last executing test programs: 17.671812983s ago: executing program 1 (id=200): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 17.586490996s ago: executing program 1 (id=201): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r0, 0xffffffffffffffff, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x1c10c1, 0x9c37611dc13d0db7) 17.216283797s ago: executing program 1 (id=205): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@barrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x48) 16.970885585s ago: executing program 1 (id=213): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x522, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) 16.768700522s ago: executing program 1 (id=216): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) move_mount(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x177) 16.620560696s ago: executing program 1 (id=224): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000001780)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7, 0x40, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x436d, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xe, 0x5, 0x28, {0x7, 0x25, 0x1, 0x4b982ee6c9dc543, 0x9, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x562fcc696ff4db95, 0x8, 0x9, 0x2, {0x7, 0x25, 0x1, 0x8, 0xb2, 0x7}}}}}}}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000001cc0)={0x14, 0x0, &(0x7f0000001c00)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e40)={0x2c, 0x0, &(0x7f0000000cc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x72, @string={0x72, 0x3, "64220159d898df6f20cd98d7a79a303579eff06fb542a7e2aad18dfa5d30dcabdad7ab7969ef4efcf003de55991d9a2f44c5302974d95900c475f3ce532c59f228f60115695638c36faab9655f0f66ca6d3a08dabf5812e7f1b24a1a1a8bc7be61ed345315648d021d6859f8fe5218e9"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x20, 0xe, 0x5, "9e94c1dffe"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x84, 0x1, "ae"}, 0x0}) 16.620443936s ago: executing program 32 (id=224): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000001780)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x7, 0x40, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x436d, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xe, 0x5, 0x28, {0x7, 0x25, 0x1, 0x4b982ee6c9dc543, 0x9, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x562fcc696ff4db95, 0x8, 0x9, 0x2, {0x7, 0x25, 0x1, 0x8, 0xb2, 0x7}}}}}}}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000001cc0)={0x14, 0x0, &(0x7f0000001c00)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e40)={0x2c, 0x0, &(0x7f0000000cc0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x72, @string={0x72, 0x3, "64220159d898df6f20cd98d7a79a303579eff06fb542a7e2aad18dfa5d30dcabdad7ab7969ef4efcf003de55991d9a2f44c5302974d95900c475f3ce532c59f228f60115695638c36faab9655f0f66ca6d3a08dabf5812e7f1b24a1a1a8bc7be61ed345315648d021d6859f8fe5218e9"}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x20, 0xe, 0x5, "9e94c1dffe"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x84, 0x1, "ae"}, 0x0}) 4.260790076s ago: executing program 3 (id=456): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x307, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x8b, "", [{{0x9, 0x4, 0x0, 0xf, 0xfe, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0xb8, 0x2, 0xfe}}}}}]}}]}}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000001300)={[{@fat=@codepage={'codepage', 0x3d, '852'}}, {@uni_xlateno}, {@fat=@check_strict}, {@fat=@nfs}, {@shortname_lower}, {@shortname_mixed}, {@numtail}, {@rodir}, {@utf8}, {@utf8no}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@uni_xlateno}]}, 0x2a, 0x360, &(0x7f0000000e40)="$eJzs3T9sG1UYAPDPPddOg4IzIFUwmREJqiaIAVgSVUWqyABFFv8WLJryJzaVYmEpGeJm4c8IYkECMbB1gIGhM2JAiI2BlSKhAmKhW6RWHLLv4nNih0RUSan4/Ybo0/fed++9u1OcnOznVxZi5cLxuHjjxvWYmipFeeHMQmyVYjaORRKZyzFBeVISALgbbKVp/Jlm9u/94fR2VDnkeQEAh2fw+v/aTJGo3snZAABH4YD//z8zMXvp0KYFAByirRi+/r93z3jzrsf85eF7AgCAu9dzL7709OJSxPl6fSqi/W630W3EE0X74sV4I1qxHKejFrcisgcF2dOC/s+nzi2dPV3v+3U2Gv2KbiOi3es2sr8UFpNBfTXmohazeX06rE/69XOD+npEXO4Nxo92qds4HtP5+D9Nx3LMRy3uG6uPOLd0dr6eH6DR3q7vRWzG1PYi+vM/FbX44dW4FK24EP3aYv4bc/X6mXRpR333SnXQby+fef8jAAAAAAAAAAAAAAAAAAAAAAC34VR9aHa4/03a7nXfOV90KJV2tg/298ma8/2BNrP9gdLq9u487ye79wfauT9Pt1GOY3d05QAAAAAAAAAAAAAAAAAAAPDf0VmrRLPVWl7trK2vjAa9kcxb333xzYnY3efNpMhEOTtcnqkMjpznYqQqiWF5OixPkx198iCJKDpfuTqc8Wif6nAV69ubCYwepxrxyEzESKaUz6nZas08+MsnY4Oura/8VWSSGDstO4PS+KDte7PUP1TtHczv0+damqZ7lW98PF4VpYjy2IW7naCSB99ef/3+RzsnHxs0fZ1v+vDQw7Xnr330+e8rzVbkp6bVqqx2bqX/ZqzILkFxb5Ty81yacCdMDjaLzOZqZ62Z/PjHCw988P2uzklMKu/fW0Xm7b3H+nJ3ppIF/WkeZKXHJ9z8E4Inv2q+fHN49+639tpY5uSnC82rGz//dtBLMPJLwkYdAAAAAAAAAAAAAAAAAABwJEY+bn0g2WevH3/2cGcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEer+P7/kWBzLHOQ4GYvxpuqy6udPQc/caRLBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgf+zvAAAA//8iKW4Q") syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e3, &(0x7f0000000140)="$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") mkdir(0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x9e) 3.020561695s ago: executing program 5 (id=473): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, 0x0, &(0x7f00000019c0)) syz_open_dev$hidraw(0x0, 0x6, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 2.905814169s ago: executing program 5 (id=474): sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/228, 0xe4}], 0x1) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xffffff4c}]) 2.510335841s ago: executing program 3 (id=478): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@nolazytime}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x456, &(0x7f0000002380)="$eJzs3M+PU0UcAPDve+0uv91V8QcIuopG4o+FXX4evGA08aCJiR4wntbdhSCFVXZNhBBFD3g0JN6NRxP/Ak96MerJxKveDQkxXECNyTPv9XUppV22bJci/XySV2b6psx8O2/a6Uy7AQyssfwmidgYEb9FxEg9e32Bsfo/Vy+fnf7r8tnpJLLsjT+TotyVy2enG0Ubj9tQz2RZmV/Tpt7zb0dM1Wqzp8r8roUT7+2aP33m+WMnpo7OHp09OXnw4N4924f3T+7rSZx5XFe2fjS3bcsrb114bfrwhXd++iZv78byfHMcPbJurP7stvVUjyvrt01N6aTax4bQlUpE5N01VIz/kajEusVzI/Hyp31tHLCqsizL2r0/l85lwF0siX63AOiPxht9/vm3cdymqccd4dKhiPcP1OO/Wh71M9VIyzJDLZ9ve2ksIg6f+/vL/IjVWYcAALjOd4ci4rl28780Hmwqd0+5hzIaEfdGxH0RcX9EbI6IByKKsg9FxMNd1t+6Q3Lj/Ce9eEuBLVM+/3uh3NtanP/9mxXxl0YrZW5TEf9QcuRYbXZ3+ZzsjKE1eX5iiTq+f+nXzzuda57/5Udef2MuWJderLYs0M1MLUytMOxFlz6J2Fptib+QRGMbJ4mILRGxtav/OcvS4jbi2DNfb+tU6ubxL6EH+0zZVxFP1/v/XLTE35B03J+cOLB/ct+utVGb3f1PlmXFVXGjn385/3qn+lcUfw/k/b++9fovLMY/mqyNmD995nixXzsfrTvEN3X+9886fqa51et/OHmzSA+X9304tbBwaiJiOHn1xvsnrz22zFeb49+5o138afEa14j2kYjIL+LtEfFoRDxWtv3xiHgiInYsEf+PLz75bvfxL7Eq30N5/DM36/9o7v/uE5XjP3zbffwNef/vLVI7y3uW8/q33Aau5LkDAACA/4u0+A58ko4vptN0fLz+Hf7NsT6tzc0vPHtk7oOTM/Xvyo/GUNpY/xxpWg+dKNeGG/nJa0swRX5PuW78RWVdkR+fnqvN9Dl2GHQbOoz/3B+VfrcOWHV+rwWDy/iHwWX8w+Ay/mFwGf8wuNqN/4/70A7g9vP+D4PL+IfBZfzD4DL+YSB1/G18uqKf/Evc9YlIu39UNfra5qSLPwxx5ySqq93mNW1P9fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+CwAA//8VTuic") creat(&(0x7f0000000380)='./file0/file0\x00', 0x132) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 2.068206795s ago: executing program 3 (id=479): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x109) close(r0) socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.964508258s ago: executing program 5 (id=480): r0 = syz_usb_connect$uac2(0x3, 0xa6, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1b, 0x7}, [@selector_unit={0x6, 0x24, 0xb, 0x9, 0x1, '\t'}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x88201, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 1.789346234s ago: executing program 4 (id=484): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) read(r0, &(0x7f00000000c0)=""/88, 0x58) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@random="31496f766213", @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x64, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd340ee00c022798bb43741f00788bad391458ee958d000000ed00", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"bf51565b16af17d887acbae2a30b232a", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 1.697533397s ago: executing program 0 (id=486): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5543, &(0x7f0000006b80)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPftzj4IwEAdxdNT1q1v2At7/DJZeTAa0TMpU70Hgx3+KsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe06/L+d/XBozeY1eZ5JrzyvJrVPj3qnx6Nx4Jhlr+z+f92FPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Mv+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8zO9++T8xNc4kc6eNpeORZO2qsXXV2HvQOHow3v4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/fu2UcUBAP/aZzu0gDABZQhCVGKAhaZuaenKAIoY+BOQotQtAZcfqQdaVUAWNpS5C4IRISRQ2Po/dG6lLmXrkKFITAygO9+1r24BA8qdqT8f6fl973R57/ucKMr33sUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJX91+/FWf7Sn8Tt8tz1O5c38/7GVJ+7untzNW953PqT8T87qMTn3/PpQWuluUQAAABYHFlV30f0oru3ngftflH/d6tr8pr/6ycncVXPT9f9VV/V/nn76cfbz96dqD+ZJx/07NZoeOzBVDrZAa5znj31t1d0ine+uPeSFd+Q9ls7z+x3i/ez9eW1a2/0inCpjmwBgH/jaNWXQfX3UN4PmkwMgIXRKVvuVln/Z/1mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoQ28nHq/iVkSsdu7FuRt3Lm8W/dTx1d2bq1U7deXKbjpmPkQ3Is5ujYbH6lrI/8CFi5fe3xiNhtv1By9ERHOzl8E7M1wT0WSGcxgszUcaswbt8md9tq86EhHN53zwQXz+19c0/IsJAIBHTrdseV1/q7u3np9rLUf8/s399f9LSRxp/T/Vp/X/7XdPXU/nSuv/QW0rnH9r4/MfrV24eOmVrfMb54bnhh+8enzw2uDE6ZMnT68V90rW3DEBAADgv+mVLa3/28sR+1P7/4eTOGas/z/+avBpOlem/n+oZD8QAACABj195NdfWg853+r14pON8bgfEePx9qA63j4+eW0g1X9sqWxp/Z8tN50VAAAAUIf9ndZ9+/9nkjhm3P9/4tvnvk/HzCLiULn/f3Tzw9GZ+pbTkN9muqqW/zQGAABgoR0qW7r/3y2e/2/ffeShHREvvziJy48BnKn+z9784rt0rvT5/xP1LXEOZA+caa9Mzhb9SkRnpZHEAAAAWBCPlS0v9n/u7q2/98Pht3ue/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo2x8BAAD//1M0Q/U=") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@quota}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r0, 0x10, 0x37ec, 0x683) 1.193339093s ago: executing program 0 (id=495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) 1.144923474s ago: executing program 3 (id=498): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000580)={[{@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@fat=@check_strict}, {@fat=@time_offset={'time_offset', 0x3d, 0x51d}}, {@rodir}, {@utf8}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@utf8}, {@shortname_mixed}, {@utf8no}, {@shortname_mixed}]}, 0x1, 0x38c, &(0x7f00000015c0)="$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") syz_clone(0x8200, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000000200)=""/182, 0xb6) 852.557893ms ago: executing program 4 (id=499): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x800, 0x103) open(&(0x7f0000001400)='./file0\x00', 0x400, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 818.611744ms ago: executing program 3 (id=501): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) umount2(&(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 766.557796ms ago: executing program 4 (id=503): r0 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000044000)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 763.838076ms ago: executing program 0 (id=504): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x5c, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 745.731717ms ago: executing program 0 (id=505): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500000000000000000090f84f", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1], 0x3c}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x88e5, @generic={{0x8, 0x4, 0x3, 0x3e, 0x20, 0x65, 0x0, 0x5, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end, @noop, @ssrr={0x89, 0x7, 0xf8, [@private=0xa010101]}]}}}}}}, 0x0) 741.975107ms ago: executing program 2 (id=506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000022, 0x0, 0xb}]}) 672.454639ms ago: executing program 3 (id=507): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231b26e53f07010017002a9006837400820200000036592b00040000938590"], 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000000c0)={0x400, 0x5}) 670.492639ms ago: executing program 33 (id=507): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231b26e53f07010017002a9006837400820200000036592b00040000938590"], 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f00000000c0)={0x400, 0x5}) 668.645429ms ago: executing program 0 (id=509): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 668.348949ms ago: executing program 4 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 652.3288ms ago: executing program 2 (id=511): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x250, 0xc8, 0x8, 0x250, 0x5803, 0x340, 0x2e8, 0x2e8, 0x340, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xff], [], 'batadv0\x00', 'wlan0\x00', {0xff}, {}, 0x11, 0x1, 0x2}, 0x0, 0x230, 0x250, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@hashlimit3={{0x158}, {'gre0\x00', {0x1, 0x1, 0x0, 0x5, 0x7ff, 0x7, 0x6, 0xfffffffd, 0x40, 0x20}, {0x100000000}}}, @common=@inet=@udp={{0x30}, {[0x4e24, 0x4e23], [0x4e23, 0x4e24]}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0xfffffffc, 0x800, 'snmp_trap\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0xa}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 639.32285ms ago: executing program 4 (id=512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xba1, 0x0, &(0x7f0000000a80)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x100000000, 0xa, 0x0, 0x7, 0x100a}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 615.507061ms ago: executing program 2 (id=513): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0xa, 0x4000, 0x0, 0x1}, 'syz1\x00', 0x26}) 570.547022ms ago: executing program 0 (id=514): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x77359400}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 561.535573ms ago: executing program 2 (id=515): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x1, 0x11, r0, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) 463.717216ms ago: executing program 2 (id=516): mkdir(&(0x7f0000000100)='./file0\x00', 0x100) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) 454.393506ms ago: executing program 4 (id=517): r0 = syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 437.403056ms ago: executing program 2 (id=518): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x1, 0x5519, &(0x7f00000079c0)="$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") r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)) 127.781856ms ago: executing program 5 (id=519): ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x4004af07, 0xfffffffffffffffa) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001240)={[{@fat=@gid}, {@rodir}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@uni_xlate}, {@numtail}, {@shortname_mixed}, {@fat=@uid}, {@utf8}, {@uni_xlate}, {@numtail}, {@rodir}, {@shortname_mixed}]}, 0x7f, 0x2b1, &(0x7f00000015c0)="$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") mkdir(0x0, 0x25) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 35.485439ms ago: executing program 5 (id=520): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, 0x5}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x16}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x6, 0x0, 0x0) 0s ago: executing program 5 (id=521): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) read$msr(r0, &(0x7f0000000600)=""/175, 0xfffffe51) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. [ 19.336337][ T24] audit: type=1400 audit(1782154452.270:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.339746][ T271] cgroup: Unknown subsys name 'net' [ 19.359104][ T24] audit: type=1400 audit(1782154452.270:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.386324][ T24] audit: type=1400 audit(1782154452.300:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.386805][ T271] cgroup: Unknown subsys name 'devices' [ 19.533033][ T271] cgroup: Unknown subsys name 'hugetlb' [ 19.538661][ T271] cgroup: Unknown subsys name 'rlimit' [ 19.708619][ T24] audit: type=1400 audit(1782154452.640:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.731820][ T24] audit: type=1400 audit(1782154452.640:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.756566][ T24] audit: type=1400 audit(1782154452.640:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.773755][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 19.788694][ T24] audit: type=1400 audit(1782154452.720:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.814285][ T24] audit: type=1400 audit(1782154452.720:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.843244][ T24] audit: type=1400 audit(1782154452.780:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.868806][ T24] audit: type=1400 audit(1782154452.780:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.895164][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.322365][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.329442][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.336947][ T280] device bridge_slave_0 entered promiscuous mode [ 20.344859][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.351918][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.359291][ T280] device bridge_slave_1 entered promiscuous mode [ 20.407174][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.414429][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.421922][ T279] device bridge_slave_0 entered promiscuous mode [ 20.451141][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.458221][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.465738][ T279] device bridge_slave_1 entered promiscuous mode [ 20.524953][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.532102][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.539609][ T282] device bridge_slave_0 entered promiscuous mode [ 20.548051][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.555163][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.562625][ T282] device bridge_slave_1 entered promiscuous mode [ 20.601261][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.608331][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.615835][ T281] device bridge_slave_0 entered promiscuous mode [ 20.625321][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.632642][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.639947][ T281] device bridge_slave_1 entered promiscuous mode [ 20.646649][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.653739][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.661268][ T283] device bridge_slave_0 entered promiscuous mode [ 20.670532][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.677637][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.685176][ T283] device bridge_slave_1 entered promiscuous mode [ 20.775128][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.782222][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.789769][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.796828][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.838447][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.845523][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.858100][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.865181][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.872476][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.879509][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.932454][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.939553][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.946901][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.953952][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.973465][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.981932][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.989420][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.997002][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.004314][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.012030][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.020260][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.028756][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.036074][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.044202][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.051575][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.058937][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.067375][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.075721][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.082771][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.113049][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.121278][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.128305][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.135783][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.144068][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.151145][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.158476][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.166471][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.174379][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.191049][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.199107][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.207050][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.235607][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.244129][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.252206][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.260328][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.267380][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.275586][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.283830][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.290884][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.298231][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.306443][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.313482][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.320963][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.329128][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.336184][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.343594][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.352324][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.367721][ T280] device veth0_vlan entered promiscuous mode [ 21.379148][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.387998][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.396643][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.404924][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.413056][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.421319][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.429172][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.437201][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.445173][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.453592][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.461937][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.469390][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.485608][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.493961][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.502833][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.510936][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.518837][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.527154][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.535476][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.543355][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.551467][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.558903][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.566527][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.574139][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.582609][ T279] device veth0_vlan entered promiscuous mode [ 21.591742][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.599978][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.608539][ T282] device veth0_vlan entered promiscuous mode [ 21.620494][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.628842][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.642726][ T280] device veth1_macvtap entered promiscuous mode [ 21.649956][ T279] device veth1_macvtap entered promiscuous mode [ 21.663050][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.670790][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.678668][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.687132][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.695596][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.704011][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.712957][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.720993][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.734489][ T282] device veth1_macvtap entered promiscuous mode [ 21.742047][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.749609][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.757462][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.765150][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.773590][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.781961][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.790217][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.801511][ T281] device veth0_vlan entered promiscuous mode [ 21.819632][ T283] device veth0_vlan entered promiscuous mode [ 21.826113][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.834147][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.843042][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.851775][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.859845][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.868160][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.876863][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.885141][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.893524][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.902083][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.910337][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.918843][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.927380][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.935719][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.944110][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.951607][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.959630][ T281] device veth1_macvtap entered promiscuous mode [ 21.983205][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.993700][ T280] request_module fs-gadgetfs succeeded, but still no fs? [ 21.994187][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.011248][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.019492][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.027831][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.041741][ T280] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 22.049408][ T283] device veth1_macvtap entered promiscuous mode [ 22.061311][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.069447][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.077802][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.124944][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.140195][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.183611][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.213005][ T317] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.229369][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.302789][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 22.321608][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 22.344203][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 22.437340][ T331] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 22.437340][ T331] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 22.437340][ T331] [ 22.462138][ T331] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 22.492566][ T331] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 22.660943][ T340] EXT4-fs (loop1): Ignoring removed bh option [ 22.688897][ T340] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 22.717997][ T340] EXT4-fs (loop1): 1 truncate cleaned up [ 22.724649][ T340] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,,errors=continue [ 22.805291][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 22.960904][ T15] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.050846][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 23.093899][ T359] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 23.101033][ T359] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 23.110232][ T359] F2FS-fs (loop1): invalid crc value [ 23.116060][ T359] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 23.126043][ T359] F2FS-fs (loop1): Found nat_bits in checkpoint [ 23.158328][ T359] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 23.165442][ T359] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 23.173033][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.204244][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 23.205439][ T15] usb 4-1: Using ep0 maxpacket: 8 [ 23.214602][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 53 [ 23.229344][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 23.264635][ T279] attempt to access beyond end of device [ 23.264635][ T279] loop1: rw=2049, want=45104, limit=40427 [ 23.340900][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 23.341073][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 23.356803][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 23.368189][ T15] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 23.378558][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.384240][ T25] usb 3-1: SerialNumber: syz [ 23.389509][ T15] usb 4-1: config 0 descriptor?? [ 23.431058][ T339] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 23.440416][ T339] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 23.481355][ T25] hub 3-1:1.0: bad descriptor, ignoring hub [ 23.487468][ T25] hub: probe of 3-1:1.0 failed with error -5 [ 23.567828][ T380] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.28: inode has both inline data and extents flags [ 23.582763][ T380] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.28: couldn't read orphan inode 15 (err -117) [ 23.597287][ T380] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 23.682284][ T339] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 23.689347][ T339] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 23.693914][ T386] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 23.706421][ T386] EXT4-fs (loop0): 1 truncate cleaned up [ 23.712580][ T386] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,nolazytime,discard,max_batch_time=0x0000000000000003,data_err=ignore,noblock_validity,,errors=continue [ 23.740734][ T389] ====================================================== [ 23.740734][ T389] WARNING: the mand mount option is being deprecated and [ 23.740734][ T389] will be removed in v5.15! [ 23.740734][ T389] ====================================================== [ 23.767296][ T368] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.806207][ T386] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.31: invalid indirect mapped block 4294901760 (level 0) [ 23.809691][ T389] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 23.820666][ T386] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.31: invalid indirect mapped block 2185560079 (level 0) [ 23.828066][ T389] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 23.843259][ T386] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 23.856256][ T389] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 23.862534][ T386] EXT4-fs error (device loop0): ext4_dirty_inode:6181: inode #13: comm syz.0.31: mark_inode_dirty error [ 23.874985][ T15] uclogic 0003:28BD:0094.0001: unknown main item tag 0x0 [ 23.880697][ T389] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01c, mo2=0002] [ 23.887045][ T15] uclogic 0003:28BD:0094.0001: unknown main item tag 0x0 [ 23.896671][ T389] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 23.902807][ T15] uclogic 0003:28BD:0094.0001: unknown main item tag 0x0 [ 23.916591][ T386] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.31: invalid indirect mapped block 65535 (level 2) [ 23.929026][ T15] uclogic 0003:28BD:0094.0001: unknown main item tag 0x0 [ 23.938985][ T389] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 23.939782][ T386] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 23.948203][ T15] uclogic 0003:28BD:0094.0001: unknown main item tag 0x0 [ 23.956118][ T386] EXT4-fs error (device loop0): ext4_truncate:4403: inode #13: comm syz.0.31: mark_inode_dirty error [ 23.956226][ T386] EXT4-fs error (device loop0) in ext4_setattr:5745: error 27 [ 23.957282][ T394] EXT4-fs error (device loop0) in ext4_do_update_inode:5362: error 27 [ 23.976438][ T389] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000006,abort,nomblk_io_submit,noblock_validity,nolazytime,grpid,i_version,nobarrier,auto_da_alloc=0x0000000000000003,,errors=continue [ 23.982748][ T394] EXT4-fs error (device loop0): __ext4_unlink:3453: inode #13: comm syz.0.31: mark_inode_dirty error [ 24.011766][ T15] uclogic 0003:28BD:0094.0001: unknown main item tag 0x0 [ 24.037475][ T15] uclogic 0003:28BD:0094.0001: unknown main item tag 0x0 [ 24.047610][ T389] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.30: dx entry: limit 65535 != root limit 120 [ 24.051200][ T15] uclogic 0003:28BD:0094.0001: unknown main item tag 0x0 [ 24.059683][ T389] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.30: Corrupt directory, running e2fsck is recommended [ 24.080943][ T15] uclogic 0003:28BD:0094.0001: item fetching failed at offset 32/36 [ 24.090671][ T15] uclogic 0003:28BD:0094.0001: parse failed [ 24.097022][ T15] uclogic: probe of 0003:28BD:0094.0001 failed with error -22 [ 24.106923][ T15] usb 4-1: USB disconnect, device number 2 [ 24.122984][ T281] EXT4-fs warning (device loop0): ext4_evict_inode:288: couldn't mark inode dirty (err -27) [ 24.140941][ T368] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 24.152133][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.163412][ T368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.200920][ T368] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 24.211362][ T25] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 24.231753][ T399] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 24.262204][ T399] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,noinit_itable,inlinecrypt,resgid=0x000000000000ee00,norecovery,resuid=0x0000000000000000,noblock_validity,dioread_nolock,,errors=continue [ 24.300968][ T368] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 24.320243][ T368] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 24.328682][ T368] usb 2-1: Manufacturer: syz [ 24.351364][ T368] usb 2-1: config 0 descriptor?? [ 24.357215][ T24] kauditd_printk_skb: 84 callbacks suppressed [ 24.357227][ T24] audit: type=1400 audit(1782154457.290:158): avc: denied { append } for pid=398 comm="syz.0.33" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 24.511342][ T408] exfat: Deprecated parameter 'utf8' [ 24.516853][ T408] exfat: Deprecated parameter 'utf8' [ 24.522679][ T408] exfat: Deprecated parameter 'utf8' [ 24.528121][ T408] exfat: Deprecated parameter 'namecase' [ 24.540961][ T15] usb 3-1: USB disconnect, device number 2 [ 24.586432][ T408] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 24.604003][ T24] audit: type=1400 audit(1782154457.540:159): avc: denied { setattr } for pid=407 comm="syz.0.34" name="file0" dev="loop0" ino=1048595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 24.627216][ T24] audit: type=1400 audit(1782154457.560:160): avc: denied { remount } for pid=407 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 24.656399][ T24] audit: type=1400 audit(1782154457.590:161): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 24.726780][ T24] audit: type=1400 audit(1782154457.660:162): avc: denied { create } for pid=410 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 24.750717][ T24] audit: type=1400 audit(1782154457.680:163): avc: denied { write } for pid=410 comm="syz.3.36" name="fib_trie" dev="proc" ino=4026532307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 24.780291][ T24] audit: type=1400 audit(1782154457.710:164): avc: denied { remount } for pid=396 comm="syz.4.32" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 24.800794][ T24] audit: type=1400 audit(1782154457.710:165): avc: denied { create } for pid=414 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 24.820098][ T24] audit: type=1400 audit(1782154457.740:166): avc: denied { read } for pid=414 comm="syz.4.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 24.833756][ T368] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 24.847830][ T368] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 24.848809][ T24] audit: type=1400 audit(1782154457.780:167): avc: denied { create } for pid=416 comm="syz.0.38" dev="anon_inodefs" ino=15929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 24.865385][ T368] appleir 0003:05AC:8243.0002: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 25.020848][ T20] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.122344][ T25] usb 2-1: USB disconnect, device number 2 [ 25.260857][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 25.312091][ T423] F2FS-fs (loop2): invalid crc value [ 25.319392][ T423] F2FS-fs (loop2): Found nat_bits in checkpoint [ 25.356057][ T423] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 25.383473][ T423] F2FS-fs (loop2): Corrupted max_depth of 3: 16842753 [ 25.390867][ T20] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.401085][ T20] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.413019][ T282] F2FS-fs (loop2): f2fs_remove_inode_page: inconsistent i_blocks, ino:8, iblocks:18424 [ 25.560882][ T20] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 25.569964][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.578399][ T20] usb 4-1: Product: syz [ 25.583257][ T20] usb 4-1: Manufacturer: syz [ 25.587873][ T20] usb 4-1: SerialNumber: syz [ 25.738794][ T430] EXT4-fs (loop2): Test dummy encryption mode enabled [ 25.757326][ T430] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000008,user_xattr,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,noblock_validity,init_itable,journal_dev=0x0000000000000003,noinit_itable,nodioread_nolock,,errors=continue [ 25.900899][ T20] usb 4-1: 0:2 : does not exist [ 25.912253][ T20] usb 4-1: USB disconnect, device number 3 [ 25.969411][ T461] input: syz0 as /devices/virtual/input/input4 [ 26.050865][ T368] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.121285][ T301] udevd[301]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.137048][ T402] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.193017][ T463] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 26.214109][ T463] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 26.229180][ T463] F2FS-fs (loop2): Found nat_bits in checkpoint [ 26.268127][ T463] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 26.275282][ T463] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 26.300863][ T368] usb 1-1: Using ep0 maxpacket: 16 [ 26.390908][ T402] usb 2-1: Using ep0 maxpacket: 16 [ 26.466149][ T368] usb 1-1: unable to get BOS descriptor or descriptor too short [ 26.516030][ T373] attempt to access beyond end of device [ 26.516030][ T373] loop2: rw=2049, want=40968, limit=40427 [ 26.550918][ T368] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 26.561145][ T368] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 26.581300][ T402] usb 2-1: unable to get BOS descriptor or descriptor too short [ 26.600864][ T25] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 26.680944][ T402] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 26.729135][ T502] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 26.736955][ T368] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 26.751259][ T368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.759285][ T368] usb 1-1: Product: syz [ 26.769358][ T368] usb 1-1: Manufacturer: syz [ 26.769368][ T368] usb 1-1: SerialNumber: syz [ 26.903756][ T512] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 26.950925][ T402] usb 2-1: string descriptor 0 read error: -22 [ 26.957386][ T402] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 26.973195][ T402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.992055][ T25] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 27.011221][ T25] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 27.020338][ T25] usb 5-1: config 220 interface 0 has no altsetting 0 [ 27.027925][ T402] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 27.037042][ T402] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 27.043900][ T368] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 27.052602][ T368] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 27.053178][ T402] usb 2-1: unknown interface protocol 0x44, assuming v1 [ 27.066793][ T402] usb 2-1: cannot find UAC_HEADER [ 27.072093][ T402] snd-usb-audio: probe of 2-1:1.1 failed with error -22 [ 27.180932][ T20] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.210915][ T25] usb 5-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 27.220039][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.229125][ T25] usb 5-1: Product: syz [ 27.233752][ T25] usb 5-1: Manufacturer: syz [ 27.238456][ T25] usb 5-1: SerialNumber: syz [ 27.300882][ T406] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 27.420889][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 27.461843][ T402] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 27.504696][ T368] usb 1-1: USB disconnect, device number 2 [ 27.540987][ T20] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 27.549210][ T20] usb 3-1: config 4 has no interface number 0 [ 27.555759][ T20] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 27.565653][ T20] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 27.575599][ T20] usb 3-1: config 4 interface 51 has no altsetting 0 [ 27.680946][ T406] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 27.689311][ T406] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 27.698244][ T406] usb 4-1: config 220 has an invalid descriptor of length 81, skipping remainder of the config [ 27.708671][ T406] usb 4-1: config 220 has no interface number 2 [ 27.710188][ T402] usb 2-1: USB disconnect, device number 3 [ 27.715129][ T406] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 27.715141][ T406] usb 4-1: config 220 interface 0 has no altsetting 0 [ 27.715151][ T406] usb 4-1: config 220 interface 76 has no altsetting 0 [ 27.715161][ T406] usb 4-1: config 220 interface 1 has no altsetting 0 [ 27.733368][ T301] udevd[301]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.741116][ T20] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 27.779757][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.787874][ T20] usb 3-1: Product: syz [ 27.792319][ T20] usb 3-1: Manufacturer: syz [ 27.796995][ T20] usb 3-1: SerialNumber: syz [ 27.820949][ T504] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 27.828010][ T504] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 27.910900][ T406] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 27.920061][ T406] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.928305][ T406] usb 4-1: Product: syz [ 27.931055][ T25] uvcvideo: Found UVC 0.00 device syz (8086:0b03) [ 27.932770][ T406] usb 4-1: Manufacturer: syz [ 27.939921][ T25] uvcvideo: No valid video chain found. [ 27.943802][ T406] usb 4-1: SerialNumber: syz [ 28.060976][ T20] cdc_eem: probe of 3-1:4.51 failed with error -71 [ 28.071439][ T20] usb 3-1: USB disconnect, device number 3 [ 28.143642][ T15] usb 5-1: USB disconnect, device number 2 [ 28.281388][ T368] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.331307][ T406] uvcvideo: Found UVC 7.01 device syz (8086:0b07) [ 28.338112][ T406] uvcvideo: No valid video chain found. [ 28.343881][ T406] usb 4-1: selecting invalid altsetting 0 [ 28.432145][ T406] usb 4-1: USB disconnect, device number 4 [ 28.452294][ T533] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 28.461623][ T533] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 28.470114][ T533] F2FS-fs (loop1): fault_type options not supported [ 28.476880][ T533] F2FS-fs (loop1): fault_injection options not supported [ 28.485050][ T533] F2FS-fs (loop1): invalid crc value [ 28.492031][ T533] F2FS-fs (loop1): Found nat_bits in checkpoint [ 28.521092][ T533] F2FS-fs (loop1): Start checkpoint disabled! [ 28.528439][ T533] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 28.535593][ T533] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 28.551849][ T533] process 'syz.1.82' launched './file1' with NULL argv: empty string added [ 28.583762][ T313] attempt to access beyond end of device [ 28.583762][ T313] loop1: rw=2049, want=40976, limit=40427 [ 28.652472][ T406] kernel write not supported for file /uhid (pid: 406 comm: kworker/0:4) [ 28.661184][ T368] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.696022][ T368] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.742264][ T549] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.83: iget: bad i_size value: 38620345925642 [ 28.755255][ T549] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.83: couldn't read orphan inode 15 (err -117) [ 28.769838][ T549] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 28.780587][ T549] EXT4-fs (loop1): shut down requested (1) [ 28.790969][ T368] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 28.802510][ T368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 28.810564][ T368] usb 1-1: SerialNumber: syz [ 28.973439][ T574] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 29.012073][ T578] xt_hashlimit: size too large, truncated to 1048576 [ 29.091660][ T368] usb 1-1: 0:2 : does not exist [ 29.100550][ T368] usb 1-1: USB disconnect, device number 3 [ 29.112599][ T583] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 29.126261][ T583] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.138920][ T583] fs-verity: sha512 using implementation "sha512-avx2" [ 29.321167][ T301] udevd[301]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.400086][ T588] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 29.409936][ T588] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 29.453832][ T588] F2FS-fs (loop1): invalid crc value [ 29.468525][ T588] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 29.575606][ T588] F2FS-fs (loop1): Start checkpoint disabled! [ 29.627505][ T588] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 29.646790][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 29.660117][ T588] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 29.675152][ T612] input: syz0 as /devices/virtual/input/input6 [ 29.683529][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 29.698082][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 29.737279][ T7] attempt to access beyond end of device [ 29.737279][ T7] loop1: rw=2049, want=45104, limit=40427 [ 29.790135][ T24] kauditd_printk_skb: 60 callbacks suppressed [ 29.790148][ T24] audit: type=1400 audit(1782154462.720:228): avc: denied { unlink } for pid=614 comm="syz.4.113" name="#3" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 29.820476][ T615] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 29.835790][ T615] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 29.850584][ T615] overlayfs: conflicting lowerdir path [ 29.854365][ T368] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 29.880894][ T20] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.946243][ T593] F2FS-fs (loop3): Test dummy encryption mode enabled [ 29.960536][ T593] F2FS-fs (loop3): invalid crc value [ 30.001714][ T593] F2FS-fs (loop3): Found nat_bits in checkpoint [ 30.030018][ T631] input: syz0 as /devices/virtual/input/input7 [ 30.037079][ T24] audit: type=1400 audit(1782154462.980:229): avc: denied { ioctl } for pid=629 comm="syz.1.116" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 30.073216][ T593] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 30.120858][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 30.230990][ T368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 30.242091][ T368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.252047][ T368] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 30.262982][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.271038][ T368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.282198][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.285760][ T368] usb 1-1: config 0 descriptor?? [ 30.297322][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 30.310432][ T20] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 30.319789][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.330212][ T20] usb 3-1: config 0 descriptor?? [ 30.427527][ T24] audit: type=1400 audit(1782154463.360:230): avc: denied { read write } for pid=655 comm="syz.4.128" name="vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 30.451858][ T24] audit: type=1400 audit(1782154463.390:231): avc: denied { open } for pid=655 comm="syz.4.128" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 30.476167][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.483933][ T24] audit: type=1400 audit(1782154463.410:232): avc: denied { ioctl } for pid=655 comm="syz.4.128" path="/dev/vhost-vsock" dev="devtmpfs" ino=262 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 30.534976][ T24] audit: type=1400 audit(1782154463.470:233): avc: denied { getopt } for pid=661 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 30.712293][ T667] mmap: syz.4.131 (667) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 30.730911][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 30.791799][ T368] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 30.808821][ T368] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 30.815805][ T368] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 30.823340][ T20] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 30.830721][ T20] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 30.831049][ T368] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 30.851000][ T20] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 30.858276][ T20] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 30.858846][ T368] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0 [ 30.880912][ T25] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 30.886690][ T368] savu 0003:1E7D:2D5A.0003: unbalanced collection at end of report description [ 30.892703][ T20] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 30.916625][ T368] savu 0003:1E7D:2D5A.0003: parse failed [ 30.921306][ T25] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 30.929262][ T368] savu: probe of 0003:1E7D:2D5A.0003 failed with error -22 [ 30.935737][ T20] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 30.950843][ T20] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 30.958094][ T20] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 30.970818][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 30.977472][ T25] usb 2-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 30.995521][ T368] usb 1-1: USB disconnect, device number 4 [ 31.000964][ T20] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 31.020837][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.029291][ T20] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 31.041036][ T25] usb 2-1: config 0 descriptor?? [ 31.060969][ T20] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0004/input/input8 [ 31.100996][ T20] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 31.122295][ T20] usb 3-1: USB disconnect, device number 4 [ 31.160727][ T673] fido_id[673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 31.190680][ T24] audit: type=1400 audit(1782154464.120:234): avc: denied { write } for pid=676 comm="syz.4.135" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 31.269436][ T660] F2FS-fs (loop3): invalid crc value [ 31.295264][ T660] F2FS-fs (loop3): Found nat_bits in checkpoint [ 31.328839][ T660] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 31.355855][ T660] F2FS-fs (loop3): Corrupted max_depth of 3: 16842753 [ 31.518026][ T24] audit: type=1400 audit(1782154464.450:235): avc: denied { append } for pid=695 comm="syz.0.143" name="001" dev="devtmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.544047][ T25] lenovo 0003:04B3:3100.0005: ignoring exceeding usage max [ 31.552616][ T696] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 31.560236][ T696] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 31.570930][ T347] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.579126][ T25] lenovo 0003:04B3:3100.0005: unknown main item tag 0x0 [ 31.588742][ T25] lenovo 0003:04B3:3100.0005: unknown main item tag 0x0 [ 31.619025][ T25] lenovo 0003:04B3:3100.0005: unknown main item tag 0x0 [ 31.629094][ T25] lenovo 0003:04B3:3100.0005: unknown main item tag 0x0 [ 31.656757][ T25] lenovo 0003:04B3:3100.0005: unknown main item tag 0x0 [ 31.666838][ T25] lenovo 0003:04B3:3100.0005: unknown main item tag 0x0 [ 31.684136][ T25] lenovo 0003:04B3:3100.0005: unknown main item tag 0x0 [ 31.700957][ T25] lenovo 0003:04B3:3100.0005: unknown main item tag 0x0 [ 31.713151][ T25] lenovo 0003:04B3:3100.0005: hidraw0: USB HID v0.04 Device [HID 04b3:3100] on usb-dummy_hcd.1-1/input0 [ 31.745071][ T704] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 31.781492][ T704] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.810888][ T24] audit: type=1400 audit(1782154464.740:236): avc: denied { append } for pid=703 comm="syz.3.146" path="/29/file0/blkio.throttle.io_service_bytes_recursive" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.853132][ T406] usb 2-1: USB disconnect, device number 4 [ 31.940929][ T347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.951914][ T347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.961719][ T347] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 31.970824][ T347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.979229][ T698] F2FS-fs (loop2): fault_injection options not supported [ 31.986826][ T700] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 31.991842][ T347] usb 5-1: config 0 descriptor?? [ 31.993871][ T698] F2FS-fs (loop2): fault_type options not supported [ 32.005181][ T700] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 32.015172][ T700] F2FS-fs (loop0): invalid crc value [ 32.015575][ T698] F2FS-fs (loop2): invalid crc value [ 32.027941][ T698] F2FS-fs (loop2): Found nat_bits in checkpoint [ 32.046017][ T700] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 32.074832][ T698] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 32.094916][ T700] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 32.102287][ T700] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 32.117494][ T698] attempt to access beyond end of device [ 32.117494][ T698] loop2: rw=2049, want=45104, limit=40427 [ 32.150910][ T281] attempt to access beyond end of device [ 32.150910][ T281] loop0: rw=2049, want=45104, limit=40427 [ 32.349471][ T732] Invalid argument reading file caps for ./file0 [ 32.349646][ T24] audit: type=1400 audit(1782154465.280:237): avc: denied { execute } for pid=731 comm="syz.0.152" name="file0" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.481668][ T347] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 32.489512][ T347] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 32.582382][ T754] xt_hashlimit: size too large, truncated to 1048576 [ 32.671347][ T5] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.690908][ T347] cp2112 0003:10C4:EA90.0006: error requesting version [ 32.708677][ T347] cp2112: probe of 0003:10C4:EA90.0006 failed with error -71 [ 32.733399][ T347] usb 5-1: USB disconnect, device number 3 [ 32.762791][ T760] input: syz0 as /devices/virtual/input/input9 [ 32.781429][ T758] fido_id[758]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 32.798795][ T762] xt_hashlimit: size too large, truncated to 1048576 [ 32.933910][ T765] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.167: iget: bad i_size value: 38620345925642 [ 32.947075][ T765] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.167: couldn't read orphan inode 15 (err -117) [ 32.959434][ T765] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue [ 33.152336][ T778] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 33.250972][ T5] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.260690][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.268965][ T5] usb 2-1: Product: syz [ 33.273440][ T5] usb 2-1: Manufacturer: syz [ 33.278070][ T5] usb 2-1: SerialNumber: syz [ 33.495093][ T800] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.510225][ T806] xt_hashlimit: size too large, truncated to 1048576 [ 33.543987][ T800] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #11: comm syz.0.180: invalid indirect mapped block 256 (level 2) [ 33.557736][ T800] EXT4-fs (loop0): 2 truncates cleaned up [ 33.564825][ T800] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue [ 33.667141][ T814] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.180: bg 0: block 5: invalid block bitmap [ 33.694675][ T814] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 33.722698][ T814] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.722698][ T814] [ 33.733590][ T818] netlink: 27 bytes leftover after parsing attributes in process `syz.4.185'. [ 33.742966][ T814] EXT4-fs (loop0): Total free blocks count 0 [ 33.752775][ T814] EXT4-fs (loop0): Free/Dirty block details [ 33.767489][ T814] EXT4-fs (loop0): free_blocks=0 [ 33.773694][ T814] EXT4-fs (loop0): dirty_blocks=2856 [ 33.785631][ T814] EXT4-fs (loop0): Block reservation details [ 33.798220][ T814] EXT4-fs (loop0): i_reserved_data_blocks=2856 [ 33.818654][ T800] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2048 with error 28 [ 33.840057][ T800] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.840057][ T800] [ 34.245062][ T838] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 34.261217][ T838] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 34.330958][ T838] F2FS-fs (loop0): Found nat_bits in checkpoint [ 34.421041][ T838] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 34.438446][ T838] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 34.450961][ T5] cdc_ncm 2-1:1.0: bind() failure [ 34.470891][ T5] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 34.500948][ T5] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 34.511103][ T5] usb 2-1: USB disconnect, device number 5 [ 34.751199][ T840] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 150994945) [ 34.765490][ T840] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 34.775371][ T840] F2FS-fs (loop2): invalid crc value [ 34.802404][ T840] F2FS-fs (loop2): Found nat_bits in checkpoint [ 34.849494][ T840] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 34.857948][ T840] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 34.868303][ T24] kauditd_printk_skb: 14 callbacks suppressed [ 34.868325][ T24] audit: type=1400 audit(1782154467.800:252): avc: denied { mount } for pid=866 comm="syz.0.196" name="/" dev="ramfs" ino=17168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 34.926908][ T24] audit: type=1400 audit(1782154467.860:253): avc: denied { mounton } for pid=866 comm="syz.0.196" path="/file0" dev="ramfs" ino=17857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 34.949059][ T871] 9p: Unknown Cache mode readahead [ 35.005004][ T867] EXT4-fs warning (device loop0): dx_probe:845: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 35.030698][ T872] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 35.050421][ T872] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec018, mo2=0003] [ 35.061937][ T867] EXT4-fs warning (device loop0): dx_probe:848: Enable large directory feature to access it [ 35.072463][ T867] EXT4-fs warning (device loop0): dx_probe:946: inode #2: comm syz.0.196: Corrupt directory, running e2fsck is recommended [ 35.085889][ T867] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 35.086161][ T872] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,inlinecrypt,noblock_validity,nodelalloc,resuid=0x0000000000000000,delalloc,usrquota,noinit_itable,,errors=continue [ 35.133892][ T867] EXT4-fs error (device loop0): ext4_iget_extra_inode:4692: inode #15: comm syz.0.196: corrupted in-inode xattr [ 35.146237][ T867] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.196: couldn't read orphan inode 15 (err -117) [ 35.158564][ T867] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,noblock_validity,data_err=ignore,discard,auto_da_alloc,grpjquota=.journal_dev=0x00000000000001ff,barrier=0x0000000000000008,jqfmt=vfsv1,grpid,,,errors=continue [ 35.201067][ T24] audit: type=1400 audit(1782154468.140:254): avc: denied { unlink } for pid=870 comm="syz.3.199" name="#7" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.226709][ T872] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.199: inode #16777216: comm syz.3.199: iget: illegal inode # [ 35.234351][ T24] audit: type=1400 audit(1782154468.160:255): avc: denied { setattr } for pid=870 comm="syz.3.199" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.262495][ T872] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.199: error while reading EA inode 16777216 err=-117 [ 35.266140][ T879] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 35.286601][ T879] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.308063][ T24] audit: type=1400 audit(1782154468.240:256): avc: denied { rmdir } for pid=280 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.391494][ T24] audit: type=1400 audit(1782154468.240:257): avc: denied { unlink } for pid=280 comm="syz-executor" name=66696C6507 dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 35.415079][ T24] audit: type=1400 audit(1782154468.310:258): avc: denied { setattr } for pid=878 comm="syz.1.201" name=".pending_reads" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.437688][ T24] audit: type=1400 audit(1782154468.330:259): avc: denied { ioctl } for pid=885 comm="syz.4.202" path="/64/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.501547][ T24] audit: type=1400 audit(1782154468.440:260): avc: denied { ioctl } for pid=893 comm="syz.4.206" path="socket:[17896]" dev="sockfs" ino=17896 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.534627][ T24] audit: type=1400 audit(1782154468.440:261): avc: denied { name_bind } for pid=890 comm="syz.3.203" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 35.556741][ T895] device veth0_vlan left promiscuous mode [ 35.570698][ T894] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.591339][ T840] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix. [ 35.625656][ T894] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue [ 35.770866][ T911] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 35.784404][ T914] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 35.799558][ T911] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.856344][ T911] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.213: Failed to acquire dquot type 0 [ 35.886836][ T279] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz-executor: Failed to acquire dquot type 0 [ 35.950895][ T347] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 36.149553][ T947] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.158002][ T947] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.165633][ T947] device bridge_slave_0 entered promiscuous mode [ 36.176640][ T947] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.187135][ T947] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.194748][ T947] device bridge_slave_1 entered promiscuous mode [ 36.210965][ T347] usb 5-1: Using ep0 maxpacket: 8 [ 36.264676][ T947] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.271797][ T947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.279050][ T947] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.286202][ T947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.306232][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.314356][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.321923][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.350923][ T347] usb 5-1: config 0 interface 0 has no altsetting 0 [ 36.357613][ T347] usb 5-1: New USB device found, idVendor=1b96, idProduct=0005, bcdDevice= 0.00 [ 36.379083][ T347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.389148][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.397611][ T347] usb 5-1: config 0 descriptor?? [ 36.402825][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.409931][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.418988][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.427381][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.434452][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.441968][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.449967][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.472360][ T974] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 36.481623][ T974] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.488300][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.514976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.525218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.531700][ T20] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 36.533280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.548500][ T947] device veth0_vlan entered promiscuous mode [ 36.555834][ T7] device bridge_slave_1 left promiscuous mode [ 36.582621][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.590295][ T7] device bridge_slave_0 left promiscuous mode [ 36.596937][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.604826][ T7] device veth1_macvtap left promiscuous mode [ 36.611254][ T7] device veth0_vlan left promiscuous mode [ 36.624578][ T984] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.656105][ T984] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 36.666393][ T984] EXT4-fs error (device loop3): ext4_dirty_inode:6181: inode #16: comm syz.3.243: mark_inode_dirty error [ 36.678078][ T984] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 36.686459][ T984] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #16: comm syz.3.243: mark_inode_dirty error [ 36.698182][ T984] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 36.706700][ T984] EXT4-fs error (device loop3) in ext4_orphan_del:3292: error 27 [ 36.714794][ T984] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 36.723187][ T984] EXT4-fs error (device loop3): ext4_truncate:4403: inode #16: comm syz.3.243: mark_inode_dirty error [ 36.734403][ T984] EXT4-fs error (device loop3) in ext4_orphan_cleanup:3106: error 27 [ 36.742999][ T984] EXT4-fs (loop3): 1 truncate cleaned up [ 36.748708][ T984] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 36.758009][ T984] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.781711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.790223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.802644][ T947] device veth1_macvtap entered promiscuous mode [ 36.816151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.824292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.832720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.855508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.867990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.892293][ T993] erofs: (device loop0): mounted with root inode @ nid 36. [ 36.895659][ T347] ntrig 0003:1B96:0005.0007: unknown main item tag 0x2 [ 36.912331][ T334] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 36.933289][ T993] attempt to access beyond end of device [ 36.933289][ T993] loop0: rw=0, want=80, limit=16 [ 36.953002][ T20] usb 3-1: unable to get BOS descriptor or descriptor too short [ 36.964978][ T347] ntrig 0003:1B96:0005.0007: unknown main item tag 0x6 [ 36.972936][ T1000] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 36.990964][ T334] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.003404][ T347] ntrig 0003:1B96:0005.0007: ignoring exceeding usage max [ 37.003691][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 119 @ nid 36 [ 37.011118][ T20] usb 3-1: not running at top speed; connect to a high speed hub [ 37.022708][ T1000] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 37.041843][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 118 @ nid 36 [ 37.051443][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 115 @ nid 36 [ 37.058835][ T334] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 37.060586][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 114 @ nid 36 [ 37.060620][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 113 @ nid 36 [ 37.089048][ T1000] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 37.090420][ T347] ntrig 0003:1B96:0005.0007: hidraw0: USB HID v0.01 Device [HID 1b96:0005] on usb-dummy_hcd.4-1/input0 [ 37.098402][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 112 @ nid 36 [ 37.098418][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 111 @ nid 36 [ 37.098435][ T1000] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 37.138809][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 110 @ nid 36 [ 37.148838][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 109 @ nid 36 [ 37.158478][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 108 @ nid 36 [ 37.167810][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 107 @ nid 36 [ 37.171552][ T347] ntrig 0003:1B96:0005.0007: Firmware version: 0.11.5.3.6 (ac51 6eb0) [ 37.177096][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 104 @ nid 36 [ 37.199584][ T1001] EXT4-fs (loop3): Test dummy encryption mode enabled [ 37.207253][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 103 @ nid 36 [ 37.216740][ T1001] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 37.217582][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 102 @ nid 36 [ 37.233873][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 100 @ nid 36 [ 37.243466][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 99 @ nid 36 [ 37.258693][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 95 @ nid 36 [ 37.268714][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 94 @ nid 36 [ 37.278142][ T1001] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 37.299211][ T1001] System zones: 0-5 [ 37.315255][ T1001] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000005,acl,nomblk_io_submit,,errors=continue [ 37.336383][ T20] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 37.345633][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 93 @ nid 36 [ 37.348900][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.354735][ T1000] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 37.354746][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 92 @ nid 36 [ 37.354759][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 91 @ nid 36 [ 37.354768][ T1000] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 37.354777][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 90 @ nid 36 [ 37.354788][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 89 @ nid 36 [ 37.354821][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 88 @ nid 36 [ 37.412620][ T20] usb 3-1: Product: syz [ 37.432014][ T20] usb 3-1: Manufacturer: syz [ 37.436636][ T20] usb 3-1: SerialNumber: syz [ 37.446422][ T15] usb 5-1: USB disconnect, device number 4 [ 37.450286][ T997] F2FS-fs (loop5): invalid crc value [ 37.458887][ T1001] EXT4-fs (loop3): shut down requested (2) [ 37.462580][ T997] F2FS-fs (loop5): Found nat_bits in checkpoint [ 37.505329][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 37.506467][ T997] F2FS-fs (loop5): Start checkpoint disabled! [ 37.521727][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 37.531093][ T997] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 37.539739][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 37.549307][ T1000] erofs: (device loop0): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 37.560908][ T1000] attempt to access beyond end of device [ 37.560908][ T1000] loop0: rw=524288, want=15495015320, limit=16 [ 37.582297][ T1000] attempt to access beyond end of device [ 37.582297][ T1000] loop0: rw=524288, want=15495015288, limit=16 [ 37.594800][ T1000] attempt to access beyond end of device [ 37.594800][ T1000] loop0: rw=524288, want=14546590720, limit=16 [ 37.608148][ T1000] attempt to access beyond end of device [ 37.608148][ T1000] loop0: rw=524288, want=14546590704, limit=16 [ 37.623874][ T1000] attempt to access beyond end of device [ 37.623874][ T1000] loop0: rw=524288, want=72, limit=16 [ 37.638116][ T1000] attempt to access beyond end of device [ 37.638116][ T1000] loop0: rw=524288, want=128, limit=16 [ 37.664448][ T9] attempt to access beyond end of device [ 37.664448][ T9] loop5: rw=2049, want=40984, limit=40427 [ 37.676218][ T1000] attempt to access beyond end of device [ 37.676218][ T1000] loop0: rw=524288, want=1048592, limit=16 [ 37.791167][ T20] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 37.805550][ T20] usb 3-1: USB disconnect, device number 5 [ 37.887272][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 37.901670][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.914874][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 37.972485][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 38.004622][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.018494][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 38.019337][ T1031] netlink: 12 bytes leftover after parsing attributes in process `syz.5.259'. [ 38.062389][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 38.075956][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.088168][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 38.130845][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 38.201969][ T1058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 38.266539][ T1064] binder: 1063:1064 ioctl c018620c 200000000000 returned -22 [ 38.302896][ T1068] input: syz0 as /devices/virtual/input/input10 [ 38.334808][ T400] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 38.490899][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.502024][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.512161][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.525430][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.525835][ T1075] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 38.534623][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.551070][ T25] usb 4-1: config 0 descriptor?? [ 38.552097][ T1075] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 38.575543][ T1075] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.615048][ T1075] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 38.622824][ T1075] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.666979][ T1075] attempt to access beyond end of device [ 38.666979][ T1075] loop2: rw=2049, want=45112, limit=40427 [ 38.700921][ T400] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 38.710240][ T400] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.720413][ T400] usb 6-1: config 0 descriptor?? [ 38.725585][ T282] F2FS-fs (loop2): Issue discard(5638, 5638, 1) failed, ret: -5 [ 38.851060][ T1088] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 38.882763][ T1088] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,nodiscard,noquota,noblock_validity,,errors=continue [ 38.896023][ T1088] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.011357][ T1093] netlink: 164 bytes leftover after parsing attributes in process `syz.2.282'. [ 39.034382][ T25] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 39.052800][ T25] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 39.083321][ T25] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 39.244036][ T1098] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 39.255863][ T1098] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 39.265266][ T1098] F2FS-fs (loop2): invalid crc value [ 39.277563][ T1098] F2FS-fs (loop2): Found nat_bits in checkpoint [ 39.317477][ T1098] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 39.324636][ T1098] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 39.332781][ T25] usb 4-1: USB disconnect, device number 5 [ 39.345947][ T1117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 39.366831][ T1117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 39.456941][ T1098] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 39.456954][ T1098] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 39.464759][ T1098] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 39.472533][ T1098] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 39.480177][ T1098] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 39.487968][ T1098] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 39.495775][ T1098] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 39.720907][ T1036] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.860896][ T400] usb 6-1: Cannot set autoneg [ 39.865758][ T400] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 39.879554][ T400] usb 6-1: USB disconnect, device number 2 [ 39.971292][ T25] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 40.090917][ T1036] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.106499][ T1036] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 40.123540][ T1036] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 40.132838][ T1036] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.146704][ T1036] usb 1-1: config 0 descriptor?? [ 40.198986][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 40.198998][ T24] audit: type=1400 audit(1782154473.130:289): avc: denied { map } for pid=1154 comm="syz.4.307" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.286723][ T24] audit: type=1326 audit(1782154473.220:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1158 comm="syz.4.309" exe="/root/ci2-android-5-10/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55650a8e59 code=0x0 [ 40.350866][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.361133][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 40.370248][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 40.382364][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 40.384335][ T25] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 40.396241][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 40.414267][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.417410][ T15] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 40.429671][ T1163] EXT4-fs (loop5): Test dummy encryption mode enabled [ 40.440470][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 40.441398][ T1163] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.310: inode has both inline data and extents flags [ 40.463002][ T1131] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 40.463160][ T1163] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.310: couldn't read orphan inode 15 (err -117) [ 40.482459][ T25] hub 3-1:1.0: bad descriptor, ignoring hub [ 40.488432][ T25] hub: probe of 3-1:1.0 failed with error -5 [ 40.494740][ T1163] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 40.505707][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 40.511071][ T25] cdc_wdm 3-1:1.0: skipping garbage [ 40.519023][ T24] audit: type=1400 audit(1782154473.450:291): avc: denied { create } for pid=1162 comm="syz.5.310" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 40.539826][ T25] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 40.557245][ T1163] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 40.630589][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 40.647716][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 40.665012][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 40.670985][ T15] usb 4-1: Using ep0 maxpacket: 16 [ 40.684211][ T24] audit: type=1400 audit(1782154473.620:292): avc: denied { listen } for pid=1176 comm="syz.5.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.698271][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 40.715099][ T1036] hid-steam 0003:28DE:1142.0009: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 40.732355][ T1036] hid-steam 0003:28DE:1142.000A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 40.748584][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 40.800909][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.800928][ T25] usb 3-1: USB disconnect, device number 6 [ 40.812220][ T15] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 40.821265][ T1036] hid-steam 0003:28DE:1142.0009: Steam wireless receiver connected [ 40.832869][ T15] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 40.848977][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.861522][ T15] usb 4-1: config 0 descriptor?? [ 41.150972][ T1036] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 41.200930][ T15] usbhid 4-1:0.0: can't add hid device: -71 [ 41.207163][ T15] usbhid: probe of 4-1:0.0 failed with error -71 [ 41.214871][ T15] usb 4-1: USB disconnect, device number 6 [ 41.390859][ T1036] usb 3-1: Using ep0 maxpacket: 8 [ 41.510915][ T1036] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.521142][ T1036] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 41.530206][ T1036] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 41.541433][ T1036] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 41.552828][ T1036] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 41.562191][ T1036] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.611961][ T1036] hub 3-1:1.0: bad descriptor, ignoring hub [ 41.620438][ T1036] hub: probe of 3-1:1.0 failed with error -5 [ 41.634187][ T1036] cdc_wdm 3-1:1.0: skipping garbage [ 41.639644][ T1036] cdc_wdm 3-1:1.0: skipping garbage [ 41.646526][ T1036] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 41.855354][ T1193] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 41.876316][ T1193] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 41.886392][ T1193] F2FS-fs (loop5): invalid crc value [ 41.899824][ T1193] F2FS-fs (loop5): Found nat_bits in checkpoint [ 41.931012][ T406] usb 3-1: USB disconnect, device number 7 [ 41.949512][ T1193] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 41.957102][ T1193] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 42.031470][ T947] handle_bad_sector: 2 callbacks suppressed [ 42.031483][ T947] attempt to access beyond end of device [ 42.031483][ T947] loop5: rw=2049, want=40976, limit=40427 [ 42.153017][ T24] audit: type=1400 audit(1782154475.090:293): avc: denied { write } for pid=1217 comm="syz.4.331" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 42.215254][ T301] print_req_error: 14 callbacks suppressed [ 42.215270][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 42.234495][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 42.246871][ T301] buffer_io_error: 2 callbacks suppressed [ 42.246882][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 42.384950][ T1226] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,discard,auto_da_alloc,nodioread_nolock,,errors=continue [ 42.414474][ T1226] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.430731][ T1226] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: comm syz.2.334: lblock 0 mapped to illegal pblock 0 (length 6) [ 42.446176][ T1226] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 42.458803][ T1226] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.458803][ T1226] [ 42.469592][ T1226] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #15: block 8: comm syz.2.334: lblock 8 mapped to illegal pblock 8 (length 8) [ 42.483730][ T20] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 42.491513][ T1226] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 42.505471][ T1226] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.505471][ T1226] [ 42.508064][ T1231] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 42.524955][ T1231] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.711719][ T1036] usb 1-1: USB disconnect, device number 5 [ 42.720466][ T1036] hid-steam 0003:28DE:1142.0009: Steam wireless receiver disconnected [ 42.774050][ T1237] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 42.787250][ T1237] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.801623][ T1244] erofs: (device loop0): mounted with root inode @ nid 36. [ 42.811556][ T1244] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 42.811605][ T24] audit: type=1400 audit(1782154475.740:294): avc: denied { map } for pid=1242 comm="syz.0.339" path="/71/file2/file2" dev="loop0" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.821553][ T1244] attempt to access beyond end of device [ 42.821553][ T1244] loop0: rw=524288, want=524304, limit=16 [ 42.867512][ T42] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 42.884763][ T1244] attempt to access beyond end of device [ 42.884763][ T1244] loop0: rw=0, want=524304, limit=16 [ 42.898986][ T1247] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.901403][ T20] usb 5-1: unable to get BOS descriptor or descriptor too short [ 42.919235][ T1244] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 42.952097][ T1247] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.340: bad orphan inode 13 [ 42.957596][ T1244] attempt to access beyond end of device [ 42.957596][ T1244] loop0: rw=0, want=524304, limit=16 [ 42.973878][ T1244] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4100] [ 42.979987][ T1247] ext4_test_bit(bit=12, block=18) = 1 [ 42.996664][ T20] usb 5-1: not running at top speed; connect to a high speed hub [ 43.003388][ T1247] is_bad_inode(inode)=0 [ 43.018536][ T1247] NEXT_ORPHAN(inode)=0 [ 43.025027][ T1247] max_ino=32 [ 43.028277][ T1247] i_nlink=1 [ 43.032298][ T1247] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 43.074331][ T1247] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 43.090892][ T20] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 43.141354][ T1247] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.340: bg 0: block 248: padding at end of block bitmap is not set [ 43.157160][ T1252] attempt to access beyond end of device [ 43.157160][ T1252] loop2: rw=2049, want=1041, limit=128 [ 43.189021][ T1247] Quota error (device loop3): write_blk: dquota write failed [ 43.197224][ T1247] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 43.207472][ T1247] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.340: Failed to acquire dquot type 1 [ 43.271042][ T20] usb 5-1: New USB device found, idVendor=0a4e, idProduct=4040, bcdDevice= 0.40 [ 43.280130][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.290393][ T20] usb 5-1: Product: syz [ 43.294640][ T20] usb 5-1: Manufacturer: syz [ 43.299265][ T20] usb 5-1: SerialNumber: syz [ 43.345146][ T1256] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 43.360447][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 43.389690][ T1256] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec018, mo2=0003] [ 43.392571][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.411102][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 43.421064][ T1256] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,inlinecrypt,noblock_validity,nodelalloc,resuid=0x0000000000000000,delalloc,usrquota,noinit_itable,,errors=continue [ 43.473819][ T1256] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.342: inode #16777216: comm syz.0.342: iget: illegal inode # [ 43.493093][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 43.512903][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.524300][ T1256] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.342: error while reading EA inode 16777216 err=-117 [ 43.562149][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 43.670318][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 43.673490][ T20] usb 5-1: USB disconnect, device number 5 [ 43.696792][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.733006][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 43.792294][ T1292] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 43.801414][ T1292] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.843206][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 43.858820][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.858982][ T1296] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 43.891348][ T334] udevd[334]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 43.914274][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 43.929190][ T1296] EXT4-fs (loop3): shut down requested (2) [ 43.936458][ T1296] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 43.945419][ T1296] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 43.954668][ T24] audit: type=1400 audit(1782154476.890:295): avc: denied { rename } for pid=1294 comm="syz.3.358" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.989526][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 44.010854][ T287] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 44.045111][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 44.065283][ T1311] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 44.101575][ T1311] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec018, mo2=0003] [ 44.118443][ T15] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 44.126580][ T1311] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,inlinecrypt,noblock_validity,nodelalloc,resuid=0x0000000000000000,delalloc,usrquota,noinit_itable,,errors=continue [ 44.148597][ T15] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.207817][ T1311] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.364: inode #16777216: comm syz.5.364: iget: illegal inode # [ 44.242692][ T1311] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.364: error while reading EA inode 16777216 err=-117 [ 44.303921][ T1328] cgroup: syz.4.369 (1328) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 44.328410][ T1328] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 44.362110][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 44.391189][ T287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.414644][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 44.424770][ T287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.456491][ T287] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 44.456505][ T287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.469213][ T287] usb 3-1: config 0 descriptor?? [ 44.485543][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 44.683714][ T1346] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.377: bg 0: block 5: invalid block bitmap [ 44.688230][ T24] audit: type=1400 audit(1782154477.620:296): avc: denied { create } for pid=1348 comm="syz.0.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 44.711151][ T1352] input: syz1 as /devices/virtual/input/input12 [ 44.725980][ T1346] EXT4-fs error (device loop5) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 44.745034][ T1346] EXT4-fs error (device loop5): ext4_free_branches:1026: inode #11: comm syz.5.377: invalid indirect mapped block 3 (level 2) [ 44.768641][ T1346] EXT4-fs (loop5): 1 orphan inode deleted [ 44.775178][ T1346] EXT4-fs (loop5): 1 truncate cleaned up [ 44.781214][ T1346] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,,errors=continue [ 44.936291][ T287] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 44.947466][ T287] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 44.976376][ T1316] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 45.000547][ T1316] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 45.009721][ T1316] F2FS-fs (loop3): invalid crc value [ 45.021081][ T1316] F2FS-fs (loop3): Found nat_bits in checkpoint [ 45.071298][ T1316] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 45.078514][ T1316] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 45.140871][ T287] cp2112 0003:10C4:EA90.000C: error requesting version [ 45.148446][ T287] cp2112: probe of 0003:10C4:EA90.000C failed with error -71 [ 45.162676][ T287] usb 3-1: USB disconnect, device number 8 [ 45.188332][ T1385] fido_id[1385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 45.400841][ T1036] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 45.537291][ T1402] binder: 1401:1402 ioctl c0306201 2000000006c0 returned -14 [ 45.623204][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 45.623227][ T24] audit: type=1400 audit(1782154478.560:300): avc: denied { mount } for pid=1408 comm="syz.0.400" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 45.650933][ T1036] usb 6-1: Using ep0 maxpacket: 32 [ 45.706185][ T1413] EXT4-fs (loop2): Test dummy encryption mode enabled [ 45.714208][ T1413] EXT4-fs (loop2): Mount option "journal_checksum" incompatible with ext2 [ 45.770898][ T1036] usb 6-1: too many endpoints for config 0 interface 0 altsetting 10: 254, using maximum allowed: 30 [ 45.785015][ T1036] usb 6-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 45.801108][ T15] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 45.814125][ T1036] usb 6-1: config 0 interface 0 has no altsetting 0 [ 45.821315][ T1036] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 45.830501][ T1036] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.839590][ T1036] usb 6-1: config 0 descriptor?? [ 45.872611][ T1420] EXT4-fs (loop0): Ignoring removed orlov option [ 45.909745][ T1420] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,nodiscard,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 46.127376][ T1429] F2FS-fs (loop2): invalid crc value [ 46.154785][ T1429] F2FS-fs (loop2): Found nat_bits in checkpoint [ 46.180930][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.191965][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.202167][ T15] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 46.207107][ T1429] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 46.216285][ T15] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 46.233439][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.259483][ T15] usb 4-1: config 0 descriptor?? [ 46.264755][ T1429] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 46.322241][ T1036] uclogic 0003:5543:0522.000D: unknown main item tag 0x4 [ 46.329364][ T1036] uclogic 0003:5543:0522.000D: unknown main item tag 0x2 [ 46.337081][ T1448] EXT4-fs (loop0): Test dummy encryption mode enabled [ 46.344642][ T282] attempt to access beyond end of device [ 46.344642][ T282] loop2: rw=2049, want=45104, limit=40427 [ 46.345456][ T1036] uclogic 0003:5543:0522.000D: No inputs registered, leaving [ 46.371905][ T1448] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.414: inode has both inline data and extents flags [ 46.392599][ T1036] uclogic 0003:5543:0522.000D: hidraw0: USB HID v0.05 Device [HID 5543:0522] on usb-dummy_hcd.5-1/input0 [ 46.404900][ T1448] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.414: couldn't read orphan inode 15 (err -117) [ 46.421777][ T1448] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 46.471233][ T1448] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 46.529673][ T1036] usb 6-1: USB disconnect, device number 3 [ 46.555119][ T1458] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.568466][ T1458] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #16: comm syz.0.418: invalid indirect mapped block 4294967295 (level 0) [ 46.583267][ T1458] EXT4-fs (loop0): Remounting filesystem read-only [ 46.589897][ T1458] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #16: comm syz.0.418: invalid indirect mapped block 4294967295 (level 1) [ 46.604634][ T1458] EXT4-fs (loop0): 1 orphan inode deleted [ 46.610436][ T1458] EXT4-fs (loop0): 1 truncate cleaned up [ 46.616302][ T1458] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,block_validity,block_validity,block_validity,quota,noload, [ 46.636988][ T1458] EXT4-fs (loop0): shut down requested (2) [ 46.643403][ T1458] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.652631][ T1458] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.661509][ T1458] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 46.670383][ T1458] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.679308][ T1458] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.688239][ T1458] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 46.695161][ T1464] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.706081][ T24] audit: type=1400 audit(1782154479.640:301): avc: denied { mounton } for pid=1457 comm="syz.0.418" path="/93/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.732362][ T15] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 46.739907][ T15] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 46.747653][ T15] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 46.755258][ T15] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 46.762735][ T15] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 46.770160][ T15] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 46.777762][ T15] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 46.785319][ T15] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 46.792805][ T15] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 46.800408][ T15] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 46.810324][ T15] plantronics 0003:047F:FFFF.000E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 46.941648][ T1479] EXT4-fs (loop0): Invalid log cluster size: 117440518 [ 47.001568][ T1036] usb 4-1: USB disconnect, device number 7 [ 47.362137][ T1479] F2FS-fs (loop0): invalid crc value [ 47.377012][ T352] print_req_error: 42 callbacks suppressed [ 47.377031][ T352] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 47.396584][ T1479] F2FS-fs (loop0): Found nat_bits in checkpoint [ 47.449047][ T352] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 47.461454][ T352] buffer_io_error: 16 callbacks suppressed [ 47.461465][ T352] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 47.476971][ T1479] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 47.508475][ T352] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 47.522223][ T352] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 47.534429][ T352] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 47.589766][ T1517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 47.601345][ T1517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 47.650031][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 47.663015][ T24] audit: type=1400 audit(1782154480.600:302): avc: denied { mount } for pid=1521 comm="syz.3.441" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 47.689168][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 47.701917][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 47.709319][ T24] audit: type=1400 audit(1782154480.600:303): avc: denied { search } for pid=1521 comm="syz.3.441" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 47.735726][ T24] audit: type=1400 audit(1782154480.600:304): avc: denied { read } for pid=1521 comm="syz.3.441" name="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 47.763212][ T24] audit: type=1400 audit(1782154480.600:305): avc: denied { open } for pid=1521 comm="syz.3.441" path="/" dev="configfs" ino=1122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 47.801561][ T1524] erofs: (device loop5): mounted with root inode @ nid 36. [ 47.831163][ T1527] exfat: Deprecated parameter 'namecase' [ 47.862437][ T1527] exfat: Deprecated parameter 'namecase' [ 47.870099][ T1527] exfat: Deprecated parameter 'namecase' [ 47.893670][ T1527] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 47.923696][ T24] audit: type=1400 audit(1782154480.860:306): avc: denied { setopt } for pid=1529 comm="syz.5.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.944856][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 47.995563][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 48.013866][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 48.042802][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 48.055701][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 48.062876][ T406] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 48.068532][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 48.090854][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 48.100316][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 48.109227][ T406] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 48.119461][ T24] audit: type=1400 audit(1782154481.060:307): avc: denied { read } for pid=1539 comm="syz.3.446" path="socket:[20259]" dev="sockfs" ino=20259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.150060][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 48.222814][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 48.233117][ T1550] capability: warning: `syz.4.450' uses deprecated v2 capabilities in a way that may be insecure [ 48.270336][ T1546] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 48.283924][ T1546] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.310394][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 48.373054][ T1561] xt_hashlimit: size too large, truncated to 1048576 [ 48.427858][ T352] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 48.510841][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 48.630869][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 48.679331][ T1572] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 48.689427][ T1572] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 48.698851][ T1572] F2FS-fs (loop2): invalid crc value [ 48.704391][ T406] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 48.713572][ T1572] F2FS-fs (loop2): Found nat_bits in checkpoint [ 48.749244][ T1572] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 48.756454][ T1572] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 48.785888][ T1572] attempt to access beyond end of device [ 48.785888][ T1572] loop2: rw=2049, want=77960, limit=40427 [ 48.815553][ T373] attempt to access beyond end of device [ 48.815553][ T373] loop2: rw=1, want=77960, limit=40427 [ 48.950827][ T406] usb 4-1: Using ep0 maxpacket: 16 [ 49.070906][ T406] usb 4-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 49.081945][ T406] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 184, changing to 11 [ 49.093286][ T406] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 49.104810][ T406] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 49.121833][ T406] usb 4-1: config 0 interface 0 has no altsetting 0 [ 49.128528][ T406] usb 4-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00 [ 49.137774][ T406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.146554][ T406] usb 4-1: config 0 descriptor?? [ 49.170939][ T1567] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 49.445803][ T1567] FAT-fs (loop3): Directory bread(block 64) failed [ 49.457528][ T1567] FAT-fs (loop3): Directory bread(block 65) failed [ 49.472178][ T1567] FAT-fs (loop3): Directory bread(block 66) failed [ 49.480661][ T1567] FAT-fs (loop3): Directory bread(block 67) failed [ 49.500353][ T1567] FAT-fs (loop3): Directory bread(block 68) failed [ 49.509768][ T1567] FAT-fs (loop3): Directory bread(block 69) failed [ 49.516613][ T1567] FAT-fs (loop3): Directory bread(block 70) failed [ 49.523656][ T1567] FAT-fs (loop3): Directory bread(block 71) failed [ 49.530320][ T1567] FAT-fs (loop3): Directory bread(block 72) failed [ 49.536961][ T1567] FAT-fs (loop3): Directory bread(block 73) failed [ 49.632895][ T1610] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 49.642015][ T1610] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.651076][ T406] usbhid 4-1:0.0: can't add hid device: -71 [ 49.658432][ T406] usbhid: probe of 4-1:0.0 failed with error -71 [ 49.669335][ T406] usb 4-1: USB disconnect, device number 8 [ 49.675416][ T1595] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 49.704714][ T1595] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 49.713784][ T1595] F2FS-fs (loop2): invalid crc value [ 49.745568][ T1595] F2FS-fs (loop2): Found nat_bits in checkpoint [ 49.787754][ T1595] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 49.795085][ T1595] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 49.807354][ T1627] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.826056][ T1627] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 49.834246][ T1627] System zones: 1-12 [ 49.838657][ T1627] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.475: bad orphan inode 131072 [ 49.849713][ T1627] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue [ 50.079220][ T24] audit: type=1400 audit(1782154483.010:308): avc: denied { remount } for pid=1594 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.079562][ T1595] F2FS-fs (loop2): switch atgc option is not allowed [ 50.256200][ T1632] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.263571][ T1632] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.272000][ T1635] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 50.291239][ T1635] EXT4-fs (loop3): 1 truncate cleaned up [ 50.302447][ T1635] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,nolazytime,discard,max_batch_time=0x0000000000000003,data_err=ignore,noblock_validity,,errors=continue [ 50.371775][ T1635] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.478: invalid indirect mapped block 4294901760 (level 0) [ 50.417959][ T1635] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.478: invalid indirect mapped block 2185560079 (level 0) [ 50.441750][ T1635] EXT4-fs error (device loop3) in ext4_do_update_inode:5362: error 27 [ 50.459916][ T1638] EXT4-fs error (device loop3): __ext4_get_inode_loc:4451: comm syz.3.478: Invalid inode table block 0 in block_group 0 [ 50.461537][ T1635] EXT4-fs error (device loop3): ext4_dirty_inode:6181: inode #13: comm syz.3.478: mark_inode_dirty error [ 50.485301][ T1635] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.478: invalid indirect mapped block 65535 (level 2) [ 50.498935][ T1635] EXT4-fs error (device loop3): __ext4_get_inode_loc:4451: comm syz.3.478: Invalid inode table block 0 in block_group 0 [ 50.511968][ T1635] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 50.521620][ T1635] EXT4-fs error (device loop3): ext4_truncate:4403: inode #13: comm syz.3.478: mark_inode_dirty error [ 50.532843][ T1635] EXT4-fs error (device loop3) in ext4_setattr:5745: Corrupt filesystem [ 50.755273][ T1650] capability: warning: `syz.2.482' uses 32-bit capabilities (legacy support in use) [ 50.765478][ T24] audit: type=1400 audit(1782154483.700:309): avc: denied { sys_module } for pid=1648 comm="syz.2.482" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 50.839281][ T1647] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.867659][ T24] audit: type=1400 audit(1782154483.800:310): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 50.894122][ T1647] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,noinit_itable,inlinecrypt,resgid=0x000000000000ee00,norecovery,resuid=0x0000000000000000,noblock_validity,dioread_nolock,,errors=continue [ 50.925255][ T24] audit: type=1400 audit(1782154483.860:311): avc: denied { rename } for pid=1644 comm="syz.0.481" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.960895][ T15] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 51.001371][ T1658] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 51.094628][ T24] audit: type=1400 audit(1782154484.030:312): avc: denied { bind } for pid=1667 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.114017][ T24] audit: type=1400 audit(1782154484.030:313): avc: denied { write } for pid=1667 comm="syz.2.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.159377][ T1672] netlink: 'syz.2.490': attribute type 1 has an invalid length. [ 51.198156][ T1662] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 51.204943][ T1662] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 51.221494][ T1662] F2FS-fs (loop0): invalid crc value [ 51.230048][ T1675] FAT-fs (loop2): Directory bread(block 64) failed [ 51.237385][ T1675] FAT-fs (loop2): Directory bread(block 65) failed [ 51.244975][ T1675] FAT-fs (loop2): Directory bread(block 66) failed [ 51.251731][ T1675] FAT-fs (loop2): Directory bread(block 67) failed [ 51.258521][ T1675] FAT-fs (loop2): Directory bread(block 68) failed [ 51.265428][ T1675] FAT-fs (loop2): Directory bread(block 69) failed [ 51.272095][ T1662] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 51.272632][ T1675] FAT-fs (loop2): Directory bread(block 70) failed [ 51.290030][ T1675] FAT-fs (loop2): Directory bread(block 71) failed [ 51.296788][ T1675] FAT-fs (loop2): Directory bread(block 72) failed [ 51.303664][ T1675] FAT-fs (loop2): Directory bread(block 73) failed [ 51.320999][ T1662] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 51.328206][ T1662] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 51.361005][ T15] usb 6-1: unable to get BOS descriptor or descriptor too short [ 51.378842][ T24] audit: type=1400 audit(1782154484.310:314): avc: denied { mount } for pid=1681 comm="syz.2.492" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 51.401280][ T24] audit: type=1400 audit(1782154484.310:315): avc: denied { mounton } for pid=1681 comm="syz.2.492" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 51.430155][ T1662] attempt to access beyond end of device [ 51.430155][ T1662] loop0: rw=2049, want=53384, limit=40427 [ 51.452832][ T281] attempt to access beyond end of device [ 51.452832][ T281] loop0: rw=2049, want=45104, limit=40427 [ 51.464363][ T15] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 51.626531][ T1691] FAT-fs (loop3): Directory bread(block 64) failed [ 51.633285][ T15] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 51.645980][ T1693] EXT4-fs (loop2): orphan cleanup on readonly fs [ 51.652478][ T15] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.660584][ T1691] FAT-fs (loop3): Directory bread(block 65) failed [ 51.666712][ T1693] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #2: block 3: comm syz.2.497: lblock 0 mapped to illegal pblock 3 (length 1) [ 51.668343][ T1691] FAT-fs (loop3): Directory bread(block 66) failed [ 51.687534][ T15] usb 6-1: Product: syz [ 51.691861][ T15] usb 6-1: Manufacturer: syz [ 51.696648][ T15] usb 6-1: SerialNumber: syz [ 51.701413][ T1691] FAT-fs (loop3): Directory bread(block 67) failed [ 51.708019][ T1691] FAT-fs (loop3): Directory bread(block 68) failed [ 51.715657][ T1691] FAT-fs (loop3): Directory bread(block 69) failed [ 51.722287][ T1691] FAT-fs (loop3): Directory bread(block 70) failed [ 51.723334][ T1693] EXT4-fs warning (device loop2): dx_probe:796: inode #2: lblock 0: comm syz.2.497: error -117 reading directory block [ 51.728858][ T1691] FAT-fs (loop3): Directory bread(block 71) failed [ 51.748215][ T1691] FAT-fs (loop3): Directory bread(block 72) failed [ 51.754941][ T1691] FAT-fs (loop3): Directory bread(block 73) failed [ 51.764886][ T1693] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 51.773555][ T1693] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,norecovery,lazytime,jqfmt=vfsold,nolazytime,grpjquota=.abort,lazytime,lazytime,grpid,,,errors=continue [ 51.829525][ T280] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 51.837964][ T280] FAT-fs (loop3): Filesystem has been set read-only [ 52.030841][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 52.041718][ T15] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 52.061137][ T15] usb 6-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 52.097054][ T24] audit: type=1400 audit(1782154485.030:316): avc: denied { mmap_zero } for pid=1732 comm="syz.2.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 52.116658][ T15] usb 6-1: 2:1: cannot set enable PITCH (v2) [ 52.143609][ T15] usb 6-1: USB disconnect, device number 4 [ 52.166666][ T310] udevd[310]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.232035][ T1728] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.259405][ T1728] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.269929][ T1728] device bridge_slave_0 entered promiscuous mode [ 52.292567][ T1728] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.299652][ T1728] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.312595][ T1728] device bridge_slave_1 entered promiscuous mode [ 52.459919][ T1728] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.467027][ T1728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.474392][ T1728] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.481480][ T1728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.490920][ T20] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 52.529864][ T301] print_req_error: 26 callbacks suppressed [ 52.529883][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 52.549433][ T313] device bridge_slave_1 left promiscuous mode [ 52.560060][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.578528][ T313] device bridge_slave_0 left promiscuous mode [ 52.594927][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.628174][ T313] device veth1_macvtap left promiscuous mode [ 52.634479][ T313] device veth0_vlan left promiscuous mode [ 52.705737][ T1743] F2FS-fs (loop2): invalid crc value [ 52.712926][ T1743] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 52.751122][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.759551][ T1743] F2FS-fs (loop2): Start checkpoint disabled! [ 52.766238][ T1743] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 52.780651][ T24] audit: type=1400 audit(1782154485.710:317): avc: denied { mounton } for pid=1749 comm="syz.5.521" path="/57/bus/bus" dev="loop5" ino=1048638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 52.803800][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.816055][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.824422][ T1741] ================================================================== [ 52.825822][ T24] audit: type=1400 audit(1782154485.760:318): avc: denied { ioctl } for pid=1741 comm="syz.2.518" path="socket:[21051]" dev="sockfs" ino=21051 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.832885][ T1741] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x4b/0xa0 [ 52.832896][ T1741] Write of size 8 at addr ffff888127454590 by task syz.2.518/1741 [ 52.832899][ T1741] [ 52.832924][ T1741] CPU: 0 PID: 1741 Comm: syz.2.518 Not tainted syzkaller #0 [ 52.832931][ T1741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 52.832936][ T1741] Call Trace: [ 52.832953][ T1741] __dump_stack+0x21/0x24 [ 52.832964][ T1741] dump_stack_lvl+0x1a7/0x208 [ 52.833013][ T1741] ? show_regs_print_info+0x18/0x18 [ 52.910976][ T1741] ? thaw_kernel_threads+0x220/0x220 [ 52.916296][ T1741] print_address_description+0x7f/0x2c0 [ 52.921863][ T1741] ? rcu_segcblist_enqueue+0x4b/0xa0 [ 52.927165][ T1741] kasan_report+0x100/0x140 [ 52.931688][ T1741] ? rcu_segcblist_enqueue+0x4b/0xa0 [ 52.936987][ T1741] __asan_report_store8_noabort+0x17/0x20 [ 52.942727][ T1741] rcu_segcblist_enqueue+0x4b/0xa0 [ 52.947874][ T1741] call_rcu+0x4df/0x1090 [ 52.952147][ T1741] ? local_bh_enable+0x1f/0x30 [ 52.956932][ T1741] ? lock_sock_nested+0x217/0x2a0 [ 52.961969][ T1741] ? rcu_gp_kthread_wake+0x90/0x90 [ 52.967123][ T1741] ? __kasan_check_write+0x14/0x20 [ 52.972250][ T1741] ? mutex_lock+0x92/0xf0 [ 52.976605][ T1741] ? mutex_trylock+0xb0/0xb0 [ 52.981208][ T1741] pppol2tp_release+0x1e3/0x2b0 [ 52.986070][ T1741] sock_close+0xb8/0x200 [ 52.990329][ T1741] ? sock_mmap+0xa0/0xa0 [ 52.994591][ T1741] __fput+0x2dc/0x730 [ 52.998602][ T1741] ____fput+0x15/0x20 [ 53.002599][ T1741] task_work_run+0x127/0x190 [ 53.007207][ T1741] exit_to_user_mode_loop+0xcb/0xe0 [ 53.012417][ T1741] exit_to_user_mode_prepare+0x76/0xa0 [ 53.017895][ T1741] syscall_exit_to_user_mode+0x1d/0x40 [ 53.023479][ T1741] do_syscall_64+0x3d/0x40 [ 53.027924][ T1741] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.033849][ T1741] RIP: 0033:0x7fc9e6d44e59 [ 53.038292][ T1741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.057913][ T1741] RSP: 002b:00007ffd20456c68 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 53.066339][ T1741] RAX: 0000000000000000 RBX: 00007ffd20456d50 RCX: 00007fc9e6d44e59 [ 53.074327][ T1741] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 53.082310][ T1741] RBP: 000000000000cbf2 R08: 0000000000000001 R09: 0000000000000000 [ 53.090419][ T1741] R10: 0000001b2d420000 R11: 0000000000000246 R12: 00007ffd20456d90 [ 53.098407][ T1741] R13: 00007fc9e6fbdfac R14: 000000000000ce7f R15: 00007fc9e6fbdfa0 [ 53.106389][ T1741] [ 53.108736][ T1741] Allocated by task 1743: [ 53.113101][ T1741] __kasan_kmalloc+0xd4/0x100 [ 53.117796][ T1741] __kmalloc+0x19f/0x330 [ 53.122128][ T1741] l2tp_session_create+0x39/0xb60 [ 53.127170][ T1741] pppol2tp_connect+0xbf5/0x1640 [ 53.132112][ T1741] __sys_connect+0x3ce/0x450 [ 53.136713][ T1741] __x64_sys_connect+0x7a/0x90 [ 53.141504][ T1741] do_syscall_64+0x31/0x40 [ 53.145936][ T1741] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.151843][ T1741] [ 53.154358][ T1741] Freed by task 7: [ 53.158102][ T1741] kasan_set_track+0x4a/0x70 [ 53.162706][ T1741] kasan_set_free_info+0x23/0x40 [ 53.167656][ T1741] ____kasan_slab_free+0x125/0x160 [ 53.172793][ T1741] __kasan_slab_free+0x11/0x20 [ 53.177566][ T1741] slab_free_freelist_hook+0xc5/0x190 [ 53.182955][ T1741] kfree+0xc0/0x270 [ 53.186788][ T1741] l2tp_session_put+0xb2/0x1a0 [ 53.191580][ T1741] l2tp_session_delete+0x3a9/0x4a0 [ 53.196734][ T1741] l2tp_tunnel_del_work+0x180/0x3d0 [ 53.201956][ T1741] process_one_work+0x6fd/0xbc0 [ 53.206969][ T1741] worker_thread+0xa8e/0x13c0 [ 53.211671][ T1741] kthread+0x324/0x3b0 [ 53.215763][ T1741] ret_from_fork+0x1f/0x30 [ 53.220187][ T1741] [ 53.222520][ T1741] Last potentially related work creation: [ 53.228287][ T1741] kasan_save_stack+0x3a/0x60 [ 53.232994][ T1741] __kasan_record_aux_stack+0xd2/0x100 [ 53.238619][ T1741] kasan_record_aux_stack_noalloc+0xb/0x10 [ 53.244450][ T1741] call_rcu+0x11a/0x1090 [ 53.248710][ T1741] pppol2tp_release+0x1e3/0x2b0 [ 53.253579][ T1741] sock_close+0xb8/0x200 [ 53.257828][ T1741] __fput+0x2dc/0x730 [ 53.261819][ T1741] ____fput+0x15/0x20 [ 53.265809][ T1741] task_work_run+0x127/0x190 [ 53.270409][ T1741] exit_to_user_mode_loop+0xcb/0xe0 [ 53.275629][ T1741] exit_to_user_mode_prepare+0x76/0xa0 [ 53.281100][ T1741] syscall_exit_to_user_mode+0x1d/0x40 [ 53.286562][ T1741] do_syscall_64+0x3d/0x40 [ 53.290984][ T1741] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.296876][ T1741] [ 53.299212][ T1741] The buggy address belongs to the object at ffff888127454400 [ 53.299212][ T1741] which belongs to the cache kmalloc-512 of size 512 [ 53.313277][ T1741] The buggy address is located 400 bytes inside of [ 53.313277][ T1741] 512-byte region [ffff888127454400, ffff888127454600) [ 53.326566][ T1741] The buggy address belongs to the page: [ 53.332231][ T1741] page:ffffea00049d1500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x127454 [ 53.342484][ T1741] head:ffffea00049d1500 order:2 compound_mapcount:0 compound_pincount:0 [ 53.351405][ T1741] flags: 0x4000000000010200(slab|head) [ 53.356882][ T1741] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100043080 [ 53.365565][ T1741] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 53.374147][ T1741] page dumped because: kasan: bad access detected [ 53.380564][ T1741] page_owner tracks the page as allocated [ 53.386306][ T1741] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 283, ts 20715500596, free_ts 0 [ 53.404628][ T1741] prep_new_page+0x176/0x190 [ 53.409256][ T1741] get_page_from_freelist+0x225f/0x23f0 [ 53.414813][ T1741] __alloc_pages_nodemask+0x29a/0x640 [ 53.420194][ T1741] new_slab+0x84/0x3f0 [ 53.424275][ T1741] ___slab_alloc+0x2f8/0x4c0 [ 53.428875][ T1741] __slab_alloc+0x63/0xa0 [ 53.433213][ T1741] __kmalloc+0x1f9/0x330 [ 53.437461][ T1741] __register_sysctl_table+0xa35/0x1240 [ 53.443020][ T1741] register_net_sysctl+0x2c/0x40 [ 53.447969][ T1741] __devinet_sysctl_register+0x2bd/0x390 [ 53.453611][ T1741] devinet_sysctl_register+0x169/0x1e0 [ 53.459074][ T1741] inetdev_init+0x26c/0x490 [ 53.463590][ T1741] inetdev_event+0x1f4/0x1010 [ 53.468283][ T1741] raw_notifier_call_chain+0x90/0x100 [ 53.473660][ T1741] call_netdevice_notifiers+0x119/0x190 [ 53.479213][ T1741] register_netdevice+0x100a/0x13a0 [ 53.484422][ T1741] page_owner free stack trace missing [ 53.489798][ T1741] [ 53.492136][ T1741] Memory state around the buggy address: [ 53.497806][ T1741] ffff888127454480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.505882][ T1741] ffff888127454500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.513964][ T1741] >ffff888127454580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.522040][ T1741] ^ [ 53.526644][ T1741] ffff888127454600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 53.534711][ T1741] ffff888127454680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 53.543019][ T1741] ================================================================== [ 53.551145][ T1741] Disabling lock debugging due to kernel taint [ 53.564912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.576362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.602205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.621515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.640897][ T20] usb 5-1: unable to get BOS descriptor or descriptor too short [ 53.687160][ T1728] device veth0_vlan entered promiscuous mode [ 53.701308][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.713236][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.733483][ T947] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 53.741745][ T20] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 53.743396][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.761255][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.781142][ T947] FAT-fs (loop5): Filesystem has been set read-only [ 53.792247][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.804864][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.818994][ T1728] device veth1_macvtap entered promiscuous mode [ 53.825931][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.836580][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.855623][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.874279][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.884198][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.904413][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.916125][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.931010][ T20] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 53.944563][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.952854][ T20] usb 5-1: Product: syz [ 53.957103][ T20] usb 5-1: Manufacturer: syz [ 53.962339][ T20] usb 5-1: SerialNumber: syz [ 53.970305][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 53.982969][ T301] blk_update_request: I/O error, dev loop5, sector 141837008371584 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 53.995340][ T301] buffer_io_error: 8 callbacks suppressed [ 53.995351][ T301] Buffer I/O error on dev loop5p17, logical block 17729626046448, async page read [ 54.221540][ T20] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 54.431217][ T20] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 55.086799][ T20] usb 5-1: USB disconnect, device number 6 [ 55.291686][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.190966][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!