audit: type=1400 audit(1718890164.190:66): avc: denied { node_bind } for pid=346 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 29.005710][ T23] audit: type=1400 audit(1718890164.210:67): avc: denied { name_bind } for pid=346 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 29.071344][ T23] audit: type=1400 audit(1718890164.270:68): avc: denied { setattr } for pid=356 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=9263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.110108][ T23] audit: type=1400 audit(1718890164.310:69): avc: denied { mounton } for pid=358 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.140366][ T357] cgroup1: Unknown subsys name 'net' [ 29.146283][ T357] cgroup1: Unknown subsys name 'net_prio' [ 29.153179][ T357] cgroup1: Unknown subsys name 'devices' [ 29.161238][ T23] audit: type=1400 audit(1718890164.340:70): avc: denied { mounton } for pid=357 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.184269][ T363] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.189090][ T23] audit: type=1400 audit(1718890164.340:71): avc: denied { mount } for pid=357 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.215859][ T23] audit: type=1400 audit(1718890164.350:72): avc: denied { mount } for pid=358 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.238993][ T23] audit: type=1400 audit(1718890164.360:73): avc: denied { unmount } for pid=357 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.259715][ T23] audit: type=1400 audit(1718890164.410:74): avc: denied { relabelto } for pid=363 comm="mkswap" name="swap-file" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.301770][ T23] audit: type=1400 audit(1718890164.410:75): avc: denied { write } for pid=363 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.354619][ T360] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.378294][ T357] cgroup1: Unknown subsys name 'hugetlb' [ 29.384339][ T357] cgroup1: Unknown subsys name 'rlimit' 2024/06/20 13:29:24 starting 5 executor processes [ 30.675200][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.682121][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.689994][ T375] device bridge_slave_0 entered promiscuous mode [ 30.707498][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.714388][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.722533][ T376] device bridge_slave_0 entered promiscuous mode [ 30.743373][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.750239][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.758552][ T375] device bridge_slave_1 entered promiscuous mode [ 30.775172][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.782090][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.789945][ T376] device bridge_slave_1 entered promiscuous mode [ 31.048670][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.055618][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.063789][ T374] device bridge_slave_0 entered promiscuous mode [ 31.080787][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.087712][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.096204][ T374] device bridge_slave_1 entered promiscuous mode [ 31.141178][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.148670][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.156832][ T377] device bridge_slave_0 entered promiscuous mode [ 31.193845][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.200721][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.208785][ T377] device bridge_slave_1 entered promiscuous mode [ 31.342441][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.349313][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.357854][ T378] device bridge_slave_0 entered promiscuous mode [ 31.394933][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.401945][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.409826][ T378] device bridge_slave_1 entered promiscuous mode [ 31.628222][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.635112][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.642407][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.649260][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.659572][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.666897][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.873052][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.880945][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.934812][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.944023][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.951844][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.960269][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.968546][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.975400][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.996189][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.004150][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.014111][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.022502][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.029341][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.051558][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.060312][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.069865][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.076740][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.084897][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.092741][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.122637][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.131379][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.140375][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.147271][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.155647][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.164208][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.172417][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.179249][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.186713][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.225711][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.234651][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.244024][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.252699][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.260905][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.267775][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.290365][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.298868][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.313023][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.320963][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.353589][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.362273][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.391727][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.400166][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.409496][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.418831][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.427648][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.434523][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.442477][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.450906][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.460102][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.467039][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.476722][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.505084][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.514321][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.543540][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.551303][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.559859][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.568657][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.591709][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.600329][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.609020][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.615895][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.623619][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.632432][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.640740][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.647622][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.655446][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.695746][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.704847][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.713395][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.724199][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.733370][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.742295][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.762205][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.770727][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.779722][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.787938][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.810631][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.820274][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.829445][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.837732][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.861771][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.870186][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.903352][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.912640][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.948127][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.958260][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.966364][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.975152][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.983747][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.992135][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.000360][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.009118][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.029094][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.038190][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.070500][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.079486][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.100649][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.109348][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.132229][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.140986][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.149741][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.158264][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.171958][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.180576][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.211570][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.219864][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.229036][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.238248][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.246875][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.255550][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.308681][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.318513][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.327154][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.336179][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.397637][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.407020][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.418457][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.427804][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.436888][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.445882][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.554623][ T405] SELinux: Context system_u:object_r:udev_var_run_t:s0 is not valid (left unmapped). [ 33.572308][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.582317][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.599576][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.618856][ T401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.647374][ T409] xt_TCPMSS: Only works on TCP SYN packets [ 34.235274][ T23] kauditd_printk_skb: 30 callbacks suppressed [ 34.235323][ T23] audit: type=1400 audit(1718890169.430:106): avc: denied { read } for pid=429 comm="syz-executor.2" name="kvm" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.539091][ T23] audit: type=1400 audit(1718890169.470:107): avc: denied { open } for pid=429 comm="syz-executor.2" path="/dev/kvm" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 34.608327][ T23] audit: type=1400 audit(1718890169.510:108): avc: denied { map_read map_write } for pid=429 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.682458][ T427] loop_set_block_size: loop0 () has still dirty pages (nrpages=48) [ 34.878987][ T427] syz-executor.4 (427) used greatest stack depth: 22168 bytes left [ 35.040688][ T23] audit: type=1400 audit(1718890170.240:109): avc: denied { mounton } for pid=400 comm="syz-executor.1" path="/root/syzkaller-testdir2897851190/syzkaller.HWpxd0/0/file0" dev="sda1" ino=1948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 35.107822][ T443] overlayfs: failed to resolve './file1': -2 [ 35.310021][ T403] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 35.503779][ T403] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 35.760214][ T443] syz-executor.0 (443) used greatest stack depth: 21976 bytes left [ 35.773910][ T403] F2FS-fs (loop1): invalid crc value [ 35.827645][ T23] audit: type=1400 audit(1718890171.030:110): avc: denied { create } for pid=454 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.855936][ T403] F2FS-fs (loop1): Found nat_bits in checkpoint [ 35.882428][ T23] audit: type=1400 audit(1718890171.090:111): avc: denied { write } for pid=454 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.930096][ T23] audit: type=1400 audit(1718890171.090:112): avc: denied { nlmsg_write } for pid=454 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.003032][ T463] ====================================================== [ 36.003032][ T463] WARNING: the mand mount option is being deprecated and [ 36.003032][ T463] will be removed in v5.15! [ 36.003032][ T463] ====================================================== [ 36.064748][ T470] sch_tbf: burst 88 is lower than device dummy0 mtu (1514) ! [ 36.078983][ T403] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 36.086008][ T403] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 36.095073][ T23] audit: type=1400 audit(1718890171.300:113): avc: denied { mount } for pid=400 comm="syz-executor.1" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.143587][ T23] audit: type=1400 audit(1718890171.350:114): avc: denied { write } for pid=400 comm="syz-executor.1" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.168524][ T463] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 36.179689][ T403] attempt to access beyond end of device [ 36.179689][ T403] loop1: rw=2049, want=45104, limit=40427 [ 36.187034][ T463] ext4 filesystem being mounted at /root/syzkaller-testdir4109698986/syzkaller.nCOZtC/3/file1 supports timestamps until 2038 (0x7fffffff) [ 36.239026][ T23] audit: type=1400 audit(1718890171.350:115): avc: denied { add_name } for pid=400 comm="syz-executor.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.377873][ T481] input: syz0 as /devices/virtual/input/input4 [ 36.508890][ T489] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 36.850744][ T507] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 36.953482][ T504] kvm: emulating exchange as write [ 36.989084][ T511] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 37.009184][ T511] ext4 filesystem being mounted at /root/syzkaller-testdir3739473672/syzkaller.Sgt2oe/10/file1 supports timestamps until 2038 (0x7fffffff) [ 37.108479][ T485] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 37.134872][ T485] ext4 filesystem being mounted at /root/syzkaller-testdir3843228236/syzkaller.qkX4ug/6/file0 supports timestamps until 2038 (0x7fffffff) [ 37.180259][ T376] attempt to access beyond end of device [ 37.180259][ T376] loop1: rw=2049, want=45112, limit=40427 [ 37.191876][ T523] syz-executor.4 (523) used greatest stack depth: 21112 bytes left [ 37.231174][ T485] EXT4-fs (loop2): re-mounted. Opts: (null) [ 37.322068][ T529] FAT-fs (loop3): bogus number of FAT sectors [ 37.327993][ T529] FAT-fs (loop3): Can't find a valid FAT filesystem [ 37.372357][ T396] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.621579][ T396] usb 1-1: Using ep0 maxpacket: 32 [ 37.741710][ T396] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 37.771970][ T396] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 37.786332][ T374] syz-executor.4 (374) used greatest stack depth: 19096 bytes left [ 37.791626][ T396] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 37.807911][ T396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.828361][ T396] usb 1-1: config 0 descriptor?? [ 37.892069][ T524] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 37.913023][ T396] hub 1-1:0.0: USB hub found [ 38.129563][ T550] syz-executor.3[550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.130255][ T550] syz-executor.3[550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.800482][ T396] hub 1-1:0.0: 2 ports detected [ 38.889104][ T540] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.915777][ T540] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.927648][ T540] device bridge_slave_0 entered promiscuous mode [ 38.952851][ T540] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.959789][ T540] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.984317][ T540] device bridge_slave_1 entered promiscuous mode [ 39.031639][ T396] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 39.037843][ T396] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 40.445655][ T396] usbhid 1-1:0.0: can't add hid device: -71 [ 40.480968][ T396] usbhid: probe of 1-1:0.0 failed with error -71 [ 40.635051][ T569] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) [ 40.972317][ T396] usb 1-1: USB disconnect, device number 2 [ 40.985341][ T23] kauditd_printk_skb: 36 callbacks suppressed [ 40.985374][ T23] audit: type=1400 audit(1718890176.190:152): avc: denied { ioctl } for pid=574 comm="syz-executor.3" path="socket:[12002]" dev="sockfs" ino=12002 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.990210][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.024624][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.051786][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.060435][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.069352][ T573] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.076249][ T573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.107154][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.127989][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.138097][ T573] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.144991][ T573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.153013][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.199461][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.210618][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.222763][ T587] loop_set_block_size: loop0 () has still dirty pages (nrpages=48) [ 41.252631][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.263629][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.369111][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.379690][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.397290][ T9] device bridge_slave_1 left promiscuous mode [ 41.403394][ T577] blk_update_request: I/O error, dev loop0, sector 3456 op 0x0:(READ) flags 0x80700 phys_seg 7 prio class 0 [ 41.404107][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.453811][ T9] device bridge_slave_0 left promiscuous mode [ 41.459882][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.765721][ T601] syz-executor.0[601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.766412][ T601] syz-executor.0[601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.560215][ T23] audit: type=1400 audit(1718890177.760:153): avc: denied { create } for pid=605 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.609602][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.623881][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.682628][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.697527][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.747215][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.762478][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.803366][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.822801][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.864752][ T23] audit: type=1400 audit(1718890178.070:154): avc: denied { mounton } for pid=540 comm="syz-executor.4" path="/dev/binderfs" dev="devtmpfs" ino=11579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 42.927482][ T23] audit: type=1400 audit(1718890178.090:155): avc: denied { read } for pid=579 comm="syz-executor.2" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.950825][ T23] audit: type=1400 audit(1718890178.090:156): avc: denied { open } for pid=579 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 43.065905][ T619] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 43.091965][ T619] EXT4-fs (loop4): invalid journal inode [ 43.097473][ T619] EXT4-fs (loop4): can't get journal size [ 43.125683][ T619] EXT4-fs (loop4): 1 truncate cleaned up [ 43.131175][ T619] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 43.221573][ T23] audit: type=1400 audit(1718890178.400:157): avc: denied { append } for pid=618 comm="syz-executor.4" path="/root/syzkaller-testdir342415577/syzkaller.4x8IbU/0/file0/file0/blkio.bfq.empty_time" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.358476][ T23] audit: type=1400 audit(1718890178.470:158): avc: denied { getopt } for pid=605 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.103221][ T635] input: syz0 as /devices/virtual/input/input6 [ 44.121063][ T23] audit: type=1400 audit(1718890179.280:159): avc: denied { create } for pid=632 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.822117][ T636] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 44.832506][ T636] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.843588][ T636] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 44.921754][ T642] loop_set_block_size: loop0 () has still dirty pages (nrpages=16) [ 45.123951][ T645] EXT4-fs (loop3): Ignoring removed orlov option [ 45.131313][ T645] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 45.154698][ T645] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bsddf,noload,barrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 45.334119][ T103] blk_update_request: I/O error, dev loop0, sector 6656 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 45.345427][ T103] Buffer I/O error on dev loop0, logical block 832, lost async page write [ 45.394773][ T23] audit: type=1400 audit(1718890180.600:160): avc: denied { setattr } for pid=643 comm="syz-executor.3" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.454477][ T23] audit: type=1400 audit(1718890180.660:161): avc: denied { execute } for pid=643 comm="syz-executor.3" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.456231][ T658] process 'syz-executor.3' launched './file0/file0' with NULL argv: empty string added [ 45.849439][ T669] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,minixdf,minixdf,stripe=0x0000000000000020,,errors=continue [ 45.867145][ T669] ext4 filesystem being mounted at /root/syzkaller-testdir3739473672/syzkaller.Sgt2oe/23/file0 supports timestamps until 2038 (0x7fffffff) [ 45.898690][ T669] fs-verity: sha256 using implementation "sha256-avx2" [ 45.907457][ T669] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz-executor.3: bg 0: block 345: padding at end of block bitmap is not set [ 45.922658][ T669] fs-verity (loop3, inode 13): Error -117 writing Merkle tree block 0 [ 45.930715][ T669] fs-verity (loop3, inode 13): Error -117 building Merkle tree [ 45.941890][ T669] fs-verity: sha512 using implementation "sha512-generic" [ 45.949985][ T669] fs-verity (loop3, inode 13): Error -28 writing Merkle tree block 0 [ 45.957994][ T669] fs-verity (loop3, inode 13): Error -28 building Merkle tree [ 46.196174][ T23] kauditd_printk_skb: 13 callbacks suppressed [ 46.196203][ T23] audit: type=1400 audit(1718890181.400:175): avc: denied { create } for pid=685 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.231861][ T23] audit: type=1400 audit(1718890181.430:176): avc: denied { getopt } for pid=685 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 46.301581][ T689] [ 46.315197][ T689] ********************************************************** [ 46.401938][ T689] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 46.435749][ T689] ** ** [ 46.532006][ T689] ** trace_printk() being used. Allocating extra memory. ** [ 46.539301][ T689] ** ** [ 46.546513][ T689] ** This means that this is a DEBUG kernel and it is ** [ 46.553963][ T689] ** unsafe for production use. ** [ 46.562215][ T689] ** ** [ 46.569637][ T689] ** If you see this message and you are not debugging ** [ 46.577078][ T689] ** the kernel, report this immediately to your vendor! ** [ 47.656350][ T699] input: syz0 as /devices/virtual/input/input7 [ 47.742359][ T693] sched: RT throttling activated [ 47.760027][ T689] ** ** [ 47.937782][ T23] audit: type=1400 audit(1718890183.140:177): avc: denied { ioctl } for pid=688 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.030773][ T689] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 48.078379][ T23] audit: type=1400 audit(1718890183.170:178): avc: denied { set_context_mgr } for pid=688 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 48.086733][ T689] ********************************************************** [ 48.119534][ T23] audit: type=1400 audit(1718890183.300:179): avc: denied { map } for pid=688 comm="syz-executor.2" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 48.154205][ T23] audit: type=1400 audit(1718890183.310:180): avc: denied { call } for pid=688 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 48.243923][ T699] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.254157][ T699] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 48.494002][ T23] audit: type=1400 audit(1718890183.700:181): avc: denied { write } for pid=707 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 48.560405][ T703] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 48.576714][ T710] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 48.586239][ T703] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 48.595183][ T23] audit: type=1400 audit(1718890183.800:182): avc: denied { read } for pid=711 comm="syz-executor.1" name="ppp" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.621568][ T379] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 48.651451][ T23] audit: type=1400 audit(1718890183.800:183): avc: denied { open } for pid=711 comm="syz-executor.1" path="/dev/ppp" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.675668][ T23] audit: type=1400 audit(1718890183.840:184): avc: denied { ioctl } for pid=711 comm="syz-executor.1" path="/dev/ppp" dev="devtmpfs" ino=837 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.991577][ T379] usb 1-1: Using ep0 maxpacket: 32 [ 49.111748][ T379] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 49.151853][ T379] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 49.281702][ T18] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 49.289143][ T379] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 49.298190][ T379] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 49.306986][ T379] usb 1-1: Product: syz [ 49.311028][ T379] usb 1-1: Manufacturer: syz [ 49.331835][ T617] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 49.363907][ T379] hub 1-1:4.0: USB hub found [ 49.531540][ T18] usb 4-1: Using ep0 maxpacket: 8 [ 49.581668][ T379] hub 1-1:4.0: 2 ports detected [ 49.651934][ T18] usb 4-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56 [ 49.661169][ T18] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.671984][ T18] usb 4-1: config 0 descriptor?? [ 49.691762][ T617] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.701947][ T617] usb 2-1: config 0 has no interfaces? [ 49.707357][ T617] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 49.717772][ T18] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 49.793291][ T726] F2FS-fs (loop4): Found nat_bits in checkpoint [ 49.846631][ T617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.857790][ T617] usb 2-1: config 0 descriptor?? [ 49.862927][ T379] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 49.869112][ T379] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 49.902152][ T379] usb 1-1: USB disconnect, device number 3 [ 49.910572][ T732] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 49.931952][ T18] usb 4-1: Detected FT8U232AM [ 49.938676][ T18] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 49.978953][ T726] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 50.050086][ T540] attempt to access beyond end of device [ 50.050086][ T540] loop4: rw=2049, want=45104, limit=40427 [ 50.087918][ T736] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 50.320706][ T364] usb 4-1: USB disconnect, device number 2 [ 50.336917][ T364] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 50.352878][ T364] ftdi_sio 4-1:0.0: device disconnected [ 50.387359][ T750] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 50.398104][ T750] EXT4-fs error (device loop2): ext4_fill_super:4612: inode #2: comm syz-executor.2: casefold flag without casefold feature [ 50.412258][ T750] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0002] [ 50.420176][ T750] System zones: 0-2, 18-18, 34-35 [ 50.428643][ T750] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 50.588521][ T756] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 50.662292][ T756] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a802c09c, mo2=0000] [ 50.675578][ T756] System zones: 0-2, 18-18, 34-34 [ 50.707625][ T756] EXT4-fs (loop1): 1 orphan inode deleted [ 50.732435][ T756] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x000000000000000a,nolazytime,noquota,jqfmt=vfsold,minixdf,init_itable=0x0000000000000002,grpid,debug,,errors=continue [ 50.776147][ T756] ext4 filesystem being mounted at /root/syzkaller-testdir2897851190/syzkaller.HWpxd0/13/file1 supports timestamps until 2038 (0x7fffffff) [ 51.483600][ T23] kauditd_printk_skb: 13 callbacks suppressed [ 51.483632][ T23] audit: type=1400 audit(1718890186.690:198): avc: denied { read } for pid=788 comm="syz-executor.3" name="usbmon0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.543001][ T23] audit: type=1400 audit(1718890186.720:199): avc: denied { open } for pid=788 comm="syz-executor.3" path="/dev/usbmon0" dev="devtmpfs" ino=838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.751556][ T18] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 51.881348][ T795] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 51.897169][ T795] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.905543][ T795] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 16777216 out of range 0-5 [ 51.916843][ T795] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 51.940796][ T795] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz-executor.4: bg 0: block 40: padding at end of block bitmap is not set [ 51.972089][ T795] EXT4-fs error (device loop4) in ext4_free_blocks:5019: Corrupt filesystem [ 52.005889][ T795] EXT4-fs (loop4): 1 truncate cleaned up [ 52.015308][ T795] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 52.018682][ T379] usb 2-1: USB disconnect, device number 2 [ 52.092510][ T795] EXT4-fs error (device loop4): ext4_xattr_block_get:544: inode #16: comm syz-executor.4: corrupted xattr block 31 [ 52.121943][ T18] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 52.131200][ T795] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 52.139506][ T18] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.147895][ T795] EXT4-fs error (device loop4): ext4_xattr_block_get:544: inode #16: comm syz-executor.4: corrupted xattr block 31 [ 52.148183][ T795] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 52.194333][ T18] usb 1-1: config 0 descriptor?? [ 52.200567][ T802] bridge0: port 3(syz_tun) entered blocking state [ 52.209554][ T23] audit: type=1400 audit(1718890187.410:200): avc: denied { read } for pid=794 comm="syz-executor.4" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 52.214150][ T802] bridge0: port 3(syz_tun) entered disabled state [ 52.249368][ T802] device syz_tun entered promiscuous mode [ 52.265494][ T802] bridge0: port 3(syz_tun) entered blocking state [ 52.271785][ T802] bridge0: port 3(syz_tun) entered forwarding state [ 52.283025][ T18] ums-usbat 1-1:0.0: USB Mass Storage device detected [ 52.300541][ T802] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 52.330499][ T18] ums-usbat 1-1:0.0: Quirks match for vid 0781 pid 0005: 1 [ 52.338059][ T18] ums-usbat 1-1:0.0: This device (0781,0005,0005 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 5.4.274-syzkaller-00002-g6f97bd951d82) [ 52.338059][ T18] Please send a copy of this message to and [ 52.484881][ T108] usb 1-1: USB disconnect, device number 4 [ 52.561555][ T364] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 52.600031][ T814] tmpfs: Bad value for 'huge' [ 52.722643][ T23] audit: type=1400 audit(1718890187.930:201): avc: denied { create } for pid=815 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.747949][ T23] audit: type=1400 audit(1718890187.950:202): avc: denied { write } for pid=815 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.747963][ T816] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 52.779733][ T23] audit: type=1400 audit(1718890187.980:203): avc: denied { create } for pid=817 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.801265][ T23] audit: type=1400 audit(1718890188.010:204): avc: denied { setopt } for pid=817 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.831698][ T23] audit: type=1400 audit(1718890188.030:205): avc: denied { write } for pid=817 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.941741][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.957683][ T364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.970701][ T364] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 52.980212][ T364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.990260][ T364] usb 4-1: config 0 descriptor?? [ 53.063213][ T809] F2FS-fs (loop1): invalid crc value [ 53.122817][ T809] F2FS-fs (loop1): Found nat_bits in checkpoint [ 53.790739][ T809] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 53.798661][ T841] bridge0: port 3(syz_tun) entered blocking state [ 53.806451][ T841] bridge0: port 3(syz_tun) entered disabled state [ 53.812893][ T809] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 53.821936][ T841] device syz_tun entered promiscuous mode [ 53.827780][ T841] bridge0: port 3(syz_tun) entered blocking state [ 53.834067][ T841] bridge0: port 3(syz_tun) entered forwarding state [ 53.848049][ T841] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 53.950636][ T838] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 53.963701][ T838] EXT4-fs (loop0): orphan cleanup on readonly fs [ 53.975555][ T838] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 40: padding at end of block bitmap is not set [ 54.000350][ T838] EXT4-fs error (device loop0) in ext4_free_blocks:5019: Corrupt filesystem [ 54.010962][ T838] EXT4-fs (loop0): 1 truncate cleaned up [ 54.016972][ T838] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 54.051732][ T376] attempt to access beyond end of device [ 54.051732][ T376] loop1: rw=2049, want=45112, limit=40427 [ 54.056410][ T838] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #16: comm syz-executor.0: corrupted xattr block 31 [ 54.079644][ T838] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 54.084150][ T364] hid-generic 0003:046D:C222.0001: unknown main item tag 0x0 [ 54.089775][ T838] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #16: comm syz-executor.0: corrupted xattr block 31 [ 54.121357][ T838] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 54.152202][ T364] hid-generic 0003:046D:C222.0001: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 54.421372][ T364] usb 4-1: USB disconnect, device number 3 [ 55.208745][ T874] F2FS-fs (loop0): invalid crc value [ 55.287982][ T874] F2FS-fs (loop0): Found nat_bits in checkpoint [ 55.300793][ T888] 9pnet: Insufficient options for proto=fd [ 55.646951][ T894] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 55.665356][ T894] EXT4-fs (loop3): orphan cleanup on readonly fs [ 55.711233][ T894] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz-executor.3: bg 0: block 40: padding at end of block bitmap is not set [ 55.732408][ T894] EXT4-fs error (device loop3) in ext4_free_blocks:5019: Corrupt filesystem [ 55.751789][ T894] EXT4-fs (loop3): 1 truncate cleaned up [ 55.757334][ T894] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 55.802451][ T894] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #16: comm syz-executor.3: corrupted xattr block 31 [ 55.803864][ T874] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 55.824618][ T894] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 55.837416][ T874] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 55.841660][ T894] EXT4-fs error (device loop3): ext4_xattr_block_get:544: inode #16: comm syz-executor.3: corrupted xattr block 31 [ 55.884985][ T894] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 55.939287][ T375] attempt to access beyond end of device [ 55.939287][ T375] loop0: rw=2049, want=45112, limit=40427 [ 57.748767][ T922] input: syz0 as /devices/virtual/input/input8 [ 57.970578][ T23] kauditd_printk_skb: 14 callbacks suppressed [ 57.970628][ T23] audit: type=1400 audit(1718890193.170:216): avc: denied { read } for pid=920 comm="syz-executor.3" name="msr" dev="devtmpfs" ino=9190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 58.157649][ T922] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.170800][ T922] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 58.273793][ T23] audit: type=1400 audit(1718890193.210:217): avc: denied { open } for pid=920 comm="syz-executor.3" path="/dev/cpu/0/msr" dev="devtmpfs" ino=9190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 59.038470][ T23] audit: type=1400 audit(1718890194.240:218): avc: denied { bind } for pid=942 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.194206][ T23] audit: type=1400 audit(1718890194.370:219): avc: denied { create } for pid=942 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.921918][ T23] audit: type=1400 audit(1718890196.120:220): avc: denied { create } for pid=957 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 60.971791][ T971] loop_set_status: loop0 () has still dirty pages (nrpages=1) [ 60.985672][ T939] F2FS-fs (loop0): invalid crc value [ 61.017775][ T23] audit: type=1326 audit(1718890196.120:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=957 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f473bcb5f29 code=0x0 [ 61.069923][ T939] F2FS-fs (loop0): Found nat_bits in checkpoint [ 61.421560][ T398] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 61.430825][ T939] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 61.466763][ T939] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 61.661653][ T398] usb 2-1: Using ep0 maxpacket: 8 [ 61.682848][ T375] attempt to access beyond end of device [ 61.682848][ T375] loop0: rw=2049, want=45112, limit=40427 [ 61.771810][ T837] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 61.782468][ T398] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 61.814522][ T398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.862564][ T398] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.900899][ T398] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 61.944737][ T398] usb 2-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 61.960895][ T398] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.971112][ T398] usb 2-1: config 0 descriptor?? [ 62.031723][ T837] usb 4-1: Using ep0 maxpacket: 8 [ 62.076291][ T992] EXT4-fs (loop4): Unrecognized mount option "obj_type=T/…" or missing value [ 62.151875][ T837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.162725][ T837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.172422][ T837] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 62.181430][ T837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.191237][ T837] usb 4-1: config 0 descriptor?? [ 62.318427][ T996] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,auto_da_alloc,quota,init_itable,block_validity,nombcache,,errors=continue [ 62.350713][ T996] ext4 filesystem being mounted at /root/syzkaller-testdir3843228236/syzkaller.qkX4ug/44/bus supports timestamps until 2038 (0x7fffffff) [ 62.474708][ T398] hid-generic 0003:05AC:029F.0002: hidraw0: USB HID v0.00 Device [HID 05ac:029f] on usb-dummy_hcd.1-1/input0 [ 62.538333][ T1004] EXT4-fs (loop0): Test dummy encryption mode enabled [ 62.555988][ T1004] EXT4-fs error (device loop0): ext4_quota_enable:6056: comm syz-executor.0: inode #16777216: comm syz-executor.0: iget: illegal inode # [ 62.570444][ T1004] EXT4-fs error (device loop0): ext4_quota_enable:6059: comm syz-executor.0: Bad quota inode: 16777216, type: 2 [ 62.582995][ T1004] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 62.598774][ T1004] EXT4-fs (loop0): mount failed [ 62.611649][ T379] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.664662][ T837] hid-picolcd 0003:04D8:F002.0003: unknown main item tag 0x0 [ 62.679363][ T573] usb 2-1: USB disconnect, device number 3 [ 62.741736][ T837] hid-picolcd 0003:04D8:F002.0003: No report with id 0xf3 found [ 62.749496][ T837] hid-picolcd 0003:04D8:F002.0003: No report with id 0xf4 found [ 62.801680][ T364] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 62.851338][ T1013] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro, [ 62.860962][ T1013] ext4 filesystem being mounted at /root/syzkaller-testdir4109698986/syzkaller.nCOZtC/31/file1 supports timestamps until 2038 (0x7fffffff) [ 62.873990][ T837] usb 4-1: USB disconnect, device number 4 [ 62.905400][ T1013] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor.0: path /root/syzkaller-testdir4109698986/syzkaller.nCOZtC/31/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 62.932170][ T1013] EXT4-fs (loop0): Remounting filesystem read-only [ 62.938991][ T1013] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz-executor.0: path /root/syzkaller-testdir4109698986/syzkaller.nCOZtC/31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 62.965158][ T1013] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor.0: path /root/syzkaller-testdir4109698986/syzkaller.nCOZtC/31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 62.991395][ T1013] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz-executor.0: path /root/syzkaller-testdir4109698986/syzkaller.nCOZtC/31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 63.016806][ T1013] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz-executor.0: path /root/syzkaller-testdir4109698986/syzkaller.nCOZtC/31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 63.031753][ T379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.042390][ T1013] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor.0: path /root/syzkaller-testdir4109698986/syzkaller.nCOZtC/31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 63.052832][ T379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.078605][ T1013] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz-executor.0: path /root/syzkaller-testdir4109698986/syzkaller.nCOZtC/31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 63.088252][ T379] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 63.113143][ T1013] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 18: comm syz-executor.0: lblock 23 mapped to illegal pblock 18 (length 1) [ 63.121832][ T379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.136952][ T1013] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 19: comm syz-executor.0: path /root/syzkaller-testdir4109698986/syzkaller.nCOZtC/31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 63.155223][ T379] usb 5-1: config 0 descriptor?? [ 63.169444][ T364] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 63.180721][ T1013] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 20: comm syz-executor.0: path /root/syzkaller-testdir4109698986/syzkaller.nCOZtC/31/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3925999616, rec_len=2, size=2048 fake=0 [ 63.423913][ T23] audit: type=1400 audit(1718890198.630:222): avc: denied { write } for pid=1000 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.461719][ T23] audit: type=1400 audit(1718890198.650:223): avc: denied { read } for pid=1000 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.861546][ T837] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 64.042216][ T364] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 64.089608][ T1025] F2FS-fs (loop0): invalid crc value [ 64.108040][ T364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.141750][ T573] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 64.217630][ T1025] F2FS-fs (loop0): Found nat_bits in checkpoint [ 64.243155][ T364] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 64.298717][ T364] uvcvideo: No valid video chain found. [ 64.512236][ T573] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 64.546764][ T573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.573507][ T573] usb 2-1: config 0 descriptor?? [ 64.580413][ T24] usb 3-1: USB disconnect, device number 2 [ 64.612756][ T573] ums-usbat 2-1:0.0: USB Mass Storage device detected [ 64.619873][ T1025] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 64.624353][ T573] ums-usbat 2-1:0.0: Quirks match for vid 0781 pid 0005: 1 [ 64.627953][ T1025] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 64.634102][ T573] ums-usbat 2-1:0.0: This device (0781,0005,0005 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 5.4.274-syzkaller-00002-g6f97bd951d82) [ 64.634102][ T573] Please send a copy of this message to and [ 64.699231][ T375] attempt to access beyond end of device [ 64.699231][ T375] loop0: rw=2049, want=45112, limit=40427 [ 64.828805][ T24] usb 2-1: USB disconnect, device number 4 [ 64.871938][ T837] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 64.879886][ T837] usb 4-1: config 0 has no interface number 0 [ 64.886947][ T837] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.897947][ T837] usb 4-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.907656][ T837] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 64.916610][ T837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.926572][ T837] usb 4-1: config 0 descriptor?? [ 65.096976][ T1048] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 65.391654][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 65.406614][ T1057] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.423003][ T837] hid-generic 0003:05AC:0269.0004: unbalanced delimiter at end of report description [ 65.434912][ T837] hid-generic: probe of 0003:05AC:0269.0004 failed with error -22 [ 65.463106][ T23] audit: type=1400 audit(1718890200.670:224): avc: denied { write } for pid=1058 comm="syz-executor.1" name="ppp" dev="devtmpfs" ino=837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.481639][ T398] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 65.525537][ T23] audit: type=1400 audit(1718890200.730:225): avc: denied { lock } for pid=1058 comm="syz-executor.1" path="socket:[15392]" dev="sockfs" ino=15392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 65.645683][ T573] usb 4-1: USB disconnect, device number 5 [ 65.721744][ T379] usbhid 5-1:0.0: can't add hid device: -71 [ 65.728591][ T379] usbhid: probe of 5-1:0.0 failed with error -71 [ 65.737666][ T379] usb 5-1: USB disconnect, device number 2 [ 65.783678][ T23] audit: type=1400 audit(1718890200.990:226): avc: denied { bind } for pid=1070 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.804760][ T398] usb 1-1: Using ep0 maxpacket: 8 [ 65.805278][ T23] audit: type=1400 audit(1718890201.000:227): avc: denied { write } for pid=1070 comm="syz-executor.1" path="socket:[16477]" dev="sockfs" ino=16477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.881842][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.896510][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.919544][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 65.929026][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.946785][ T24] usb 3-1: config 0 descriptor?? [ 65.952324][ T398] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 65.969033][ T398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.980192][ T398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.989957][ T398] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 66.005719][ T398] usb 1-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 66.015347][ T398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.025354][ T398] usb 1-1: config 0 descriptor?? [ 66.161642][ T379] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 66.221092][ T23] audit: type=1400 audit(1718890201.420:228): avc: denied { getopt } for pid=1050 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.241760][ T573] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 66.286339][ T23] audit: type=1400 audit(1718890201.490:229): avc: denied { unmount } for pid=378 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 66.401564][ T379] usb 5-1: Using ep0 maxpacket: 8 [ 66.465384][ T24] hid-generic 0003:046D:C222.0005: unknown main item tag 0x0 [ 66.476177][ T24] hid-generic 0003:046D:C222.0005: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 66.513524][ T398] hid-generic 0003:05AC:029F.0006: hidraw1: USB HID v0.00 Device [HID 05ac:029f] on usb-dummy_hcd.0-1/input0 [ 66.531924][ T573] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 66.679984][ T108] usb 3-1: USB disconnect, device number 3 [ 66.742715][ T398] usb 1-1: USB disconnect, device number 5 [ 66.771752][ T379] usb 5-1: New USB device found, idVendor=04e6, idProduct=0101, bcdDevice= 2.00 [ 66.780727][ T379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.789672][ T379] usb 5-1: Product: syz [ 66.796307][ T379] usb 5-1: Manufacturer: syz [ 66.801010][ T379] usb 5-1: SerialNumber: syz [ 66.809076][ T1086] F2FS-fs (loop3): invalid crc value [ 66.817810][ T379] usb 5-1: config 0 descriptor?? [ 66.828943][ T1086] F2FS-fs (loop3): Found nat_bits in checkpoint [ 66.862909][ T379] usb-storage 5-1:0.0: USB Mass Storage device detected [ 66.919433][ T1086] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 66.954614][ T1086] attempt to access beyond end of device [ 66.954614][ T1086] loop3: rw=2049, want=78088, limit=40427 [ 66.966734][ T1086] attempt to access beyond end of device [ 66.966734][ T1086] loop3: rw=2049, want=78072, limit=40427 [ 66.992029][ T378] attempt to access beyond end of device [ 66.992029][ T378] loop3: rw=2049, want=45104, limit=40427 [ 67.059732][ T378] attempt to access beyond end of device [ 67.059732][ T378] loop3: rw=2051, want=45064, limit=40427 [ 67.071295][ T378] attempt to access beyond end of device [ 67.071295][ T378] loop3: rw=2051, want=131072, limit=40427 [ 67.075131][ T398] usb 5-1: USB disconnect, device number 3 [ 67.083432][ T378] attempt to access beyond end of device [ 67.083432][ T378] loop3: rw=2051, want=77824, limit=40427 [ 67.100156][ T378] F2FS-fs (loop3): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 67.100198][ T378] F2FS-fs (loop3): Issue discard(9761, 9761, 6623) failed, ret: -5 [ 67.108301][ T378] F2FS-fs (loop3): Issue discard(5638, 5638, 4090) failed, ret: -5 [ 67.181750][ T573] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 67.198664][ T573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.234636][ T23] audit: type=1400 audit(1718890202.440:230): avc: denied { write } for pid=1095 comm="syz-executor.2" name="event0" dev="devtmpfs" ino=9265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.263174][ T573] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 67.291553][ T573] uvcvideo: No valid video chain found. [ 67.490179][ T573] usb 2-1: USB disconnect, device number 5 [ 67.925584][ T1103] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.942352][ T1103] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=4 [ 67.962216][ T1103] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 67.994097][ T1103] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 68.018632][ T1103] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz-executor.4: bg 0: block 64: padding at end of block bitmap is not set [ 68.234325][ T1103] EXT4-fs error (device loop4) in ext4_free_blocks:5019: Corrupt filesystem [ 68.382208][ T1103] EXT4-fs (loop4): 1 orphan inode deleted [ 68.435879][ T1103] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 68.467421][ T23] audit: type=1400 audit(1718890203.670:231): avc: denied { mounton } for pid=1102 comm="syz-executor.4" path="/root/syzkaller-testdir342415577/syzkaller.4x8IbU/27/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.952856][ T23] audit: type=1400 audit(1718890204.160:232): avc: denied { unmount } for pid=378 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 69.025742][ T23] audit: type=1400 audit(1718890204.230:233): avc: denied { ioctl } for pid=1114 comm="syz-executor.1" path="socket:[15597]" dev="sockfs" ino=15597 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.071913][ T1115] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 69.267717][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.321035][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.353747][ T1116] device bridge_slave_0 entered promiscuous mode [ 69.405664][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.415633][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.435219][ T1116] device bridge_slave_1 entered promiscuous mode [ 69.472369][ T1142] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 69.511821][ T1142] EXT4-fs (loop1): Test dummy encryption mode enabled [ 69.554524][ T1142] EXT4-fs (loop1): 1 orphan inode deleted [ 69.560257][ T1142] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv1,dioread_nolock,test_dummy_encryption,delalloc,usrquota, [ 69.613143][ T1142] ext4 filesystem being mounted at /root/syzkaller-testdir2897851190/syzkaller.HWpxd0/43/file1 supports timestamps until 2038 (0x7fffffff) [ 69.629830][ T1148] EXT4-fs (loop3): orphan cleanup on readonly fs [ 69.642082][ T1148] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=4 [ 69.671692][ T1148] EXT4-fs warning (device loop3): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 69.703003][ T1148] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 69.718194][ T1148] EXT4-fs error (device loop3): ext4_validate_block_bitmap:418: comm syz-executor.3: bg 0: block 64: padding at end of block bitmap is not set [ 69.753010][ T1148] EXT4-fs error (device loop3) in ext4_free_blocks:5019: Corrupt filesystem [ 69.764364][ T23] audit: type=1400 audit(1718890204.970:234): avc: denied { rmdir } for pid=376 comm="syz-executor.1" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.772091][ T1148] EXT4-fs (loop3): 1 orphan inode deleted [ 69.808717][ T376] EXT4-fs error (device loop1): ext4_lookup:1818: inode #2: comm syz-executor.1: deleted inode referenced: 16 [ 69.820655][ T1148] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 69.841577][ T23] audit: type=1400 audit(1718890205.010:235): avc: denied { unlink } for pid=376 comm="syz-executor.1" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.852136][ T376] EXT4-fs (loop1): Remounting filesystem read-only [ 69.883903][ T376] EXT4-fs error (device loop1): ext4_lookup:1818: inode #2: comm syz-executor.1: deleted inode referenced: 16 [ 69.912146][ T102] device bridge_slave_1 left promiscuous mode [ 69.922135][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.950411][ T102] device bridge_slave_0 left promiscuous mode [ 69.956437][ T23] audit: type=1400 audit(1718890205.010:236): avc: denied { unlink } for pid=376 comm="syz-executor.1" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 69.989583][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.204069][ T376] bridge0: port 3(syz_tun) entered disabled state [ 70.219373][ T376] device syz_tun left promiscuous mode [ 70.228550][ T376] bridge0: port 3(syz_tun) entered disabled state [ 70.291617][ T1139] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 70.299528][ T1139] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 70.331024][ T1139] F2FS-fs (loop4): Found nat_bits in checkpoint [ 70.376997][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.386156][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.403087][ T837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.445542][ T837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.479126][ T837] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.486198][ T837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.676446][ T837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.686190][ T837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.762348][ T1139] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 70.769659][ T1139] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.826303][ T540] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 70.826318][ T540] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 70.834629][ T540] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 70.842787][ T540] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 70.850340][ T540] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 70.858255][ T540] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 70.873629][ T540] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 70.993632][ T837] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.008307][ T837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.016205][ T837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.059899][ T837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.077709][ T837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.092783][ T837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.105837][ T837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.135806][ T1178] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 71.148918][ T1178] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 71.157954][ T1178] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 71.169778][ T1178] EXT4-fs (loop3): 1 truncate cleaned up [ 71.177521][ T1178] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1, [ 71.216743][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.226638][ T23] audit: type=1400 audit(1718890206.430:237): avc: denied { create } for pid=1177 comm="syz-executor.3" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 71.232028][ T1178] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #2: block 4: comm syz-executor.3: lblock 0 mapped to illegal pblock 4 (length 1) [ 71.253397][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.272176][ T1178] EXT4-fs (loop3): Remounting filesystem read-only [ 71.279014][ T1178] EXT4-fs error (device loop3) in ext4_evict_inode:276: Readonly filesystem [ 71.343714][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.381337][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.452453][ T13] cfg80211: failed to load regulatory.db [ 71.471214][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.494269][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.542880][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.551485][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.572355][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.582844][ T1187] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 71.585062][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.618070][ T1187] EXT4-fs error (device loop2): ext4_orphan_get:1236: inode #15: comm syz-executor.2: iget: bad i_size value: -67835469387268086 [ 71.633553][ T1187] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 71.672113][ T1187] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 71.681052][ T1187] ext2 filesystem being mounted at /root/syzkaller-testdir3843228236/syzkaller.qkX4ug/53/file0 supports timestamps until 2038 (0x7fffffff) [ 71.725851][ T1193] FAT-fs (loop3): Directory bread(block 64) failed [ 71.734930][ T1193] FAT-fs (loop3): Directory bread(block 65) failed [ 71.741348][ T1193] FAT-fs (loop3): Directory bread(block 66) failed [ 71.748652][ T1193] FAT-fs (loop3): Directory bread(block 67) failed [ 71.755332][ T1193] FAT-fs (loop3): Directory bread(block 68) failed [ 71.762069][ T1193] FAT-fs (loop3): Directory bread(block 69) failed [ 71.768490][ T1193] FAT-fs (loop3): Directory bread(block 70) failed [ 71.775241][ T1193] FAT-fs (loop3): Directory bread(block 71) failed [ 71.784010][ T1193] FAT-fs (loop3): Directory bread(block 72) failed [ 71.790761][ T1193] FAT-fs (loop3): Directory bread(block 73) failed [ 71.830782][ T23] audit: type=1400 audit(1718890206.990:238): avc: denied { remove_name } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=900 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.853776][ T23] audit: type=1400 audit(1718890206.990:239): avc: denied { rename } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=900 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.887391][ T1193] attempt to access beyond end of device [ 71.887391][ T1193] loop3: rw=0, want=1196, limit=256 [ 71.947318][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.954848][ T1173] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.963704][ T1173] device bridge_slave_0 entered promiscuous mode [ 72.200034][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.225793][ T1173] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.436167][ T1173] device bridge_slave_1 entered promiscuous mode [ 72.711787][ T379] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 72.711828][ T108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.943751][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.955615][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.057077][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.066460][ T364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.076025][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.083289][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.092937][ T108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.165757][ T1214] fuse: Unknown parameter '0xffffffffffffffff' [ 73.187454][ T379] usb 1-1: Using ep0 maxpacket: 32 [ 73.322190][ T379] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.353533][ T379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.419089][ T379] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 73.492865][ T379] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 73.530426][ T379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.557568][ T379] usb 1-1: config 0 descriptor?? [ 73.661618][ T108] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 73.670505][ T108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.683246][ T108] usb 5-1: config 0 descriptor?? [ 73.862542][ T23] kauditd_printk_skb: 2 callbacks suppressed [ 73.862572][ T23] audit: type=1400 audit(1718890209.070:242): avc: denied { create } for pid=1217 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.890101][ T23] audit: type=1400 audit(1718890209.080:243): avc: denied { getopt } for pid=1217 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.894680][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.923701][ T1197] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 73.968462][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.979601][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.993564][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.003220][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.013189][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.023282][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.032195][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.040776][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.047763][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.071763][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.090636][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.094546][ T1204] serio: Serial port pts0 [ 74.109104][ T102] device bridge_slave_1 left promiscuous mode [ 74.118968][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.135044][ T102] device bridge_slave_0 left promiscuous mode [ 74.151364][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.160832][ T1223] EXT4-fs (loop2): Test dummy encryption mode enabled [ 74.193934][ T108] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 74.210937][ T1223] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,auto_da_alloc=0x0000000000000006,nombcache,bsddf,test_dummy_encryption,,errors=continue [ 74.233212][ T108] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0007/input/input9 [ 74.233459][ T379] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 74.273993][ T379] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 74.280746][ T379] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 74.310770][ T379] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 74.331721][ T379] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 74.338859][ T1223] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 74.354048][ T379] ntrig 0003:1B96:000A.0008: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 74.392035][ T1197] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 74.400444][ T108] keytouch 0003:0926:3333.0007: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 74.422317][ T1197] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 74.563862][ T1236] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 74.707329][ T1235] EXT4-fs (loop1): 1 orphan inode deleted [ 74.714710][ T1235] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 74.726557][ T23] audit: type=1400 audit(1718890209.930:244): avc: denied { create } for pid=1222 comm="syz-executor.2" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 74.727298][ T1235] ext4 filesystem being mounted at /root/syzkaller-testdir6660054/syzkaller.qyJW61/1/file1 supports timestamps until 2038 (0x7fffffff) [ 74.765013][ T23] audit: type=1400 audit(1718890209.930:245): avc: denied { mount } for pid=1234 comm="syz-executor.1" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.805850][ T1237] fscrypt (loop2, inode 16): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 74.836475][ T23] audit: type=1400 audit(1718890210.030:246): avc: denied { unmount } for pid=1173 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.091866][ T1252] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 75.091866][ T1252] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 75.091866][ T1252] [ 75.132485][ T1252] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.176389][ T1252] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 75.184531][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.193526][ T1252] Quota error (device loop1): write_blk: dquota write failed [ 75.206581][ T1252] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 75.212218][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.217129][ T1252] Quota error (device loop1): write_blk: dquota write failed [ 75.230459][ T1252] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 75.233005][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.242332][ T1252] EXT4-fs (loop1): 1 truncate cleaned up [ 75.253923][ T1252] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noblock_validity,max_dir_size_kb=0x000000000181fffc,barrier=0x0000000000000007,noacl,discard,nobarrier,dioread_nolock,resgid=0x000000000000ee002,errors=continue [ 75.262994][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.304562][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.318470][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.341602][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.348863][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.356145][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.363450][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.363511][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.363558][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.363601][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.363654][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.363697][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.363741][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.363785][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.363829][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.363881][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.363925][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.443741][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.443786][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.458334][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.458379][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.458423][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.458470][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.458531][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.458593][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.458647][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.458693][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.458738][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.458783][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.458828][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.458874][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.458919][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.458984][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.459039][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.459101][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.459163][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.459225][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.459287][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.459383][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.459428][ T837] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 75.462049][ T837] hid-generic 0000:0000:0000.0009: hidraw2: HID v0.00 Device [syz0] on syz0 [ 75.632576][ T379] usb 1-1: USB disconnect, device number 6 [ 75.655609][ T24] usb 5-1: USB disconnect, device number 4 [ 75.771778][ T1262] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.782076][ T1262] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=4 [ 75.794532][ T1262] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 75.815949][ T1269] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 75.831612][ T1262] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 75.846778][ T1269] EXT4-fs error (device loop3): ext4_orphan_get:1236: inode #15: comm syz-executor.3: iget: bad i_size value: -67835469387268086 [ 75.865367][ T1269] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 75.878001][ T1262] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz-executor.0: bg 0: block 64: padding at end of block bitmap is not set [ 75.893207][ T1269] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 75.908921][ T1269] ext2 filesystem being mounted at /root/syzkaller-testdir3739473672/syzkaller.Sgt2oe/60/file0 supports timestamps until 2038 (0x7fffffff) [ 76.034160][ T1262] EXT4-fs error (device loop0) in ext4_free_blocks:5019: Corrupt filesystem [ 76.138513][ T1262] EXT4-fs (loop0): 1 orphan inode deleted [ 76.160594][ T1262] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 77.903114][ T1290] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 78.471857][ T379] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 78.851681][ T379] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.867040][ T379] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.885182][ T1297] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 78.887399][ T379] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 78.902947][ T1297] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 78.942147][ T1297] F2FS-fs (loop3): Found nat_bits in checkpoint [ 79.201708][ T379] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.210769][ T379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.231749][ T379] usb 1-1: Product: syz [ 79.236028][ T379] usb 1-1: Manufacturer: syz [ 79.240869][ T379] usb 1-1: SerialNumber: syz [ 79.288491][ T1297] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 79.299840][ T1297] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 79.312957][ T379] cdc_ncm 1-1:1.0: bind() failure [ 79.615517][ T379] usb 1-1: USB disconnect, device number 7 [ 79.648579][ T1326] __quota_error: 279 callbacks suppressed [ 79.648608][ T1326] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 79.685788][ T1326] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 79.698013][ T1326] EXT4-fs (loop4): 1 truncate cleaned up [ 79.721559][ T1326] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 79.730435][ T1326] ext4 filesystem being mounted at /root/syzkaller-testdir342415577/syzkaller.4x8IbU/38/file0 supports timestamps until 2038 (0x7fffffff) [ 79.773758][ T1331] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue [ 79.845350][ T23] audit: type=1400 audit(1718890215.050:526): avc: denied { mounton } for pid=1330 comm="syz-executor.1" path="/root/syzkaller-testdir6660054/syzkaller.qyJW61/8/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 79.901584][ T23] audit: type=1400 audit(1718890215.050:527): avc: denied { write } for pid=1330 comm="syz-executor.1" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 79.941580][ T23] audit: type=1400 audit(1718890215.050:528): avc: denied { add_name } for pid=1330 comm="syz-executor.1" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 79.981914][ T23] audit: type=1400 audit(1718890215.050:529): avc: denied { setattr } for pid=1330 comm="syz-executor.1" name="work" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 80.294251][ T23] audit: type=1400 audit(1718890215.500:530): avc: denied { remount } for pid=1341 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.315191][ T1342] ------------[ cut here ]------------ [ 80.320534][ T1342] WARNING: CPU: 1 PID: 1342 at mm/page_alloc.c:4875 __alloc_pages_nodemask+0x5d5/0x840 [ 80.330032][ T1342] Modules linked in: [ 80.333777][ T1342] CPU: 1 PID: 1342 Comm: syz-executor.0 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 80.343769][ T1342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 80.353711][ T1342] RIP: 0010:__alloc_pages_nodemask+0x5d5/0x840 [ 80.359641][ T1342] Code: e1 07 80 c1 03 38 c1 0f 8c 12 fd ff ff 4c 89 f7 89 74 24 38 e8 1c 27 04 00 8b 74 24 38 48 8d bc 24 a0 00 00 00 e9 f5 fc ff ff <0f> 0b 31 db e9 ef fd ff ff 43 80 7c 3d 00 00 74 0a 48 8b 7c 24 48 [ 80.379172][ T1342] RSP: 0018:ffff8881eea0fa00 EFLAGS: 00010246 [ 80.385072][ T1342] RAX: ffff8881eea0fab0 RBX: 0000000000040d40 RCX: 0000000000000000 [ 80.392882][ T1342] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffff8881eea0fac8 [ 80.400700][ T1342] RBP: ffff8881eea0fb48 R08: dffffc0000000000 R09: ffff8881eea0fab0 [ 80.408506][ T1342] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1103dd41f50 [ 80.416319][ T1342] R13: dffffc0000000000 R14: 000000000000000b R15: dffffc0000000000 [ 80.424134][ T1342] FS: 00007f274582a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 80.432896][ T1342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.439317][ T1342] CR2: 0000000020001000 CR3: 00000001d4e63000 CR4: 00000000003426a0 [ 80.447132][ T1342] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 80.454949][ T1342] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 80.462742][ T1342] Call Trace: [ 80.465979][ T1342] ? __warn+0x162/0x250 [ 80.469974][ T1342] ? report_bug+0x3a1/0x4e0 [ 80.474311][ T1342] ? __alloc_pages_nodemask+0x5d5/0x840 [ 80.479761][ T1342] ? __alloc_pages_nodemask+0x5d5/0x840 [ 80.485171][ T1342] ? do_invalid_op+0x6e/0x110 [ 80.489687][ T1342] ? invalid_op+0x1e/0x30 [ 80.493860][ T1342] ? __alloc_pages_nodemask+0x5d5/0x840 [ 80.499238][ T1342] ? parse_options+0x644/0x820 [ 80.503835][ T1342] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 80.509216][ T1342] ? incfs_mount_fs+0xa00/0xa00 [ 80.513908][ T1342] kmalloc_order_trace+0x2a/0x100 [ 80.518770][ T1342] incfs_realloc_mount_info+0x93/0x480 [ 80.524073][ T1342] ? sync_filesystem+0x1b7/0x200 [ 80.528848][ T1342] incfs_remount_fs+0x164/0x240 [ 80.533516][ T1342] ? evict_inode+0x180/0x180 [ 80.537953][ T1342] reconfigure_super+0x44b/0x890 [ 80.542754][ T1342] do_remount+0x313/0x3a0 [ 80.546890][ T1342] do_mount+0x562/0xe10 [ 80.550892][ T1342] ? copy_mount_string+0x30/0x30 [ 80.555675][ T1342] ? copy_mount_options+0x1c6/0x300 [ 80.560779][ T1342] ? copy_mount_options+0x29a/0x300 [ 80.565819][ T1342] ksys_mount+0xc2/0xf0 [ 80.569803][ T1342] __x64_sys_mount+0xb1/0xc0 [ 80.574328][ T1342] do_syscall_64+0xca/0x1c0 [ 80.578666][ T1342] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 80.584380][ T1342] RIP: 0033:0x7f27464aff29 [ 80.588637][ T1342] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 80.608069][ T1342] RSP: 002b:00007f274582a0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 80.616317][ T1342] RAX: ffffffffffffffda RBX: 00007f27465e6f80 RCX: 00007f27464aff29 [ 80.624124][ T1342] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000000 [ 80.631940][ T1342] RBP: 00007f274651f074 R08: 0000000020000180 R09: 0000000000000000 [ 80.639755][ T1342] R10: 0000000000880064 R11: 0000000000000246 R12: 0000000000000000 [ 80.647564][ T1342] R13: 000000000000000b R14: 00007f27465e6f80 R15: 00007ffe0d3ec458 [ 80.655387][ T1342] ---[ end trace bc10207e0c92fccc ]--- [ 80.830511][ T23] audit: type=1400 audit(1718890216.030:531): avc: denied { remove_name } for pid=1173 comm="syz-executor.1" name="memory.stat" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 80.883869][ T1173] EXT4-fs error (device loop1): ext4_empty_dir:2990: inode #11: comm syz-executor.1: invalid size [ 80.913926][ T1173] EXT4-fs warning (device loop1): ext4_rmdir:3274: inode #11: comm syz-executor.1: empty directory 'file1' has too many links (0) [ 80.937846][ T23] audit: type=1400 audit(1718890216.060:532): avc: denied { rmdir } for pid=1173 comm="syz-executor.1" name="file0" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 80.971588][ T379] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 81.211606][ T379] usb 5-1: Using ep0 maxpacket: 8 [ 81.243641][ T23] audit: type=1400 audit(1718890216.450:533): avc: denied { remount } for pid=1358 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 81.341693][ T379] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 81.367834][ T379] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 81.384642][ T379] usb 5-1: config 135 has no interface number 0 [ 81.390850][ T379] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.503867][ T1364] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #15: comm syz-executor.0: iget: bad extended attribute block 1 [ 81.522059][ T1364] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 81.559922][ T1364] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,resgid=0x000000000000ee00,auto_da_alloc=0x000000000000007f,noload,nobarrier,nodiscard,,errors=continue [ 81.577565][ T379] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 81.589391][ T1364] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 13: comm syz-executor.0: lblock 0 mapped to illegal pblock 13 (length 1) [ 81.604368][ T379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.612879][ T379] usb 5-1: Product: syz [ 81.617730][ T379] usb 5-1: Manufacturer: syz [ 81.622733][ T1364] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1048: inode #2: lblock 0: comm syz-executor.0: error -117 reading directory block [ 81.637255][ T379] usb 5-1: SerialNumber: syz [ 81.693980][ T379] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 81.747290][ T379] uvcvideo: No valid video chain found. [ 81.899355][ T837] usb 5-1: USB disconnect, device number 5 [ 82.153255][ T1370] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 82.160836][ T1370] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 82.231435][ T1370] F2FS-fs (loop1): Found nat_bits in checkpoint [ 82.391695][ T1370] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 82.398594][ T1370] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 83.294767][ T1412] syz-executor.0 (pid 1412) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 83.331908][ T1412] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 83.351205][ T1412] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 83.528263][ T1412] Alternate GPT is invalid, using primary GPT. [ 83.534938][ T1412] loop0: p1 p2 p3 [ 84.297288][ T1437] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 84.307804][ T1437] EXT4-fs error (device loop2): ext4_get_journal_inode:4880: inode #2: comm syz-executor.2: casefold flag without casefold feature [ 84.322006][ T1437] EXT4-fs error (device loop2): ext4_get_journal_inode:4880: inode #2: comm syz-executor.2: unexpected EA_INODE flag [ 84.334531][ T1437] EXT4-fs (loop2): no journal found [ 84.499668][ T1419] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 84.518678][ T1419] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 84.553098][ T1419] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.676542][ T1419] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 84.683935][ T1419] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.744921][ T23] kauditd_printk_skb: 75 callbacks suppressed [ 84.744954][ T23] audit: type=1326 audit(1718890219.900:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd5d80f29 code=0x7fc00000 [ 84.774791][ T23] audit: type=1326 audit(1718890219.920:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd5d80f29 code=0x7fc00000 [ 84.799275][ T23] audit: type=1326 audit(1718890219.930:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd5d80f29 code=0x7fc00000 [ 84.824046][ T23] audit: type=1326 audit(1718890219.940:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd5d80f29 code=0x7fc00000 [ 84.850731][ T23] audit: type=1326 audit(1718890219.950:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd5d80f29 code=0x7fc00000 [ 84.915270][ T23] audit: type=1400 audit(1718890220.110:614): avc: denied { connect } for pid=1448 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.985022][ T1460] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 85.253096][ T1460] EXT4-fs (loop2): Ignoring removed nobh option [ 85.266181][ T1460] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 85.408349][ T23] audit: type=1326 audit(1718890220.600:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bd5d80f29 code=0x7fc00000 [ 85.513344][ T1464] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 85.564389][ T1464] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #15: comm syz-executor.0: iget: bad i_size value: -67835469387268086 [ 85.588204][ T1464] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 85.617530][ T1464] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 85.711993][ T1464] ext2 filesystem being mounted at /root/syzkaller-testdir69212906/syzkaller.cs46jK/21/file0 supports timestamps until 2038 (0x7fffffff) [ 85.746694][ T1475] tmpfs: Unsupported parameter 'mpol' [ 85.767985][ T1475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=1475 comm=syz-executor.2 [ 85.819169][ T1475] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.829323][ T1475] device gretap0 entered promiscuous mode [ 85.842939][ T1475] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.852289][ T1475] 0ªX¹¦D: renamed from gretap0 [ 85.859178][ T1475] device 60ªX¹¦D left promiscuous mode [ 85.978307][ T1472] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 85.989389][ T1472] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress, in[4096, 0] out[9000] [ 85.999893][ T1472] ------------[ cut here ]------------ [ 86.005217][ T1472] WARNING: CPU: 0 PID: 1472 at fs/erofs/decompressor.c:170 z_erofs_lz4_decompress+0x910/0xc70 [ 86.015335][ T1472] Modules linked in: [ 86.019096][ T1472] CPU: 0 PID: 1472 Comm: syz-executor.1 Tainted: G W 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 86.030451][ T1472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 86.040377][ T1472] RIP: 0010:z_erofs_lz4_decompress+0x910/0xc70 [ 86.046347][ T1472] Code: b6 04 03 84 c0 0f 85 da 02 00 00 45 8b 0f 48 89 ef 48 c7 c6 b2 f9 5a 85 48 c7 c2 20 c1 f7 84 44 89 e9 45 89 f0 e8 80 ec fe ff <0f> 0b 44 89 e8 48 c7 c7 80 c1 f7 84 48 c7 c6 a0 c1 f7 84 ba 02 00 [ 86.065787][ T1472] RSP: 0018:ffff8881ea49ed18 EFLAGS: 00010246 [ 86.071688][ T1472] RAX: ae7be768760d2300 RBX: 1ffff1103d493e60 RCX: ae7be768760d2300 [ 86.079502][ T1472] RDX: ffffc90000459000 RSI: 0000000000000b39 RDI: 0000000000000b3a [ 86.087309][ T1472] RBP: ffff8881cd8f6000 R08: ffffffff814d5cd2 R09: 0000000000000003 [ 86.095133][ T1472] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881d599b000 [ 86.102934][ T1472] R13: 0000000000001000 R14: 0000000000000000 R15: ffff8881ea49f300 [ 86.110765][ T1472] FS: 00007f2bd50fb6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 86.119515][ T1472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.125940][ T1472] CR2: 0000001b2cc27000 CR3: 00000001e4883000 CR4: 00000000003406b0 [ 86.133770][ T1472] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.141558][ T1472] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.149366][ T1472] Call Trace: [ 86.152507][ T1472] ? __warn+0x162/0x250 [ 86.156509][ T1472] ? report_bug+0x3a1/0x4e0 [ 86.160840][ T1472] ? z_erofs_lz4_decompress+0x910/0xc70 [ 86.166250][ T1472] ? z_erofs_lz4_decompress+0x910/0xc70 [ 86.171603][ T1472] ? do_invalid_op+0x6e/0x110 [ 86.176112][ T1472] ? invalid_op+0x1e/0x30 [ 86.180285][ T1472] ? wake_up_klogd+0xb2/0xf0 [ 86.184722][ T1472] ? z_erofs_lz4_decompress+0x910/0xc70 [ 86.190106][ T1472] ? z_erofs_lz4_decompress+0x910/0xc70 [ 86.195487][ T1472] ? z_erofs_lz4_prepare_destpages+0x690/0x690 [ 86.201466][ T1472] z_erofs_decompress+0xba6/0xfc0 [ 86.206330][ T1472] z_erofs_vle_unzip_all+0x1147/0x1bf0 [ 86.211650][ T1472] ? z_erofs_onlinepage_endio+0x140/0x140 [ 86.217232][ T1472] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 86.222463][ T1472] ? _raw_spin_lock+0x1b0/0x1b0 [ 86.227152][ T1472] ? prepare_to_wait_event+0x3c1/0x420 [ 86.232547][ T1472] ? autoremove_wake_function+0xf0/0xf0 [ 86.237917][ T1472] ? finish_wait+0xa5/0x1a0 [ 86.242269][ T1472] z_erofs_submit_and_unzip+0x12d2/0x13d0 [ 86.247909][ T1472] ? z_erofs_attach_page+0x4d7/0x710 [ 86.253047][ T1472] ? z_erofs_do_read_page+0x2580/0x2580 [ 86.258415][ T1472] ? init_wait_entry+0xd0/0xd0 [ 86.263008][ T1472] ? z_erofs_vle_normalaccess_readpages+0xc70/0xc70 [ 86.269465][ T1472] ? check_preemption_disabled+0x9f/0x320 [ 86.274988][ T1472] z_erofs_vle_normalaccess_readpages+0x901/0xc70 [ 86.281253][ T1472] ? z_erofs_vle_normalaccess_readpage+0x630/0x630 [ 86.287591][ T1472] ? setup_fault_attr+0x3d0/0x3d0 [ 86.292508][ T1472] ? plist_add+0x3f2/0x490 [ 86.296772][ T1472] ? plist_check_list+0x1f8/0x220 [ 86.301647][ T1472] ? z_erofs_vle_normalaccess_readpage+0x630/0x630 [ 86.307983][ T1472] read_pages+0x119/0x400 [ 86.312142][ T1472] ? __do_page_cache_readahead+0x4f0/0x4f0 [ 86.317784][ T1472] ? find_get_entry+0x569/0x600 [ 86.322470][ T1472] __do_page_cache_readahead+0x448/0x4f0 [ 86.327941][ T1472] ? read_cache_pages_invalidate_pages+0x1b0/0x1b0 [ 86.334281][ T1472] generic_file_read_iter+0x673/0x21f0 [ 86.339591][ T1472] ? find_get_pages_range_tag+0xae0/0xae0 [ 86.345121][ T1472] ? fget_many+0x20/0x20 [ 86.349201][ T1472] ? iov_iter_init+0x82/0x160 [ 86.353715][ T1472] __vfs_read+0x5cd/0x730 [ 86.357890][ T1472] ? rw_verify_area+0x360/0x360 [ 86.362564][ T1472] ? __fsnotify_update_child_dentry_flags+0x290/0x290 [ 86.369174][ T1472] ? security_file_permission+0x1dc/0x2f0 [ 86.374745][ T1472] vfs_read+0x148/0x360 [ 86.378717][ T1472] ksys_read+0x199/0x2c0 [ 86.382791][ T1472] ? vfs_write+0x4e0/0x4e0 [ 86.387050][ T1472] do_syscall_64+0xca/0x1c0 [ 86.391385][ T1472] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 86.397101][ T1472] RIP: 0033:0x7f2bd5d80f29 [ 86.401354][ T1472] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 86.420797][ T1472] RSP: 002b:00007f2bd50fb0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.429048][ T1472] RAX: ffffffffffffffda RBX: 00007f2bd5eb7f80 RCX: 00007f2bd5d80f29 [ 86.436852][ T1472] RDX: 0000000000002020 RSI: 0000000020003c80 RDI: 0000000000000006 [ 86.444686][ T1472] RBP: 00007f2bd5df0074 R08: 0000000000000000 R09: 0000000000000000 [ 86.452482][ T1472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.460295][ T1472] R13: 000000000000000b R14: 00007f2bd5eb7f80 R15: 00007fffda5cc2a8 [ 86.468112][ T1472] ---[ end trace bc10207e0c92fccd ]--- [ 86.495323][ T1472] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress, in[4096, 0] out[8192] [ 86.505628][ T1472] ------------[ cut here ]------------ [ 86.510966][ T1472] WARNING: CPU: 0 PID: 1472 at fs/erofs/decompressor.c:170 z_erofs_lz4_decompress+0x910/0xc70 [ 86.520983][ T1472] Modules linked in: [ 86.524759][ T1472] CPU: 0 PID: 1472 Comm: syz-executor.1 Tainted: G W 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 86.536184][ T1472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 86.546109][ T1472] RIP: 0010:z_erofs_lz4_decompress+0x910/0xc70 [ 86.552077][ T1472] Code: b6 04 03 84 c0 0f 85 da 02 00 00 45 8b 0f 48 89 ef 48 c7 c6 b2 f9 5a 85 48 c7 c2 20 c1 f7 84 44 89 e9 45 89 f0 e8 80 ec fe ff <0f> 0b 44 89 e8 48 c7 c7 80 c1 f7 84 48 c7 c6 a0 c1 f7 84 ba 02 00 [ 86.571516][ T1472] RSP: 0018:ffff8881ea49efb8 EFLAGS: 00010246 [ 86.577426][ T1472] RAX: ae7be768760d2300 RBX: 1ffff1103d493eb4 RCX: ae7be768760d2300 [ 86.585246][ T1472] RDX: ffffc90000459000 RSI: 000000000003ffff RDI: 0000000000040000 [ 86.593053][ T1472] RBP: ffff8881cd8f6000 R08: ffffffff814d5cd2 R09: 0000000000000003 [ 86.600870][ T1472] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881d599b000 [ 86.608665][ T1472] R13: 0000000000001000 R14: 0000000000000000 R15: ffff8881ea49f5a0 [ 86.616485][ T1472] FS: 00007f2bd50fb6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 86.625330][ T1472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.631758][ T1472] CR2: 0000001b2cc27000 CR3: 00000001e4883000 CR4: 00000000003406b0 [ 86.639573][ T1472] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.647449][ T1472] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.655181][ T1472] Call Trace: [ 86.658327][ T1472] ? __warn+0x162/0x250 [ 86.662328][ T1472] ? report_bug+0x3a1/0x4e0 [ 86.666659][ T1472] ? z_erofs_lz4_decompress+0x910/0xc70 [ 86.672063][ T1472] ? z_erofs_lz4_decompress+0x910/0xc70 [ 86.677422][ T1472] ? do_invalid_op+0x6e/0x110 [ 86.681939][ T1472] ? invalid_op+0x1e/0x30 [ 86.686102][ T1472] ? wake_up_klogd+0xb2/0xf0 [ 86.690541][ T1472] ? z_erofs_lz4_decompress+0x910/0xc70 [ 86.695925][ T1472] ? z_erofs_lz4_decompress+0x910/0xc70 [ 86.701311][ T1472] ? z_erofs_lz4_prepare_destpages+0x690/0x690 [ 86.707286][ T1472] z_erofs_decompress+0xba6/0xfc0 [ 86.712155][ T1472] z_erofs_vle_unzip_all+0x1147/0x1bf0 [ 86.717441][ T1472] ? debug_smp_processor_id+0x20/0x20 [ 86.722676][ T1472] ? z_erofs_onlinepage_endio+0x140/0x140 [ 86.728254][ T1472] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 86.733500][ T1472] ? _raw_spin_lock+0x1b0/0x1b0 [ 86.738205][ T1472] z_erofs_submit_and_unzip+0x115d/0x13d0 [ 86.743746][ T1472] ? z_erofs_attach_page+0x4fa/0x710 [ 86.748889][ T1472] ? z_erofs_do_read_page+0x2580/0x2580 [ 86.754262][ T1472] ? z_erofs_vle_normalaccess_readpages+0xc70/0xc70 [ 86.760656][ T1472] ? read_pages+0x39d/0x400 [ 86.765019][ T1472] z_erofs_vle_normalaccess_readpage+0x30b/0x630 [ 86.771178][ T1472] ? z_erofs_rcu_callback+0x20/0x20 [ 86.776220][ T1472] ? pagecache_get_page+0x5a7/0x750 [ 86.781333][ T1472] generic_file_read_iter+0xcd5/0x21f0 [ 86.786645][ T1472] ? find_get_pages_range_tag+0xae0/0xae0 [ 86.792177][ T1472] ? fget_many+0x20/0x20 [ 86.796252][ T1472] ? iov_iter_init+0x82/0x160 [ 86.800763][ T1472] __vfs_read+0x5cd/0x730 [ 86.804936][ T1472] ? rw_verify_area+0x360/0x360 [ 86.809632][ T1472] ? __fsnotify_update_child_dentry_flags+0x290/0x290 [ 86.816236][ T1472] ? security_file_permission+0x1dc/0x2f0 [ 86.821785][ T1472] vfs_read+0x148/0x360 [ 86.825777][ T1472] ksys_read+0x199/0x2c0 [ 86.829849][ T1472] ? vfs_write+0x4e0/0x4e0 [ 86.834103][ T1472] do_syscall_64+0xca/0x1c0 [ 86.838443][ T1472] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 86.844253][ T1472] RIP: 0033:0x7f2bd5d80f29 [ 86.848503][ T1472] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 86.867941][ T1472] RSP: 002b:00007f2bd50fb0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 86.876291][ T1472] RAX: ffffffffffffffda RBX: 00007f2bd5eb7f80 RCX: 00007f2bd5d80f29 [ 86.884254][ T1472] RDX: 0000000000002020 RSI: 0000000020003c80 RDI: 0000000000000006 [ 86.892069][ T1472] RBP: 00007f2bd5df0074 R08: 0000000000000000 R09: 0000000000000000 [ 86.899880][ T1472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.907787][ T1472] R13: 000000000000000b R14: 00007f2bd5eb7f80 R15: 00007fffda5cc2a8 [ 86.915608][ T1472] ---[ end trace bc10207e0c92fcce ]--- [ 88.141884][ T1491] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 88.597566][ T1497] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0xd [ 88.701808][ T23] audit: type=1400 audit(1718890223.820:616): avc: denied { create } for pid=1492 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.119595][ T23] audit: type=1400 audit(1718890223.840:617): avc: denied { connect } for pid=1492 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.563929][ T23] audit: type=1326 audit(1718890224.770:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f473bcb5f29 code=0x0 [ 90.235536][ T23] kauditd_printk_skb: 1 callbacks suppressed [ 90.292437][ T23] audit: type=1400 audit(1718890225.040:620): avc: denied { sys_module } for pid=1504 comm="syz-executor.1" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 90.623710][ T23] audit: type=1326 audit(1718890225.830:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f473bcb5f29 code=0x0 [ 90.762032][ T1523] tmpfs: Unsupported parameter 'mpol' [ 90.802562][ T1523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=1523 comm=syz-executor.1 [ 90.852217][ T1523] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 90.875350][ T1523] device gretap0 entered promiscuous mode [ 91.003236][ T1529] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.037537][ T1529] 0ªX¹¦D: renamed from gretap0 [ 91.055134][ T1529] device 60ªX¹¦D left promiscuous mode [ 92.201711][ T5] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 92.305725][ T1549] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0xd [ 92.718724][ T1551] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 93.084815][ T1547] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress, in[4096, 0] out[9000] [ 93.095370][ T1547] ------------[ cut here ]------------ [ 93.100702][ T1547] WARNING: CPU: 0 PID: 1547 at fs/erofs/decompressor.c:170 z_erofs_lz4_decompress+0x910/0xc70 [ 93.110734][ T1547] Modules linked in: [ 93.114483][ T1547] CPU: 0 PID: 1547 Comm: syz-executor.3 Tainted: G W 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 93.125946][ T1547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 93.135871][ T1547] RIP: 0010:z_erofs_lz4_decompress+0x910/0xc70 [ 93.141935][ T1547] Code: b6 04 03 84 c0 0f 85 da 02 00 00 45 8b 0f 48 89 ef 48 c7 c6 b2 f9 5a 85 48 c7 c2 20 c1 f7 84 44 89 e9 45 89 f0 e8 80 ec fe ff <0f> 0b 44 89 e8 48 c7 c7 80 c1 f7 84 48 c7 c6 a0 c1 f7 84 ba 02 00 [ 93.161443][ T1547] RSP: 0000:ffff8881e9d1ed18 EFLAGS: 00010246 [ 93.167351][ T1547] RAX: 065505ca7d6c3800 RBX: 1ffff1103d3a3e60 RCX: 065505ca7d6c3800 [ 93.175161][ T1547] RDX: ffffc90002550000 RSI: 0000000000000ad4 RDI: 0000000000000ad5 [ 93.182980][ T1547] RBP: ffff8881eb43d000 R08: ffffffff814d5cd2 R09: ffffed103edca9b8 [ 93.190784][ T1547] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881d4c14000 [ 93.198603][ T1547] R13: 0000000000001000 R14: 0000000000000000 R15: ffff8881e9d1f300 [ 93.206417][ T1547] FS: 00007f473b0306c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 93.215174][ T1547] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.221614][ T1547] CR2: 00007f5d8e1cc6c6 CR3: 00000001ea538000 CR4: 00000000003406b0 [ 93.229407][ T1547] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.237216][ T1547] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.245038][ T1547] Call Trace: [ 93.248166][ T1547] ? __warn+0x162/0x250 [ 93.252159][ T1547] ? report_bug+0x3a1/0x4e0 [ 93.256498][ T1547] ? z_erofs_lz4_decompress+0x910/0xc70 [ 93.261972][ T1547] ? z_erofs_lz4_decompress+0x910/0xc70 [ 93.267344][ T1547] ? do_invalid_op+0x6e/0x110 [ 93.271889][ T1547] ? invalid_op+0x1e/0x30 [ 93.276145][ T1547] ? wake_up_klogd+0xb2/0xf0 [ 93.280580][ T1547] ? z_erofs_lz4_decompress+0x910/0xc70 [ 93.285953][ T1547] ? z_erofs_lz4_decompress+0x910/0xc70 [ 93.291337][ T1547] ? z_erofs_lz4_prepare_destpages+0x690/0x690 [ 93.297319][ T1547] z_erofs_decompress+0xba6/0xfc0 [ 93.302218][ T1547] z_erofs_vle_unzip_all+0x1147/0x1bf0 [ 93.307502][ T1547] ? z_erofs_onlinepage_endio+0x140/0x140 [ 93.313081][ T1547] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 93.318326][ T1547] ? _raw_spin_lock+0x1b0/0x1b0 [ 93.323010][ T1547] ? prepare_to_wait_event+0x3c1/0x420 [ 93.328309][ T1547] ? autoremove_wake_function+0xf0/0xf0 [ 93.333698][ T1547] ? finish_wait+0xa5/0x1a0 [ 93.338032][ T1547] z_erofs_submit_and_unzip+0x12d2/0x13d0 [ 93.343589][ T1547] ? z_erofs_attach_page+0x4d7/0x710 [ 93.348724][ T1547] ? z_erofs_do_read_page+0x2580/0x2580 [ 93.354121][ T1547] ? init_wait_entry+0xd0/0xd0 [ 93.358720][ T1547] ? z_erofs_vle_normalaccess_readpages+0xc70/0xc70 [ 93.365196][ T1547] ? check_preemption_disabled+0x9f/0x320 [ 93.370759][ T1547] z_erofs_vle_normalaccess_readpages+0x901/0xc70 [ 93.377016][ T1547] ? z_erofs_vle_normalaccess_readpage+0x630/0x630 [ 93.383436][ T1547] ? setup_fault_attr+0x3d0/0x3d0 [ 93.388278][ T1547] ? plist_add+0x3f2/0x490 [ 93.392543][ T1547] ? plist_check_list+0x1f8/0x220 [ 93.397408][ T1547] ? z_erofs_vle_normalaccess_readpage+0x630/0x630 [ 93.403759][ T1547] read_pages+0x119/0x400 [ 93.407909][ T1547] ? __do_page_cache_readahead+0x4f0/0x4f0 [ 93.413546][ T1547] ? find_get_entry+0x569/0x600 [ 93.418236][ T1547] __do_page_cache_readahead+0x448/0x4f0 [ 93.423737][ T1547] ? read_cache_pages_invalidate_pages+0x1b0/0x1b0 [ 93.430043][ T1547] generic_file_read_iter+0x673/0x21f0 [ 93.435347][ T1547] ? find_get_pages_range_tag+0xae0/0xae0 [ 93.440885][ T1547] ? fget_many+0x20/0x20 [ 93.444968][ T1547] ? iov_iter_init+0x82/0x160 [ 93.449484][ T1547] __vfs_read+0x5cd/0x730 [ 93.453647][ T1547] ? rw_verify_area+0x360/0x360 [ 93.458418][ T1547] ? __fsnotify_update_child_dentry_flags+0x290/0x290 [ 93.465121][ T1547] ? security_file_permission+0x1dc/0x2f0 [ 93.470658][ T1547] vfs_read+0x148/0x360 [ 93.474651][ T1547] ksys_read+0x199/0x2c0 [ 93.478733][ T1547] ? vfs_write+0x4e0/0x4e0 [ 93.483000][ T1547] do_syscall_64+0xca/0x1c0 [ 93.487344][ T1547] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 93.493064][ T1547] RIP: 0033:0x7f473bcb5f29 [ 93.497297][ T1547] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 93.516751][ T1547] RSP: 002b:00007f473b0300c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.524992][ T1547] RAX: ffffffffffffffda RBX: 00007f473bdecf80 RCX: 00007f473bcb5f29 [ 93.532806][ T1547] RDX: 0000000000002020 RSI: 0000000020003c80 RDI: 0000000000000006 [ 93.540607][ T1547] RBP: 00007f473bd25074 R08: 0000000000000000 R09: 0000000000000000 [ 93.548418][ T1547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.556238][ T1547] R13: 000000000000000b R14: 00007f473bdecf80 R15: 00007ffda6935348 [ 93.564067][ T1547] ---[ end trace bc10207e0c92fccf ]--- [ 93.593225][ T1547] erofs: (device loop3): z_erofs_lz4_decompress: failed to decompress, in[4096, 0] out[8192] [ 93.603507][ T1547] ------------[ cut here ]------------ [ 93.608830][ T1547] WARNING: CPU: 0 PID: 1547 at fs/erofs/decompressor.c:170 z_erofs_lz4_decompress+0x910/0xc70 [ 93.618873][ T1547] Modules linked in: [ 93.622615][ T1547] CPU: 0 PID: 1547 Comm: syz-executor.3 Tainted: G W 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 93.633974][ T1547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 93.643894][ T1547] RIP: 0010:z_erofs_lz4_decompress+0x910/0xc70 [ 93.649860][ T1547] Code: b6 04 03 84 c0 0f 85 da 02 00 00 45 8b 0f 48 89 ef 48 c7 c6 b2 f9 5a 85 48 c7 c2 20 c1 f7 84 44 89 e9 45 89 f0 e8 80 ec fe ff <0f> 0b 44 89 e8 48 c7 c7 80 c1 f7 84 48 c7 c6 a0 c1 f7 84 ba 02 00 [ 93.669479][ T1547] RSP: 0000:ffff8881e9d1efb8 EFLAGS: 00010246 [ 93.675380][ T1547] RAX: 065505ca7d6c3800 RBX: 1ffff1103d3a3eb4 RCX: 065505ca7d6c3800 [ 93.683192][ T1547] RDX: ffffc90002550000 RSI: 000000000003ffff RDI: 0000000000040000 [ 93.690999][ T1547] RBP: ffff8881eb43d000 R08: ffffffff814d5cd2 R09: 0000000000000003 [ 93.698830][ T1547] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881d4c14000 [ 93.706628][ T1547] R13: 0000000000001000 R14: 0000000000000000 R15: ffff8881e9d1f5a0 [ 93.714441][ T1547] FS: 00007f473b0306c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 93.723208][ T1547] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.729744][ T1547] CR2: 00007f5d8e1cc6c6 CR3: 00000001ea538000 CR4: 00000000003406b0 [ 93.737526][ T1547] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.745332][ T1547] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.753139][ T1547] Call Trace: [ 93.756290][ T1547] ? __warn+0x162/0x250 [ 93.760280][ T1547] ? report_bug+0x3a1/0x4e0 [ 93.764627][ T1547] ? z_erofs_lz4_decompress+0x910/0xc70 [ 93.770010][ T1547] ? z_erofs_lz4_decompress+0x910/0xc70 [ 93.775382][ T1547] ? do_invalid_op+0x6e/0x110 [ 93.779888][ T1547] ? invalid_op+0x1e/0x30 [ 93.784060][ T1547] ? wake_up_klogd+0xb2/0xf0 [ 93.788499][ T1547] ? z_erofs_lz4_decompress+0x910/0xc70 [ 93.793881][ T1547] ? z_erofs_lz4_decompress+0x910/0xc70 [ 93.799274][ T1547] ? z_erofs_lz4_prepare_destpages+0x690/0x690 [ 93.805245][ T1547] z_erofs_decompress+0xba6/0xfc0 [ 93.810118][ T1547] z_erofs_vle_unzip_all+0x1147/0x1bf0 [ 93.815401][ T1547] ? debug_smp_processor_id+0x20/0x20 [ 93.820650][ T1547] ? z_erofs_onlinepage_endio+0x140/0x140 [ 93.826321][ T1547] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 93.831550][ T1547] ? _raw_spin_lock+0x1b0/0x1b0 [ 93.836262][ T1547] z_erofs_submit_and_unzip+0x115d/0x13d0 [ 93.841798][ T1547] ? z_erofs_attach_page+0x4fa/0x710 [ 93.846927][ T1547] ? z_erofs_do_read_page+0x2580/0x2580 [ 93.852317][ T1547] ? z_erofs_vle_normalaccess_readpages+0xc70/0xc70 [ 93.858709][ T1547] ? read_pages+0x39d/0x400 [ 93.863063][ T1547] z_erofs_vle_normalaccess_readpage+0x30b/0x630 [ 93.869224][ T1547] ? z_erofs_rcu_callback+0x20/0x20 [ 93.874261][ T1547] ? pagecache_get_page+0x5a7/0x750 [ 93.879295][ T1547] generic_file_read_iter+0xcd5/0x21f0 [ 93.884599][ T1547] ? find_get_pages_range_tag+0xae0/0xae0 [ 93.890135][ T1547] ? fget_many+0x20/0x20 [ 93.894219][ T1547] ? iov_iter_init+0x82/0x160 [ 93.898743][ T1547] __vfs_read+0x5cd/0x730 [ 93.902922][ T1547] ? rw_verify_area+0x360/0x360 [ 93.907583][ T1547] ? __fsnotify_update_child_dentry_flags+0x290/0x290 [ 93.914203][ T1547] ? security_file_permission+0x1dc/0x2f0 [ 93.919749][ T1547] vfs_read+0x148/0x360 [ 93.923728][ T1547] ksys_read+0x199/0x2c0 [ 93.927802][ T1547] ? vfs_write+0x4e0/0x4e0 [ 93.932060][ T1547] do_syscall_64+0xca/0x1c0 [ 93.936399][ T1547] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 93.942116][ T1547] RIP: 0033:0x7f473bcb5f29 [ 93.946371][ T1547] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 93.965809][ T1547] RSP: 002b:00007f473b0300c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.974059][ T1547] RAX: ffffffffffffffda RBX: 00007f473bdecf80 RCX: 00007f473bcb5f29 [ 93.981864][ T1547] RDX: 0000000000002020 RSI: 0000000020003c80 RDI: 0000000000000006 [ 93.989684][ T1547] RBP: 00007f473bd25074 R08: 0000000000000000 R09: 0000000000000000 [ 93.997490][ T1547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.005306][ T1547] R13: 000000000000000b R14: 00007f473bdecf80 R15: 00007ffda6935348 [ 94.013120][ T1547] ---[ end trace bc10207e0c92fcd0 ]--- [ 94.061570][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 94.061986][ T1557] EXT4-fs (loop4): Ignoring removed orlov option [ 94.137487][ T1557] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,data_err=abort,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,orlov,bsdgroups,block_validity,user_xattr,quota,,errors=continue [ 94.181143][ T23] audit: type=1400 audit(1718890229.380:622): avc: denied { write } for pid=1568 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 94.200903][ T5] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 94.220046][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.251426][ T23] audit: type=1400 audit(1718890229.420:623): avc: denied { rename } for pid=1556 comm="syz-executor.4" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.274852][ T5] usb 2-1: config 0 descriptor?? [ 94.307031][ T23] audit: type=1400 audit(1718890229.430:624): avc: denied { rename } for pid=1556 comm="syz-executor.4" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 94.350351][ T23] audit: type=1400 audit(1718890229.510:625): avc: denied { write } for pid=1571 comm="syz-executor.0" path="socket:[18812]" dev="sockfs" ino=18812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.441576][ T364] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.801914][ T364] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.821918][ T364] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.882908][ T1599] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.912413][ T364] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.921389][ T364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 94.932718][ T364] usb 3-1: SerialNumber: syz [ 95.223819][ T364] usb 3-1: 0:2 : does not exist [ 95.243376][ T364] usb 3-1: USB disconnect, device number 4 [ 95.937468][ T1614] tipc: Started in network mode [ 95.955608][ T1614] tipc: Own node identity type_len, cluster identity 4711 [ 95.973862][ T1614] tipc: Enabling of bearer rejected, failed to enable media [ 96.112620][ T1616] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,grpjquota=,noauto_da_alloc,,errors=continue [ 96.197536][ T1625] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 96.241634][ T1608] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress, in[4096, 0] out[9000] [ 96.252596][ T1608] ------------[ cut here ]------------ [ 96.257892][ T1608] WARNING: CPU: 1 PID: 1608 at fs/erofs/decompressor.c:170 z_erofs_lz4_decompress+0x910/0xc70 [ 96.268450][ T1608] Modules linked in: [ 96.272212][ T1608] CPU: 1 PID: 1608 Comm: syz-executor.2 Tainted: G W 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 96.283939][ T1608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 96.293836][ T1608] RIP: 0010:z_erofs_lz4_decompress+0x910/0xc70 [ 96.299900][ T1608] Code: b6 04 03 84 c0 0f 85 da 02 00 00 45 8b 0f 48 89 ef 48 c7 c6 b2 f9 5a 85 48 c7 c2 20 c1 f7 84 44 89 e9 45 89 f0 e8 80 ec fe ff <0f> 0b 44 89 e8 48 c7 c7 80 c1 f7 84 48 c7 c6 a0 c1 f7 84 ba 02 00 [ 96.319349][ T1608] RSP: 0000:ffff8881e8a3ed18 EFLAGS: 00010246 [ 96.325248][ T1608] RAX: 54b8e788e33d9e00 RBX: 1ffff1103d147e60 RCX: 54b8e788e33d9e00 [ 96.333053][ T1608] RDX: ffffc90000f45000 RSI: 0000000000000b79 RDI: 0000000000000b7a [ 96.340956][ T1608] RBP: ffff8881e8453000 R08: ffffffff814d5cd2 R09: ffffed103edea9b8 [ 96.348763][ T1608] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881eaf41000 [ 96.356572][ T1608] R13: 0000000000001000 R14: 0000000000000000 R15: ffff8881e8a3f300 [ 96.364390][ T1608] FS: 00007f8abf7df6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 96.373163][ T1608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.379576][ T1608] CR2: 0000001b31532000 CR3: 00000001ed420000 CR4: 00000000003406a0 [ 96.387394][ T1608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.395206][ T1608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.403002][ T1608] Call Trace: [ 96.406150][ T1608] ? __warn+0x162/0x250 [ 96.410140][ T1608] ? report_bug+0x3a1/0x4e0 [ 96.414493][ T1608] ? z_erofs_lz4_decompress+0x910/0xc70 [ 96.419881][ T1608] ? z_erofs_lz4_decompress+0x910/0xc70 [ 96.425410][ T1608] ? do_invalid_op+0x6e/0x110 [ 96.429919][ T1608] ? invalid_op+0x1e/0x30 [ 96.434086][ T1608] ? wake_up_klogd+0xb2/0xf0 [ 96.438520][ T1608] ? z_erofs_lz4_decompress+0x910/0xc70 [ 96.443905][ T1608] ? z_erofs_lz4_decompress+0x910/0xc70 [ 96.449290][ T1608] ? z_erofs_lz4_prepare_destpages+0x690/0x690 [ 96.455376][ T1608] z_erofs_decompress+0xba6/0xfc0 [ 96.460247][ T1608] z_erofs_vle_unzip_all+0x1147/0x1bf0 [ 96.465547][ T1608] ? z_erofs_onlinepage_endio+0x140/0x140 [ 96.471128][ T1608] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 96.476374][ T1608] ? _raw_spin_lock+0x1b0/0x1b0 [ 96.481057][ T1608] ? prepare_to_wait_event+0x3c1/0x420 [ 96.486361][ T1608] ? autoremove_wake_function+0xf0/0xf0 [ 96.491743][ T1608] ? finish_wait+0xa5/0x1a0 [ 96.496086][ T1608] z_erofs_submit_and_unzip+0x12d2/0x13d0 [ 96.501636][ T1608] ? z_erofs_attach_page+0x4d7/0x710 [ 96.506774][ T1608] ? z_erofs_do_read_page+0x2580/0x2580 [ 96.512140][ T1608] ? init_wait_entry+0xd0/0xd0 [ 96.516740][ T1608] ? z_erofs_vle_normalaccess_readpages+0xc70/0xc70 [ 96.523160][ T1608] ? check_preemption_disabled+0x9f/0x320 [ 96.528725][ T1608] z_erofs_vle_normalaccess_readpages+0x901/0xc70 [ 96.534993][ T1608] ? z_erofs_vle_normalaccess_readpage+0x630/0x630 [ 96.541322][ T1608] ? setup_fault_attr+0x3d0/0x3d0 [ 96.546206][ T1608] ? plist_add+0x3f2/0x490 [ 96.550408][ T1608] ? plist_check_list+0x1f8/0x220 [ 96.555287][ T1608] ? z_erofs_vle_normalaccess_readpage+0x630/0x630 [ 96.561610][ T1608] read_pages+0x119/0x400 [ 96.565794][ T1608] ? __do_page_cache_readahead+0x4f0/0x4f0 [ 96.571514][ T1608] ? find_get_entry+0x569/0x600 [ 96.576205][ T1608] __do_page_cache_readahead+0x448/0x4f0 [ 96.581681][ T1608] ? read_cache_pages_invalidate_pages+0x1b0/0x1b0 [ 96.588013][ T1608] generic_file_read_iter+0x673/0x21f0 [ 96.593314][ T1608] ? find_get_pages_range_tag+0xae0/0xae0 [ 96.598853][ T1608] ? fget_many+0x20/0x20 [ 96.602931][ T1608] ? iov_iter_init+0x82/0x160 [ 96.607443][ T1608] __vfs_read+0x5cd/0x730 [ 96.611631][ T1608] ? rw_verify_area+0x360/0x360 [ 96.616292][ T1608] ? __fsnotify_update_child_dentry_flags+0x290/0x290 [ 96.622910][ T1608] ? security_file_permission+0x1dc/0x2f0 [ 96.628447][ T1608] vfs_read+0x148/0x360 [ 96.632447][ T1608] ksys_read+0x199/0x2c0 [ 96.636612][ T1608] ? vfs_write+0x4e0/0x4e0 [ 96.640867][ T1608] do_syscall_64+0xca/0x1c0 [ 96.645203][ T1608] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 96.650921][ T1608] RIP: 0033:0x7f8ac0464f29 [ 96.655172][ T1608] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 96.674615][ T1608] RSP: 002b:00007f8abf7df0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.682862][ T1608] RAX: ffffffffffffffda RBX: 00007f8ac059bf80 RCX: 00007f8ac0464f29 [ 96.690723][ T1608] RDX: 0000000000002020 RSI: 0000000020003c80 RDI: 0000000000000006 [ 96.698490][ T1608] RBP: 00007f8ac04d4074 R08: 0000000000000000 R09: 0000000000000000 [ 96.706293][ T1608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.714111][ T1608] R13: 000000000000000b R14: 00007f8ac059bf80 R15: 00007fffc7c4e838 [ 96.721932][ T1608] ---[ end trace bc10207e0c92fcd1 ]--- [ 96.747420][ T1608] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress, in[4096, 0] out[8192] [ 96.757759][ T1608] ------------[ cut here ]------------ [ 96.763092][ T1608] WARNING: CPU: 1 PID: 1608 at fs/erofs/decompressor.c:170 z_erofs_lz4_decompress+0x910/0xc70 [ 96.764256][ T1606] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 96.773124][ T1608] Modules linked in: [ 96.773162][ T1608] CPU: 1 PID: 1608 Comm: syz-executor.2 Tainted: G W 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 96.773178][ T1608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 96.773220][ T1608] RIP: 0010:z_erofs_lz4_decompress+0x910/0xc70 [ 96.773264][ T1608] Code: b6 04 03 84 c0 0f 85 da 02 00 00 45 8b 0f 48 89 ef 48 c7 c6 b2 f9 5a 85 48 c7 c2 20 c1 f7 84 44 89 e9 45 89 f0 e8 80 ec fe ff <0f> 0b 44 89 e8 48 c7 c7 80 c1 f7 84 48 c7 c6 a0 c1 f7 84 ba 02 00 [ 96.815847][ T1606] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 96.831997][ T1608] RSP: 0000:ffff8881e8a3efb8 EFLAGS: 00010246 [ 96.832026][ T1608] RAX: 54b8e788e33d9e00 RBX: 1ffff1103d147eb4 RCX: 54b8e788e33d9e00 [ 96.832046][ T1608] RDX: ffffc90000f45000 RSI: 000000000003ffff RDI: 0000000000040000 [ 96.832067][ T1608] RBP: ffff8881e8453000 R08: ffffffff814d5cd2 R09: 0000000000000003 [ 96.832090][ T1608] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881eaf41000 [ 96.832109][ T1608] R13: 0000000000001000 R14: 0000000000000000 R15: ffff8881e8a3f5a0 [ 96.832135][ T1608] FS: 00007f8abf7df6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 96.832155][ T1608] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.832174][ T1608] CR2: 0000001b31532000 CR3: 00000001ed420000 CR4: 00000000003406a0 [ 96.832194][ T1608] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.832211][ T1608] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.832218][ T1608] Call Trace: [ 96.832250][ T1608] ? __warn+0x162/0x250 [ 96.832284][ T1608] ? report_bug+0x3a1/0x4e0 [ 96.832317][ T1608] ? z_erofs_lz4_decompress+0x910/0xc70 [ 96.832367][ T1608] ? z_erofs_lz4_decompress+0x910/0xc70 [ 96.832394][ T1608] ? do_invalid_op+0x6e/0x110 [ 96.832427][ T1608] ? invalid_op+0x1e/0x30 [ 96.832486][ T1608] ? wake_up_klogd+0xb2/0xf0 [ 96.962441][ T1608] ? z_erofs_lz4_decompress+0x910/0xc70 [ 96.967807][ T1608] ? z_erofs_lz4_decompress+0x910/0xc70 [ 96.973202][ T1608] ? z_erofs_lz4_prepare_destpages+0x690/0x690 [ 96.979300][ T1608] z_erofs_decompress+0xba6/0xfc0 [ 96.984172][ T1608] z_erofs_vle_unzip_all+0x1147/0x1bf0 [ 96.989551][ T1608] ? debug_smp_processor_id+0x20/0x20 [ 96.994775][ T1608] ? z_erofs_onlinepage_endio+0x140/0x140 [ 97.000364][ T1608] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 97.005585][ T1608] ? _raw_spin_lock+0x1b0/0x1b0 [ 97.010308][ T1608] z_erofs_submit_and_unzip+0x115d/0x13d0 [ 97.015831][ T1608] ? z_erofs_attach_page+0x4fa/0x710 [ 97.021086][ T1608] ? z_erofs_do_read_page+0x2580/0x2580 [ 97.026449][ T1608] ? z_erofs_vle_normalaccess_readpages+0xc70/0xc70 [ 97.032844][ T1608] ? read_pages+0x39d/0x400 [ 97.037283][ T1608] z_erofs_vle_normalaccess_readpage+0x30b/0x630 [ 97.043443][ T1608] ? z_erofs_rcu_callback+0x20/0x20 [ 97.048496][ T1608] ? pagecache_get_page+0x5a7/0x750 [ 97.053506][ T1608] generic_file_read_iter+0xcd5/0x21f0 [ 97.058820][ T1608] ? find_get_pages_range_tag+0xae0/0xae0 [ 97.064441][ T1608] ? fget_many+0x20/0x20 [ 97.068518][ T1608] ? iov_iter_init+0x82/0x160 [ 97.073030][ T1608] __vfs_read+0x5cd/0x730 [ 97.077205][ T1608] ? rw_verify_area+0x360/0x360 [ 97.081991][ T1608] ? __fsnotify_update_child_dentry_flags+0x290/0x290 [ 97.088599][ T1608] ? security_file_permission+0x1dc/0x2f0 [ 97.094220][ T1608] vfs_read+0x148/0x360 [ 97.098209][ T1608] ksys_read+0x199/0x2c0 [ 97.102460][ T1608] ? vfs_write+0x4e0/0x4e0 [ 97.106715][ T1608] do_syscall_64+0xca/0x1c0 [ 97.111067][ T1608] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 97.116777][ T1608] RIP: 0033:0x7f8ac0464f29 [ 97.121024][ T1608] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 97.140469][ T1608] RSP: 002b:00007f8abf7df0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.148798][ T1608] RAX: ffffffffffffffda RBX: 00007f8ac059bf80 RCX: 00007f8ac0464f29 [ 97.156605][ T1608] RDX: 0000000000002020 RSI: 0000000020003c80 RDI: 0000000000000006 [ 97.164508][ T1608] RBP: 00007f8ac04d4074 R08: 0000000000000000 R09: 0000000000000000 [ 97.172313][ T1608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.180136][ T1608] R13: 000000000000000b R14: 00007f8ac059bf80 R15: 00007fffc7c4e838 [ 97.188930][ T1608] ---[ end trace bc10207e0c92fcd2 ]--- [ 97.231802][ T5] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 97.283303][ T5] asix: probe of 2-1:0.0 failed with error -71 [ 97.303220][ T1642] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.320867][ T5] usb 2-1: USB disconnect, device number 6 [ 97.329429][ T1606] F2FS-fs (loop3): Found nat_bits in checkpoint [ 97.803053][ T1651] input: syz0 as /devices/virtual/input/input10 [ 97.887803][ T23] audit: type=1400 audit(1718890233.090:626): avc: denied { read } for pid=147 comm="acpid" name="event3" dev="devtmpfs" ino=18091 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 97.975009][ T1606] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 98.008313][ T1651] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.022061][ T1651] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 98.055098][ T1606] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 98.096262][ T23] audit: type=1400 audit(1718890233.120:627): avc: denied { open } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=18091 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.288751][ T23] audit: type=1400 audit(1718890233.120:628): avc: denied { ioctl } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=18091 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 98.360087][ T378] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 98.360102][ T378] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 98.368186][ T378] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 98.375692][ T378] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 98.383565][ T378] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 98.391035][ T378] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 98.398441][ T378] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 98.496873][ T23] audit: type=1326 audit(1718890233.700:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ac0464f29 code=0x0 [ 98.660409][ T23] audit: type=1326 audit(1718890233.860:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ac0464f29 code=0x0 [ 98.803413][ T1657] request_module fs-bfs succeeded, but still no fs? [ 99.107408][ T23] audit: type=1326 audit(1718890234.310:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1672 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8d563f29 code=0x7ffc0000 [ 99.141583][ T108] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.159570][ T23] audit: type=1326 audit(1718890234.340:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1672 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8d563f29 code=0x7ffc0000 [ 99.211752][ T23] audit: type=1326 audit(1718890234.340:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1672 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d8d563f29 code=0x7ffc0000 [ 99.235650][ T23] audit: type=1326 audit(1718890234.340:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1672 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8d563f29 code=0x7ffc0000 [ 99.263564][ T23] audit: type=1326 audit(1718890234.340:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1672 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8d563f29 code=0x7ffc0000 [ 99.391555][ T108] usb 3-1: Using ep0 maxpacket: 16 [ 100.974979][ T108] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.985313][ T108] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.994068][ T108] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 101.305465][ T5] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 101.385046][ T1687] kvm: pic: non byte read [ 101.399794][ T1687] kvm: pic: level sensitive irq not supported [ 101.399891][ T1687] kvm: pic: non byte read [ 101.420583][ T1687] kvm: pic: level sensitive irq not supported [ 101.420653][ T1687] kvm: pic: non byte read [ 101.571822][ T108] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.585107][ T108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.601556][ T108] usb 3-1: Product: syz [ 101.621577][ T108] usb 3-1: Manufacturer: syz [ 101.626045][ T108] usb 3-1: SerialNumber: syz [ 101.691616][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 101.811745][ T5] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 101.820615][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.830420][ T5] usb 4-1: config 0 descriptor?? [ 101.837297][ T1685] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 101.844880][ T1685] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 101.859901][ T1685] F2FS-fs (loop0): Found nat_bits in checkpoint [ 101.899876][ T1668] binder: 1667:1668 ioctl c0306201 20000580 returned -14 [ 101.958466][ T1685] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 101.965828][ T1685] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.991814][ T108] usb 3-1: 0:2 : does not exist [ 102.007680][ T108] usb 3-1: USB disconnect, device number 5 [ 102.572845][ T1719] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 102.599121][ T1719] overlayfs: failed to resolve './file0': -2 [ 102.791615][ T108] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 102.977347][ T23] kauditd_printk_skb: 402 callbacks suppressed [ 102.977378][ T23] audit: type=1400 audit(1718890238.180:1038): avc: denied { mount } for pid=1726 comm="syz-executor.4" name="/" dev="ramfs" ino=19036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 103.193270][ T1730] tmpfs: Unknown parameter 'ÙoÕ^™‹l' [ 103.224435][ T108] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 103.235954][ T108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.246928][ T108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.256748][ T108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 103.341754][ T108] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 103.361467][ T108] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 103.381683][ T108] usb 3-1: Manufacturer: syz [ 103.392557][ T108] usb 3-1: config 0 descriptor?? [ 103.833571][ T1738] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 103.842690][ T1738] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.852884][ T1738] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 103.864719][ T108] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 103.875894][ T108] appleir 0003:05AC:8243.000A: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 104.076022][ T398] usb 3-1: USB disconnect, device number 6 [ 104.115996][ T364] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 104.392481][ T5] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 104.402897][ T5] asix: probe of 4-1:0.0 failed with error -71 [ 104.414661][ T5] usb 4-1: USB disconnect, device number 6 [ 104.502166][ T364] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.534180][ T364] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.642169][ T364] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 104.671582][ T364] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.685320][ T364] usb 1-1: SerialNumber: syz [ 104.719941][ T1752] IPv6: sit2: Disabled Multicast RS [ 104.951729][ T379] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 104.998178][ T364] usb 1-1: skipping empty audio interface (v1) [ 105.015298][ T364] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 105.049593][ T364] usb 1-1: USB disconnect, device number 8 [ 105.152529][ T23] audit: type=1400 audit(1718890240.360:1039): avc: denied { mount } for pid=1757 comm="syz-executor.1" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 105.221548][ T379] usb 3-1: Using ep0 maxpacket: 16 [ 105.273543][ T1758] Alternate GPT is invalid, using primary GPT. [ 105.289859][ T1758] loop1: p1 p2 p3 [ 105.342058][ T23] audit: type=1400 audit(1718890240.550:1040): avc: denied { unmount } for pid=1173 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 105.363728][ T379] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.381581][ T379] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.400597][ T379] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 105.591745][ T379] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.619181][ T379] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.631581][ T379] usb 3-1: Product: syz [ 105.635674][ T379] usb 3-1: Manufacturer: syz [ 105.650346][ T379] usb 3-1: SerialNumber: syz [ 105.656788][ T1772] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 105.939188][ T1748] binder: 1747:1748 ioctl c0306201 20000580 returned -14 [ 106.004412][ T364] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 106.091885][ T379] usb 3-1: 0:2 : does not exist [ 106.113471][ T379] usb 3-1: USB disconnect, device number 7 [ 106.391881][ T364] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 106.403910][ T364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.414854][ T364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.424830][ T364] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 106.521790][ T364] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 106.531030][ T364] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 106.546184][ T364] usb 1-1: Manufacturer: syz [ 106.569213][ T364] usb 1-1: config 0 descriptor?? [ 106.959853][ T1793] IPv6: sit2: Disabled Multicast RS [ 107.681627][ T5] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 107.693377][ T364] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 107.713471][ T364] appleir 0003:05AC:8243.000B: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 107.811591][ T1759] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 107.893332][ T379] usb 1-1: USB disconnect, device number 9 [ 107.941559][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 108.071851][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.081468][ T5] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 108.090615][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.101584][ T5] usb 5-1: config 0 descriptor?? [ 108.109694][ T1804] F2FS-fs (loop3): Found nat_bits in checkpoint [ 108.171637][ T1759] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.191564][ T1759] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.215663][ T1804] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 108.235372][ T1804] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 108.263735][ T23] audit: type=1400 audit(1718890243.470:1041): avc: denied { create } for pid=1803 comm="syz-executor.3" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 108.281813][ T1759] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.286441][ T1804] attempt to access beyond end of device [ 108.286441][ T1804] loop3: rw=2049, want=45104, limit=40427 [ 108.301639][ T1759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.306976][ T23] audit: type=1400 audit(1718890243.510:1042): avc: denied { read } for pid=1803 comm="syz-executor.3" name="file1" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 108.341554][ T1759] usb 2-1: SerialNumber: syz [ 108.574710][ T5] logitech 0003:046D:C295.000C: item fetching failed at offset 0/3 [ 108.583601][ T5] logitech 0003:046D:C295.000C: parse failed [ 108.589539][ T5] logitech: probe of 0003:046D:C295.000C failed with error -22 [ 108.623240][ T1759] usb 2-1: skipping empty audio interface (v1) [ 108.629416][ T1759] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 108.637677][ T1759] usb 2-1: USB disconnect, device number 7 [ 108.741604][ T396] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 108.811213][ T1788] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 108.834455][ T1788] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 108.871775][ T5] usb 5-1: USB disconnect, device number 6 [ 108.991718][ T396] usb 1-1: Using ep0 maxpacket: 16 [ 109.111777][ T396] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 109.130951][ T396] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 109.141250][ T396] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 109.155702][ T396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.167972][ T396] usb 1-1: config 0 descriptor?? [ 109.173553][ T1844] IPv6: sit1: Disabled Multicast RS [ 109.196089][ T1843] EXT4-fs (loop2): Ignoring removed bh option [ 109.205755][ T1843] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 109.617467][ T23] audit: type=1400 audit(1718890244.820:1043): avc: denied { write } for pid=1851 comm="syz-executor.2" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 109.620447][ T1854] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 109.649916][ T1831] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 109.673008][ T396] hid (null): bogus close delimiter [ 109.682027][ T1854] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 109.695156][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.702685][ T1854] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 109.716092][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.740653][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.749319][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.749556][ T378] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 109.756794][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.776432][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.784182][ T378] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 109.784648][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.800657][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.805986][ T378] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload [ 109.808428][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.834361][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.854816][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.867237][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.882634][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.899506][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.907366][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.914936][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0xd [ 109.922313][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.929544][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.947141][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.954432][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.961585][ T379] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 109.978858][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 109.986288][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 110.006539][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 110.013836][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 110.031279][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 110.041389][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 110.061677][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 110.068939][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 110.086446][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 110.106741][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x7 [ 110.114060][ T396] hid-generic 0003:0158:0100.000D: unknown main item tag 0x0 [ 110.131624][ T396] hid-generic 0003:0158:0100.000D: bogus close delimiter [ 110.138610][ T396] hid-generic 0003:0158:0100.000D: item 0 4 2 10 parsing failed [ 110.167293][ T396] hid-generic: probe of 0003:0158:0100.000D failed with error -22 [ 110.180284][ T396] usb 1-1: USB disconnect, device number 10 [ 110.217645][ T23] audit: type=1400 audit(1718890245.420:1044): avc: denied { read } for pid=1869 comm="syz-executor.2" dev="nsfs" ino=4026532526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.245003][ T1861] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 110.261584][ T1861] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 110.277984][ T23] audit: type=1400 audit(1718890245.440:1045): avc: denied { open } for pid=1869 comm="syz-executor.2" path="net:[4026532526]" dev="nsfs" ino=4026532526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 110.333015][ T1861] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.361927][ T379] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 110.377651][ T379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.400192][ T379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.434045][ T379] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 110.529061][ T1861] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 110.541258][ T1861] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 110.541739][ T379] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 110.541773][ T379] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 110.541799][ T379] usb 5-1: Manufacturer: syz [ 110.543561][ T379] usb 5-1: config 0 descriptor?? [ 110.746081][ T1865] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 110.772363][ T1865] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 110.796007][ T1865] F2FS-fs (loop3): invalid crc value [ 111.071955][ T1865] F2FS-fs (loop3): Found nat_bits in checkpoint [ 111.305480][ T379] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 111.371599][ T1759] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 111.384506][ T379] appleir 0003:05AC:8243.000E: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 111.402028][ T1865] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 111.413151][ T1865] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 111.424611][ T1173] attempt to access beyond end of device [ 111.424611][ T1173] loop1: rw=2049, want=40992, limit=40427 [ 111.475103][ T1865] attempt to access beyond end of device [ 111.475103][ T1865] loop3: rw=2049, want=45152, limit=40427 [ 111.517730][ T379] usb 5-1: USB disconnect, device number 7 [ 111.527306][ T378] attempt to access beyond end of device [ 111.527306][ T378] loop3: rw=2049, want=45160, limit=40427 [ 111.631588][ T1759] usb 1-1: Using ep0 maxpacket: 8 [ 111.751755][ T1759] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.761650][ T1759] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 111.770669][ T1759] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.780653][ T1759] usb 1-1: config 0 descriptor?? [ 112.264429][ T1759] logitech 0003:046D:C295.000F: item fetching failed at offset 0/3 [ 112.291569][ T1759] logitech 0003:046D:C295.000F: parse failed [ 112.301711][ T1759] logitech: probe of 0003:046D:C295.000F failed with error -22 [ 112.313748][ T1890] EXT4-fs (loop1): Ignoring removed bh option [ 112.340151][ T1890] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 112.490650][ T1884] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 112.516175][ T1884] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 112.554621][ T1759] usb 1-1: USB disconnect, device number 11 [ 112.721566][ T18] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.961554][ T18] usb 4-1: Using ep0 maxpacket: 8 [ 113.081757][ T18] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 113.090659][ T18] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.114781][ T18] usb 4-1: config 0 descriptor?? [ 113.132635][ T1901] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.151807][ T1901] tipc: Invalid UDP bearer configuration [ 113.151855][ T1901] tipc: Enabling of bearer rejected, failed to enable media [ 113.651723][ T396] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 113.848536][ T23] audit: type=1400 audit(1718890249.050:1046): avc: denied { bind } for pid=1922 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.872004][ T1925] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 113.880169][ T1925] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.890295][ T23] audit: type=1400 audit(1718890249.070:1047): avc: denied { node_bind } for pid=1922 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 113.910875][ T1924] EXT4-fs (loop0): Ignoring removed bh option [ 113.911334][ T1925] bridge0: port 3(syz_tun) entered blocking state [ 113.923106][ T396] usb 3-1: Using ep0 maxpacket: 16 [ 113.928239][ T1924] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 113.928798][ T1925] bridge0: port 3(syz_tun) entered disabled state [ 113.944661][ T1925] device syz_tun entered promiscuous mode [ 113.950532][ T1925] bridge0: port 3(syz_tun) entered blocking state [ 113.956834][ T1925] bridge0: port 3(syz_tun) entered forwarding state [ 114.041714][ T396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 114.052669][ T396] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 114.074962][ T396] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 114.085288][ T396] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.096800][ T396] usb 3-1: config 0 descriptor?? [ 114.131216][ T1931] 0ªX¹¦D: refused to change device tx_queue_len [ 114.137851][ T1931] A link change request failed with some changes committed already. Interface 60ªX¹¦D may have been left with an inconsistent configuration, please check. [ 114.361615][ T5] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 114.393634][ T23] audit: type=1400 audit(1718890249.600:1048): avc: denied { setopt } for pid=1934 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 114.572093][ T1909] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 114.592915][ T396] hid (null): bogus close delimiter [ 114.606644][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.614087][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.621353][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.628781][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.636099][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.643397][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.650792][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.658419][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.665793][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.673099][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.680574][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.687831][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.695320][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.702614][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.709777][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.717205][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0xd [ 114.724485][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.731788][ T5] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.741791][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.749031][ T5] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.757794][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.765226][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.772525][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.779678][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.787037][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.794499][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.802149][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.809440][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.816778][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.824189][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.831452][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.838730][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x7 [ 114.846454][ T5] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 114.855417][ T396] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 114.862694][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 114.870490][ T396] hid-generic 0003:0158:0100.0010: bogus close delimiter [ 114.877347][ T5] usb 5-1: SerialNumber: syz [ 114.881796][ T396] hid-generic 0003:0158:0100.0010: item 0 4 2 10 parsing failed [ 114.891354][ T396] hid-generic: probe of 0003:0158:0100.0010 failed with error -22 [ 114.901182][ T396] usb 3-1: USB disconnect, device number 8 [ 115.042071][ T1939] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.049342][ T1939] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.057024][ T1939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.163399][ T5] usb 5-1: skipping empty audio interface (v1) [ 115.169729][ T5] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 115.178779][ T5] usb 5-1: USB disconnect, device number 8 [ 115.311828][ T1952] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 115.320852][ T1952] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.336752][ T1952] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 115.692412][ T23] audit: type=1400 audit(1718890250.900:1049): avc: denied { create } for pid=1965 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 115.751683][ T18] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 115.763361][ T1962] EXT4-fs (loop2): Ignoring removed bh option [ 115.767055][ T23] audit: type=1400 audit(1718890250.970:1050): avc: denied { write } for pid=1965 comm="syz-executor.4" path="socket:[20508]" dev="sockfs" ino=20508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 115.769666][ T18] asix: probe of 4-1:0.0 failed with error -71 [ 115.800453][ T1962] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 115.815083][ T18] usb 4-1: USB disconnect, device number 7 [ 115.817982][ T23] audit: type=1400 audit(1718890250.970:1051): avc: denied { nlmsg_write } for pid=1965 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 116.827405][ T23] audit: type=1400 audit(1718890252.030:1052): avc: denied { setopt } for pid=1985 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.841627][ T1986] IPv6: sit1: Disabled Multicast RS [ 116.884936][ T23] audit: type=1400 audit(1718890252.090:1053): avc: denied { bind } for pid=1985 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.333889][ T1991] gretap0: refused to change device tx_queue_len [ 117.340496][ T1991] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 117.721624][ T379] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 117.731627][ T617] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 117.761219][ T2005] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,grpquota,i_version,,errors=continue [ 117.787496][ T23] audit: type=1400 audit(1718890252.990:1054): avc: denied { rename } for pid=2003 comm="syz-executor.2" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.793483][ T2005] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2815: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 117.981755][ T379] usb 4-1: Using ep0 maxpacket: 16 [ 118.112181][ T379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 118.123593][ T617] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.137770][ T617] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.148865][ T379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 118.168877][ T379] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 118.188962][ T379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.204623][ T379] usb 4-1: config 0 descriptor?? [ 118.252866][ T617] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.270075][ T617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.278095][ T617] usb 1-1: SerialNumber: syz [ 118.285116][ T2023] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 118.292856][ T2023] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 118.305414][ T2023] F2FS-fs (loop2): invalid crc value [ 118.315273][ T2023] F2FS-fs (loop2): Found nat_bits in checkpoint [ 118.551941][ T2023] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 118.558887][ T2023] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 118.568436][ T2037] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.583606][ T617] usb 1-1: skipping empty audio interface (v1) [ 118.589799][ T617] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 118.597544][ T2023] attempt to access beyond end of device [ 118.597544][ T2023] loop2: rw=2049, want=45152, limit=40427 [ 118.612663][ T617] usb 1-1: USB disconnect, device number 12 [ 118.624454][ T377] attempt to access beyond end of device [ 118.624454][ T377] loop2: rw=2049, want=45160, limit=40427 [ 118.722064][ T1995] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 118.742961][ T379] hid (null): bogus close delimiter [ 118.764369][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.780127][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.787803][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.795914][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.803213][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.810442][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.817885][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.825539][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.837841][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.845803][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.853269][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.863004][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.870358][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.891761][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.899289][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.917114][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0xd [ 118.924413][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.931606][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.938785][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.946019][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.953202][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.960390][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.968100][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.976094][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.983366][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.990534][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 118.997783][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 119.004980][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 119.012178][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 119.019334][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x7 [ 119.026616][ T379] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 119.033771][ T379] hid-generic 0003:0158:0100.0011: bogus close delimiter [ 119.040588][ T379] hid-generic 0003:0158:0100.0011: item 0 4 2 10 parsing failed [ 119.048658][ T379] hid-generic: probe of 0003:0158:0100.0011 failed with error -22 [ 119.058507][ T379] usb 4-1: USB disconnect, device number 8 [ 119.212359][ T2034] F2FS-fs (loop4): Found nat_bits in checkpoint [ 119.233747][ T2048] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 119.261649][ T2048] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 119.271100][ T2048] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 119.342182][ T2034] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 119.352869][ T2034] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 119.520101][ T2057] IPv6: sit2: Disabled Multicast RS [ 120.462027][ T23] audit: type=1400 audit(1718890255.670:1055): avc: denied { unmount } for pid=378 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 120.771010][ T2081] EXT4-fs (loop0): filesystem is read-only [ 120.777476][ T2081] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 120.792817][ T2081] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 120.995811][ T2092] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 121.004940][ T2092] ext4 filesystem being mounted at /root/syzkaller-testdir69212906/syzkaller.cs46jK/65/file0 supports timestamps until 2038 (0x7fffffff) [ 121.026184][ T2092] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 121.034821][ T2092] EXT4-fs error (device loop0) in ext4_do_update_inode:5534: error 27 [ 121.053461][ T23] audit: type=1400 audit(1718890256.260:1056): avc: denied { mounton } for pid=2091 comm="syz-executor.0" path="/root/syzkaller-testdir69212906/syzkaller.cs46jK/65/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 121.071622][ T617] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 121.082592][ T23] audit: type=1400 audit(1718890256.260:1057): avc: denied { map } for pid=2091 comm="syz-executor.0" path="/root/syzkaller-testdir69212906/syzkaller.cs46jK/65/file0/bus" dev="devtmpfs" ino=9211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.110396][ T2096] EXT4-fs error (device loop0): ext4_resize_begin:61: comm syz-executor.0: resize_inode disabled but reserved GDT blocks non-zero [ 121.329567][ T2090] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 121.330593][ T1116] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 22: comm syz-executor.0: lblock 0 mapped to illegal pblock 22 (length 1) [ 121.337906][ T2090] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 121.369941][ T1116] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.0: lblock 8 mapped to illegal pblock 3 (length 1) [ 121.401859][ T1116] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 4: comm syz-executor.0: lblock 9 mapped to illegal pblock 4 (length 1) [ 121.436643][ T1116] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 5: comm syz-executor.0: lblock 10 mapped to illegal pblock 5 (length 1) [ 121.461387][ T1116] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 6: comm syz-executor.0: lblock 11 mapped to illegal pblock 6 (length 1) [ 121.496187][ T1116] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 7: comm syz-executor.0: lblock 12 mapped to illegal pblock 7 (length 1) [ 121.513398][ T2090] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.561735][ T617] usb 2-1: Using ep0 maxpacket: 16 [ 121.567173][ T1116] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #2: block 8: comm syz-executor.0: lblock 13 mapped to illegal pblock 8 (length 1) [ 121.681697][ T617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 121.700887][ T2090] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 121.701578][ T617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 121.708069][ T2090] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 121.731593][ T617] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 121.740474][ T617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.763315][ T617] usb 2-1: config 0 descriptor?? [ 122.672335][ T2117] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 122.762958][ T23] audit: type=1400 audit(1718890257.970:1058): avc: denied { map } for pid=2118 comm="syz-executor.4" path="socket:[20735]" dev="sockfs" ino=20735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 122.810129][ T378] attempt to access beyond end of device [ 122.810129][ T378] loop3: rw=2049, want=40992, limit=40427 [ 122.843184][ T617] hid (null): bogus close delimiter [ 122.858603][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 122.866085][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 122.873369][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 122.880607][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 122.887920][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 122.896389][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 122.903949][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 122.911294][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.102912][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.110769][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.118248][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.126940][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.137151][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.145204][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.152600][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.160037][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0xd [ 123.167467][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.175202][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.248155][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.269312][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.277480][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.284825][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.292200][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.299446][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.306678][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.313877][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.321080][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.328447][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.335935][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.343239][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x7 [ 123.350489][ T617] hid-generic 0003:0158:0100.0012: unknown main item tag 0x0 [ 123.357730][ T617] hid-generic 0003:0158:0100.0012: bogus close delimiter [ 123.364558][ T617] hid-generic 0003:0158:0100.0012: item 0 4 2 10 parsing failed [ 123.372763][ T617] hid-generic: probe of 0003:0158:0100.0012 failed with error -22 [ 123.383107][ T617] usb 2-1: USB disconnect, device number 8 [ 123.524338][ T2129] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.012292][ T23] audit: type=1400 audit(1718890259.000:1059): avc: denied { mounton } for pid=2133 comm="syz-executor.3" path="/root/syzkaller-testdir3739473672/syzkaller.Sgt2oe/103/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 124.599894][ T2140] EXT4-fs (loop2): Ignoring removed bh option [ 124.643142][ T2140] EXT4-fs error (device loop2): __ext4_iget:5217: inode #15: block 1803188595: comm syz-executor.2: invalid block [ 124.688048][ T2140] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 124.703438][ T2140] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue [ 125.239430][ T23] audit: type=1400 audit(1718890260.440:1060): avc: denied { getopt } for pid=2174 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 125.269516][ T2176] device veth3 entered promiscuous mode [ 125.297669][ T23] audit: type=1400 audit(1718890260.500:1061): avc: denied { read } for pid=2178 comm="syz-executor.2" name="rtc0" dev="devtmpfs" ino=9268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 125.327367][ T2176] bridge0: port 4(veth3) entered blocking state [ 125.340810][ T2176] bridge0: port 4(veth3) entered disabled state [ 125.347398][ T23] audit: type=1400 audit(1718890260.520:1062): avc: denied { open } for pid=2178 comm="syz-executor.2" path="/dev/rtc0" dev="devtmpfs" ino=9268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 125.498484][ T23] audit: type=1400 audit(1718890260.700:1063): avc: denied { read } for pid=2187 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.812929][ T23] audit: type=1400 audit(1718890261.020:1064): avc: denied { unmount } for pid=378 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 125.876584][ T2201] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 125.902512][ T2201] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 125.910676][ T2201] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.354526][ T2209] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.379403][ T2209] EXT4-fs (loop4): orphan cleanup on readonly fs [ 126.387577][ T2209] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3002: comm syz-executor.4: Allocating blocks 41-42 which overlap fs metadata [ 126.403945][ T2209] EXT4-fs (loop4): Remounting filesystem read-only [ 126.410415][ T2209] Quota error (device loop4): write_blk: dquota write failed [ 126.417785][ T2209] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 126.430173][ T2209] EXT4-fs (loop4): 1 truncate cleaned up [ 126.436039][ T2209] EXT4-fs (loop4): pa ffff8881d8e3cf18: logic 1, phys. 41, len 23 [ 126.444085][ T2209] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:3899: group 0, free 22, pa_free 23 [ 126.454601][ T2209] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x000000000000000a,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002 [ 127.185344][ T23] audit: type=1400 audit(1718890262.390:1065): avc: denied { block_suspend } for pid=2225 comm="syz-executor.4" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 127.492395][ T2233] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 127.531654][ T2233] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.576993][ T2233] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 127.599779][ T2233] EXT4-fs (loop4): This should not happen!! Data will be lost [ 127.599779][ T2233] [ 127.621296][ T2233] EXT4-fs (loop4): Total free blocks count 0 [ 127.639810][ T2233] EXT4-fs (loop4): Free/Dirty block details [ 127.645645][ T2233] EXT4-fs (loop4): free_blocks=2415919104 [ 127.661593][ T2233] EXT4-fs (loop4): dirty_blocks=16 [ 127.666581][ T2233] EXT4-fs (loop4): Block reservation details [ 127.712870][ T2233] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 129.239978][ T23] audit: type=1400 audit(1718890264.440:1066): avc: denied { create } for pid=2249 comm="syz-executor.4" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 130.127154][ T2265] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 130.201613][ T2265] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 130.275614][ T2265] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 130.298115][ T2265] EXT4-fs (loop3): This should not happen!! Data will be lost [ 130.298115][ T2265] [ 130.307695][ T2265] EXT4-fs (loop3): Total free blocks count 0 [ 130.321625][ T2265] EXT4-fs (loop3): Free/Dirty block details [ 130.327468][ T2265] EXT4-fs (loop3): free_blocks=2415919104 [ 130.336150][ T2265] EXT4-fs (loop3): dirty_blocks=16 [ 130.340464][ T2250] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 130.351656][ T2250] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 130.360360][ T2265] EXT4-fs (loop3): Block reservation details [ 130.370250][ T2265] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 130.376875][ T2250] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 130.385047][ T2281] Bluetooth: hci0: sending frame failed (-49) [ 130.415134][ T2250] F2FS-fs (loop4): Found nat_bits in checkpoint [ 130.422522][ T604] EXT4-fs error: 20 callbacks suppressed [ 130.422564][ T604] EXT4-fs error (device loop0): ext4_map_blocks:617: inode #3: block 13: comm kworker/u4:4: lblock 0 mapped to illegal pblock 13 (length 1) [ 130.461967][ T604] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 130.548990][ T2250] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 130.556113][ T2250] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 130.603151][ T604] tipc: Left network mode [ 130.908900][ T2299] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 130.917068][ T23] audit: type=1400 audit(1718890266.120:1067): avc: denied { getopt } for pid=2298 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 131.431031][ T23] audit: type=1400 audit(1718890266.630:1068): avc: denied { unlink } for pid=540 comm="syz-executor.4" name="file0" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 131.744828][ T604] device bridge_slave_1 left promiscuous mode [ 131.750913][ T604] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.771401][ T604] device bridge_slave_0 left promiscuous mode [ 131.788857][ T604] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.047275][ T23] audit: type=1400 audit(1718890267.250:1069): avc: denied { name_bind } for pid=2341 comm="syz-executor.4" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 132.072995][ T2300] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.079859][ T2300] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.103708][ T2300] device bridge_slave_0 entered promiscuous mode [ 132.111739][ T2300] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.120327][ T2300] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.140227][ T2300] device bridge_slave_1 entered promiscuous mode [ 132.147182][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 132.181543][ T2346] bridge0: port 3(syz_tun) entered blocking state [ 132.187817][ T2346] bridge0: port 3(syz_tun) entered disabled state [ 132.195505][ T2346] device syz_tun entered promiscuous mode [ 132.201339][ T2346] bridge0: port 3(syz_tun) entered blocking state [ 132.207656][ T2346] bridge0: port 3(syz_tun) entered forwarding state [ 132.224815][ T2349] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 132.313889][ T23] audit: type=1400 audit(1718890267.520:1070): avc: denied { read write } for pid=2350 comm="syz-executor.3" name="vga_arbiter" dev="devtmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 132.371586][ T23] audit: type=1400 audit(1718890267.550:1071): avc: denied { open } for pid=2350 comm="syz-executor.3" path="/dev/vga_arbiter" dev="devtmpfs" ino=1041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 132.411783][ T617] Bluetooth: hci0: command 0x1003 tx timeout [ 132.418022][ T2282] Bluetooth: hci0: sending frame failed (-49) [ 132.459399][ T2354] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.488776][ T2354] device gretap0 entered promiscuous mode [ 132.495117][ T2354] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 132.513226][ T2354] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.754427][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.764221][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.781728][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.790608][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.801338][ T573] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.808262][ T573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.816588][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.828114][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.836558][ T573] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.843463][ T573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.845070][ T2356] FAT-fs (loop3): Directory bread(block 64) failed [ 132.861741][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.877134][ T2356] FAT-fs (loop3): Directory bread(block 65) failed [ 132.887297][ T2356] FAT-fs (loop3): Directory bread(block 66) failed [ 132.901723][ T2356] FAT-fs (loop3): Directory bread(block 67) failed [ 132.909062][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.918337][ T2356] FAT-fs (loop3): Directory bread(block 68) failed [ 132.918374][ T2356] FAT-fs (loop3): Directory bread(block 69) failed [ 132.918465][ T2356] FAT-fs (loop3): Directory bread(block 70) failed [ 132.918501][ T2356] FAT-fs (loop3): Directory bread(block 71) failed [ 132.918592][ T2356] FAT-fs (loop3): Directory bread(block 72) failed [ 132.918627][ T2356] FAT-fs (loop3): Directory bread(block 73) failed [ 133.012418][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.065460][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.087651][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.118685][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.128272][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.162643][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.164551][ T2371] EXT4-fs error (device loop4): ext4_orphan_get:1260: comm syz-executor.4: bad orphan inode 15 [ 133.171279][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.181810][ T2371] EXT4-fs (loop4): Remounting filesystem read-only [ 133.196308][ T2371] ext4_test_bit(bit=14, block=5) = 0 [ 133.211610][ T2371] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,errors=remount-ro,noload,nobarrier,nodiscard, [ 133.230229][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.240095][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.429816][ T23] audit: type=1400 audit(1718890268.630:1072): avc: denied { read } for pid=2385 comm="poweroff" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 133.485864][ T2395] input: syz0 as /devices/virtual/input/input11 [ 133.934944][ T2406] loop2: p1 p2 p3 [ 135.140197][ T573] Bluetooth: hci0: command 0x1001 tx timeout [ 135.189646][ T2282] Bluetooth: hci0: sending frame failed (-49) [ 135.218583][ T23] audit: type=1400 audit(1718890270.420:1073): avc: denied { write } for pid=2432 comm="syz-executor.2" name="hwrng" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 135.520126][ T2434] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 135.722851][ T2447] loop4: p1 p2 p3 [ 139.618275][ T364] Bluetooth: hci0: command 0x1009 tx timeout [ 139.760010][ T23] audit: type=1400 audit(1718890274.960:1074): avc: denied { wake_alarm } for pid=2466 comm="syz-executor.2" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.873273][ T23] audit: type=1400 audit(1718890275.080:1075): avc: denied { getopt } for pid=2473 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.423990][ T2482] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,quota,,errors=continue [ 140.530676][ T2482] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 16: comm syz-executor.2: lblock 0 mapped to illegal pblock 16 (length 1) [ 140.545432][ T2482] EXT4-fs error (device loop2): __ext4_get_inode_loc:4710: comm syz-executor.2: Invalid inode table block 0 in block_group 0 [ 140.558595][ T2482] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 140.656489][ T377] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 16: comm syz-executor.2: lblock 0 mapped to illegal pblock 16 (length 1) [ 140.744941][ T604] EXT4-fs error (device loop2): __ext4_get_inode_loc:4710: comm kworker/u4:4: Invalid inode table block 0 in block_group 0 [ 142.182923][ T2490] loop3: p1 p2 p3 [ 142.221936][ T377] bridge0: port 3(syz_tun) entered disabled state [ 142.234011][ T377] device syz_tun left promiscuous mode [ 142.239367][ T377] bridge0: port 3(syz_tun) entered disabled state [ 142.753757][ T23] audit: type=1400 audit(1718890277.720:1076): avc: denied { execmem } for pid=2512 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 142.837136][ T23] audit: type=1400 audit(1718890278.040:1077): avc: denied { create } for pid=2514 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.859779][ T23] audit: type=1400 audit(1718890278.060:1078): avc: denied { write } for pid=2514 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.207232][ T2523] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.227190][ T23] audit: type=1400 audit(1718890278.060:1079): avc: denied { nlmsg_write } for pid=2514 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.284141][ T23] audit: type=1400 audit(1718890278.060:1080): avc: denied { read } for pid=2514 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 143.341616][ T23] audit: type=1400 audit(1718890278.410:1081): avc: denied { nlmsg_read } for pid=2514 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.253757][ T2531] loop3: p1 p2 p3 [ 144.488478][ T2544] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.527276][ T2536] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.534465][ T2536] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.543639][ T2536] device bridge_slave_0 entered promiscuous mode [ 144.562711][ T2536] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.569571][ T2536] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.591414][ T2536] device bridge_slave_1 entered promiscuous mode [ 144.641577][ T379] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 144.682203][ T604] device bridge_slave_1 left promiscuous mode [ 144.688238][ T604] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.696281][ T604] device bridge_slave_0 left promiscuous mode [ 144.702669][ T604] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.871562][ T364] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 144.881544][ T379] usb 1-1: Using ep0 maxpacket: 32 [ 144.920638][ T2536] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.927688][ T2536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.934899][ T2536] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.941762][ T2536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.994311][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.005359][ T617] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.013358][ T617] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.021580][ T396] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 145.031699][ T379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 145.043169][ T379] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 145.054675][ T379] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 145.063689][ T379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.078638][ T379] usb 1-1: config 0 descriptor?? [ 145.088660][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.097776][ T398] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.104683][ T398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.112020][ T2538] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 145.113586][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.127815][ T398] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.134710][ T398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.142971][ T379] hub 1-1:0.0: USB hub found [ 145.148310][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.159789][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.228501][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.258800][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 145.269349][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.271718][ T364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.288980][ T364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.299070][ T364] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 145.301023][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 145.308162][ T364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.326796][ T398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.328641][ T364] usb 5-1: config 0 descriptor?? [ 145.361970][ T379] hub 1-1:0.0: 2 ports detected [ 145.371094][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 145.382317][ T617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.402123][ T396] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.412207][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.421000][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.434602][ T396] usb 2-1: config 0 has no interfaces? [ 145.439983][ T396] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 145.450793][ T396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.461962][ T396] usb 2-1: config 0 descriptor?? [ 145.744725][ T2558] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 146.300021][ T2560] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 146.314284][ T2560] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a802c09c, mo2=0000] [ 146.322881][ T2560] System zones: 0-2, 18-18, 34-34 [ 146.337957][ T2560] EXT4-fs (loop1): 1 orphan inode deleted [ 146.343668][ T2560] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,stripe=0x000000000000000a,nolazytime,noquota,jqfmt=vfsold,minixdf,init_itable=0x0000000000000002,grpid,debug,,errors=continue [ 146.364998][ T379] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 146.365163][ T2560] ext4 filesystem being mounted at /root/syzkaller-testdir6660054/syzkaller.qyJW61/78/file1 supports timestamps until 2038 (0x7fffffff) [ 146.371163][ T379] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 146.489532][ T379] usbhid 1-1:0.0: can't add hid device: -71 [ 146.495702][ T379] usbhid: probe of 1-1:0.0 failed with error -71 [ 146.532045][ T379] usb 1-1: USB disconnect, device number 13 [ 146.791668][ T364] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #100: -71 [ 146.803842][ T364] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71 [ 146.812512][ T364] uclogic 0003:256C:006D.0013: failed probing pen v1 parameters: -71 [ 146.852302][ T364] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 146.859775][ T364] uclogic: probe of 0003:256C:006D.0013 failed with error -71 [ 146.870286][ T364] usb 5-1: USB disconnect, device number 9 [ 148.094446][ T2576] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.103685][ T2576] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.450438][ T396] usb 2-1: USB disconnect, device number 9 [ 148.549911][ T2582] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.617029][ T23] audit: type=1400 audit(1718890284.820:1082): avc: denied { bind } for pid=2598 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 151.625787][ T2624] device bridge_slave_0 left promiscuous mode [ 151.641751][ T2624] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.691660][ T837] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 154.091779][ T837] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 154.104075][ T837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.123739][ T837] usb 4-1: config 0 descriptor?? [ 156.059623][ T2631] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 156.519268][ T2651] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 156.552101][ T2653] fuse: Bad value for 'fd' [ 156.634792][ T23] audit: type=1400 audit(1718890291.830:1083): avc: denied { mount } for pid=2647 comm="syz-executor.0" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 157.415968][ T837] usb 4-1: Cannot set autoneg [ 157.420623][ T837] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 157.432673][ T837] usb 4-1: USB disconnect, device number 9 [ 157.521642][ T23] audit: type=1400 audit(1718890292.670:1084): avc: denied { unmount } for pid=2300 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 157.547857][ T2673] 9pnet: Insufficient options for proto=fd [ 157.623027][ T2665] EXT4-fs (loop3): 1 orphan inode deleted [ 157.628627][ T2665] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 157.681302][ T2665] ext4 filesystem being mounted at /root/syzkaller-testdir3739473672/syzkaller.Sgt2oe/163/file1 supports timestamps until 2038 (0x7fffffff) [ 159.255945][ T2682] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 159.336940][ T2684] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 160.111364][ T23] audit: type=1400 audit(1718890295.310:1085): avc: denied { mount } for pid=2666 comm="syz-executor.4" name="/" dev="tmpfs" ino=23391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 160.192942][ T23] audit: type=1400 audit(1718890295.340:1086): avc: denied { create } for pid=2707 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 160.418166][ T23] audit: type=1400 audit(1718890295.620:1087): avc: denied { unmount } for pid=540 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 160.451611][ T1759] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 160.498483][ T2721] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 160.507663][ T2721] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 160.564413][ T2719] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.584737][ T2719] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 160.811785][ T1759] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.828082][ T1759] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.847660][ T1759] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 160.867511][ T1759] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 160.887704][ T1759] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 160.907070][ T1759] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 161.081711][ T1759] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.092891][ T1759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.108468][ T1759] usb 1-1: Product: syz [ 161.116991][ T1759] usb 1-1: Manufacturer: syz [ 161.125829][ T1759] usb 1-1: SerialNumber: syz [ 161.598420][ T2740] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 161.613209][ T2740] ext4 filesystem being mounted at /root/syzkaller-testdir3739473672/syzkaller.Sgt2oe/168/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038 (0x7fffffff) [ 161.668284][ T2740] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 161.676801][ T2740] EXT4-fs error (device loop3) in ext4_do_update_inode:5534: error 27 [ 161.887889][ T2749] EXT4-fs (loop3): 1 orphan inode deleted [ 161.893652][ T2749] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 161.903130][ T2749] ext4 filesystem being mounted at /root/syzkaller-testdir3739473672/syzkaller.Sgt2oe/169/file1 supports timestamps until 2038 (0x7fffffff) [ 162.271674][ T1759] cdc_ncm 1-1:1.0: bind() failure [ 162.291660][ T1759] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 162.321742][ T1759] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 162.339867][ T1759] usb 1-1: USB disconnect, device number 14 serialport: VM disconnected.