last executing test programs: 4.68688568s ago: executing program 1 (id=1965): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.191694859s ago: executing program 1 (id=1979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x1) 3.177029409s ago: executing program 1 (id=1969): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x319, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xa, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xca}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xb, "496074ea"}, @local=@item_012={0x0, 0x2, 0x5}, @global=@item_012={0x0, 0x1, 0x4}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 2.739512777s ago: executing program 3 (id=1976): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 2.59635965s ago: executing program 3 (id=1978): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 2.59618849s ago: executing program 4 (id=1980): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.58153663s ago: executing program 3 (id=1981): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x2, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @local=@item_4={0x3, 0x2, 0x7, "e9d1fead"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000080)={0x3, 0x0, 0xffff}) 2.58112481s ago: executing program 0 (id=1992): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 2.534792131s ago: executing program 0 (id=1982): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000140), &(0x7f0000000380)=r3}, 0x20) 2.522551711s ago: executing program 0 (id=1983): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x3, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x20, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x3, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x89d8, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x7, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x3, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x8, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x6111, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0x80000001, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x20000000, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0xfff, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0xc, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xe16, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x80000007, 0x3, 0x5, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.396247414s ago: executing program 4 (id=1985): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x818, &(0x7f0000005880)=ANY=[@ANYBLOB="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"], 0x3, 0x5505, &(0x7f0000000340)="$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") open(&(0x7f0000000240)='./file1\x00', 0x141143, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") mount$binderfs(0x0, 0x0, 0x0, 0x20, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x411203, 0x70) 2.395788644s ago: executing program 0 (id=1996): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) 2.382262974s ago: executing program 0 (id=1986): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f00000000c0)) 1.746847066s ago: executing program 4 (id=1999): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) rmdir(0x0) rename(&(0x7f0000000340)='./file0/file0\x00', &(0x7f0000000140)='./control\x00') 1.53277503s ago: executing program 1 (id=1988): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 1.53254098s ago: executing program 4 (id=1990): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffe76, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0xb) 1.493752931s ago: executing program 2 (id=1991): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 1.466066551s ago: executing program 2 (id=1993): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1.338667344s ago: executing program 2 (id=1994): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 1.338569184s ago: executing program 4 (id=1995): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 1.333873994s ago: executing program 1 (id=1997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) unshare(0x20000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r2}, &(0x7f0000000900), &(0x7f0000000940)=r0}, 0x20) 1.326879844s ago: executing program 2 (id=1998): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.319914144s ago: executing program 1 (id=2000): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x5, 0x28, 0xe4d, 0x2, 0x7ff, 0x3861, 0x8, 0x3ff, 0x2, 0x1, 0x300, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.289832935s ago: executing program 4 (id=2001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mount$incfs(0x0, 0x0, 0x0, 0xc802, 0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000c80)={{0x12, 0x1, 0x300, 0x85, 0x35, 0x26, 0x8, 0x4f2, 0xb746, 0x8e6e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x4, 0xe9, 0x0, 0x9, [{{0x9, 0x4, 0x93, 0x0, 0x0, 0xe, 0x1, 0x0, 0xff, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x5}, [@processing_unit={0x9, 0x24, 0x7, 0x3, 0x4, 0x1, "a530"}, @feature_unit={0x11, 0x24, 0x6, 0x6, 0x4, 0x5, [0x8, 0x4, 0x5, 0x6, 0x1], 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x5, 0x1, 0xf9}, @processing_unit={0x9, 0x24, 0x7, 0x2, 0x2, 0x5, "cbad"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x101, 0x3, 0x3, 0xdf}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x303, 0x3, 0x6, 0x5}]}]}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x1f}) 857.572223ms ago: executing program 3 (id=2002): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) 857.132553ms ago: executing program 2 (id=2012): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 16.440629ms ago: executing program 3 (id=2003): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, 0x0, 0x0, 0x40044}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="069c", 0x2}], 0x1, 0x0, 0x0, 0x4004}}], 0x2, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 15.874869ms ago: executing program 0 (id=2014): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_4={0x3, 0x2, 0x2, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @local=@item_4={0x3, 0x2, 0x7, "e9d1fead"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000080)={0x3, 0x0, 0xffff}) 15.492499ms ago: executing program 2 (id=2004): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x319, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xa, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xca}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xb, "496074ea"}, @local=@item_012={0x0, 0x2, 0x5}, @global=@item_012={0x0, 0x1, 0x4}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=2005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) kernel console output (not intermixed with test programs): file permissive=1 [ 74.974628][ T28] audit: type=1400 audit(1758689808.601:478): avc: denied { name_bind } for pid=3398 comm="syz.3.1044" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 74.988914][ T3357] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 75.206090][ T28] audit: type=1400 audit(1758689808.831:479): avc: denied { mount } for pid=3408 comm="syz.0.1049" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 75.260989][ T3413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 75.298862][ T39] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 75.355297][ T345] cdc_ncm 2-1:1.0: bind() failure [ 75.364128][ T345] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 75.371410][ T345] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 75.379217][ T345] usb 2-1: USB disconnect, device number 8 [ 75.499989][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 75.518883][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 75.538873][ T39] usb 4-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 75.547995][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.559941][ T39] usb 4-1: config 0 descriptor?? [ 75.565200][ T3403] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 75.618394][ T3357] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 75.629633][ T24] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 75.640757][ T24] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, c2:5d:ce:b9:c4:d3 [ 75.668886][ T19] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 75.831907][ T731] usb 3-1: USB disconnect, device number 7 [ 75.838389][ T731] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 75.849954][ T19] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 75.860880][ T19] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 75.881691][ T19] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.898858][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.906946][ T19] usb 1-1: Product: syz [ 75.911176][ T19] usb 1-1: Manufacturer: syz [ 75.915866][ T19] usb 1-1: SerialNumber: syz [ 75.921568][ T3419] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 75.996231][ T28] audit: type=1400 audit(1758689809.621:480): avc: denied { compute_member } for pid=3447 comm="syz.1.1068" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 76.022211][ T3442] loop4: detected capacity change from 0 to 40427 [ 76.029990][ T3442] F2FS-fs (loop4): invalid crc value [ 76.036382][ T3442] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.071294][ T3442] F2FS-fs (loop4): Start checkpoint disabled! [ 76.077425][ T28] audit: type=1400 audit(1758689809.701:481): avc: denied { write } for pid=3456 comm="syz.1.1072" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 76.101334][ T3442] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 76.130969][ T3419] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 76.141898][ T28] audit: type=1400 audit(1758689809.771:482): avc: denied { remove_name } for pid=3441 comm="syz.4.1065" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.191672][ T28] audit: type=1400 audit(1758689809.771:483): avc: denied { rename } for pid=3441 comm="syz.4.1065" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.205974][ T731] usb 4-1: USB disconnect, device number 10 [ 76.236062][ T28] audit: type=1400 audit(1758689809.771:484): avc: denied { unlink } for pid=3441 comm="syz.4.1065" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.249039][ T3466] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 76.284557][ T2481] bio_check_eod: 1 callbacks suppressed [ 76.284568][ T2481] kworker/u4:414: attempt to access beyond end of device [ 76.284568][ T2481] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 76.488202][ T3492] loop1: detected capacity change from 0 to 512 [ 76.505473][ T3492] EXT4-fs (loop1): Test dummy encryption mode enabled [ 76.515347][ T3492] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.543218][ T3492] EXT4-fs (loop1): 1 truncate cleaned up [ 76.559162][ T3492] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 76.596346][ T3492] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 76.607472][ T28] audit: type=1400 audit(1758689810.241:485): avc: denied { create } for pid=3491 comm="syz.1.1089" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 76.675528][ T283] EXT4-fs (loop1): unmounting filesystem. [ 76.739389][ T3517] futex_wake_op: syz.4.1100 tries to shift op by -1; fix this program [ 76.749691][ T19] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 76.772239][ T3523] netem: change failed [ 76.774207][ T19] cdc_ncm 1-1:1.0: bind() failure [ 76.788123][ T19] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 76.795060][ T19] cdc_ncm 1-1:1.1: bind() failure [ 76.800758][ T19] usb 1-1: USB disconnect, device number 9 [ 76.830077][ T3531] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1106'. [ 76.950129][ T3563] netlink: 'syz.2.1121': attribute type 1 has an invalid length. [ 77.162079][ T3594] loop2: detected capacity change from 0 to 256 [ 77.185183][ T3594] FAT-fs (loop2): Directory bread(block 64) failed [ 77.191913][ T3594] FAT-fs (loop2): Directory bread(block 65) failed [ 77.207357][ T3594] FAT-fs (loop2): Directory bread(block 66) failed [ 77.215031][ T3594] FAT-fs (loop2): Directory bread(block 67) failed [ 77.222303][ T3594] FAT-fs (loop2): Directory bread(block 68) failed [ 77.229717][ T3594] FAT-fs (loop2): Directory bread(block 69) failed [ 77.236457][ T3594] FAT-fs (loop2): Directory bread(block 70) failed [ 77.243433][ T3594] FAT-fs (loop2): Directory bread(block 71) failed [ 77.250131][ T3594] FAT-fs (loop2): Directory bread(block 72) failed [ 77.256708][ T3594] FAT-fs (loop2): Directory bread(block 73) failed [ 77.313856][ T3594] syz.2.1134: attempt to access beyond end of device [ 77.313856][ T3594] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 77.333175][ T3601] kvm: MWAIT instruction emulated as NOP! [ 77.435859][ T3612] SELinux: Context system_u: is not valid (left unmapped). [ 77.598871][ T39] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 77.778863][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 77.785202][ T39] usb 4-1: config 1 interface 0 altsetting 77 bulk endpoint 0x3 has invalid maxpacket 1023 [ 77.800671][ T39] usb 4-1: config 1 interface 0 altsetting 77 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 77.833198][ T39] usb 4-1: config 1 interface 0 has no altsetting 0 [ 77.847967][ T39] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.859173][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 77.878390][ T39] usb 4-1: SerialNumber: syz [ 77.887165][ T3606] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.036497][ T3651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'. [ 78.092279][ T3657] xt_hashlimit: size too large, truncated to 1048576 [ 78.096219][ T3606] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.107830][ T3655] serio: Serial port ptm0 [ 78.112366][ T731] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 78.308913][ T731] usb 2-1: Using ep0 maxpacket: 16 [ 78.315017][ T731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.325907][ T731] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.337395][ T731] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 78.350633][ T731] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 78.359868][ T731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.368469][ T731] usb 2-1: config 0 descriptor?? [ 78.537008][ T39] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 78.776419][ T731] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0016/input/input20 [ 78.849780][ T731] appleir 0003:05AC:8241.0016: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 78.992056][ T731] usb 2-1: USB disconnect, device number 9 [ 79.298896][ T345] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 79.479858][ T345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.490801][ T345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.500618][ T345] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 79.513673][ T345] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 79.522832][ T345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.531587][ T345] usb 5-1: config 0 descriptor?? [ 79.561490][ T3685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=3685 comm=syz.1.1173 [ 79.574392][ T3685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1173'. [ 79.940152][ T345] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 79.949432][ T345] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 80.033360][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 80.033376][ T28] audit: type=1400 audit(1758689813.661:503): avc: denied { mount } for pid=3701 comm="syz.0.1180" name="/" dev="ramfs" ino=27239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 80.074343][ T28] audit: type=1400 audit(1758689813.701:504): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 80.148922][ T28] audit: type=1400 audit(1758689813.771:505): avc: denied { read write } for pid=3709 comm="syz.0.1184" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 80.150084][ T345] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 80.186287][ T28] audit: type=1400 audit(1758689813.771:506): avc: denied { open } for pid=3709 comm="syz.0.1184" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 80.186298][ T345] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 80.186321][ T345] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 80.224864][ T345] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 80.232288][ T345] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 80.240111][ T345] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 80.248885][ T345] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 80.256950][ T345] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 80.264397][ T345] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 80.265616][ T28] audit: type=1400 audit(1758689813.891:507): avc: denied { execmem } for pid=3714 comm="syz.1.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 80.272039][ T345] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 80.298392][ T345] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 80.305988][ T345] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 80.313447][ T345] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 80.320866][ T345] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 80.323533][ T39] usb 4-1: USB disconnect, device number 11 [ 80.328255][ T345] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 80.328276][ T345] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 80.348950][ T345] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 80.349519][ T39] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 80.356992][ T345] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0 [ 80.374257][ T345] hid-generic 0003:0004:0000.0018: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 80.384734][ T345] usb 5-1: USB disconnect, device number 6 [ 80.455628][ T3735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1194'. [ 80.505368][ T3741] loop3: detected capacity change from 0 to 512 [ 80.512006][ T3741] journal_path: Lookup failure for './file0/../file0' [ 80.518908][ T3741] EXT4-fs: error: could not find journal device path [ 80.562563][ T3741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1196'. [ 80.583932][ T28] audit: type=1400 audit(1758689814.211:508): avc: denied { create } for pid=3749 comm="syz.1.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.585502][ T3752] loop3: detected capacity change from 0 to 512 [ 80.604021][ T28] audit: type=1400 audit(1758689814.241:509): avc: denied { connect } for pid=3749 comm="syz.1.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 80.653235][ T3752] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0082] [ 80.663932][ T3752] System zones: 0-2, 18-18, 34-35 [ 80.675522][ T3752] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1202: bad orphan inode 11862016 [ 80.701394][ T3752] EXT4-fs (loop3): Remounting filesystem read-only [ 80.718041][ T3752] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 80.728166][ T3752] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.807771][ T287] EXT4-fs (loop3): unmounting filesystem. [ 81.009975][ T28] audit: type=1400 audit(1758689814.641:510): avc: denied { getopt } for pid=3791 comm="syz.0.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.042336][ T3794] loop3: detected capacity change from 0 to 1024 [ 81.071601][ T3794] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 81.092415][ T287] EXT4-fs (loop3): unmounting filesystem. [ 81.214145][ T28] audit: type=1400 audit(1758689814.841:511): avc: denied { bind } for pid=3820 comm="syz.0.1231" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.234271][ T28] audit: type=1400 audit(1758689814.841:512): avc: denied { name_bind } for pid=3820 comm="syz.0.1231" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 81.255196][ T39] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 81.314466][ T3825] syz.0.1233[3825] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.314507][ T3825] syz.0.1233[3825] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.327784][ T3825] serio: Serial port ptm0 [ 81.439824][ T39] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 81.448545][ T39] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 81.458650][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.469633][ T39] usb 5-1: string descriptor 0 read error: -22 [ 81.475841][ T39] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 81.484932][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.494189][ T39] usb 5-1: 0:2 : does not exist [ 81.695138][ T345] usb 5-1: USB disconnect, device number 7 [ 82.002285][ T3855] loop3: detected capacity change from 0 to 1024 [ 82.020895][ T3855] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 82.029357][ T3855] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.040956][ T3855] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 82.055729][ T3855] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 82.068105][ T3855] EXT4-fs (loop3): This should not happen!! Data will be lost [ 82.068105][ T3855] [ 82.077753][ T3855] EXT4-fs (loop3): Total free blocks count 0 [ 82.083746][ T3855] EXT4-fs (loop3): Free/Dirty block details [ 82.089635][ T3855] EXT4-fs (loop3): free_blocks=4293918720 [ 82.095345][ T3855] EXT4-fs (loop3): dirty_blocks=32 [ 82.100454][ T3855] EXT4-fs (loop3): Block reservation details [ 82.106419][ T3855] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 82.116225][ T2481] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 82.218892][ T39] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 82.239904][ T3876] loop4: detected capacity change from 0 to 2048 [ 82.249594][ T3876] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 82.260758][ T3876] EXT4-fs error (device loop4): ext4_read_inline_dir:1601: inode #12: block 9: comm syz.4.1256: path /244/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 82.289142][ T285] EXT4-fs (loop4): unmounting filesystem. [ 82.332070][ T3888] incfs: Backing dir is not set, filesystem can't be mounted. [ 82.345195][ T3888] incfs: mount failed -2 [ 82.554855][ T3893] loop4: detected capacity change from 0 to 40427 [ 82.561815][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 82.567922][ T3893] F2FS-fs (loop4): invalid crc value [ 82.574815][ T39] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 82.587265][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.597960][ T3893] F2FS-fs (loop4): Found nat_bits in checkpoint [ 82.628987][ T39] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.645069][ T3893] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 82.659722][ T39] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.668894][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.679301][ T39] usb 2-1: Product: syz [ 82.688403][ T39] usb 2-1: Manufacturer: syz [ 82.693268][ T39] usb 2-1: SerialNumber: syz [ 83.060683][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 83.105336][ T39] usb 2-1: 0:2 : does not exist [ 83.240718][ T3909] loop3: detected capacity change from 0 to 512 [ 83.247534][ T3909] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.258862][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 83.264698][ T3909] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 83.265045][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.273098][ T3909] System zones: 0-2, 18-18, 34-34 [ 83.283087][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 83.288915][ T3909] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 83.298550][ T24] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 83.306288][ T3909] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.315132][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.333509][ T24] usb 5-1: Product: syz [ 83.337696][ T24] usb 5-1: Manufacturer: syz [ 83.342473][ T24] usb 5-1: SerialNumber: syz [ 83.343101][ T287] EXT4-fs (loop3): unmounting filesystem. [ 83.353088][ T24] usb 5-1: config 0 descriptor?? [ 83.418881][ T19] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 83.598857][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 83.606346][ T19] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 83.615653][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.623662][ T19] usb 1-1: Product: syz [ 83.627830][ T19] usb 1-1: Manufacturer: syz [ 83.632441][ T19] usb 1-1: SerialNumber: syz [ 83.637441][ T19] usb 1-1: config 0 descriptor?? [ 83.643109][ T19] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 83.650781][ T19] usb 1-1: Detected FT-X [ 83.729649][ T39] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 83.741528][ T39] usb 2-1: USB disconnect, device number 10 [ 83.764874][ T751] usb 5-1: USB disconnect, device number 8 [ 83.843087][ T19] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 84.250741][ T19] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 84.257558][ T19] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 84.266042][ T19] usb 1-1: USB disconnect, device number 10 [ 84.272841][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 84.282506][ T19] ftdi_sio 1-1:0.0: device disconnected [ 84.412825][ T3926] loop4: detected capacity change from 0 to 40427 [ 84.419999][ T3926] F2FS-fs (loop4): fault_injection options not supported [ 84.427434][ T3926] F2FS-fs (loop4): invalid crc value [ 84.433629][ T3926] F2FS-fs (loop4): Found nat_bits in checkpoint [ 84.450479][ T3926] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 84.462060][ T3926] syz.4.1275: attempt to access beyond end of device [ 84.462060][ T3926] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 84.478857][ T345] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 84.486632][ T285] syz-executor: attempt to access beyond end of device [ 84.486632][ T285] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 84.536374][ T3941] syz.1.1282[3941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.536447][ T3941] syz.1.1282[3941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.631109][ T3955] loop1: detected capacity change from 0 to 512 [ 84.649092][ T3955] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.660039][ T3955] EXT4-fs (loop1): 1 truncate cleaned up [ 84.665723][ T3955] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 84.699940][ T345] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.711003][ T345] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.720909][ T345] usb 4-1: config 0 interface 0 has no altsetting 0 [ 84.727772][ T345] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 84.736836][ T345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.745463][ T345] usb 4-1: config 0 descriptor?? [ 84.750944][ T283] EXT4-fs (loop1): unmounting filesystem. [ 85.158868][ T39] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 85.339901][ T39] usb 1-1: config index 0 descriptor too short (expected 19492, got 36) [ 85.348327][ T39] usb 1-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 85.356992][ T39] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.357346][ T345] usb 4-1: string descriptor 0 read error: -22 [ 85.367126][ T39] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 36 [ 85.382322][ T39] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 85.391359][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.399994][ T39] usb 1-1: config 0 descriptor?? [ 85.463585][ T3976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1296'. [ 85.472567][ T3976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1296'. [ 85.616208][ T24] usb 1-1: USB disconnect, device number 11 [ 85.633254][ T3981] loop4: detected capacity change from 0 to 40427 [ 85.640052][ T3981] F2FS-fs (loop4): fault_injection options not supported [ 85.647077][ T3981] F2FS-fs (loop4): fault_type options not supported [ 85.654164][ T3981] F2FS-fs (loop4): invalid crc value [ 85.660214][ T3981] F2FS-fs (loop4): Found nat_bits in checkpoint [ 85.677000][ T3981] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 85.685334][ T345] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0019/input/input21 [ 85.697911][ T345] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0019/input/input22 [ 85.710117][ T345] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0019/input/input23 [ 85.723658][ T345] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0019/input/input24 [ 85.737108][ T345] uclogic 0003:256C:006D.0019: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 85.801903][ T345] usb 4-1: USB disconnect, device number 12 [ 85.837185][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 85.837199][ T28] audit: type=1326 audit(1758689819.473:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a398eec9 code=0x7ffc0000 [ 85.866637][ T28] audit: type=1326 audit(1758689819.473:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a398eec9 code=0x7ffc0000 [ 85.889956][ T28] audit: type=1326 audit(1758689819.473:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe5a398eec9 code=0x7ffc0000 [ 85.913246][ T39] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 85.913302][ T28] audit: type=1326 audit(1758689819.513:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a398eec9 code=0x7ffc0000 [ 85.944290][ T28] audit: type=1326 audit(1758689819.533:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a398eec9 code=0x7ffc0000 [ 86.056843][ T4002] device pim6reg1 entered promiscuous mode [ 86.140077][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.160266][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.172347][ T39] usb 2-1: New USB device found, idVendor=0457, idProduct=ffff, bcdDevice= 0.00 [ 86.182755][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.191580][ T39] usb 2-1: config 0 descriptor?? [ 86.220101][ T4004] loop4: detected capacity change from 0 to 40427 [ 86.227512][ T4004] F2FS-fs (loop4): invalid crc value [ 86.233736][ T4004] F2FS-fs (loop4): Found nat_bits in checkpoint [ 86.268365][ T4004] F2FS-fs (loop4): Start checkpoint disabled! [ 86.275155][ T4004] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 86.306400][ T4004] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 86.347334][ T2481] kworker/u4:414: attempt to access beyond end of device [ 86.347334][ T2481] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.461401][ T4025] loop4: detected capacity change from 0 to 512 [ 86.469889][ T4025] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1312: casefold flag without casefold feature [ 86.482758][ T4025] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1312: couldn't read orphan inode 15 (err -117) [ 86.494799][ T4025] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.517447][ T285] EXT4-fs (loop4): unmounting filesystem. [ 86.538885][ T731] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 86.603420][ T39] hid-generic 0003:0457:FFFF.001A: unknown main item tag 0x0 [ 86.612889][ T39] hid-generic 0003:0457:FFFF.001A: unknown main item tag 0x0 [ 86.621870][ T39] hid-generic 0003:0457:FFFF.001A: hidraw0: USB HID v0.00 Device [HID 0457:ffff] on usb-dummy_hcd.1-1/input0 [ 86.718861][ T731] usb 1-1: Using ep0 maxpacket: 16 [ 86.725262][ T731] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.732178][ T731] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 86.749217][ T731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.759775][ T731] usb 1-1: config 0 descriptor?? [ 86.764308][ T4056] loop3: detected capacity change from 0 to 256 [ 86.764739][ T28] audit: type=1400 audit(1758689820.403:536): avc: denied { mount } for pid=4053 comm="syz.4.1329" name="/" dev="configfs" ino=13706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 86.773370][ T4056] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.805954][ T4056] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 86.815711][ T39] usb 2-1: USB disconnect, device number 11 [ 86.821026][ T4056] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 86.853856][ T28] audit: type=1400 audit(1758689820.493:537): avc: denied { mounton } for pid=4054 comm="syz.3.1330" path="/239/bus/file0/file0" dev="loop3" ino=1048651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.877965][ T28] audit: type=1400 audit(1758689820.503:538): avc: denied { write } for pid=4054 comm="syz.3.1330" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.900044][ T28] audit: type=1400 audit(1758689820.503:539): avc: denied { add_name } for pid=4054 comm="syz.3.1330" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.908299][ T4062] loop3: detected capacity change from 0 to 512 [ 86.920909][ T28] audit: type=1400 audit(1758689820.503:540): avc: denied { create } for pid=4054 comm="syz.3.1330" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 86.928664][ T4062] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1332: casefold flag without casefold feature [ 86.959770][ T4062] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1332: couldn't read orphan inode 15 (err -117) [ 86.971685][ T4062] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.995159][ T287] EXT4-fs (loop3): unmounting filesystem. [ 87.138860][ T19] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 87.196693][ T731] hid (null): nested delimiters [ 87.201603][ T731] hid (null): report_id 42461 is invalid [ 87.318847][ T19] usb 5-1: Using ep0 maxpacket: 8 [ 87.324888][ T19] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 87.339394][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.348481][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.356531][ T19] usb 5-1: Product: syz [ 87.360746][ T19] usb 5-1: Manufacturer: syz [ 87.365337][ T19] usb 5-1: SerialNumber: syz [ 87.402601][ T288] usb 1-1: USB disconnect, device number 12 [ 87.488159][ T4086] loop2: detected capacity change from 0 to 128 [ 87.495279][ T4086] FAT-fs (loop2): Directory bread(block 414) failed [ 87.502537][ T4086] FAT-fs (loop2): Directory bread(block 415) failed [ 87.509216][ T4086] FAT-fs (loop2): Directory bread(block 416) failed [ 87.515833][ T4086] FAT-fs (loop2): Directory bread(block 417) failed [ 87.522477][ T4086] FAT-fs (loop2): Directory bread(block 418) failed [ 87.529099][ T4086] FAT-fs (loop2): Directory bread(block 419) failed [ 87.535709][ T4086] FAT-fs (loop2): Directory bread(block 420) failed [ 87.542321][ T4086] FAT-fs (loop2): Directory bread(block 421) failed [ 87.552611][ T4086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1343'. [ 87.693953][ T4094] loop2: detected capacity change from 0 to 40427 [ 87.701432][ T4094] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 87.709114][ T4094] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 87.717888][ T4094] F2FS-fs (loop2): invalid crc value [ 87.719701][ T345] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 87.732125][ T4094] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.755641][ T4094] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 87.762700][ T4094] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 87.791003][ T286] syz-executor: attempt to access beyond end of device [ 87.791003][ T286] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 87.922604][ T345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.940413][ T4101] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1349'. [ 87.949560][ T345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.966101][ T345] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 87.984709][ T345] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 87.994195][ T345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.012232][ T345] usb 2-1: config 0 descriptor?? [ 88.288871][ T731] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 88.379851][ T19] cdc_ncm 5-1:1.0: bind() failure [ 88.387882][ T19] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 88.402439][ T19] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 88.416784][ T19] usb 5-1: USB disconnect, device number 9 [ 88.423857][ T345] plantronics 0003:047F:FFFF.001C: unknown main item tag 0xd [ 88.439899][ T345] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 88.458859][ T345] plantronics 0003:047F:FFFF.001C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 88.482502][ T731] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 88.490852][ T731] usb 4-1: config 0 has no interface number 0 [ 88.497002][ T731] usb 4-1: too many endpoints for config 0 interface 247 altsetting 138: 111, using maximum allowed: 30 [ 88.508740][ T731] usb 4-1: config 0 interface 247 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 111 [ 88.522268][ T731] usb 4-1: config 0 interface 247 has no altsetting 0 [ 88.529124][ T731] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 88.538283][ T731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.547069][ T731] usb 4-1: config 0 descriptor?? [ 88.730328][ T24] usb 2-1: USB disconnect, device number 12 [ 88.825886][ T4135] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1364'. [ 88.865042][ T19] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 88.875452][ T19] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 88.960738][ T731] usb 4-1: Cannot read MAC address [ 88.965942][ T731] MOSCHIP usb-ethernet driver: probe of 4-1:0.247 failed with error -71 [ 88.976830][ T731] usb 4-1: USB disconnect, device number 13 [ 89.021431][ T4168] netlink: 'syz.2.1381': attribute type 4 has an invalid length. [ 89.265988][ T4196] loop4: detected capacity change from 0 to 1024 [ 89.272839][ T4196] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.282182][ T4203] loop1: detected capacity change from 0 to 256 [ 89.295469][ T4203] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 89.305154][ T4196] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 89.331418][ T285] EXT4-fs (loop4): unmounting filesystem. [ 89.409271][ T4228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1405'. [ 89.411123][ T4226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1404'. [ 89.488720][ T4235] loop3: detected capacity change from 0 to 256 [ 89.497647][ T4235] exfat: Deprecated parameter 'utf8' [ 89.514110][ T4235] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 89.543178][ T4238] loop3: detected capacity change from 0 to 256 [ 89.555496][ T4238] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 89.618783][ T4248] loop3: detected capacity change from 0 to 512 [ 89.625934][ T19] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 89.673162][ T4257] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1419'. [ 89.693008][ T4261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1420'. [ 89.750057][ T4269] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.759328][ T4269] FAT-fs (loop3): unable to read boot sector [ 89.810039][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.820999][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.830810][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 89.843786][ T19] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 89.852847][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.861457][ T19] usb 5-1: config 0 descriptor?? [ 90.238459][ T4277] input: syz0 as /devices/virtual/input/input26 [ 90.240547][ T4278] loop2: detected capacity change from 0 to 256 [ 90.270880][ T19] plantronics 0003:047F:FFFF.001E: unknown main item tag 0xd [ 90.279914][ T4278] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 90.293822][ T19] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 90.309259][ T19] plantronics 0003:047F:FFFF.001E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 90.531968][ T4291] loop3: detected capacity change from 0 to 40427 [ 90.543904][ T4291] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.560014][ T731] usb 5-1: USB disconnect, device number 10 [ 90.580304][ T4291] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.609010][ T287] syz-executor: attempt to access beyond end of device [ 90.609010][ T287] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 91.080421][ T4310] loop4: detected capacity change from 0 to 512 [ 91.099256][ T4310] EXT4-fs: Ignoring removed nobh option [ 91.137712][ T4310] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1441: iget: bad i_size value: 38620345925642 [ 91.209101][ T4310] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1441: couldn't read orphan inode 15 (err -117) [ 91.226436][ T4310] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 91.249858][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 91.249871][ T28] audit: type=1400 audit(1758689824.893:622): avc: denied { append } for pid=4309 comm="syz.4.1441" path="/287/file1/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 91.318269][ T28] audit: type=1400 audit(1758689824.943:623): avc: denied { map } for pid=4309 comm="syz.4.1441" path="/287/file1/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 91.353695][ T4310] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1441: bg 0: block 5: invalid block bitmap [ 91.366856][ T28] audit: type=1400 audit(1758689824.953:624): avc: denied { write } for pid=4321 comm="syz.1.1445" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 91.399056][ T4310] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 91.417946][ T4310] EXT4-fs (loop4): This should not happen!! Data will be lost [ 91.417946][ T4310] [ 91.439720][ T4310] EXT4-fs (loop4): Total free blocks count 0 [ 91.448906][ T4310] EXT4-fs (loop4): Free/Dirty block details [ 91.457096][ T4310] EXT4-fs (loop4): free_blocks=0 [ 91.465976][ T4310] EXT4-fs (loop4): dirty_blocks=968 [ 91.471701][ T4310] EXT4-fs (loop4): Block reservation details [ 91.477783][ T4310] EXT4-fs (loop4): i_reserved_data_blocks=968 [ 91.504689][ T2430] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 16 with max blocks 948 with error 28 [ 91.508025][ T28] audit: type=1400 audit(1758689825.143:625): avc: denied { unlink } for pid=4311 comm="syz.0.1452" name="#3" dev="tmpfs" ino=1685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.573045][ T2430] Bluetooth: hci0: Frame reassembly failed (-84) [ 91.576432][ T28] audit: type=1400 audit(1758689825.213:626): avc: denied { ioctl } for pid=4343 comm="syz.4.1464" path="socket:[29594]" dev="sockfs" ino=29594 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.579461][ T39] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 91.759896][ T39] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 91.769991][ T39] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 91.789923][ T39] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 91.799046][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.807016][ T39] usb 2-1: Product: syz [ 91.811292][ T39] usb 2-1: Manufacturer: syz [ 91.815857][ T39] usb 2-1: SerialNumber: syz [ 91.821310][ T39] usb 2-1: config 0 descriptor?? [ 91.828990][ T4323] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 91.837612][ T4323] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 91.838946][ T345] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 91.853470][ T4354] netlink: 'syz.3.1458': attribute type 12 has an invalid length. [ 91.862093][ T4354] xt_hashlimit: max too large, truncated to 1048576 [ 91.896700][ T28] audit: type=1400 audit(1758689825.533:627): avc: denied { wake_alarm } for pid=4357 comm="syz.3.1460" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 91.925117][ T28] audit: type=1400 audit(1758689825.563:628): avc: denied { relabelfrom } for pid=4361 comm="syz.3.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 91.945734][ T28] audit: type=1400 audit(1758689825.563:629): avc: denied { relabelto } for pid=4361 comm="syz.3.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 91.991424][ T28] audit: type=1400 audit(1758689825.633:630): avc: denied { create } for pid=4365 comm="syz.2.1465" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.013281][ T28] audit: type=1400 audit(1758689825.633:631): avc: denied { read } for pid=4363 comm="syz.3.1466" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.041029][ T4368] loop3: detected capacity change from 0 to 512 [ 92.047558][ T4368] EXT4-fs: Ignoring removed nobh option [ 92.053980][ T4323] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.055234][ T4368] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1468: iget: bad i_size value: 38620345925642 [ 92.067699][ T4323] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 92.074232][ T4368] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1468: couldn't read orphan inode 15 (err -117) [ 92.081846][ T345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.092951][ T4368] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 92.122170][ T345] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.135251][ T345] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.155820][ T345] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.171432][ T345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.185107][ T345] usb 1-1: config 0 descriptor?? [ 92.219427][ T4374] loop2: detected capacity change from 0 to 128 [ 92.226201][ T4374] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.238516][ T4374] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.267174][ T4368] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1468: bg 0: block 5: invalid block bitmap [ 92.279805][ T4368] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 92.292348][ T4368] EXT4-fs (loop3): This should not happen!! Data will be lost [ 92.292348][ T4368] [ 92.302376][ T4368] EXT4-fs (loop3): Total free blocks count 0 [ 92.308751][ T4368] EXT4-fs (loop3): Free/Dirty block details [ 92.315109][ T4368] EXT4-fs (loop3): free_blocks=0 [ 92.320562][ T4368] EXT4-fs (loop3): dirty_blocks=4028 [ 92.327089][ T4368] EXT4-fs (loop3): Block reservation details [ 92.333286][ T4368] EXT4-fs (loop3): i_reserved_data_blocks=4028 [ 92.354824][ T2430] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 16 with max blocks 2048 with error 28 [ 101.141164][ T3104] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 102.492742][ T39] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 102.515145][ T345] usbhid 1-1:0.0: can't add hid device: -71 [ 102.518096][ T4344] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 102.521181][ T345] usbhid: probe of 1-1:0.0 failed with error -71 [ 102.535414][ T39] usb 2-1: USB disconnect, device number 13 [ 102.544604][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 102.544618][ T28] audit: type=1400 audit(1758689836.183:636): avc: denied { ioctl } for pid=4383 comm="syz.1.1473" path="socket:[30755]" dev="sockfs" ino=30755 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.577142][ T345] usb 1-1: USB disconnect, device number 13 [ 102.601106][ T28] audit: type=1400 audit(1758689836.233:637): avc: denied { mount } for pid=4389 comm="syz.3.1485" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.607267][ T4394] SELinux: truncated policydb string identifier [ 102.624504][ T28] audit: type=1400 audit(1758689836.243:638): avc: denied { load_policy } for pid=4392 comm="syz.1.1477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 102.634344][ T4394] SELinux: failed to load policy [ 102.659795][ T4396] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1478'. [ 102.659815][ T28] audit: type=1400 audit(1758689836.303:639): avc: denied { read } for pid=4391 comm="syz.2.1476" lport=52831 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.688876][ T4396] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1478'. [ 102.718487][ T28] audit: type=1400 audit(1758689836.313:640): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 102.778752][ T28] audit: type=1400 audit(1758689836.353:641): avc: denied { read } for pid=4397 comm="syz.2.1479" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 102.828960][ T28] audit: type=1400 audit(1758689836.353:642): avc: denied { open } for pid=4397 comm="syz.2.1479" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 102.889348][ T28] audit: type=1400 audit(1758689836.353:643): avc: denied { ioctl } for pid=4397 comm="syz.2.1479" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 102.965309][ T28] audit: type=1400 audit(1758689836.503:644): avc: denied { mounton } for pid=4408 comm="syz.0.1484" path="/320/file0" dev="tmpfs" ino=1706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 102.989054][ T4417] netlink: 'syz.0.1489': attribute type 3 has an invalid length. [ 102.996923][ T4417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 103.018355][ T4419] loop4: detected capacity change from 0 to 1024 [ 103.028977][ T28] audit: type=1400 audit(1758689836.533:645): avc: denied { watch } for pid=4412 comm="syz.0.1486" path="/321" dev="tmpfs" ino=1707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 103.055869][ T4419] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 103.080900][ T4423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1491'. [ 103.090607][ T285] EXT4-fs (loop4): unmounting filesystem. [ 103.166113][ T4433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1496'. [ 103.258975][ T4448] loop4: detected capacity change from 0 to 512 [ 103.278868][ T345] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 103.461957][ T19] kernel write not supported for file bpf-prog (pid: 19 comm: kworker/0:1) [ 103.471806][ T345] usb 3-1: config 1 interface 0 has no altsetting 0 [ 103.489606][ T345] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.499352][ T345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 103.508916][ T345] usb 3-1: SerialNumber: syz [ 103.515910][ T4477] binder: 4476:4477 ioctl c0306201 2000000003c0 returned -14 [ 103.519241][ T4407] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 103.561143][ T4482] input: syz1 as /devices/virtual/input/input28 [ 103.567044][ T4399] loop3: detected capacity change from 0 to 131072 [ 103.574595][ T4399] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 103.586440][ T4399] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 103.607341][ T4399] F2FS-fs (loop3): Found nat_bits in checkpoint [ 103.659980][ T4399] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 103.667111][ T4399] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 103.764871][ T4407] loop2: detected capacity change from 0 to 256 [ 103.776115][ T345] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 103.784422][ T345] usb 3-1: USB disconnect, device number 8 [ 103.897889][ T4504] 8021q: VLANs not supported on gre0 [ 103.943484][ T4506] kvm [4505]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 103.951837][ T4506] kvm [4505]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 104.063112][ T4523] input: syz1 as /devices/virtual/input/input29 [ 104.113577][ T4532] TCP: TCP_TX_DELAY enabled [ 104.391213][ T4560] loop3: detected capacity change from 0 to 256 [ 104.398864][ T60] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 104.503685][ T4573] x_tables: ip6_tables: CT target: only valid in raw table, not ethtool [ 104.543804][ T4580] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 104.551555][ T4580] SELinux: failed to load policy [ 104.589939][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 104.601123][ T60] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 104.616367][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.625161][ T60] usb 2-1: config 0 descriptor?? [ 104.630673][ T4536] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 104.668863][ T345] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 104.713311][ T4599] loop4: detected capacity change from 0 to 128 [ 104.721321][ T4599] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 104.734445][ T4599] ext4 filesystem being mounted at /310/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.780695][ T285] EXT4-fs (loop4): unmounting filesystem. [ 104.802755][ T4597] loop3: detected capacity change from 0 to 40427 [ 104.810501][ T4597] F2FS-fs (loop3): invalid crc value [ 104.817681][ T4597] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.849272][ T4597] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 104.859865][ T345] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.870744][ T345] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.884454][ T345] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 104.885353][ T4597] syz.3.1566: attempt to access beyond end of device [ 104.885353][ T4597] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.917388][ T345] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.930302][ T4609] loop4: detected capacity change from 0 to 512 [ 104.936579][ T345] usb 3-1: SerialNumber: syz [ 104.937015][ T4609] EXT4-fs: Ignoring removed i_version option [ 104.965318][ T4609] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1569: inode #1: comm syz.4.1569: iget: illegal inode # [ 104.988614][ T4609] EXT4-fs (loop4): Remounting filesystem read-only [ 105.000556][ T4609] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1569: error while reading EA inode 1 err=-117 [ 105.013098][ T4609] EXT4-fs (loop4): Remounting filesystem read-only [ 105.020158][ T4609] EXT4-fs (loop4): 1 orphan inode deleted [ 105.025951][ T4609] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 105.045064][ T60] hid-generic 0003:04F3:0755.001F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 105.048093][ T4609] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.1569: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 105.077165][ T4609] EXT4-fs (loop4): Remounting filesystem read-only [ 105.100943][ T285] EXT4-fs (loop4): unmounting filesystem. [ 105.121999][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 105.148565][ T345] usb 3-1: 0:2 : does not exist [ 105.159769][ T345] usb 3-1: USB disconnect, device number 9 [ 105.257417][ T19] usb 2-1: USB disconnect, device number 14 [ 105.468870][ T288] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 105.649852][ T288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.660823][ T288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.670810][ T288] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.683884][ T288] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.693065][ T288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.701851][ T288] usb 5-1: config 0 descriptor?? [ 105.738851][ T60] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 105.918844][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 105.925122][ T60] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 178, changing to 11 [ 105.936529][ T60] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.943307][ T60] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 105.952546][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.961357][ T60] usb 1-1: config 0 descriptor?? [ 105.985608][ T4660] loop2: detected capacity change from 0 to 131072 [ 105.992581][ T4660] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 106.000708][ T4660] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 106.009993][ T4660] F2FS-fs (loop2): invalid crc value [ 106.017111][ T4660] F2FS-fs (loop2): Found nat_bits in checkpoint [ 106.049131][ T731] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 106.056508][ T4660] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 106.063766][ T4660] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 106.109970][ T288] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 106.117377][ T288] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 106.135143][ T288] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 106.152792][ T288] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 106.160278][ T288] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 106.167670][ T288] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 106.183254][ T288] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 106.198899][ T288] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 106.206641][ T288] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 106.214100][ T288] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 106.221559][ T288] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 106.229138][ T288] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 106.236564][ T288] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 106.239940][ T731] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.244057][ T288] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 106.256465][ T731] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.278978][ T288] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 106.289313][ T288] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 106.289355][ T731] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 106.303349][ T288] plantronics 0003:047F:FFFF.0020: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 106.309867][ T731] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 106.326644][ T731] usb 2-1: SerialNumber: syz [ 106.368394][ T60] hid (null): global environment stack underflow [ 106.378005][ T60] hid (null): unknown global tag 0xd [ 106.403794][ T60] hid (null): unknown global tag 0x86 [ 106.409465][ T60] hid (null): unknown global tag 0x90 [ 106.414970][ T60] hid (null): report_id 4131346620 is invalid [ 106.421278][ T60] hid (null): unknown global tag 0xe [ 106.426612][ T60] hid (null): unknown global tag 0xd [ 106.432728][ T60] hid (null): global environment stack overflow [ 106.439113][ T60] hid (null): unknown global tag 0xe [ 106.444895][ T60] hid (null): unknown global tag 0xd [ 106.459734][ T288] usb 5-1: USB disconnect, device number 11 [ 106.542858][ T731] usb 2-1: 0:2 : does not exist [ 106.552471][ T731] usb 2-1: USB disconnect, device number 15 [ 106.585994][ T60] usb 1-1: USB disconnect, device number 14 [ 106.608116][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.616070][ T4674] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.623910][ T4674] device bridge_slave_0 entered promiscuous mode [ 106.633390][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.640589][ T4674] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.648190][ T4674] device bridge_slave_1 entered promiscuous mode [ 106.713557][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.720621][ T4674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.727893][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.734926][ T4674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.755636][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.763695][ T2430] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.774257][ T2430] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.790518][ T2449] bridge0: port 3(gretap0) entered disabled state [ 106.797531][ T2449] device gretap0 left promiscuous mode [ 106.803155][ T2449] bridge0: port 3(gretap0) entered disabled state [ 106.810347][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.818437][ T2430] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.825454][ T2430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.843607][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.854063][ T2430] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.861126][ T2430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.879673][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.887694][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.905745][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.918383][ T4674] device veth0_vlan entered promiscuous mode [ 106.926834][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.935150][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.943259][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.953524][ T2430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 106.962512][ T2449] device bridge_slave_1 left promiscuous mode [ 106.968606][ T2449] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.977016][ T2449] device bridge_slave_0 left promiscuous mode [ 106.983368][ T2449] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.993510][ T2449] device veth1_macvtap left promiscuous mode [ 107.000048][ T2449] device veth0_vlan left promiscuous mode [ 107.124190][ T4674] device veth1_macvtap entered promiscuous mode [ 107.144590][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.162575][ T2514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.364449][ T4737] input: syz0 as /devices/virtual/input/input30 [ 107.697516][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 107.697533][ T28] audit: type=1400 audit(1758689841.333:718): avc: denied { ioctl } for pid=4777 comm="syz.2.1640" path="socket:[33045]" dev="sockfs" ino=33045 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.755809][ T28] audit: type=1400 audit(1758689841.373:719): avc: denied { bind } for pid=4777 comm="syz.2.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.802292][ T28] audit: type=1400 audit(1758689841.373:720): avc: denied { setopt } for pid=4777 comm="syz.2.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 107.952650][ T28] audit: type=1400 audit(1758689841.593:721): avc: denied { read } for pid=4782 comm="syz.2.1642" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 107.994682][ T28] audit: type=1400 audit(1758689841.623:722): avc: denied { open } for pid=4782 comm="syz.2.1642" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 108.072530][ T28] audit: type=1400 audit(1758689841.713:723): avc: denied { bind } for pid=4794 comm="syz.2.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 108.094542][ T28] audit: type=1400 audit(1758689841.713:724): avc: denied { read write } for pid=4796 comm="syz.2.1648" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.118061][ T28] audit: type=1400 audit(1758689841.713:725): avc: denied { open } for pid=4796 comm="syz.2.1648" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.141435][ T28] audit: type=1400 audit(1758689841.713:726): avc: denied { ioctl } for pid=4796 comm="syz.2.1648" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 108.210090][ T4799] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1649'. [ 108.265076][ T28] audit: type=1400 audit(1758689841.903:727): avc: denied { listen } for pid=4801 comm="syz.4.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 108.516495][ T4832] loop4: detected capacity change from 0 to 512 [ 108.638676][ T288] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 108.647747][ T288] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 108.655461][ T288] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 108.663391][ T288] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 108.672511][ T288] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 108.673313][ T4854] loop2: detected capacity change from 0 to 128 [ 108.680235][ T288] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 108.694443][ T288] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 108.705276][ T288] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 108.731781][ T288] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 108.749265][ T288] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 108.767460][ T288] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 108.777907][ T288] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 108.791794][ T288] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 108.799889][ T288] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 108.807286][ T288] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 108.814828][ T288] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 108.822631][ T288] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 108.830143][ T288] hid-generic 0003:0004:0000.0022: unknown main item tag 0x0 [ 108.849062][ T288] hid-generic 0003:0004:0000.0022: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 109.019393][ T4887] incfs: Backing dir is not set, filesystem can't be mounted. [ 109.037849][ T4887] incfs: mount failed -2 [ 109.348870][ T288] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 109.388876][ T19] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 109.528997][ T288] usb 2-1: Using ep0 maxpacket: 32 [ 109.537289][ T288] usb 2-1: config 1 interface 0 altsetting 77 bulk endpoint 0x3 has invalid maxpacket 1023 [ 109.547319][ T288] usb 2-1: config 1 interface 0 altsetting 77 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.560369][ T288] usb 2-1: config 1 interface 0 has no altsetting 0 [ 109.567592][ T288] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 109.576652][ T288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 109.584679][ T288] usb 2-1: SerialNumber: syz [ 109.590260][ T4897] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.597411][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.608618][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.618398][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 109.631621][ T19] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.640910][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.651083][ T19] usb 5-1: config 0 descriptor?? [ 109.738879][ T751] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 109.810562][ T4897] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 109.894449][ T4960] loop2: detected capacity change from 0 to 512 [ 109.909885][ T4960] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0082] [ 109.917922][ T4960] System zones: 0-2, 18-18, 34-35 [ 109.924167][ T4960] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.1722: bad orphan inode 11862016 [ 109.929941][ T751] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 109.934998][ T4960] EXT4-fs (loop2): Remounting filesystem read-only [ 109.948895][ T751] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 109.950502][ T4960] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 109.968837][ T751] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.969149][ T4960] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.999773][ T751] usb 1-1: string descriptor 0 read error: -22 [ 110.006031][ T751] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.019050][ T751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.033953][ T4971] loop3: detected capacity change from 0 to 16 [ 110.041108][ T751] usb 1-1: 0:2 : does not exist [ 110.048512][ T4971] erofs: (device loop3): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 110.049607][ T286] EXT4-fs (loop2): unmounting filesystem. [ 110.064805][ T19] plantronics 0003:047F:FFFF.0023: ignoring exceeding usage max [ 110.073081][ T19] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 110.082142][ T19] plantronics 0003:047F:FFFF.0023: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 110.135697][ T4979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1730'. [ 110.171871][ T4983] loop3: detected capacity change from 0 to 256 [ 110.183468][ T4983] FAT-fs (loop3): Directory bread(block 64) failed [ 110.190070][ T4983] FAT-fs (loop3): Directory bread(block 65) failed [ 110.196625][ T4983] FAT-fs (loop3): Directory bread(block 66) failed [ 110.203397][ T4983] FAT-fs (loop3): Directory bread(block 67) failed [ 110.211156][ T4983] FAT-fs (loop3): Directory bread(block 68) failed [ 110.217758][ T4983] FAT-fs (loop3): Directory bread(block 69) failed [ 110.226742][ T288] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 110.238698][ T4983] FAT-fs (loop3): Directory bread(block 70) failed [ 110.249486][ T4983] FAT-fs (loop3): Directory bread(block 71) failed [ 110.256047][ T4983] FAT-fs (loop3): Directory bread(block 72) failed [ 110.262741][ T4983] FAT-fs (loop3): Directory bread(block 73) failed [ 110.274929][ T288] usb 1-1: USB disconnect, device number 15 [ 110.280097][ T4975] loop2: detected capacity change from 0 to 40427 [ 110.288937][ T4975] F2FS-fs (loop2): invalid crc value [ 110.295191][ T4975] F2FS-fs (loop2): Found nat_bits in checkpoint [ 110.313878][ T4983] syz.3.1733: attempt to access beyond end of device [ 110.313878][ T4983] loop3: rw=2049, sector=1768, nr_sectors = 128 limit=256 [ 110.326604][ T4975] F2FS-fs (loop2): Start checkpoint disabled! [ 110.334852][ T2430] kworker/u4:363: attempt to access beyond end of device [ 110.334852][ T2430] loop3: rw=1, sector=1896, nr_sectors = 1924 limit=256 [ 110.334870][ T4975] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 110.356951][ T751] usb 5-1: USB disconnect, device number 12 [ 110.391549][ T2430] kworker/u4:363: attempt to access beyond end of device [ 110.391549][ T2430] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 110.512839][ T4995] loop2: detected capacity change from 0 to 512 [ 110.519266][ T4995] journal_path: Lookup failure for './file0/../file0' [ 110.526029][ T4995] EXT4-fs: error: could not find journal device path [ 110.570870][ T4995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1737'. [ 110.848857][ T751] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 111.029828][ T751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.041030][ T751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.050888][ T751] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.064036][ T751] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.073113][ T751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.081701][ T751] usb 3-1: config 0 descriptor?? [ 111.271578][ T5031] syz.3.1752[5031] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.271628][ T5031] syz.3.1752[5031] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.285478][ T5031] serio: Serial port ptm0 [ 111.502331][ T751] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 111.510557][ T751] plantronics 0003:047F:FFFF.0024: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 111.769343][ T60] usb 3-1: USB disconnect, device number 10 [ 111.965675][ T5039] block device autoloading is deprecated and will be removed. [ 111.973433][ T5039] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.982677][ T5039] FAT-fs (loop1): unable to read boot sector [ 111.998849][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 112.082082][ T751] usb 2-1: USB disconnect, device number 16 [ 112.088456][ T751] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 112.104058][ T5043] device pim6reg1 entered promiscuous mode [ 112.178896][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 112.190202][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 112.203800][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.214254][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.231151][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 112.244426][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.252587][ T24] usb 5-1: Product: syz [ 112.256794][ T24] usb 5-1: Manufacturer: syz [ 112.261184][ T5045] loop1: detected capacity change from 0 to 40427 [ 112.261530][ T24] usb 5-1: SerialNumber: syz [ 112.268633][ T5045] F2FS-fs (loop1): fault_injection options not supported [ 112.280488][ T5045] F2FS-fs (loop1): invalid crc value [ 112.293412][ T5045] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.310534][ T5064] loop2: detected capacity change from 0 to 512 [ 112.317379][ T5064] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.329257][ T5064] EXT4-fs (loop2): 1 truncate cleaned up [ 112.330534][ T5045] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.334972][ T5064] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 112.354153][ T5067] loop3: detected capacity change from 0 to 512 [ 112.361216][ T5067] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.374430][ T5067] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 112.383881][ T5045] syz.1.1758: attempt to access beyond end of device [ 112.383881][ T5045] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 112.416330][ T283] syz-executor: attempt to access beyond end of device [ 112.416330][ T283] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 112.477933][ T286] EXT4-fs (loop2): unmounting filesystem. [ 112.658800][ T5085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1774'. [ 112.667882][ T5085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1774'. [ 112.675615][ T24] usb 5-1: 0:2 : does not exist [ 112.765823][ T5087] loop3: detected capacity change from 0 to 40427 [ 112.773460][ T5087] F2FS-fs (loop3): invalid crc value [ 112.779692][ T5087] F2FS-fs (loop3): Found nat_bits in checkpoint [ 112.797480][ T5087] F2FS-fs (loop3): Start checkpoint disabled! [ 112.804032][ T5087] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 112.836935][ T5087] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 112.870376][ T2430] kworker/u4:363: attempt to access beyond end of device [ 112.870376][ T2430] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.981567][ T5091] loop3: detected capacity change from 0 to 128 [ 112.989448][ T5091] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 112.998058][ T5091] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.017945][ T4674] EXT4-fs (loop3): unmounting filesystem. [ 113.288883][ T24] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 113.300198][ T24] usb 5-1: USB disconnect, device number 13 [ 113.388871][ T751] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 113.396501][ T288] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 113.424930][ T5112] loop2: detected capacity change from 0 to 40427 [ 113.432237][ T5112] F2FS-fs (loop2): invalid crc value [ 113.438229][ T5112] F2FS-fs (loop2): Found nat_bits in checkpoint [ 113.455296][ T5112] F2FS-fs (loop2): Start checkpoint disabled! [ 113.461918][ T5112] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 113.482440][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 113.482452][ T28] audit: type=1400 audit(1758689847.135:753): avc: denied { rename } for pid=5111 comm="syz.2.1785" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 113.531631][ T28] audit: type=1400 audit(1758689847.135:754): avc: denied { unlink } for pid=5111 comm="syz.2.1785" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 113.592017][ T2481] kworker/u4:414: attempt to access beyond end of device [ 113.592017][ T2481] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 113.638856][ T288] usb 1-1: Using ep0 maxpacket: 16 [ 113.645187][ T751] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.655382][ T288] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 113.663569][ T288] usb 1-1: config 0 has no interface number 0 [ 113.669817][ T288] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.681395][ T288] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.691547][ T288] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 113.700703][ T288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.708898][ T751] usb 4-1: New USB device found, idVendor=050e, idProduct=a4a1, bcdDevice= 0.40 [ 113.718315][ T751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.726423][ T751] usb 4-1: Product: syz [ 113.731096][ T288] usb 1-1: config 0 descriptor?? [ 113.736243][ T751] usb 4-1: Manufacturer: syz [ 113.741139][ T751] usb 4-1: SerialNumber: syz [ 113.812619][ T5122] loop2: detected capacity change from 0 to 40427 [ 113.819675][ T5122] F2FS-fs (loop2): fault_injection options not supported [ 113.826724][ T5122] F2FS-fs (loop2): fault_type options not supported [ 113.834063][ T5122] F2FS-fs (loop2): invalid crc value [ 113.840518][ T5122] F2FS-fs (loop2): Found nat_bits in checkpoint [ 113.874801][ T5122] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 113.879927][ T28] audit: type=1400 audit(1758689847.525:755): avc: denied { write } for pid=5127 comm="syz.1.1790" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 113.891949][ T5128] random: crng reseeded on system resumption [ 113.949135][ T28] audit: type=1400 audit(1758689847.545:756): avc: denied { open } for pid=5127 comm="syz.1.1790" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 114.041257][ T28] audit: type=1400 audit(1758689847.695:757): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 114.067493][ T5134] loop2: detected capacity change from 0 to 512 [ 114.079224][ T5134] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.123857][ T5140] loop1: detected capacity change from 0 to 256 [ 114.131144][ T5140] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.143635][ T5140] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 114.154692][ T5140] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 114.176741][ T28] audit: type=1400 audit(1758689847.825:758): avc: denied { mounton } for pid=5138 comm="syz.1.1805" path="/354/bus/file0/file0" dev="loop1" ino=1048665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.211316][ T28] audit: type=1400 audit(1758689847.855:759): avc: denied { write } for pid=5138 comm="syz.1.1805" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.240518][ T28] audit: type=1400 audit(1758689847.855:760): avc: denied { add_name } for pid=5138 comm="syz.1.1805" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.263670][ T28] audit: type=1400 audit(1758689847.855:761): avc: denied { associate } for pid=5138 comm="syz.1.1805" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 114.266808][ T5148] loop2: detected capacity change from 0 to 1024 [ 114.285410][ T28] audit: type=1400 audit(1758689847.855:762): avc: denied { remove_name } for pid=5138 comm="syz.1.1805" name="file0" dev="loop1" ino=1048665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.315408][ T5148] EXT4-fs: Ignoring removed orlov option [ 114.340188][ T5148] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 114.348658][ T5148] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.369021][ T2481] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: comm kworker/u4:414: lblock 0 mapped to illegal pblock 0 (length 1) [ 114.382939][ T2481] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 114.383992][ T288] input: HID 28bd:0071 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0071.0025/input/input31 [ 114.395556][ T2481] EXT4-fs (loop2): This should not happen!! Data will be lost [ 114.395556][ T2481] [ 114.407847][ T288] input: HID 28bd:0071 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0071.0025/input/input32 [ 114.417161][ T286] EXT4-fs (loop2): unmounting filesystem. [ 114.435927][ T288] uclogic 0003:28BD:0071.0025: input,hiddev96,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.0-1/input1 [ 114.458877][ T60] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 114.603331][ T39] usb 1-1: USB disconnect, device number 16 [ 114.639862][ T60] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.650806][ T60] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 114.661607][ T60] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 114.672666][ T60] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.681745][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.689827][ T60] usb 5-1: Product: syz [ 114.694138][ T60] usb 5-1: Manufacturer: syz [ 114.698751][ T60] usb 5-1: SerialNumber: syz [ 114.768849][ T24] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 114.783627][ T751] cdc_ncm 4-1:1.0: bind() failure [ 114.789738][ T751] usb 4-1: USB disconnect, device number 14 [ 114.949949][ T24] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 114.959041][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.967393][ T24] usb 3-1: config 0 descriptor?? [ 115.358853][ T380] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 115.375501][ T24] smartjoyplus 0003:0925:8866.0026: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.2-1/input0 [ 115.387171][ T24] smartjoyplus 0003:0925:8866.0026: Force feedback for SmartJoy PLUS PS2/USB adapter [ 115.468844][ T751] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 115.538827][ T380] usb 2-1: Using ep0 maxpacket: 8 [ 115.544762][ T380] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.554860][ T380] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 115.565034][ T380] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 115.574065][ T380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.582121][ T380] usb 2-1: Product: syz [ 115.582534][ T345] usb 3-1: USB disconnect, device number 11 [ 115.586303][ T380] usb 2-1: Manufacturer: syz [ 115.596798][ T380] usb 2-1: SerialNumber: syz [ 115.601779][ T380] usb 2-1: config 0 descriptor?? [ 115.649846][ T751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.660728][ T751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.670481][ T751] usb 1-1: New USB device found, idVendor=0457, idProduct=ffff, bcdDevice= 0.00 [ 115.679529][ T751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.687970][ T751] usb 1-1: config 0 descriptor?? [ 115.708661][ T60] cdc_ncm 5-1:1.0: bind() failure [ 115.714576][ T60] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 115.721460][ T60] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 115.728929][ T60] usb 5-1: USB disconnect, device number 14 [ 116.023690][ T345] usb 2-1: USB disconnect, device number 17 [ 116.095502][ T751] hid-generic 0003:0457:FFFF.0027: unknown main item tag 0x0 [ 116.102905][ T751] hid-generic 0003:0457:FFFF.0027: unknown main item tag 0x0 [ 116.111203][ T751] hid-generic 0003:0457:FFFF.0027: hidraw0: USB HID v0.00 Device [HID 0457:ffff] on usb-dummy_hcd.0-1/input0 [ 116.243421][ T5195] loop4: detected capacity change from 0 to 512 [ 116.255042][ T5195] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.270053][ T5195] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 116.278106][ T5195] System zones: 0-2, 18-18, 34-34 [ 116.283668][ T5195] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 116.292579][ T5195] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.303726][ T345] usb 1-1: USB disconnect, device number 17 [ 116.314231][ T285] EXT4-fs (loop4): unmounting filesystem. [ 116.420275][ T5218] syz.4.1828[5218] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.420341][ T5218] syz.4.1828[5218] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.435619][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.461071][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 116.474210][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.482762][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 116.491004][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.499458][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.507588][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.516404][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.524441][ T2481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.538944][ T60] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 116.673362][ T5239] loop3: detected capacity change from 0 to 40427 [ 116.680111][ T5239] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 116.687736][ T5239] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 116.696361][ T5239] F2FS-fs (loop3): invalid crc value [ 116.702611][ T5239] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.718880][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 116.720146][ T5239] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 116.726423][ T60] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 116.731464][ T5239] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 116.740089][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.740112][ T60] usb 3-1: Product: syz [ 116.759720][ T60] usb 3-1: Manufacturer: syz [ 116.764317][ T60] usb 3-1: SerialNumber: syz [ 116.769582][ T60] usb 3-1: config 0 descriptor?? [ 116.775603][ T60] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 116.783403][ T60] usb 3-1: Detected FT-X [ 116.788036][ T4674] syz-executor: attempt to access beyond end of device [ 116.788036][ T4674] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 116.819833][ T751] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 116.975851][ T60] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 117.020022][ T751] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.037972][ T751] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.047838][ T751] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 117.056917][ T751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.065592][ T751] usb 5-1: config 0 descriptor?? [ 117.327410][ T5253] loop1: detected capacity change from 0 to 131072 [ 117.334424][ T5253] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 117.342535][ T5253] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 117.353245][ T5253] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.378032][ T5253] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 117.385139][ T60] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 117.385141][ T5253] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 117.392312][ T60] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 117.408559][ T60] usb 3-1: USB disconnect, device number 12 [ 117.415121][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 117.424570][ T60] ftdi_sio 3-1:0.0: device disconnected [ 117.451779][ T5263] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1858'. [ 117.481342][ T5266] loop3: detected capacity change from 0 to 128 [ 117.485344][ T5268] input: syz1 as /devices/virtual/input/input33 [ 117.918843][ T60] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 118.018270][ T5293] loop2: detected capacity change from 0 to 40427 [ 118.024733][ T380] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 118.026831][ T5293] F2FS-fs (loop2): Found nat_bits in checkpoint [ 118.049154][ T5293] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 118.069018][ T5293] F2FS-fs (loop2): access invalid blkaddr:2048 [ 118.075173][ T5293] CPU: 1 PID: 5293 Comm: syz.2.1860 Not tainted syzkaller #0 [ 118.081598][ T751] usb 5-1: USB disconnect, device number 15 [ 118.082532][ T5293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.098455][ T5293] Call Trace: [ 118.101713][ T5293] [ 118.104624][ T5293] __dump_stack+0x21/0x24 [ 118.108932][ T5293] dump_stack_lvl+0xee/0x150 [ 118.113496][ T5293] ? __cfi_dump_stack_lvl+0x8/0x8 [ 118.118490][ T5293] ? __cfi_f2fs_get_dnode_of_data+0x10/0x10 [ 118.124365][ T5293] dump_stack+0x15/0x24 [ 118.128522][ T5293] __f2fs_is_valid_blkaddr+0xda6/0x1460 [ 118.134065][ T5293] f2fs_is_valid_blkaddr+0x23/0x30 [ 118.139150][ T5293] f2fs_map_blocks+0xc93/0x3a50 [ 118.143975][ T5293] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 118.149235][ T5293] ? xas_start+0x317/0x3e0 [ 118.153637][ T5293] ? xas_load+0x39e/0x3b0 [ 118.157940][ T5293] ? xa_load+0xad/0xd0 [ 118.162010][ T5293] f2fs_mpage_readpages+0xa3a/0x1b70 [ 118.167274][ T5293] ? dquot_release_reservation_block+0xa0/0xa0 [ 118.173399][ T5293] ? cgroup_rstat_updated+0xf5/0x370 [ 118.178664][ T5293] ? xas_nomem+0x6b/0x1f0 [ 118.182977][ T5293] f2fs_readahead+0xfc/0x240 [ 118.187541][ T5293] ? __cfi_f2fs_readahead+0x10/0x10 [ 118.192712][ T5293] read_pages+0x1b0/0xdd0 [ 118.197017][ T5293] ? __cfi___filemap_add_folio+0x10/0x10 [ 118.202627][ T5293] ? page_cache_ra_unbounded+0x720/0x720 [ 118.208236][ T5293] ? folio_add_lru+0x260/0x390 [ 118.212976][ T5293] ? filemap_add_folio+0x105/0x150 [ 118.218067][ T5293] page_cache_ra_unbounded+0x5d1/0x720 [ 118.223500][ T5293] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 118.229457][ T5293] ? __switch_to+0x51f/0xe30 [ 118.234027][ T5293] page_cache_ra_order+0x36a/0xb70 [ 118.239122][ T5293] ? finish_task_switch+0x209/0x7b0 [ 118.244296][ T5293] ? __switch_to_asm+0x3a/0x60 [ 118.249033][ T5293] ? __schedule+0xb8f/0x14e0 [ 118.253595][ T5293] ? __cfi_page_cache_ra_order+0x10/0x10 [ 118.259211][ T5293] ondemand_readahead+0x817/0xdb0 [ 118.264213][ T5293] ? __kasan_check_read+0x11/0x20 [ 118.269215][ T5293] ? page_cache_sync_ra+0x490/0x490 [ 118.274407][ T5293] page_cache_sync_ra+0x41b/0x490 [ 118.279426][ T5293] f2fs_readdir+0x444/0x940 [ 118.283908][ T5293] ? __cfi_f2fs_readdir+0x10/0x10 [ 118.288915][ T5293] ? down_read_killable+0xb6/0x100 [ 118.294018][ T5293] ? __cfi_down_read_killable+0x10/0x10 [ 118.299546][ T5293] ? fsnotify_perm+0x269/0x5b0 [ 118.304286][ T5293] ? security_file_permission+0x94/0xb0 [ 118.309808][ T5293] iterate_dir+0x271/0x610 [ 118.314200][ T5293] ? __cfi_f2fs_readdir+0x10/0x10 [ 118.319201][ T5293] __se_sys_getdents64+0xe5/0x240 [ 118.324202][ T5293] ? __x64_sys_getdents64+0x90/0x90 [ 118.329372][ T5293] ? xfd_validate_state+0x70/0x150 [ 118.334463][ T5293] ? __cfi_filldir64+0x10/0x10 [ 118.339208][ T5293] ? fpregs_restore_userregs+0x128/0x260 [ 118.344828][ T5293] __x64_sys_getdents64+0x7b/0x90 [ 118.349828][ T5293] x64_sys_call+0x15c/0x9a0 [ 118.354308][ T5293] do_syscall_64+0x4c/0xa0 [ 118.358696][ T5293] ? clear_bhb_loop+0x30/0x80 [ 118.363346][ T5293] ? clear_bhb_loop+0x30/0x80 [ 118.367998][ T5293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.373865][ T5293] RIP: 0033:0x7fd522d8eec9 [ 118.378258][ T5293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.397845][ T5293] RSP: 002b:00007fd523cc2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 118.406235][ T5293] RAX: ffffffffffffffda RBX: 00007fd522fe5fa0 RCX: 00007fd522d8eec9 [ 118.414185][ T5293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 118.422133][ T5293] RBP: 00007fd522e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 118.430081][ T5293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.438025][ T5293] R13: 00007fd522fe6038 R14: 00007fd522fe5fa0 R15: 00007ffdb946d198 [ 118.445979][ T5293] [ 118.451161][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 118.452280][ T5293] syz.2.1860: attempt to access beyond end of device [ 118.452280][ T5293] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 118.457408][ T60] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 118.470725][ T5293] syz.2.1860: attempt to access beyond end of device [ 118.470725][ T5293] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 118.478229][ T60] usb 2-1: config 0 has no interface number 0 [ 118.478257][ T60] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.492070][ T5298] syz.2.1860: attempt to access beyond end of device [ 118.492070][ T5298] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 118.497764][ T60] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.497798][ T60] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 118.540935][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.549601][ T286] syz-executor: attempt to access beyond end of device [ 118.549601][ T286] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 118.559115][ T60] usb 2-1: config 0 descriptor?? [ 118.578954][ T380] usb 4-1: Using ep0 maxpacket: 16 [ 118.585611][ T380] usb 4-1: config 0 interface 0 has no altsetting 0 [ 118.592289][ T380] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 118.601799][ T380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.613522][ T380] usb 4-1: config 0 descriptor?? [ 118.908849][ T345] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 119.021544][ T380] hid (null): nested delimiters [ 119.026454][ T380] hid (null): report_id 42461 is invalid [ 119.089844][ T345] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 119.100674][ T345] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 119.112765][ T345] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.121840][ T345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.129832][ T345] usb 3-1: Product: syz [ 119.133990][ T345] usb 3-1: Manufacturer: syz [ 119.138570][ T345] usb 3-1: SerialNumber: syz [ 119.143925][ T5304] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 119.171835][ T60] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0029/input/input34 [ 119.184047][ T60] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0029/input/input35 [ 119.196549][ T60] uclogic 0003:28BD:0071.0029: input,hiddev96,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 119.227471][ T60] usb 4-1: USB disconnect, device number 15 [ 119.352804][ T5304] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 119.400128][ T380] usb 2-1: USB disconnect, device number 18 [ 119.456156][ T5306] loop4: detected capacity change from 0 to 1024 [ 119.471011][ T5306] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 119.479794][ T5306] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.498129][ T2481] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 119.502913][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 119.502926][ T28] audit: type=1400 audit(1758689853.145:781): avc: denied { read } for pid=5310 comm="syz.0.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.513373][ T2481] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 119.550634][ T2481] EXT4-fs (loop4): This should not happen!! Data will be lost [ 119.550634][ T2481] [ 119.561155][ T28] audit: type=1400 audit(1758689853.215:782): avc: denied { write } for pid=5310 comm="syz.0.1877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.580635][ T2481] EXT4-fs (loop4): Total free blocks count 0 [ 119.586626][ T2481] EXT4-fs (loop4): Free/Dirty block details [ 119.592761][ T2481] EXT4-fs (loop4): free_blocks=4293918720 [ 119.598492][ T2481] EXT4-fs (loop4): dirty_blocks=16 [ 119.603817][ T2481] EXT4-fs (loop4): Block reservation details [ 119.609941][ T2481] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 119.617183][ T285] EXT4-fs (loop4): unmounting filesystem. [ 119.749933][ T5319] loop3: detected capacity change from 0 to 512 [ 119.756415][ T5319] EXT4-fs: Ignoring removed orlov option [ 119.762474][ T5319] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 119.771491][ T5319] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 119.779788][ T5319] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.1865: corrupted in-inode xattr [ 119.791903][ T5319] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1865: couldn't read orphan inode 15 (err -117) [ 119.803866][ T5319] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 119.819774][ T4674] EXT4-fs (loop3): unmounting filesystem. [ 119.926719][ T28] audit: type=1400 audit(1758689853.575:783): avc: denied { lock } for pid=5327 comm="syz.1.1870" path="socket:[36011]" dev="sockfs" ino=36011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 119.992058][ T345] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 120.012013][ T345] cdc_ncm 3-1:1.0: bind() failure [ 120.017975][ T345] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 120.025698][ T345] cdc_ncm 3-1:1.1: bind() failure [ 120.034014][ T345] usb 3-1: USB disconnect, device number 13 [ 120.101740][ T5346] loop3: detected capacity change from 0 to 128 [ 120.122179][ T5348] loop3: detected capacity change from 0 to 512 [ 120.130008][ T5348] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1882: casefold flag without casefold feature [ 120.142737][ T5348] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1882: couldn't read orphan inode 15 (err -117) [ 120.154712][ T5348] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 120.168479][ T4674] EXT4-fs (loop3): unmounting filesystem. [ 120.318852][ T380] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 120.438835][ T60] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 120.505263][ T380] usb 2-1: config index 0 descriptor too short (expected 19492, got 36) [ 120.521917][ T380] usb 2-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 120.530943][ T380] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.543381][ T380] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 36 [ 120.554543][ T380] usb 2-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 120.569554][ T380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.578979][ T380] usb 2-1: config 0 descriptor?? [ 120.618871][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 120.625339][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.636255][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.645993][ T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 120.658886][ T60] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 120.667909][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.676555][ T60] usb 4-1: config 0 descriptor?? [ 120.789155][ T288] usb 2-1: USB disconnect, device number 19 [ 121.084060][ T60] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.002B/input/input36 [ 121.159828][ T60] appleir 0003:05AC:8241.002B: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 121.289805][ T288] usb 4-1: USB disconnect, device number 16 [ 121.813668][ T5375] loop2: detected capacity change from 0 to 512 [ 121.825537][ T5375] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1893: casefold flag without casefold feature [ 121.839802][ T5375] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1893: couldn't read orphan inode 15 (err -117) [ 121.852173][ T5375] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 121.871065][ T286] EXT4-fs (loop2): unmounting filesystem. [ 122.150379][ T5382] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1906'. [ 122.227423][ T5386] loop2: detected capacity change from 0 to 4096 [ 122.242212][ T5386] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 122.255035][ T5386] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.1896: corrupted inode contents [ 122.267572][ T5386] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #15: comm syz.2.1896: mark_inode_dirty error [ 122.279745][ T5386] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.1896: corrupted inode contents [ 122.291945][ T5386] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.1896: mark_inode_dirty error [ 122.303529][ T5386] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.1896: corrupted inode contents [ 122.316115][ T5386] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.1896: mark_inode_dirty error [ 122.327705][ T5386] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.1896: corrupted inode contents [ 122.339845][ T5386] EXT4-fs error (device loop2): ext4_truncate:4314: inode #15: comm syz.2.1896: mark_inode_dirty error [ 122.351142][ T5386] EXT4-fs error (device loop2) in ext4_setattr:5660: Corrupt filesystem [ 122.371128][ T5386] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.1896: corrupted inode contents [ 122.403511][ T286] EXT4-fs (loop2): unmounting filesystem. [ 122.411312][ T5396] netlink: 'syz.1.1912': attribute type 4 has an invalid length. [ 122.443064][ T380] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 122.451317][ T380] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 122.686625][ T28] audit: type=1400 audit(1758689856.335:784): avc: denied { setattr } for pid=5438 comm="syz.4.1922" name="/" dev="incremental-fs" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.757978][ T5448] loop4: detected capacity change from 0 to 512 [ 122.766289][ T5448] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1924: casefold flag without casefold feature [ 122.779323][ T5448] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1924: couldn't read orphan inode 15 (err -117) [ 122.792758][ T5448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 122.825796][ T285] EXT4-fs (loop4): unmounting filesystem. [ 122.920625][ T28] audit: type=1400 audit(1758689856.575:785): avc: denied { connect } for pid=5463 comm="syz.3.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.429169][ T28] audit: type=1400 audit(1758689862.085:786): avc: denied { bpf } for pid=5484 comm="syz.1.1941" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.453466][ T28] audit: type=1400 audit(1758689862.085:787): avc: denied { perfmon } for pid=5484 comm="syz.1.1941" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.475371][ T28] audit: type=1400 audit(1758689862.085:788): avc: denied { prog_run } for pid=5484 comm="syz.1.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 128.513390][ T28] audit: type=1400 audit(1758689862.165:789): avc: denied { read write } for pid=5494 comm="syz.0.1946" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.538090][ T28] audit: type=1400 audit(1758689862.195:790): avc: denied { open } for pid=5494 comm="syz.0.1946" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.561821][ T28] audit: type=1400 audit(1758689862.195:791): avc: denied { ioctl } for pid=5494 comm="syz.0.1946" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 128.708845][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 128.798842][ T60] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 128.890777][ T24] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.901816][ T24] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.911705][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.918284][ T24] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.927313][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.936036][ T24] usb 5-1: config 0 descriptor?? [ 128.979729][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.990595][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.000317][ T60] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.013179][ T60] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.022200][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.030528][ T60] usb 1-1: config 0 descriptor?? [ 129.437902][ T60] plantronics 0003:047F:FFFF.002E: ignoring exceeding usage max [ 129.446368][ T60] plantronics 0003:047F:FFFF.002E: No inputs registered, leaving [ 129.454816][ T60] plantronics 0003:047F:FFFF.002E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 129.543821][ T24] usb 5-1: string descriptor 0 read error: -22 [ 129.709277][ T60] usb 1-1: USB disconnect, device number 18 [ 129.744782][ T24] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002D/input/input37 [ 129.756660][ T28] audit: type=1400 audit(1758689863.405:792): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=1127 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.779037][ T28] audit: type=1400 audit(1758689863.405:793): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1127 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.779173][ T24] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002D/input/input38 [ 129.814058][ T24] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002D/input/input39 [ 129.826904][ T24] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.002D/input/input40 [ 129.828976][ T28] audit: type=1400 audit(1758689863.485:794): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1127 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.840054][ T24] uclogic 0003:256C:006D.002D: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 129.968280][ T24] usb 5-1: USB disconnect, device number 16 [ 130.236698][ T28] audit: type=1400 audit(1758689863.875:795): avc: denied { prog_load } for pid=5500 comm="syz.0.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 130.513428][ T2449] Bluetooth: hci0: Frame reassembly failed (-84) [ 130.556635][ T5527] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1957'. [ 130.765195][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.818909][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 131.019810][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.030712][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.040436][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.053842][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.062920][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.071242][ T24] usb 3-1: config 0 descriptor?? [ 131.078854][ T288] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 131.098859][ T345] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 131.259865][ T288] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.270864][ T288] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 131.281700][ T288] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 131.292886][ T288] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.302003][ T345] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 131.311054][ T288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.319099][ T345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.327362][ T288] usb 1-1: Product: syz [ 131.331713][ T345] usb 5-1: config 0 descriptor?? [ 131.336648][ T288] usb 1-1: Manufacturer: syz [ 131.341330][ T288] usb 1-1: SerialNumber: syz [ 131.479584][ T24] plantronics 0003:047F:FFFF.002F: ignoring exceeding usage max [ 131.487980][ T24] plantronics 0003:047F:FFFF.002F: No inputs registered, leaving [ 131.496856][ T24] plantronics 0003:047F:FFFF.002F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 131.748459][ T345] smartjoyplus 0003:0925:8866.0030: hidraw1: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.4-1/input0 [ 131.760224][ T345] smartjoyplus 0003:0925:8866.0030: Force feedback for SmartJoy PLUS PS2/USB adapter [ 131.760639][ T24] usb 3-1: USB disconnect, device number 14 [ 131.952021][ T345] usb 5-1: USB disconnect, device number 17 [ 132.289525][ T5545] random: crng reseeded on system resumption [ 132.361099][ T288] cdc_ncm 1-1:1.0: bind() failure [ 132.366698][ T288] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 132.373369][ T288] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 132.380470][ T288] usb 1-1: USB disconnect, device number 19 [ 132.568874][ T345] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 132.578945][ T3104] Bluetooth: hci0: command 0x1003 tx timeout [ 132.579029][ T992] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 132.591147][ T5522] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 132.738849][ T751] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 132.750029][ T345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 132.760977][ T345] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 132.773793][ T345] usb 2-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 132.783056][ T345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.794738][ T345] usb 2-1: config 0 descriptor?? [ 132.799943][ T5548] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 132.928921][ T751] usb 3-1: Using ep0 maxpacket: 8 [ 132.939920][ T751] usb 3-1: unable to get BOS descriptor or descriptor too short [ 132.948446][ T751] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 132.956907][ T751] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 132.965813][ T751] usb 3-1: config 4 has no interface number 0 [ 132.973768][ T751] usb 3-1: string descriptor 0 read error: -22 [ 132.980034][ T751] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 132.989088][ T751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.998027][ T751] usb 3-1: Found UVC 0.02 device (04f2:b746) [ 133.004929][ T751] usb 3-1: No valid video chain found. [ 133.099257][ T2481] Bluetooth: hci0: Frame reassembly failed (-84) [ 133.168869][ T751] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 133.208324][ T288] usb 3-1: USB disconnect, device number 15 [ 133.369984][ T751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.380884][ T751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.390598][ T751] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.403468][ T751] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.412501][ T751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.421820][ T751] usb 4-1: config 0 descriptor?? [ 133.423398][ T60] usb 2-1: USB disconnect, device number 20 [ 133.829285][ T751] plantronics 0003:047F:FFFF.0032: ignoring exceeding usage max [ 133.837563][ T751] plantronics 0003:047F:FFFF.0032: No inputs registered, leaving [ 133.846070][ T751] plantronics 0003:047F:FFFF.0032: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 133.946140][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 133.946156][ T28] audit: type=1400 audit(1758689867.595:827): avc: denied { sqpoll } for pid=5589 comm="syz.2.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 134.109359][ T288] usb 4-1: USB disconnect, device number 17 [ 134.438845][ T751] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 134.458844][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 134.621775][ T751] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.632746][ T751] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 134.644004][ T751] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.653110][ T751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.658846][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 134.661308][ T751] usb 2-1: Product: syz [ 134.667597][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 134.670472][ T751] usb 2-1: Manufacturer: syz [ 134.679848][ T24] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 134.682900][ T751] usb 2-1: SerialNumber: syz [ 134.690920][ T24] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 134.696768][ T751] cdc_mbim 2-1:1.0: skipping garbage [ 134.704100][ T24] usb 5-1: config 4 has no interface number 0 [ 134.717452][ T24] usb 5-1: string descriptor 0 read error: -22 [ 134.723692][ T24] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 134.732834][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.742112][ T24] usb 5-1: Found UVC 0.02 device (04f2:b746) [ 134.749829][ T24] usb 5-1: No valid video chain found. [ 134.897664][ T5609] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 134.955658][ T288] usb 5-1: USB disconnect, device number 18 [ 135.128927][ T997] Bluetooth: hci0: command 0x1003 tx timeout [ 135.128943][ T992] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 135.141415][ T5584] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 135.477889][ T28] audit: type=1400 audit(1758689869.125:828): avc: denied { create } for pid=5625 comm="syz.3.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 135.497268][ T28] audit: type=1400 audit(1758689869.125:829): avc: denied { write } for pid=5625 comm="syz.3.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 135.516763][ T5609] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 135.524443][ T751] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 135.531348][ T751] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 2a:22:a9:b9:89:41 [ 135.728855][ T288] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 135.728861][ T24] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 135.751352][ T751] usb 2-1: USB disconnect, device number 21 [ 135.757352][ T751] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 135.919826][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 135.930721][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 135.939855][ T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.943700][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 135.954367][ T288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.963538][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.973123][ T288] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.981829][ T24] usb 3-1: config 0 descriptor?? [ 135.994015][ T288] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.999174][ T5622] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 136.007944][ T288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.023599][ T288] usb 1-1: config 0 descriptor?? [ 136.169517][ T60] ================================================================== [ 136.177585][ T60] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 136.184587][ T60] Write of size 8 at addr ffff888117258a00 by task kworker/1:2/60 [ 136.192369][ T60] [ 136.194682][ T60] CPU: 1 PID: 60 Comm: kworker/1:2 Not tainted syzkaller #0 [ 136.201951][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 136.211982][ T60] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 136.218040][ T60] Call Trace: [ 136.221301][ T60] [ 136.224224][ T60] __dump_stack+0x21/0x24 [ 136.228544][ T60] dump_stack_lvl+0xee/0x150 [ 136.233128][ T60] ? __cfi_dump_stack_lvl+0x8/0x8 [ 136.238155][ T60] ? debug_smp_processor_id+0x17/0x20 [ 136.243525][ T60] ? enqueue_timer+0xae/0x480 [ 136.248196][ T60] print_address_description+0x71/0x200 [ 136.253737][ T60] print_report+0x4a/0x60 [ 136.258065][ T60] kasan_report+0x122/0x150 [ 136.262561][ T60] ? enqueue_timer+0xae/0x480 [ 136.267237][ T60] __asan_report_store8_noabort+0x17/0x20 [ 136.272947][ T60] enqueue_timer+0xae/0x480 [ 136.277445][ T60] __mod_timer+0x79f/0xb30 [ 136.281856][ T60] mod_timer+0x1f/0x30 [ 136.285918][ T60] ? wg_timers_any_authenticated_packet_traversal+0x81/0x1a0 [ 136.293286][ T60] wg_timers_any_authenticated_packet_traversal+0x133/0x1a0 [ 136.300562][ T60] wg_packet_tx_worker+0x15e/0x4e0 [ 136.305667][ T60] process_one_work+0x71f/0xc40 [ 136.310509][ T60] worker_thread+0xa29/0x11f0 [ 136.315176][ T60] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 136.320630][ T60] kthread+0x281/0x320 [ 136.324689][ T60] ? __cfi_worker_thread+0x10/0x10 [ 136.329791][ T60] ? __cfi_kthread+0x10/0x10 [ 136.334372][ T60] ret_from_fork+0x1f/0x30 [ 136.338783][ T60] [ 136.341793][ T60] [ 136.344108][ T60] Allocated by task 5584: [ 136.348420][ T60] kasan_set_track+0x4b/0x70 [ 136.353000][ T60] kasan_save_alloc_info+0x25/0x30 [ 136.358108][ T60] __kasan_kmalloc+0x95/0xb0 [ 136.362690][ T60] __kmalloc+0xb1/0x1e0 [ 136.366843][ T60] hci_alloc_dev_priv+0x27/0x1bd0 [ 136.371867][ T60] hci_uart_tty_ioctl+0x3d6/0xa20 [ 136.376886][ T60] tty_ioctl+0x8ef/0xc60 [ 136.381122][ T60] __se_sys_ioctl+0x12f/0x1b0 [ 136.385787][ T60] __x64_sys_ioctl+0x7b/0x90 [ 136.390365][ T60] x64_sys_call+0x58b/0x9a0 [ 136.394859][ T60] do_syscall_64+0x4c/0xa0 [ 136.399268][ T60] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.405157][ T60] [ 136.407472][ T60] Freed by task 5584: [ 136.411440][ T60] kasan_set_track+0x4b/0x70 [ 136.416021][ T60] kasan_save_free_info+0x31/0x50 [ 136.421041][ T60] ____kasan_slab_free+0x132/0x180 [ 136.426146][ T60] __kasan_slab_free+0x11/0x20 [ 136.430902][ T60] slab_free_freelist_hook+0xc2/0x190 [ 136.436268][ T60] __kmem_cache_free+0xb7/0x1b0 [ 136.441114][ T60] kfree+0x6f/0xf0 [ 136.444831][ T60] hci_release_dev+0x12a3/0x13b0 [ 136.449759][ T60] bt_host_release+0x82/0x90 [ 136.454341][ T60] device_release+0xa4/0x1d0 [ 136.458920][ T60] kobject_put+0x19d/0x280 [ 136.463333][ T60] put_device+0x1f/0x30 [ 136.467482][ T60] hci_dev_cmd+0x265/0x720 [ 136.471894][ T60] hci_sock_ioctl+0x41e/0x7f0 [ 136.476565][ T60] sock_do_ioctl+0x101/0x310 [ 136.481152][ T60] sock_ioctl+0x4d8/0x6e0 [ 136.485474][ T60] __se_sys_ioctl+0x12f/0x1b0 [ 136.490142][ T60] __x64_sys_ioctl+0x7b/0x90 [ 136.494725][ T60] x64_sys_call+0x58b/0x9a0 [ 136.499219][ T60] do_syscall_64+0x4c/0xa0 [ 136.503623][ T60] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.509510][ T60] [ 136.511822][ T60] Last potentially related work creation: [ 136.517523][ T60] kasan_save_stack+0x3a/0x60 [ 136.522193][ T60] __kasan_record_aux_stack+0xb6/0xc0 [ 136.527561][ T60] kasan_record_aux_stack_noalloc+0xb/0x10 [ 136.533366][ T60] insert_work+0x51/0x300 [ 136.537690][ T60] __queue_work+0x9b1/0xd30 [ 136.542191][ T60] queue_work_on+0xd2/0x140 [ 136.546691][ T60] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 136.551618][ T60] hci_cmd_sync_status+0x53/0x120 [ 136.556633][ T60] hci_dev_cmd+0x628/0x720 [ 136.561047][ T60] hci_sock_ioctl+0x41e/0x7f0 [ 136.565715][ T60] sock_do_ioctl+0x101/0x310 [ 136.570298][ T60] sock_ioctl+0x4d8/0x6e0 [ 136.574622][ T60] __se_sys_ioctl+0x12f/0x1b0 [ 136.579291][ T60] __x64_sys_ioctl+0x7b/0x90 [ 136.583869][ T60] x64_sys_call+0x58b/0x9a0 [ 136.588363][ T60] do_syscall_64+0x4c/0xa0 [ 136.592767][ T60] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.598651][ T60] [ 136.600961][ T60] Second to last potentially related work creation: [ 136.607528][ T60] kasan_save_stack+0x3a/0x60 [ 136.612197][ T60] __kasan_record_aux_stack+0xb6/0xc0 [ 136.617565][ T60] kasan_record_aux_stack_noalloc+0xb/0x10 [ 136.623363][ T60] insert_work+0x51/0x300 [ 136.627690][ T60] __queue_work+0x9b1/0xd30 [ 136.632187][ T60] queue_work_on+0xd2/0x140 [ 136.636681][ T60] hci_cmd_timeout+0x191/0x200 [ 136.641437][ T60] process_one_work+0x71f/0xc40 [ 136.646283][ T60] worker_thread+0xa29/0x11f0 [ 136.650946][ T60] kthread+0x281/0x320 [ 136.655006][ T60] ret_from_fork+0x1f/0x30 [ 136.659414][ T60] [ 136.661725][ T60] The buggy address belongs to the object at ffff888117258000 [ 136.661725][ T60] which belongs to the cache kmalloc-8k of size 8192 [ 136.675765][ T60] The buggy address is located 2560 bytes inside of [ 136.675765][ T60] 8192-byte region [ffff888117258000, ffff88811725a000) [ 136.689200][ T60] [ 136.691511][ T60] The buggy address belongs to the physical page: [ 136.697910][ T60] page:ffffea00045c9600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117258 [ 136.708136][ T60] head:ffffea00045c9600 order:3 compound_mapcount:0 compound_pincount:0 [ 136.716450][ T60] flags: 0x4000000000010200(slab|head|zone=1) [ 136.722515][ T60] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043500 [ 136.731087][ T60] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 136.739653][ T60] page dumped because: kasan: bad access detected [ 136.746053][ T60] page_owner tracks the page as allocated [ 136.751753][ T60] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4255, tgid 4254 (syz.1.1418), ts 89664828901, free_ts 88783053221 [ 136.772236][ T60] post_alloc_hook+0x1f5/0x210 [ 136.776997][ T60] prep_new_page+0x1c/0x110 [ 136.781493][ T60] get_page_from_freelist+0x2c7b/0x2cf0 [ 136.787035][ T60] __alloc_pages+0x1c3/0x450 [ 136.791622][ T60] alloc_slab_page+0x6e/0xf0 [ 136.796211][ T60] new_slab+0x98/0x3d0 [ 136.800273][ T60] ___slab_alloc+0x6bd/0xb20 [ 136.804860][ T60] __slab_alloc+0x5e/0xa0 [ 136.809184][ T60] __kmem_cache_alloc_node+0x203/0x2c0 [ 136.814639][ T60] kmalloc_trace+0x29/0xb0 [ 136.819051][ T60] audit_log_d_path+0xc6/0x240 [ 136.823813][ T60] common_lsm_audit+0x327/0x16d0 [ 136.828743][ T60] slow_avc_audit+0x1ac/0x220 [ 136.833413][ T60] avc_has_perm+0x1e6/0x240 [ 136.837909][ T60] selinux_file_open+0x467/0x620 [ 136.842838][ T60] security_file_open+0x73/0xb0 [ 136.847682][ T60] page last free stack trace: [ 136.852337][ T60] free_unref_page_prepare+0x742/0x750 [ 136.857790][ T60] free_unref_page+0x8f/0x530 [ 136.862458][ T60] __free_pages+0x67/0x100 [ 136.866865][ T60] __free_slab+0xca/0x1a0 [ 136.871193][ T60] __unfreeze_partials+0x160/0x190 [ 136.876298][ T60] put_cpu_partial+0xa9/0x100 [ 136.880973][ T60] __slab_free+0x1c4/0x280 [ 136.885397][ T60] ___cache_free+0xbf/0xd0 [ 136.889810][ T60] qlist_free_all+0xc6/0x140 [ 136.894390][ T60] kasan_quarantine_reduce+0x14a/0x170 [ 136.899839][ T60] __kasan_slab_alloc+0x24/0x80 [ 136.904683][ T60] slab_post_alloc_hook+0x4f/0x2d0 [ 136.909787][ T60] kmem_cache_alloc+0x16e/0x330 [ 136.914636][ T60] getname_flags+0xb9/0x500 [ 136.919156][ T60] user_path_at_empty+0x30/0x1c0 [ 136.924091][ T60] __x64_sys_umount+0xf1/0x160 [ 136.928856][ T60] [ 136.931174][ T60] Memory state around the buggy address: [ 136.936792][ T60] ffff888117258900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.944849][ T60] ffff888117258980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.952900][ T60] >ffff888117258a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.960948][ T60] ^ [ 136.965009][ T60] ffff888117258a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.973070][ T60] ffff888117258b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 136.981133][ T60] ================================================================== [ 136.989184][ T60] Disabling lock debugging due to kernel taint [ 137.002625][ T28] audit: type=1400 audit(1758689870.655:830): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 137.006259][ T288] plantronics 0003:047F:FFFF.0033: ignoring exceeding usage max [ 137.033925][ T28] audit: type=1400 audit(1758689870.685:831): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.055350][ T28] audit: type=1400 audit(1758689870.685:832): avc: denied { append } for pid=85 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.056196][ T288] plantronics 0003:047F:FFFF.0033: No inputs registered, leaving [ 137.077531][ T28] audit: type=1400 audit(1758689870.685:833): avc: denied { open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.086364][ T288] plantronics 0003:047F:FFFF.0033: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 137.107507][ T28] audit: type=1400 audit(1758689870.685:834): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.208844][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 137.220559][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 137.228939][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B syzkaller #0 [ 137.237423][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.247449][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 137.252709][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 88 dc 28 00 4c 89 ff e8 70 db ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 bc 45 6d 00 49 8b 7d 00 e8 53 d7 [ 137.272286][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 137.278324][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881003b3cc0 [ 137.286266][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 137.294213][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 137.302159][ C1] R10: ffffed1022e4b139 R11: 1ffff11022e4b139 R12: dffffc0000000000 [ 137.310102][ C1] R13: 0000000000000000 R14: ffff8881172589c8 R15: 0000000000000008 [ 137.318044][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 137.326944][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.333500][ C1] CR2: 00007f0ff2bb3ad8 CR3: 000000012e723000 CR4: 00000000003506a0 [ 137.341449][ C1] Call Trace: [ 137.344701][ C1] [ 137.347530][ C1] delayed_work_timer_fn+0x61/0x80 [ 137.352657][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 137.358477][ C1] call_timer_fn+0x46/0x2a0 [ 137.362994][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 137.368820][ C1] __run_timers+0x667/0x9a0 [ 137.373345][ C1] ? calc_index+0x200/0x200 [ 137.377866][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 137.383081][ C1] run_timer_softirq+0x6a/0xf0 [ 137.387858][ C1] handle_softirqs+0x1d7/0x600 [ 137.392636][ C1] ? irqtime_account_irq+0xc4/0x240 [ 137.397845][ C1] __irq_exit_rcu+0x52/0xf0 [ 137.402322][ C1] irq_exit_rcu+0x9/0x10 [ 137.406537][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 137.412146][ C1] [ 137.415050][ C1] [ 137.417954][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 137.423905][ C1] RIP: 0010:default_idle+0xf/0x20 [ 137.428900][ C1] Code: e9 47 ff ff ff 00 00 cc cc 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 66 90 0f 00 2d d3 3f 52 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 [ 137.448475][ C1] RSP: 0018:ffffc90000147dd8 EFLAGS: 00000257 [ 137.454515][ C1] RAX: ffff8881f7100000 RBX: ffff8881003b3cc0 RCX: e52a990a1c744800 [ 137.462463][ C1] RDX: 0000000000000001 RSI: ffffffff85aa1040 RDI: ffffffff85aa1000 [ 137.470410][ C1] RBP: ffffc90000147dd8 R08: dffffc0000000000 R09: ffffed103ee26917 [ 137.478361][ C1] R10: 0000000000000000 R11: ffffffff84f3f260 R12: 0000000000000000 [ 137.486305][ C1] R13: 0000000000000000 R14: ffff8881003b3cc0 R15: dffffc0000000000 [ 137.494251][ C1] ? __cfi_default_idle+0x10/0x10 [ 137.499253][ C1] arch_cpu_idle+0x1c/0x20 [ 137.503655][ C1] default_idle_call+0x71/0x1d0 [ 137.508496][ C1] do_idle+0x1a7/0x520 [ 137.512556][ C1] ? irqentry_exit+0x30/0x40 [ 137.517143][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 137.522337][ C1] ? schedule_idle+0x5b/0x90 [ 137.526919][ C1] ? do_idle+0x6/0x520 [ 137.530977][ C1] cpu_startup_entry+0x43/0x60 [ 137.535732][ C1] start_secondary+0x119/0x120 [ 137.540488][ C1] secondary_startup_64_no_verify+0xce/0xdb [ 137.546373][ C1] [ 137.549384][ C1] Modules linked in: [ 137.553274][ C1] ---[ end trace 0000000000000000 ]--- [ 137.558714][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 137.563999][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 88 dc 28 00 4c 89 ff e8 70 db ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 bc 45 6d 00 49 8b 7d 00 e8 53 d7 [ 137.583596][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 137.589653][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff8881003b3cc0 [ 137.597620][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 137.605583][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 137.613550][ C1] R10: ffffed1022e4b139 R11: 1ffff11022e4b139 R12: dffffc0000000000 [ 137.621512][ C1] R13: 0000000000000000 R14: ffff8881172589c8 R15: 0000000000000008 [ 137.629474][ C1] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 137.638392][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.644963][ C1] CR2: 00007f0ff2bb3ad8 CR3: 000000012e723000 CR4: 00000000003506a0 [ 137.652930][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 137.660216][ C1] Kernel Offset: disabled [ 137.664519][ C1] Rebooting in 86400 seconds..