last executing test programs: 31.755088484s ago: executing program 4 (id=506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000140)="b800008ec866f30fc7730066b9320800000f320f20c06635000001000f22c00f3736660f3a638d5351000f209c66b9800000c00f326635000400000f300f01f467f36d", 0x43}], 0x0, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 31.001188964s ago: executing program 4 (id=521): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x8e, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r1, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000001540), 0xfffffffe, r1, 0x0, 0x1500}, 0x38) 30.934594865s ago: executing program 4 (id=524): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000440)='./file0\x00', 0x2008410, &(0x7f0000001f80)=ANY=[], 0x1, 0x5550, &(0x7f0000007a40)="$eJzs3EtvG9UXAPA7TtP++/xHiAW7jlQhJVJt1WlTwS5AKx4iVcRjwQoc27Hc2p4odpyQFRIsEQu+CQKJFUs+AwvW7BALEDskkOeOCaE8WuzEafv7SeMzc2d85tyRlejMWA7AE2sh/fnHJFwKZ0MIcyGEC0nI15Niya3G8EwI4XIIofSHJSnGfx84HUI4F0K4NEoecybFrk+vDq+s/PDaT199c+bU+c++/HZ2swZm7dkQQncrru92Y8xaMd4txmvDdh67N4ZFjDu694rtLMbd5kaeYbc2Pq6Wx+uteHy2tdMfxc1OrT6KrfZmPr7ViyfsD1vjPPkb7ta28+1GcyOP7X6Wx9Z+rGtvP/5t2+8PYp5Gke/9PH0YDMYxjjf3mnE+W/fyWO8NivGYN2s090ZxWMTidKGedRp5HRuTXOmT7fV2b2cvHTa3++2sl65Uqs9VqjfL1e2s0Rw0b5Rr3cbNG+liqzM6rDxo1rqrrSxrdZqVetZdShdb9Xq5Wk0XbzU32rVeWq1WrleulVeWirWr6ct33k47jXRxFF9s93ZOtzv9dDPbTuM7ltLlyvXnl9Ir1fTNtfV0/Y3bt9fW33r31jt3Xlh79aXioPvKSheXry0vl6vXysvVpRMw/9H/3Qec/2CS+X9UFP0Q808muzzwz3zAAB7aff1/0P8DR+8/9/9nD3LMsv8P0+z/Ry2V/v/f+9/S5P3/RP3vSe3/H+H5w0T0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT6zv5j9/JV9ZiNvni/GLxdBTxXYSQiiFEH79C3Ph9KGcc0We+b85fv5PNXydhDzD6BxniuVcCGG1WH75/1FfBQAAAHh8ffHB5U9itx5fFmZdEMcp3rQpXXhvSvmSEML8wvdTylYavTw9pWT55/tU2JtStvwG1v+mlCzecjs1rWwPZG4cPrx4MJhPKImhdKzlAAAAx2LuUDjeLgQAAIDj9PGsC2A2kjB+lDl+Fpx/8/7g0ebZQ/sAAACAR1Ay6wIAAACAI5f3/37/DwAAAB5v8ff/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dd27uc2cSCKA/CzwcD+06LV3reVvUEZKSHHHAMFpAlKIC2kAWogt5QQQYQ9QnIEUiTGsYK+T/I4Y0e/mQEubywZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0nO1nj/e/3u4NGe3v0ye1QAAAACnbKv1vP5j2vR/pOu/0qU/qV9ERBkRp2r3QYxamYOUU535/+rdHJ4i6oTDGON0fI+I/+l4/d31pwAAAADXa7NczZpqvWmmfU+Iz9Rs2pQ/bzLlFRFRTV8ypZWH5m+msPr3PYy7TGn1BtYkU1iz5TY8fW+Ua5C2QeuUVjJZ1F9i3Su7GRcAAOhTuxI4U4UAAABwBW77ngD9KI7N8TnjuDmlB4LfWj0AAADgCyr6ngAAAADQubr+9/4/AAAAuG7N+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0rZazzfL1ezc/cUHc3b7y+RbEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABv7M87CoRAGITB3vWdydz/sNKgobFJFQgff2MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCb3/3l/8TUOJPMvTaWnkeStVNj69TYOzeO/jC+fg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxPy8pEAJBEAVzxv9O+v6HlQQ9gwgR0PCoohYNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8EW/++X/xNQ4k8ydNpaOR5K1q8bWVWPvQePowXj7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxc/+8cZNhAMAf+87XP4AIAWUIoCIxwEKTa2npCAMoYuAjIEXppQSuFNoMtIpAWWBCmbsgGBFCAoWt36FzI3UpW4cMQUJiK7LPTt02tKcq2Nfm95Nev48vlt/ntU9Rnry+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAyvZ78Upaxp18MzWKq9du7Kwt5f3WfX3u2sbN2bzlcfKogb57d/+Tn2yv1neOzdR2vmk+GQAAAA6GTlXfR8StbHMh79Opov7PqmPymv/H50ZxVc/fX/dv7awdLn80W9X/f/x++6XdgaZG4+QnXV4ZDuYfTKX7P01x4j3/yCO6xZUv/vfSKW5I+uH6i9tZcT2T769ff79XhIeayBYAeBzHq74Mqr+Hllf+uTPSZnYAHATdWuFd1f+dqXZzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjC9no8U8VJRMx278a5rZ21pb36axs3Z6t2+urVjfo581NkEbG8MhxkDc5l0l26fOWzxeFwcLH54FhEtDd6GXw8xjERDz+mfHtGe7P47yCZjDTaCPJbUgRpeX8mJbH9DKr33v6fuZ3fRwAAPL2ysuV1/a1scyF/LZmOuPPTvfX/G7U4xqz/b39y+kZ9rHr9329shpNvbvX8F3OXLl95a+X84rnBucHnb5/ov9M/eebUqTNz+bWan1uOdDDfdpoAAAA8wXplq9f/6fSD6/9Ha3GMWf9/+UP/6/pYHfX/nu4u+rWdCQAAwEHU241eeO3vv5I9jkh6vfhqcXX1Yn+03d0/Mdo2mu5jOlS2ev3fmW47KwAAAKAJ2+vJPev/Z2txjLn+/+zPL/9aP2cnIo5EXIiIwfGlC8OzzU1noj30Y8BJ7MvHiYuBem3PFAAAgLYcKVt9/T8rnv9Pdx95SCPizddHcfVdV+PU/50Pvv2lPlb9+f+TzU1xIqUzo+tR9DMR3Zm2MwIAAOBpdrhsebH/Z7a58OlvRz/qef4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGn/BgAA//9TdjkX") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x9) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) geteuid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x9000f4) 30.441905982s ago: executing program 4 (id=543): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 30.303100233s ago: executing program 4 (id=550): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.004286168s ago: executing program 4 (id=552): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0xffffffffffffffa3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="06300500000072e2fb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 29.949837278s ago: executing program 32 (id=552): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0xffffffffffffffa3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="06300500000072e2fb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.462239643s ago: executing program 1 (id=1239): mkdir(&(0x7f0000000d40)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008200)={0x2020}, 0x2020) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 3.224659526s ago: executing program 1 (id=1241): r0 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 3.189540576s ago: executing program 1 (id=1233): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x2, 0xfffffffd, 0x2}) 1.686618927s ago: executing program 0 (id=1267): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000300)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a"], 0x50}}, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.581498748s ago: executing program 2 (id=1273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x1}, @clear_death], 0x0, 0x1000000, 0x0}) 1.551027419s ago: executing program 2 (id=1274): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f0000001e00)={0x0, 0x8ec5, 0x0, 0x0, 0x0, 0x0, r1}) 1.51955929s ago: executing program 2 (id=1275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000002010103000000000000000002000001140019"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 1.46499482s ago: executing program 2 (id=1279): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.428008011s ago: executing program 1 (id=1280): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80, 0x24) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x102) pread64(r1, &(0x7f00000002c0)=""/124, 0x7c, 0x7) 1.397490891s ago: executing program 2 (id=1283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB="85f4dfc48826e85022e5d0ff1ef40febdb0d0ea31a8db34063e31851062d04155dac00dabb0dcffb9cee4658ba3175f7bc4d66195147938a0e84cfc41fdb3b1c8046d459d30bc4b749a6cf8aaceab9f85d71309739e44685b6d1556fc9052c8910fbc8767f395a1afc7e056665d2320e2188d1b9716f603d71a625e4794e9e7962518fb262caa5ed5c8de87e9482b73e55237afb91ce3169d7d6ae8609d3677f", @ANYRES32, @ANYRES8=r0, @ANYRES64=r1, @ANYRES16=r2, @ANYBLOB="2cf52daecc02"], 0x14}, 0x1, 0x0, 0x0, 0x480d4}, 0x40) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x3c, 0x3, 0x4, '\x00', 0x8}) 1.296791893s ago: executing program 2 (id=1284): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x11, {0x100, 0x70, 0x8, 0x1ff, 0x7, 0x100, 0xfeba, 0x4, 0x8000, 0x8, 0x100, 0x9}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 842.807539ms ago: executing program 0 (id=1293): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) 753.86541ms ago: executing program 0 (id=1312): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 730.7349ms ago: executing program 0 (id=1314): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x0, r2}, 0x10) 717.67624ms ago: executing program 0 (id=1304): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 681.321791ms ago: executing program 0 (id=1305): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000080)={0x20, 0xa, 0x7, {0x7, 0x0, '\x00\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001e40)={0x84, &(0x7f0000001980)={0x0, 0x14, 0x3, "b844a7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 578.690472ms ago: executing program 1 (id=1306): mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) unshare(0x24060400) unshare(0x2a020400) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300021c00000000000000000000001200080008040000fd467a49c980bc47a22a8654f018161ad0641cbc4e95508aeb6ef87541745606c5503d9fb075bdc71f43c6d1685e176084c0e03320fda78ae3ed9345d616050000003c2e855a86939f2ab6eee26d2c89917ccf9d3e3d5dd26dca68e1e472b0171b64a0241b421109b02241427a543e3ee747faa2f74a7c5b270fee7054a1be4faf00000000000000030006000000000002000000ac141400000000000000000002000100000000000000060600000000030005000000000002"], 0xe0}, 0x1, 0x7}, 0x0) execve(0x0, 0x0, 0x0) 578.610952ms ago: executing program 3 (id=1307): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 546.560063ms ago: executing program 3 (id=1308): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0x0) 523.385643ms ago: executing program 1 (id=1309): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}]}, 0x50}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140)={[{@mblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0xfc, 0x474, &(0x7f00000003c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x700}, {0xffffffff, 0x7fff, 0x0, 0x5}]}) syz_usb_connect(0x2, 0x43, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xc1, 0x2e, 0xb4, 0x40, 0x4e6, 0x5, 0x1d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x31, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x57, 0x0, 0x0, 0xa9, 0xdf, 0x59, 0x0, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, 'ic'}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1ff, 0x7d, 0xd}, {0x6, 0x24, 0x1a, 0x401, 0x24}}]}}]}}]}}, 0x0) 523.054373ms ago: executing program 3 (id=1310): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) signalfd4(r1, &(0x7f0000000140), 0x8, 0x0) 387.946545ms ago: executing program 3 (id=1313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000200)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1}}}}}}, 0x0) 257.946157ms ago: executing program 5 (id=1315): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 257.316967ms ago: executing program 3 (id=1326): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(0xffffffffffffffff, 0x0, 0x0) 194.422198ms ago: executing program 5 (id=1316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a73656d616e6167655f726561645f6c6f636b5f743a73302073797374656d5f753a6f626a6563745f723a6e6574636f6e74726f6c5f6465766963655f743a73302030303030303030303030303030303030303032379d"], 0x86) 143.598219ms ago: executing program 5 (id=1318): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) sendmmsg(r3, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="b581c646", 0x4}], 0x1}}], 0x1, 0x10) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 74.678729ms ago: executing program 5 (id=1319): io_uring_setup(0x7fdb, &(0x7f0000000080)={0x0, 0x80000000, 0x0, 0xffffffff, 0x8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x14, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009302"]) 53.7416ms ago: executing program 3 (id=1320): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @main=@item_012={0x2, 0x0, 0xb, '\x00\x00'}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, 0x0) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000b00)) 11.96057ms ago: executing program 5 (id=1321): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x148b04a2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) 0s ago: executing program 5 (id=1322): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_4={0x3, 0x0, 0x8, "b775e7cd"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @local=@item_012={0x1, 0x2, 0x7, ')'}]}}, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) unshare(0x2a020400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) kernel console output (not intermixed with test programs): :855 ioctl c0306201 2000000001c0 returned -22 [ 36.377752][ T842] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 36.418573][ T506] usb 2-1: Using ep0 maxpacket: 8 [ 36.420275][ T842] syz.3.215: attempt to access beyond end of device [ 36.420275][ T842] loop3: rw=2049, sector=45096, nr_sectors = 112 limit=40427 [ 36.433503][ T506] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 36.442280][ T842] syz.3.215: attempt to access beyond end of device [ 36.442280][ T842] loop3: rw=2049, sector=45208, nr_sectors = 8 limit=40427 [ 36.460263][ T506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.468841][ T506] usb 2-1: config 0 descriptor?? [ 36.482015][ T276] syz-executor: attempt to access beyond end of device [ 36.482015][ T276] loop3: rw=2049, sector=45216, nr_sectors = 8 limit=40427 [ 36.539104][ T866] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.548376][ T866] F2FS-fs (loop1): Unable to read 1th superblock [ 36.554903][ T866] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 36.564418][ T866] F2FS-fs (loop1): Unable to read 2th superblock [ 36.680484][ T506] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 36.774455][ T895] tipc: Enabling of bearer rejected, media not registered [ 36.776360][ T894] loop4: detected capacity change from 0 to 512 [ 36.800563][ T894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 36.809909][ T894] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.834025][ T278] EXT4-fs (loop4): unmounting filesystem. [ 36.885772][ T907] netlink: 576 bytes leftover after parsing attributes in process `syz.3.241'. [ 37.158507][ T298] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 37.358459][ T298] usb 5-1: Using ep0 maxpacket: 8 [ 37.364679][ T298] usb 5-1: config 0 has no interfaces? [ 37.371036][ T298] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 37.380138][ T298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 37.388307][ T298] usb 5-1: SerialNumber: syz [ 37.393678][ T298] usb 5-1: config 0 descriptor?? [ 37.433567][ T914] loop0: detected capacity change from 0 to 256 [ 37.440643][ T914] FAT-fs (loop0): bogus number of FAT sectors [ 37.446753][ T914] FAT-fs (loop0): Can't find a valid FAT filesystem [ 37.487711][ T506] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 37.497961][ T506] asix: probe of 2-1:0.0 failed with error -71 [ 37.505004][ T506] usb 2-1: USB disconnect, device number 3 [ 37.613003][ T298] usb 5-1: USB disconnect, device number 5 [ 37.908569][ T593] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.922457][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 37.922473][ T28] audit: type=1400 audit(1746047006.287:278): avc: denied { unlink } for pid=930 comm="syz.3.251" name="#1" dev="tmpfs" ino=288 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 37.961363][ T28] audit: type=1326 audit(1746047006.327:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=932 comm="syz.3.252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7fd40d32ab39 code=0x0 [ 38.008588][ T936] loop1: detected capacity change from 0 to 128 [ 38.016596][ T28] audit: type=1400 audit(1746047006.377:280): avc: denied { mount } for pid=935 comm="syz.1.253" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.054035][ T28] audit: type=1400 audit(1746047006.417:281): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.109638][ T593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.120636][ T593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.138003][ T593] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.151181][ T593] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.151520][ T941] loop4: detected capacity change from 0 to 1024 [ 38.161221][ T941] EXT4-fs: Ignoring removed nobh option [ 38.168109][ T593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.173039][ T941] EXT4-fs: Ignoring removed bh option [ 38.186706][ T941] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 38.187625][ T593] usb 1-1: config 0 descriptor?? [ 38.210994][ T941] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 38.260282][ T278] EXT4-fs (loop4): unmounting filesystem. [ 38.412950][ T28] audit: type=1326 audit(1746047006.777:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=967 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe9b8e969 code=0x7ffc0000 [ 38.439235][ T28] audit: type=1326 audit(1746047006.797:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=967 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5fe9b8e969 code=0x7ffc0000 [ 38.447591][ T970] netlink: 'syz.4.267': attribute type 4 has an invalid length. [ 38.463551][ T28] audit: type=1326 audit(1746047006.797:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=967 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe9b8e969 code=0x7ffc0000 [ 38.494468][ T28] audit: type=1326 audit(1746047006.797:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=967 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f5fe9b8e969 code=0x7ffc0000 [ 38.519311][ T28] audit: type=1326 audit(1746047006.797:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=967 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe9b8e969 code=0x7ffc0000 [ 38.542909][ T28] audit: type=1326 audit(1746047006.807:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=967 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f5fe9b8e969 code=0x7ffc0000 [ 38.582180][ T970] syz.4.267 (970) used greatest stack depth: 20736 bytes left [ 38.608586][ T593] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 38.617696][ T593] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 38.643134][ T972] loop2: detected capacity change from 0 to 40427 [ 38.650524][ T972] F2FS-fs (loop2): fault_injection options not supported [ 38.658798][ T972] F2FS-fs (loop2): invalid crc value [ 38.665692][ T972] F2FS-fs (loop2): Found nat_bits in checkpoint [ 38.704359][ T972] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 38.741850][ T972] syz.2.268: attempt to access beyond end of device [ 38.741850][ T972] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 38.789304][ T993] user requested TSC rate below hardware speed [ 38.829750][ T998] loop4: detected capacity change from 0 to 128 [ 38.836380][ T998] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.001146][ T1020] SELinux: failed to load policy [ 39.168675][ T281] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 39.348463][ T281] usb 3-1: Using ep0 maxpacket: 8 [ 39.348516][ T280] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 39.361638][ T281] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 39.379106][ T281] usb 3-1: config 179 has no interface number 0 [ 39.382774][ T1067] loop4: detected capacity change from 0 to 128 [ 39.385538][ T281] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 39.403373][ T281] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 39.415028][ T281] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 39.426576][ T281] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 39.438453][ T281] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 39.452123][ T281] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 39.452873][ T1067] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 39.461569][ T281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.478665][ T1067] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.489693][ T1008] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 39.527059][ T278] EXT4-fs (loop4): unmounting filesystem. [ 39.528473][ T298] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.578500][ T280] usb 4-1: Using ep0 maxpacket: 8 [ 39.584812][ T280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.602930][ T280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.620395][ T280] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 39.633840][ T280] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 39.644066][ T280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.659962][ T280] usb 4-1: config 0 descriptor?? [ 39.729716][ T298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.758481][ T298] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.778452][ T298] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 39.798445][ T298] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 39.807665][ T298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.816572][ T298] usb 2-1: config 0 descriptor?? [ 39.822868][ T281] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5 [ 39.929560][ T1084] loop4: detected capacity change from 0 to 1024 [ 39.937292][ T1084] EXT4-fs: Ignoring removed orlov option [ 39.943447][ T1084] EXT4-fs (loop4): Test dummy encryption mode enabled [ 39.953492][ T1084] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 39.972976][ T1084] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 39.980211][ T1008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.989084][ T1008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.999310][ T278] EXT4-fs (loop4): unmounting filesystem. [ 40.086151][ T1093] loop4: detected capacity change from 0 to 128 [ 40.094703][ T1093] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 40.103546][ T1093] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.122250][ T280] logitech 0003:046D:C293.0004: nested delimiters [ 40.128728][ T280] logitech 0003:046D:C293.0004: item 0 4 2 10 parsing failed [ 40.136303][ T280] logitech 0003:046D:C293.0004: parse failed [ 40.142589][ T280] logitech: probe of 0003:046D:C293.0004 failed with error -22 [ 40.152512][ T278] EXT4-fs (loop4): unmounting filesystem. [ 40.167746][ T1096] loop4: detected capacity change from 0 to 512 [ 40.174758][ T1096] EXT4-fs (loop4): Test dummy encryption mode enabled [ 40.181766][ T1096] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.192620][ T1096] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 40.200994][ T1096] System zones: 1-12 [ 40.205775][ T1096] EXT4-fs (loop4): 1 truncate cleaned up [ 40.211521][ T1096] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 40.227420][ T1096] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #2: comm syz.4.319: Siphash requires key [ 40.240465][ T298] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 40.249571][ T278] EXT4-fs (loop4): unmounting filesystem. [ 40.249906][ T298] plantronics 0003:047F:FFFF.0005: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 40.277178][ T1099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.320'. [ 40.383352][ T1105] loop4: detected capacity change from 0 to 512 [ 40.390543][ T1105] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 40.402204][ T1105] EXT4-fs (loop4): orphan cleanup on readonly fs [ 40.408812][ T1105] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.323: Block bitmap for bg 0 marked uninitialized [ 40.417522][ T298] usb 3-1: USB disconnect, device number 2 [ 40.422000][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 40.422030][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 40.422253][ T1105] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 40.469385][ T1105] EXT4-fs (loop4): 1 orphan inode deleted [ 40.475741][ T1105] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 40.493759][ T1105] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 40.503431][ T1105] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 40.512224][ T1105] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:511: comm syz.4.323: Block bitmap for bg 0 marked uninitialized [ 40.532746][ T278] EXT4-fs (loop4): unmounting filesystem. [ 40.601403][ T506] usb 2-1: USB disconnect, device number 4 [ 40.607417][ T1117] loop0: detected capacity change from 0 to 512 [ 40.613978][ T1117] EXT4-fs: Ignoring removed i_version option [ 40.621780][ T1117] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.643646][ T277] EXT4-fs (loop0): unmounting filesystem. [ 40.657407][ T1120] 9pnet: p9_errstr2errno: server reported unknown error b0x0000000000000004 [ 40.943850][ T1126] loop2: detected capacity change from 0 to 128 [ 40.950671][ T1126] FAT-fs (loop2): bogus number of FAT sectors [ 40.956853][ T1126] FAT-fs (loop2): Can't find a valid FAT filesystem [ 40.998724][ T24] usb 1-1: USB disconnect, device number 3 [ 41.148519][ T24] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 41.339603][ T24] usb 1-1: config 0 has an invalid interface number: 87 but max is 0 [ 41.347743][ T24] usb 1-1: config 0 has no interface number 0 [ 41.356208][ T24] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.d6 [ 41.365514][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.373909][ T24] usb 1-1: Product: syz [ 41.378199][ T24] usb 1-1: Manufacturer: syz [ 41.388795][ T24] usb 1-1: SerialNumber: syz [ 41.400641][ T24] usb 1-1: config 0 descriptor?? [ 41.410529][ T24] ums-sddr09 1-1:0.87: USB Mass Storage device detected [ 41.547133][ T1157] loop4: detected capacity change from 0 to 512 [ 41.554556][ T1157] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.566918][ T1157] EXT4-fs (loop4): 1 truncate cleaned up [ 41.572917][ T1157] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 41.595588][ T278] EXT4-fs (loop4): unmounting filesystem. [ 41.622822][ T298] usb 1-1: USB disconnect, device number 4 [ 41.705371][ T1164] loop4: detected capacity change from 0 to 256 [ 41.919327][ T1187] SELinux: failed to load policy [ 42.041266][ T1201] loop2: detected capacity change from 0 to 512 [ 42.048130][ T1201] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.060459][ T1201] EXT4-fs (loop2): 1 truncate cleaned up [ 42.066209][ T1201] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 42.081050][ T281] usb 4-1: USB disconnect, device number 4 [ 42.097767][ T1209] loop3: detected capacity change from 0 to 512 [ 42.115124][ T1209] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.122050][ T1209] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.367: Failed to acquire dquot type 1 [ 42.141001][ T1209] EXT4-fs (loop3): 1 truncate cleaned up [ 42.148645][ T1209] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 42.160799][ T279] EXT4-fs (loop2): unmounting filesystem. [ 42.181010][ T1218] loop0: detected capacity change from 0 to 128 [ 42.186726][ T1221] loop2: detected capacity change from 0 to 128 [ 42.200123][ T1222] loop1: detected capacity change from 0 to 512 [ 42.217898][ T276] EXT4-fs (loop3): unmounting filesystem. [ 42.223774][ T506] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 42.237610][ T1222] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2759: inode #12: comm syz.1.373: corrupted xattr block 142 [ 42.257357][ T1222] EXT4-fs (loop1): Remounting filesystem read-only [ 42.264093][ T1222] EXT4-fs (loop1): 1 truncate cleaned up [ 42.265044][ T297] kworker/u4:3: attempt to access beyond end of device [ 42.265044][ T297] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 42.270506][ T1222] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.318732][ T275] EXT4-fs (loop1): unmounting filesystem. [ 42.355131][ T1243] loop0: detected capacity change from 0 to 256 [ 42.411008][ T506] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 42.423807][ T506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.433410][ T506] usb 5-1: config 0 descriptor?? [ 42.537403][ T1266] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 42.555526][ T1264] tmpfs: Unknown parameter 'nolazytimeÿÿ' [ 42.641202][ T1284] loop0: detected capacity change from 0 to 512 [ 42.653442][ T1284] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 42.680231][ T277] EXT4-fs (loop0): unmounting filesystem. [ 42.730407][ T281] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 42.763762][ T1303] netlink: 'syz.0.410': attribute type 6 has an invalid length. [ 42.918503][ T281] usb 4-1: Using ep0 maxpacket: 16 [ 42.924026][ T1301] loop1: detected capacity change from 0 to 40427 [ 42.924882][ T281] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 42.931025][ T1301] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 42.941500][ T281] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 42.947108][ T1301] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 42.948043][ T1301] F2FS-fs (loop1): invalid crc value [ 42.956834][ T281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.978298][ T281] usb 4-1: Product: syz [ 42.982570][ T281] usb 4-1: Manufacturer: syz [ 42.987242][ T281] usb 4-1: SerialNumber: syz [ 42.993243][ T1301] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.993434][ T281] usb 4-1: config 0 descriptor?? [ 43.008860][ T281] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 43.016901][ T281] usb 4-1: Detected FT232R [ 43.038507][ T6] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 43.046515][ T1301] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 43.055458][ T1301] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 43.116928][ T506] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 43.127286][ T506] asix: probe of 5-1:0.0 failed with error -71 [ 43.148330][ T506] usb 5-1: USB disconnect, device number 6 [ 43.181185][ T275] syz-executor: attempt to access beyond end of device [ 43.181185][ T275] loop1: rw=2051, sector=49152, nr_sectors = 4096 limit=40427 [ 43.195604][ T275] syz-executor: attempt to access beyond end of device [ 43.195604][ T275] loop1: rw=2051, sector=57344, nr_sectors = 16384 limit=40427 [ 43.212287][ T281] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 43.229065][ T275] F2FS-fs (loop1): Issue discard(6144, 6144, 512) failed, ret: -5 [ 43.229096][ T275] F2FS-fs (loop1): Issue discard(7168, 7168, 2048) failed, ret: -5 [ 43.248642][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 43.268751][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 43.268767][ T28] audit: type=1400 audit(1746047011.637:355): avc: denied { append } for pid=1321 comm="syz.0.416" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 43.273651][ T6] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 43.307742][ T6] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.327224][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.349600][ T6] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 43.368655][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.376697][ T6] usb 3-1: Product: syz [ 43.380944][ T6] usb 3-1: Manufacturer: syz [ 43.385571][ T6] usb 3-1: SerialNumber: syz [ 43.407165][ T1329] loop1: detected capacity change from 0 to 128 [ 43.415586][ T1329] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 43.424666][ T281] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 43.426949][ T1329] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.439052][ T281] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 43.457602][ T275] EXT4-fs (loop1): unmounting filesystem. [ 43.643894][ T1334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 43.653132][ T24] usb 4-1: USB disconnect, device number 5 [ 43.664855][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 43.674664][ T24] ftdi_sio 4-1:0.0: device disconnected [ 43.738459][ T593] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 43.801554][ T6] usb 3-1: 0:2 : does not exist [ 43.879945][ T1339] loop4: detected capacity change from 0 to 128 [ 43.886508][ T1339] EXT4-fs: Ignoring removed nobh option [ 43.894366][ T1339] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 43.903229][ T1339] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.918593][ T593] usb 2-1: Using ep0 maxpacket: 32 [ 43.934709][ T593] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.944978][ T593] usb 2-1: config 0 has no interfaces? [ 43.950829][ T593] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 43.960150][ T593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.960165][ T278] EXT4-fs (loop4): unmounting filesystem. [ 43.976225][ T593] usb 2-1: config 0 descriptor?? [ 44.189688][ T28] audit: type=1400 audit(1746047012.557:356): avc: denied { getopt } for pid=1331 comm="syz.1.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.210756][ T506] usb 2-1: USB disconnect, device number 5 [ 44.234504][ T1348] loop4: detected capacity change from 0 to 40427 [ 44.241677][ T1348] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 44.250214][ T1348] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 44.261073][ T1348] F2FS-fs (loop4): invalid crc value [ 44.267995][ T1348] F2FS-fs (loop4): Found nat_bits in checkpoint [ 44.306649][ T1348] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 44.314122][ T1348] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 44.352250][ T1348] syz.4.425: attempt to access beyond end of device [ 44.352250][ T1348] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 44.616295][ T6] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 44.628993][ T6] usb 3-1: USB disconnect, device number 3 [ 44.889481][ T28] audit: type=1400 audit(1746047013.257:357): avc: denied { setcurrent } for pid=1383 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.951768][ T1394] loop3: detected capacity change from 0 to 256 [ 44.960622][ T1394] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 45.050861][ T1400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.447'. [ 45.198460][ T506] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 45.198477][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 45.235612][ T1415] loop2: detected capacity change from 0 to 1024 [ 45.239611][ T1417] loop3: detected capacity change from 0 to 256 [ 45.242323][ T1415] EXT4-fs: Ignoring removed bh option [ 45.253925][ T1415] EXT4-fs: Ignoring removed i_version option [ 45.259610][ T1417] FAT-fs (loop3): Directory bread(block 64) failed [ 45.263156][ T1415] EXT4-fs error (device loop2): ext4_map_blocks:744: inode #3: block 1: comm syz.2.453: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.266552][ T1417] FAT-fs (loop3): Directory bread(block 65) failed [ 45.280769][ T1415] Quota error (device loop2): write_blk: dquota write failed [ 45.287735][ T1417] FAT-fs (loop3): Directory bread(block 66) failed [ 45.294741][ T1415] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 45.301410][ T1417] FAT-fs (loop3): Directory bread(block 67) failed [ 45.311790][ T1415] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.453: Failed to acquire dquot type 0 [ 45.317744][ T1417] FAT-fs (loop3): Directory bread(block 68) failed [ 45.329196][ T1415] EXT4-fs error (device loop2): ext4_free_blocks:6210: comm syz.2.453: Freeing blocks not in datazone - block = 0, count = 4096 [ 45.335308][ T1417] FAT-fs (loop3): Directory bread(block 69) failed [ 45.354738][ T1415] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.453: Invalid inode bitmap blk 0 in block_group 0 [ 45.363422][ T1417] FAT-fs (loop3): Directory bread(block 70) failed [ 45.368324][ T1415] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 45.382994][ T1249] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.383071][ T1415] EXT4-fs (loop2): 1 orphan inode deleted [ 45.399814][ T1417] FAT-fs (loop3): Directory bread(block 71) failed [ 45.403372][ T1415] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 45.409715][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 45.424275][ T506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 45.424711][ T1249] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 45.444004][ T506] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 45.453352][ T1417] FAT-fs (loop3): Directory bread(block 72) failed [ 45.460914][ T1417] FAT-fs (loop3): Directory bread(block 73) failed [ 45.468460][ T506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.471139][ T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 45.477352][ T506] usb 2-1: config 0 descriptor?? [ 45.492998][ T1249] EXT4-fs error (device loop2): ext4_release_dquot:6812: comm kworker/u4:5: Failed to release dquot type 0 [ 45.506339][ T24] usb 1-1: config 0 has no interface number 0 [ 45.508904][ T1415] EXT4-fs (loop2): unmounting filesystem. [ 45.515247][ T24] usb 1-1: config 0 interface 184 has no altsetting 0 [ 45.536190][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 45.561690][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.570471][ T24] usb 1-1: Product: syz [ 45.582795][ T24] usb 1-1: Manufacturer: syz [ 45.587662][ T24] usb 1-1: SerialNumber: syz [ 45.599105][ T24] usb 1-1: config 0 descriptor?? [ 45.611320][ T24] smsc75xx v1.0.0 [ 45.716037][ T506] usb 2-1: USB disconnect, device number 6 [ 45.843522][ T1455] loop4: detected capacity change from 0 to 1024 [ 45.850259][ T1455] EXT4-fs: Ignoring removed nobh option [ 45.855826][ T1455] EXT4-fs: Ignoring removed bh option [ 45.861723][ T1455] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.880001][ T1455] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 46.084495][ T1466] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0î„&IØü0‚Ñ(|9Ê’å0%cÞ»ØÞÙ$ƒQûÂMÍ- [ 46.116447][ T28] audit: type=1400 audit(1746047014.477:358): avc: denied { mounton } for pid=1468 comm="syz.3.474" path="/78/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="incremental-fs" ino=438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.162170][ T39] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 46.244498][ T28] audit: type=1400 audit(1746047014.607:359): avc: denied { remount } for pid=1474 comm="syz.1.477" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 46.368438][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 46.374814][ T39] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 46.383210][ T39] usb 5-1: config 0 has no interface number 0 [ 46.392976][ T39] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 46.402218][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.410415][ T39] usb 5-1: Product: syz [ 46.414888][ T39] usb 5-1: Manufacturer: syz [ 46.419756][ T39] usb 5-1: SerialNumber: syz [ 46.428597][ T39] usb 5-1: config 0 descriptor?? [ 46.436583][ T39] smsc95xx v2.0.0 [ 46.468478][ T281] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 46.648453][ T281] usb 4-1: Using ep0 maxpacket: 32 [ 46.655199][ T281] usb 4-1: unable to get BOS descriptor or descriptor too short [ 46.663897][ T281] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.674081][ T281] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.685261][ T281] usb 4-1: string descriptor 0 read error: -22 [ 46.691786][ T281] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.700921][ T281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.710655][ T281] usb 4-1: 0:2 : does not exist [ 46.815848][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 46.826764][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 46.836158][ T39] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 46.847149][ T39] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 46.856297][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 46.867250][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 46.877192][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 46.887708][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 46.897390][ T24] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 46.906171][ T24] usb 1-1: USB disconnect, device number 5 [ 46.918705][ T281] usb 4-1: USB disconnect, device number 6 [ 46.960690][ T1494] syz.2.485[1494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.960778][ T1494] syz.2.485[1494] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.979303][ T28] audit: type=1400 audit(1746047015.347:360): avc: denied { connect } for pid=1493 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.021531][ T1496] netlink: 140 bytes leftover after parsing attributes in process `syz.2.486'. [ 47.030722][ T1496] netlink: 140 bytes leftover after parsing attributes in process `syz.2.486'. [ 47.040276][ T1496] netlink: 140 bytes leftover after parsing attributes in process `syz.2.486'. [ 47.064749][ T1498] netlink: 96 bytes leftover after parsing attributes in process `syz.2.487'. [ 47.291099][ T39] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 47.302396][ T39] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 47.310222][ T39] usb 5-1: USB disconnect, device number 7 [ 47.420302][ T28] audit: type=1400 audit(1746047015.787:361): avc: denied { map } for pid=1516 comm="syz.1.496" path="socket:[20429]" dev="sockfs" ino=20429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 47.460427][ T1519] loop1: detected capacity change from 0 to 512 [ 47.467568][ T1519] EXT4-fs (loop1): Test dummy encryption mode enabled [ 47.474429][ T1519] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.485924][ T1519] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.497: bad orphan inode 131083 [ 47.496657][ T1519] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.532488][ T275] EXT4-fs (loop1): unmounting filesystem. [ 47.591438][ T1515] loop2: detected capacity change from 0 to 40427 [ 47.608475][ T1515] F2FS-fs (loop2): fault_injection options not supported [ 47.618304][ T1515] F2FS-fs (loop2): heap/no_heap options were deprecated [ 47.626385][ T1515] F2FS-fs (loop2): Image doesn't support compression [ 47.641540][ T1515] F2FS-fs (loop2): invalid crc value [ 47.658320][ T1515] F2FS-fs (loop2): Found nat_bits in checkpoint [ 47.726163][ T1515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 47.813904][ T278] EXT4-fs (loop4): unmounting filesystem. [ 47.836010][ T1253] kworker/u4:6: attempt to access beyond end of device [ 47.836010][ T1253] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 47.858038][ T1538] loop3: detected capacity change from 0 to 40427 [ 47.866091][ T1538] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 47.875917][ T1538] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 47.892913][ T1534] loop0: detected capacity change from 0 to 40427 [ 47.900005][ T1534] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 47.907847][ T1534] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 47.915026][ T1538] F2FS-fs (loop3): invalid crc value [ 47.939439][ T1538] F2FS-fs (loop3): Found nat_bits in checkpoint [ 47.984559][ T1534] F2FS-fs (loop0): Found nat_bits in checkpoint [ 47.991226][ T1538] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 48.004938][ T1538] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 48.055614][ T1534] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 48.086641][ T1534] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 48.096358][ T1534] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 48.120963][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 48.133651][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 48.403672][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 48.403687][ T28] audit: type=1400 audit(1746047016.767:367): avc: denied { read write } for pid=279 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.441617][ T28] audit: type=1400 audit(1746047016.767:368): avc: denied { open } for pid=279 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.466418][ T28] audit: type=1400 audit(1746047016.767:369): avc: denied { ioctl } for pid=279 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 48.475321][ T1579] loop1: detected capacity change from 0 to 1024 [ 48.492157][ T28] audit: type=1400 audit(1746047016.777:370): avc: denied { append } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.522494][ T1579] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.536453][ T1579] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 48.543183][ T28] audit: type=1400 audit(1746047016.777:371): avc: denied { execmem } for pid=1563 comm="syz.3.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.557712][ T1579] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.573914][ T28] audit: type=1400 audit(1746047016.807:372): avc: denied { bpf } for pid=1576 comm="syz.0.520" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.600198][ T28] audit: type=1400 audit(1746047016.807:373): avc: denied { prog_load } for pid=1576 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 48.636035][ T1579] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 48.647550][ T28] audit: type=1400 audit(1746047016.807:374): avc: denied { perfmon } for pid=1576 comm="syz.0.520" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.680413][ T1579] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.518: inode #393216: comm syz.1.518: iget: illegal inode # [ 48.693979][ T1579] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.518: error while reading EA inode 393216 err=-117 [ 48.715400][ T28] audit: type=1400 audit(1746047016.807:375): avc: denied { prog_run } for pid=1576 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 48.734820][ T28] audit: type=1400 audit(1746047016.887:376): avc: denied { mounton } for pid=1578 comm="syz.1.518" path="/111/file0" dev="tmpfs" ino=605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 48.758095][ T275] EXT4-fs (loop1): unmounting filesystem. [ 48.845193][ T1597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.529'. [ 48.993505][ T1589] loop4: detected capacity change from 0 to 40427 [ 49.000420][ T1618] netem: change failed [ 49.000761][ T1589] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 49.012680][ T1589] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 49.023732][ T1589] F2FS-fs (loop4): Found nat_bits in checkpoint [ 49.062012][ T1625] netlink: 96 bytes leftover after parsing attributes in process `syz.3.539'. [ 49.082216][ T1589] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 49.089394][ T1589] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 49.184989][ T1641] serio: Serial port ptm0 [ 49.189439][ T1640] mmap: syz.3.546 (1640) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.230120][ T39] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 49.274523][ T278] bridge0: port 3(syz_tun) entered disabled state [ 49.282267][ T278] device syz_tun left promiscuous mode [ 49.287807][ T278] bridge0: port 3(syz_tun) entered disabled state [ 49.409565][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.428450][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.448443][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.471722][ T39] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.480861][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 49.498482][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.519818][ T39] usb 1-1: config 0 descriptor?? [ 49.679697][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.690693][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.700628][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.713619][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.722736][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.742677][ T24] usb 4-1: config 0 descriptor?? [ 49.776949][ T1656] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.784268][ T1656] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.792043][ T1656] device bridge_slave_0 entered promiscuous mode [ 49.799289][ T1656] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.806412][ T1656] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.814042][ T1656] device bridge_slave_1 entered promiscuous mode [ 49.874421][ T1656] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.881485][ T1656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.888492][ T281] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 49.888797][ T1656] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.903161][ T1656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.930561][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.935202][ T39] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 49.946634][ T1253] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.950207][ T39] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 49.966305][ T1253] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.977838][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.986202][ T1253] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.993275][ T1253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.002479][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.010877][ T1253] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.017910][ T1253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.034393][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.044509][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.060940][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.069220][ T593] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 50.069892][ T281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.083228][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.088163][ T281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.097598][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.105724][ T281] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 50.113148][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.121985][ T281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.138675][ T281] usb 2-1: config 0 descriptor?? [ 50.144923][ T1656] device veth0_vlan entered promiscuous mode [ 50.151658][ T24] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 50.160579][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.169373][ T24] plantronics 0003:047F:FFFF.0007: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 50.171454][ T1656] device veth1_macvtap entered promiscuous mode [ 50.195296][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.206203][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.269656][ T593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.281039][ T593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.293683][ T593] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 50.304658][ T593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.313916][ T593] usb 3-1: config 0 descriptor?? [ 50.339697][ T10] device bridge_slave_1 left promiscuous mode [ 50.345951][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.362105][ T10] device bridge_slave_0 left promiscuous mode [ 50.368590][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.377186][ T10] device veth1_macvtap left promiscuous mode [ 50.383986][ T10] device veth0_vlan left promiscuous mode [ 50.556557][ T281] hid-steam 0003:28DE:1142.0008: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 50.570228][ T281] hid-steam 0003:28DE:1142.0009: hidraw2: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 50.648819][ T281] hid-steam 0003:28DE:1142.0008: Steam wireless receiver connected [ 50.721518][ T593] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 50.728604][ T593] pyra 0003:1E7D:2CF6.000A: unknown main item tag 0x0 [ 50.736112][ T593] pyra 0003:1E7D:2CF6.000A: hidraw3: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 50.778495][ T39] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.970625][ T39] usb 6-1: config 1 has an invalid interface number: 222 but max is 2 [ 50.978904][ T39] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.989203][ T39] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.998104][ T39] usb 6-1: config 1 has no interface number 0 [ 51.004989][ T39] usb 6-1: New USB device found, idVendor=08b7, idProduct=0100, bcdDevice= 0.00 [ 51.014081][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 51.022190][ T39] usb 6-1: SerialNumber: syz [ 51.232385][ T39] usb 6-1: 222:2 : does not exist [ 51.238916][ T39] usb 6-1: USB disconnect, device number 2 [ 51.321785][ T593] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 51.329296][ T593] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 51.336212][ T593] pyra: probe of 0003:1E7D:2CF6.000A failed with error -71 [ 51.344553][ T593] usb 3-1: USB disconnect, device number 4 [ 51.828539][ T281] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 52.118894][ T298] usb 1-1: USB disconnect, device number 6 [ 52.158480][ T19] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 52.177597][ T1729] cgroup: Need name or subsystem set [ 52.198456][ T39] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 52.323327][ T593] usb 4-1: USB disconnect, device number 7 [ 52.340041][ T19] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.362218][ T19] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 52.373153][ T19] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 52.388543][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 52.395553][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.396390][ T19] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.406603][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.426300][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 52.433940][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 52.439399][ T39] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 52.451797][ T19] usb 6-1: SerialNumber: syz [ 52.463024][ T1704] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 52.470464][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.471823][ T19] hub 6-1:1.0: bad descriptor, ignoring hub [ 52.486103][ T39] usb 3-1: config 0 descriptor?? [ 52.502896][ T19] hub: probe of 6-1:1.0 failed with error -5 [ 52.559196][ T1755] loop1: detected capacity change from 0 to 1024 [ 52.569404][ T1755] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 52.596551][ T275] EXT4-fs (loop1): unmounting filesystem. [ 52.658928][ T6] usb 2-1: USB disconnect, device number 7 [ 52.667639][ T6] hid-steam 0003:28DE:1142.0008: Steam wireless receiver disconnected [ 52.680747][ T1704] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 52.760462][ T1757] loop3: detected capacity change from 0 to 40427 [ 52.778475][ T1757] F2FS-fs (loop3): invalid crc value [ 52.801937][ T1757] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.856988][ T1757] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 52.897695][ T39] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 52.907889][ T39] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 52.915867][ T39] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 52.923946][ T276] syz-executor: attempt to access beyond end of device [ 52.923946][ T276] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 52.924215][ T39] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 52.945761][ T39] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 52.964283][ T39] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 52.978859][ T39] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 52.986456][ T39] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 52.994817][ T39] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 53.002528][ T39] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 53.010027][ T39] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 53.021437][ T39] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000B/input/input7 [ 53.034060][ T39] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 53.110628][ T19] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 53.167723][ T1774] loop0: detected capacity change from 0 to 512 [ 53.197221][ T39] usb 3-1: USB disconnect, device number 5 [ 53.219579][ T1774] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 53.238543][ T1774] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.254005][ T1774] EXT4-fs error (device loop0): ext4_do_update_inode:5226: inode #2: comm syz.0.602: corrupted inode contents [ 53.266029][ T1774] EXT4-fs error (device loop0): ext4_dirty_inode:6091: inode #2: comm syz.0.602: mark_inode_dirty error [ 53.277495][ T1774] EXT4-fs error (device loop0): ext4_do_update_inode:5226: inode #2: comm syz.0.602: corrupted inode contents [ 53.289578][ T1774] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.602: mark_inode_dirty error [ 53.314938][ T277] EXT4-fs (loop0): unmounting filesystem. [ 53.495803][ T1803] Driver unsupported XDP return value 0 on prog (id 361) dev N/A, expect packet loss! [ 53.522733][ T1806] loop1: detected capacity change from 0 to 256 [ 53.532139][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 53.532174][ T28] audit: type=1400 audit(1746047021.907:477): avc: denied { mount } for pid=1805 comm="syz.1.615" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 53.563716][ T1810] xt_hashlimit: size too large, truncated to 1048576 [ 53.567944][ T28] audit: type=1400 audit(1746047021.907:478): avc: denied { validate_trans } for pid=1807 comm="syz.0.616" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 53.591058][ T28] audit: type=1400 audit(1746047021.927:479): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 53.611213][ T28] audit: type=1400 audit(1746047021.947:480): avc: denied { execute } for pid=1811 comm="syz.1.618" path="/138/blkio.bfq.avg_queue_size" dev="tmpfs" ino=751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 53.658589][ T6] usb 6-1: USB disconnect, device number 3 [ 53.664996][ T6] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 53.852043][ T28] audit: type=1400 audit(1746047022.217:481): avc: denied { create } for pid=1825 comm="syz.0.624" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.872675][ T28] audit: type=1400 audit(1746047022.217:482): avc: denied { write } for pid=1825 comm="syz.0.624" name="file0" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.895426][ T28] audit: type=1400 audit(1746047022.217:483): avc: denied { open } for pid=1825 comm="syz.0.624" path="/121/file0" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.924081][ T28] audit: type=1400 audit(1746047022.217:484): avc: denied { getopt } for pid=1825 comm="syz.0.624" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.945525][ T28] audit: type=1400 audit(1746047022.217:485): avc: denied { ioctl } for pid=1825 comm="syz.0.624" path="/121/file0" dev="tmpfs" ino=654 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.970240][ T28] audit: type=1400 audit(1746047022.237:486): avc: denied { unlink } for pid=277 comm="syz-executor" name="file0" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.978518][ T593] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 54.150882][ T1844] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 54.179658][ T593] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.202571][ T593] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.218002][ T593] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.244427][ T593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.254448][ T593] usb 2-1: config 0 descriptor?? [ 54.286491][ T1862] loop5: detected capacity change from 0 to 1024 [ 54.293887][ T1862] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.301207][ T1862] EXT4-fs: Ignoring removed orlov option [ 54.307040][ T1862] EXT4-fs: Ignoring removed i_version option [ 54.316534][ T1862] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 54.388840][ T1656] EXT4-fs (loop5): unmounting filesystem. [ 54.425168][ T1875] loop0: detected capacity change from 0 to 256 [ 54.432253][ T1875] exfat: Deprecated parameter 'namecase' [ 54.437992][ T1875] exfat: Deprecated parameter 'utf8' [ 54.446593][ T1875] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 54.666974][ T593] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 54.680629][ T593] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 54.688356][ T593] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 54.697471][ T593] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 54.714571][ T593] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 54.722278][ T593] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 54.730954][ T593] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 54.750087][ T593] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 54.762548][ T593] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 54.781175][ T593] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 54.788987][ T593] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 54.796961][ T593] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 54.804696][ T593] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 54.812693][ T593] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 54.820383][ T593] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 54.831807][ T593] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 54.842558][ T593] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 55.136303][ T1974] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 55.145918][ T1974] EXT4-fs (loop5): unable to read superblock [ 55.217995][ T1986] loop0: detected capacity change from 0 to 128 [ 55.228306][ T1986] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 55.236397][ T1986] FAT-fs (loop0): Filesystem has been set read-only [ 55.243272][ T1986] syz.0.695: attempt to access beyond end of device [ 55.243272][ T1986] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 55.258070][ T1986] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 55.266598][ T1986] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 55.274955][ T1986] syz.0.695: attempt to access beyond end of device [ 55.274955][ T1986] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 55.289193][ T1986] syz.0.695: attempt to access beyond end of device [ 55.289193][ T1986] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 55.303534][ T1985] syz.0.695: attempt to access beyond end of device [ 55.303534][ T1985] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 55.317284][ T1985] syz.0.695: attempt to access beyond end of device [ 55.317284][ T1985] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 55.330989][ T1985] syz.0.695: attempt to access beyond end of device [ 55.330989][ T1985] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 55.344555][ T1985] syz.0.695: attempt to access beyond end of device [ 55.344555][ T1985] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 55.357838][ T1985] syz.0.695: attempt to access beyond end of device [ 55.357838][ T1985] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 55.371546][ T1985] syz.0.695: attempt to access beyond end of device [ 55.371546][ T1985] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 55.378478][ T281] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 55.570185][ T281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.581745][ T281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.592336][ T281] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 55.598488][ T593] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 55.601515][ T281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.629239][ T281] usb 4-1: config 0 descriptor?? [ 55.798494][ T593] usb 3-1: Using ep0 maxpacket: 16 [ 55.806796][ T593] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 55.816209][ T593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.824336][ T593] usb 3-1: Product: syz [ 55.828674][ T593] usb 3-1: Manufacturer: syz [ 55.833335][ T593] usb 3-1: SerialNumber: syz [ 55.839431][ T593] usb 3-1: config 0 descriptor?? [ 55.846164][ T593] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 56.038825][ T281] apple 0003:05AC:0262.000D: unbalanced delimiter at end of report description [ 56.058691][ T281] apple 0003:05AC:0262.000D: parse failed [ 56.060922][ T593] usb 3-1: USB disconnect, device number 6 [ 56.064493][ T281] apple: probe of 0003:05AC:0262.000D failed with error -22 [ 56.272729][ T593] usb 4-1: USB disconnect, device number 8 [ 56.693726][ T2037] loop0: detected capacity change from 0 to 16 [ 56.698581][ T1666] usb 2-1: USB disconnect, device number 8 [ 56.700747][ T2037] erofs: (device loop0): mounted with root inode @ nid 36. [ 56.719615][ T2037] erofs: (device loop0): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 56.738512][ T2037] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 56.753779][ T2037] erofs: (device loop0): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 56.812504][ T2037] erofs: (device loop0): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 56.828093][ T2037] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 56.853971][ T2037] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 56.879137][ T2037] erofs: (device loop0): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 56.908903][ T2037] erofs: (device loop0): z_erofs_readahead: readahead error at page 14 @ nid 36 [ 56.928643][ T2037] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 56.937719][ T2037] erofs: (device loop0): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 56.974139][ T2054] loop3: detected capacity change from 0 to 512 [ 56.995931][ T2054] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.724: invalid block [ 57.008944][ T2054] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.724: invalid indirect mapped block 10 (level 1) [ 57.034275][ T2056] netlink: 96 bytes leftover after parsing attributes in process `syz.2.725'. [ 57.037924][ T2054] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.724: invalid indirect mapped block 8 (level 1) [ 57.059163][ T2061] tmpfs: Unknown parameter 'nolazytimeÿÿ' [ 57.069616][ T2054] EXT4-fs (loop3): 1 truncate cleaned up [ 57.076177][ T2054] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 57.086758][ T2063] loop0: detected capacity change from 0 to 4096 [ 57.105721][ T2063] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 57.145310][ T276] EXT4-fs (loop3): unmounting filesystem. [ 57.152209][ T277] EXT4-fs (loop0): unmounting filesystem. [ 57.353339][ T2108] netlink: 40 bytes leftover after parsing attributes in process `syz.2.747'. [ 57.434426][ T2096] loop5: detected capacity change from 0 to 40427 [ 57.448946][ T2096] F2FS-fs (loop5): fault_injection options not supported [ 57.470220][ T2096] F2FS-fs (loop5): invalid crc value [ 57.478155][ T2096] F2FS-fs (loop5): Found nat_bits in checkpoint [ 57.522224][ T2127] 9pnet: p9_errstr2errno: server reported unknown error @íÿ0x0000000000000005 [ 57.528756][ T2096] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 57.600299][ T2139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.760'. [ 57.640272][ T2146] loop0: detected capacity change from 0 to 1024 [ 57.667909][ T2146] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 57.682212][ T2146] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 57.697905][ T2146] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 57.712314][ T2146] EXT4-fs (loop0): This should not happen!! Data will be lost [ 57.712314][ T2146] [ 57.722432][ T2146] EXT4-fs (loop0): Total free blocks count 0 [ 57.728760][ T2146] EXT4-fs (loop0): Free/Dirty block details [ 57.735123][ T2146] EXT4-fs (loop0): free_blocks=68451041280 [ 57.736511][ T2154] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 47 with error 28 [ 57.741366][ T2146] EXT4-fs (loop0): dirty_blocks=112 [ 57.758917][ T2146] EXT4-fs (loop0): Block reservation details [ 57.765409][ T2146] EXT4-fs (loop0): i_reserved_data_blocks=7 [ 57.778319][ T2155] loop1: detected capacity change from 0 to 1024 [ 57.780245][ T2157] loop5: detected capacity change from 0 to 256 [ 57.785375][ T2155] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 57.796908][ T2157] exfat: Deprecated parameter 'utf8' [ 57.799374][ T2155] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.810350][ T2157] exfat: Deprecated parameter 'namecase' [ 57.815531][ T2155] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 57.828608][ T2157] exfat: Deprecated parameter 'utf8' [ 57.831682][ T2155] journal_init_common: Cannot get buffer for journal superblock [ 57.843778][ T2155] EXT4-fs (loop1): Could not load journal inode [ 57.849719][ T2157] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 57.881008][ T2159] loop0: detected capacity change from 0 to 1024 [ 57.888205][ T2159] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 57.898256][ T2159] EXT4-fs error (device loop0): ext4_get_journal_inode:5710: inode #32: comm syz.0.766: iget: special inode unallocated [ 57.911170][ T2159] EXT4-fs (loop0): no journal found [ 58.072833][ T2170] SELinux: failed to load policy [ 58.161675][ T2179] tmpfs: Unknown parameter 'nolazytimeÿÿ' [ 58.260737][ T2192] loop0: detected capacity change from 0 to 256 [ 58.267332][ T2192] exfat: Deprecated parameter 'namecase' [ 58.273581][ T2192] exfat: Deprecated parameter 'utf8' [ 58.283680][ T2196] 9pnet: p9_errstr2errno: server reported unknown error b0x0000000000000004 [ 58.290526][ T2192] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 58.302660][ T2198] loop3: detected capacity change from 0 to 512 [ 58.336172][ T2198] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 58.345466][ T2198] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.387819][ T276] EXT4-fs (loop3): unmounting filesystem. [ 58.426476][ T2214] loop2: detected capacity change from 0 to 128 [ 58.449090][ T2214] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.490264][ T2222] loop3: detected capacity change from 0 to 2048 [ 58.511739][ T2224] user requested TSC rate below hardware speed [ 58.529732][ T2222] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 58.546955][ T2234] netlink: 576 bytes leftover after parsing attributes in process `syz.5.798'. [ 58.548356][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 58.548372][ T28] audit: type=1400 audit(1746047026.907:545): avc: denied { mounton } for pid=2221 comm="syz.3.794" path="/123/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.556552][ T2222] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, [ 58.572438][ T28] audit: type=1400 audit(1746047026.907:546): avc: denied { setattr } for pid=2221 comm="syz.3.794" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 58.585291][ T2222] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.601162][ T28] audit: type=1400 audit(1746047026.907:547): avc: denied { rename } for pid=2221 comm="syz.3.794" name="#11" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.616584][ T2222] overlayfs: failed to set xattr on upper [ 58.624874][ T28] audit: type=1400 audit(1746047026.907:548): avc: denied { unlink } for pid=2221 comm="syz.3.794" name="#11" dev="loop3" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 58.646219][ T2222] overlayfs: conflicting lowerdir path [ 58.698212][ T2239] loop0: detected capacity change from 0 to 128 [ 58.764218][ T276] EXT4-fs (loop3): unmounting filesystem. [ 58.872573][ T28] audit: type=1400 audit(1746047027.237:549): avc: denied { create } for pid=2252 comm="syz.3.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.982654][ T2263] loop3: detected capacity change from 0 to 256 [ 58.989916][ T2263] FAT-fs (loop3): bogus number of FAT sectors [ 58.997061][ T2264] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 58.999260][ T2263] FAT-fs (loop3): Can't find a valid FAT filesystem [ 59.318468][ T593] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 59.375025][ T2268] loop2: detected capacity change from 0 to 40427 [ 59.399822][ T2268] F2FS-fs (loop2): invalid crc value [ 59.432979][ T2268] F2FS-fs (loop2): Found nat_bits in checkpoint [ 59.508598][ T593] usb 6-1: Using ep0 maxpacket: 8 [ 59.515081][ T593] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 59.526788][ T28] audit: type=1400 audit(1746047027.897:550): avc: denied { read } for pid=2285 comm="syz.3.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.531696][ T593] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.566776][ T2268] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 59.578365][ T28] audit: type=1400 audit(1746047027.937:551): avc: denied { write } for pid=2285 comm="syz.3.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.619156][ T593] usb 6-1: config 0 descriptor?? [ 59.642827][ T28] audit: type=1400 audit(1746047028.007:552): avc: denied { map } for pid=2285 comm="syz.3.820" path="socket:[25249]" dev="sockfs" ino=25249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.708849][ T279] bio_check_eod: 14 callbacks suppressed [ 59.708864][ T279] syz-executor: attempt to access beyond end of device [ 59.708864][ T279] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 61.690154][ T28] audit: type=1326 audit(1746047030.047:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2307 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40d38e969 code=0x7ffc0000 [ 61.718334][ T2308] SELinux: failed to load policy [ 61.719595][ T28] audit: type=1326 audit(1746047030.077:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2307 comm="syz.3.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40d38e969 code=0x7ffc0000 [ 61.910280][ T2329] binder: 2328:2329 unknown command 2097152 [ 61.916284][ T2329] binder: 2328:2329 ioctl c0306201 2000000008c0 returned -22 [ 61.948862][ T2332] loop3: detected capacity change from 0 to 512 [ 61.955486][ T2332] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.020558][ T2332] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 62.061767][ T2332] EXT4-fs (loop3): 1 truncate cleaned up [ 62.067535][ T2332] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 62.158894][ T276] EXT4-fs (loop3): unmounting filesystem. [ 62.200958][ T2336] loop0: detected capacity change from 0 to 40427 [ 62.212151][ T2336] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0) [ 62.220097][ T2336] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 62.229923][ T2363] netlink: 96 bytes leftover after parsing attributes in process `syz.3.851'. [ 62.239750][ T2336] F2FS-fs (loop0): invalid crc value [ 62.250444][ T2336] F2FS-fs (loop0): Found nat_bits in checkpoint [ 62.338157][ T2374] loop1: detected capacity change from 0 to 256 [ 62.346721][ T2336] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 62.354398][ T2336] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 62.409160][ T2378] 9pnet: p9_errstr2errno: server reported unknown error @í [ 62.435273][ T2336] syz.0.841: attempt to access beyond end of device [ 62.435273][ T2336] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 62.477424][ T277] syz-executor: attempt to access beyond end of device [ 62.477424][ T277] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 62.491769][ T277] syz-executor: attempt to access beyond end of device [ 62.491769][ T277] loop0: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 62.637642][ T2404] loop1: detected capacity change from 0 to 512 [ 62.644843][ T2404] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.657536][ T2404] EXT4-fs (loop1): 1 truncate cleaned up [ 62.664364][ T2404] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 62.689654][ T275] EXT4-fs (loop1): unmounting filesystem. [ 62.878505][ T281] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 62.899607][ T1666] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 62.938507][ T1705] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 63.059624][ T281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.070626][ T281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.080441][ T281] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 63.089655][ T281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.099416][ T281] usb 4-1: config 0 descriptor?? [ 63.100581][ T1666] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.115823][ T1666] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.118473][ T1705] usb 1-1: Using ep0 maxpacket: 32 [ 63.125839][ T1666] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.145268][ T1705] usb 1-1: unable to get BOS descriptor or descriptor too short [ 63.146525][ T593] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 63.163804][ T1705] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 63.164767][ T593] asix: probe of 6-1:0.0 failed with error -71 [ 63.180559][ T1666] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.189646][ T1705] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 63.189815][ T1666] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.208438][ T593] usb 6-1: USB disconnect, device number 4 [ 63.209095][ T1705] usb 1-1: string descriptor 0 read error: -22 [ 63.216119][ T1666] usb 3-1: config 0 descriptor?? [ 63.228473][ T1705] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 63.237566][ T1705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.259506][ T1705] usb 1-1: 0:2 : does not exist [ 63.421741][ T2423] loop5: detected capacity change from 0 to 1024 [ 63.428654][ T2423] EXT4-fs: Ignoring removed nobh option [ 63.434304][ T2423] EXT4-fs: Ignoring removed bh option [ 63.440288][ T2423] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.468473][ T19] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 63.476643][ T593] usb 1-1: USB disconnect, device number 7 [ 63.507802][ T281] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 63.514782][ T281] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 63.522444][ T281] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 63.629572][ T1666] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 63.638524][ T1666] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 63.658471][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 63.665009][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.676543][ T19] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.686543][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 63.699477][ T19] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 63.708759][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.717405][ T19] usb 2-1: config 0 descriptor?? [ 63.738428][ T1705] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 63.918448][ T1705] usb 6-1: Using ep0 maxpacket: 32 [ 63.925271][ T1705] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 63.933452][ T1705] usb 6-1: config 0 has no interface number 0 [ 63.941184][ T1705] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 63.950387][ T1705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.958466][ T1705] usb 6-1: Product: syz [ 63.962718][ T1705] usb 6-1: Manufacturer: syz [ 63.967330][ T1705] usb 6-1: SerialNumber: syz [ 63.972815][ T1705] usb 6-1: config 0 descriptor?? [ 63.978770][ T1705] smsc95xx v2.0.0 [ 64.109800][ T281] pyra 0003:1E7D:2CF6.000E: couldn't init struct pyra_device [ 64.117458][ T281] pyra 0003:1E7D:2CF6.000E: couldn't install mouse [ 64.138154][ T281] pyra: probe of 0003:1E7D:2CF6.000E failed with error -71 [ 64.159603][ T281] usb 4-1: USB disconnect, device number 9 [ 64.180145][ T19] logitech 0003:046D:C293.0010: nested delimiters [ 64.186618][ T19] logitech 0003:046D:C293.0010: item 0 4 2 10 parsing failed [ 64.195200][ T19] logitech 0003:046D:C293.0010: parse failed [ 64.201529][ T19] logitech: probe of 0003:046D:C293.0010 failed with error -22 [ 64.321025][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 64.321057][ T28] audit: type=1400 audit(1746047032.687:634): avc: denied { create } for pid=2432 comm="syz.0.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.347347][ T28] audit: type=1400 audit(1746047032.687:635): avc: denied { connect } for pid=2432 comm="syz.0.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.388493][ T28] audit: type=1400 audit(1746047032.747:636): avc: denied { map } for pid=2434 comm="syz.0.880" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 64.395396][ T1705] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 64.412633][ T28] audit: type=1400 audit(1746047032.747:637): avc: denied { read write } for pid=2434 comm="syz.0.880" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24351 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 64.449082][ T1705] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 64.665691][ T28] audit: type=1400 audit(1746047033.027:638): avc: denied { create } for pid=2437 comm="syz.3.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 64.801840][ T2443] loop3: detected capacity change from 0 to 512 [ 64.809634][ T2443] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.822527][ T2443] EXT4-fs (loop3): 1 truncate cleaned up [ 64.832392][ T28] audit: type=1400 audit(1746047033.197:639): avc: denied { rename } for pid=2442 comm="syz.3.884" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.854611][ T28] audit: type=1400 audit(1746047033.197:640): avc: denied { unlink } for pid=2442 comm="syz.3.884" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 64.877288][ T1705] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 64.889669][ T1705] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 64.898648][ T1705] usb 6-1: USB disconnect, device number 5 [ 65.188496][ T298] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 65.368474][ T298] usb 4-1: Using ep0 maxpacket: 8 [ 65.374720][ T298] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 65.383209][ T298] usb 4-1: config 179 has no interface number 0 [ 65.389527][ T298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 65.400851][ T298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 65.412170][ T298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 65.426249][ T1656] EXT4-fs unmount: 3 callbacks suppressed [ 65.426267][ T1656] EXT4-fs (loop5): unmounting filesystem. [ 65.438032][ T298] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 65.450159][ T298] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 65.465128][ T2451] loop2: detected capacity change from 0 to 512 [ 65.472088][ T2451] EXT4-fs (loop2): Test dummy encryption mode enabled [ 65.478583][ T298] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 65.479685][ T2451] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.487914][ T298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.506581][ T2447] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 65.514523][ T2451] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 65.522637][ T2451] System zones: 1-12 [ 65.531229][ T28] audit: type=1400 audit(1746047033.897:641): avc: denied { ioctl } for pid=2454 comm="syz.5.886" path="socket:[24386]" dev="sockfs" ino=24386 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.556389][ T2451] EXT4-fs (loop2): 1 truncate cleaned up [ 65.568545][ T2451] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 65.592322][ T2451] EXT4-fs warning (device loop2): __ext4fs_dirhash:270: inode #2: comm syz.2.887: Siphash requires key [ 65.604625][ T28] audit: type=1400 audit(1746047033.937:642): avc: denied { write } for pid=2454 comm="syz.5.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.635760][ T279] EXT4-fs (loop2): unmounting filesystem. [ 65.681501][ T28] audit: type=1400 audit(1746047034.047:643): avc: denied { read } for pid=2466 comm="syz.2.893" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 65.707203][ T1666] usb 3-1: USB disconnect, device number 7 [ 65.759230][ T19] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8 [ 65.775357][ T2469] SELinux: failed to load policy [ 65.920452][ T2476] loop2: detected capacity change from 0 to 16 [ 65.927493][ T2476] erofs: (device loop2): mounted with root inode @ nid 36. [ 65.938436][ T281] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 65.957444][ T2476] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 65.964725][ T2447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.966323][ T2476] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 65.984559][ T2447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.131301][ T281] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 66.148959][ T281] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 66.162620][ T2492] netlink: 5 bytes leftover after parsing attributes in process `syz.2.906'. [ 66.190203][ T298] usb 2-1: USB disconnect, device number 9 [ 66.197297][ T280] kernel write not supported for file bpf-prog (pid: 280 comm: kworker/1:2) [ 66.199081][ T281] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.245612][ T281] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.255663][ T281] usb 6-1: Product: syz [ 66.265773][ T281] usb 6-1: Manufacturer: syz [ 66.275855][ T281] usb 6-1: SerialNumber: syz [ 66.288265][ T2465] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 66.347038][ T2507] loop2: detected capacity change from 0 to 1024 [ 66.357378][ T2507] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.913: Invalid block bitmap block 0 in block_group 0 [ 66.372052][ T2507] EXT4-fs error (device loop2): ext4_acquire_dquot:6789: comm syz.2.913: Failed to acquire dquot type 0 [ 66.385925][ T2510] overlayfs: failed to clone lowerpath [ 66.386684][ T2507] EXT4-fs error (device loop2): ext4_free_blocks:6210: comm syz.2.913: Freeing blocks not in datazone - block = 0, count = 4096 [ 66.405410][ T2507] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.913: Invalid inode bitmap blk 0 in block_group 0 [ 66.418597][ T43] EXT4-fs error (device loop2): ext4_release_dquot:6812: comm kworker/u4:2: Failed to release dquot type 0 [ 66.425229][ T280] usb 4-1: USB disconnect, device number 10 [ 66.430115][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 66.444857][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 66.452616][ T2507] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 66.461982][ T2507] EXT4-fs (loop2): 1 orphan inode deleted [ 66.467811][ T2507] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 66.504532][ T279] EXT4-fs (loop2): unmounting filesystem. [ 66.558519][ T2528] loop1: detected capacity change from 0 to 1024 [ 66.565345][ T2528] EXT4-fs: Ignoring removed i_version option [ 66.573178][ T2528] EXT4-fs (loop1): Test dummy encryption mode enabled [ 66.592924][ T2528] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 66.639170][ T275] EXT4-fs (loop1): unmounting filesystem. [ 66.704909][ T2545] loop2: detected capacity change from 0 to 256 [ 66.718059][ T2545] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 66.887164][ T2559] loop2: detected capacity change from 0 to 512 [ 66.895898][ T2559] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.935: corrupted in-inode xattr [ 66.908782][ T2559] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.935: couldn't read orphan inode 15 (err -117) [ 66.921133][ T2559] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 66.933961][ T2559] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.935: dx entry: limit 0 != root limit 125 [ 66.946359][ T2559] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.935: Corrupt directory, running e2fsck is recommended [ 66.971319][ T2559] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.935: path /205/file7: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 66.998516][ T2566] tmpfs: Unknown parameter 'nolazyt+>eRë0-~ÿí^¢ˆ~µÍ1"ôÐÙVøIêÿYÎ' [ 67.048188][ T279] EXT4-fs (loop2): unmounting filesystem. [ 67.169637][ T2595] bridge0: port 3(vlan2) entered blocking state [ 67.176060][ T2595] bridge0: port 3(vlan2) entered disabled state [ 67.248184][ T2614] loop3: detected capacity change from 0 to 512 [ 67.255498][ T2614] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.267359][ T2614] EXT4-fs (loop3): orphan cleanup on readonly fs [ 67.274256][ T2614] EXT4-fs warning (device loop3): ext4_enable_quotas:7024: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 67.289223][ T2614] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 67.295859][ T2614] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.960: bad orphan inode 768 [ 67.307307][ T2614] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 67.316530][ T281] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 67.328459][ T281] cdc_ncm 6-1:1.0: setting rx_max = 16384 [ 67.346663][ T2624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.964'. [ 67.360329][ T276] EXT4-fs (loop3): unmounting filesystem. [ 67.366370][ T2624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.964'. [ 67.376481][ T2624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.964'. [ 67.387577][ T2624] netlink: 16 bytes leftover after parsing attributes in process `syz.2.964'. [ 67.397585][ T2624] netlink: 5 bytes leftover after parsing attributes in process `syz.2.964'. [ 67.434932][ T2629] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 67.444095][ T2629] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 67.444126][ T2629] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 67.444145][ T2629] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 67.444164][ T2629] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 67.444183][ T2629] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 67.444201][ T2629] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 67.444218][ T2629] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 67.444237][ T2629] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 67.444254][ T2629] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 67.521575][ T281] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 67.524147][ T281] usb 6-1: USB disconnect, device number 6 [ 67.645920][ T281] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 67.912241][ T2671] KVM: debugfs: duplicate directory 2671-5 [ 67.924557][ T2674] loop0: detected capacity change from 0 to 256 [ 67.948835][ T2674] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 68.005184][ T2678] loop0: detected capacity change from 0 to 256 [ 68.011859][ T2678] exfat: Deprecated parameter 'utf8' [ 68.017238][ T2678] exfat: Deprecated parameter 'namecase' [ 68.023554][ T2678] exfat: Deprecated parameter 'namecase' [ 68.030088][ T2678] exfat: Deprecated parameter 'utf8' [ 68.038069][ T2678] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xf7bffc1e, utbl_chksum : 0xe619d30d) [ 68.048367][ T2654] loop2: detected capacity change from 0 to 40427 [ 68.142440][ T2690] loop5: detected capacity change from 0 to 512 [ 68.206036][ T2690] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.992: casefold flag without casefold feature [ 68.228634][ T2690] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.992: couldn't read orphan inode 15 (err -117) [ 68.258587][ T2690] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 68.386958][ T1656] EXT4-fs (loop5): unmounting filesystem. [ 68.489566][ T2688] loop0: detected capacity change from 0 to 131072 [ 68.497940][ T2693] device veth1_macvtap left promiscuous mode [ 68.504471][ T2693] device macsec0 entered promiscuous mode [ 68.523561][ T2688] F2FS-fs (loop0): Found nat_bits in checkpoint [ 68.566126][ T2688] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 68.640482][ T2720] loop5: detected capacity change from 0 to 16 [ 68.655084][ T2720] erofs: (device loop5): mounted with root inode @ nid 36. [ 68.700836][ T2730] netem: change failed [ 68.705254][ T2732] loop1: detected capacity change from 0 to 1024 [ 68.736923][ T2728] loop2: detected capacity change from 0 to 8192 [ 68.771973][ T2732] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 68.799230][ T2732] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3841: comm syz.1.1010: Allocating blocks 385-513 which overlap fs metadata [ 68.817044][ T2741] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 68.827465][ T2741] SELinux: failed to load policy [ 68.858455][ T593] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 68.860754][ T2731] EXT4-fs (loop1): pa ffff88811593a738: logic 16, phys. 129, len 24 [ 68.874186][ T2731] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 68.896488][ T275] EXT4-fs (loop1): unmounting filesystem. [ 69.049784][ T593] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.069897][ T2771] SELinux: failed to load policy [ 69.074935][ T593] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.095888][ T593] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 69.105535][ T593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 69.113658][ T593] usb 4-1: SerialNumber: syz [ 69.338738][ T593] usb 4-1: 0:2 : does not exist [ 69.349037][ T593] usb 4-1: USB disconnect, device number 11 [ 69.412323][ T2800] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2800 comm=syz.1.1040 [ 69.426008][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 69.426022][ T28] audit: type=1400 audit(1746047037.797:733): avc: denied { read } for pid=2799 comm="syz.1.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 69.474959][ T2807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1043'. [ 69.580477][ T28] audit: type=1400 audit(1746047037.947:734): avc: denied { relabelfrom } for pid=2814 comm="syz.0.1047" name="XDP" dev="sockfs" ino=27163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.580487][ T2815] SELinux: Context system_u:object_r:devlog_t:s0 is not valid (left unmapped). [ 69.612592][ T28] audit: type=1400 audit(1746047037.947:735): avc: denied { relabelto } for pid=2814 comm="syz.0.1047" name="XDP" dev="sockfs" ino=27163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=xdp_socket permissive=1 trawcon="system_u:object_r:devlog_t:s0" [ 69.718822][ T28] audit: type=1400 audit(1746047038.087:736): avc: denied { setopt } for pid=2819 comm="syz.0.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.738611][ T28] audit: type=1400 audit(1746047038.087:737): avc: denied { bind } for pid=2819 comm="syz.0.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.760145][ T28] audit: type=1400 audit(1746047038.087:738): avc: denied { write } for pid=2819 comm="syz.0.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.788437][ T28] audit: type=1400 audit(1746047038.117:739): avc: denied { append } for pid=2822 comm="syz.0.1051" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 69.812676][ T28] audit: type=1400 audit(1746047038.147:740): avc: denied { write } for pid=2825 comm="syz.0.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.828489][ T281] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 69.833515][ T28] audit: type=1400 audit(1746047038.147:741): avc: denied { nlmsg_write } for pid=2825 comm="syz.0.1052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.029610][ T281] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 70.051099][ T281] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 70.083255][ T281] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 70.114936][ T281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.136351][ T281] usb 2-1: Product: syz [ 70.154350][ T281] usb 2-1: Manufacturer: syz [ 70.165132][ T281] usb 2-1: SerialNumber: syz [ 70.180870][ T281] usb 2-1: config 0 descriptor?? [ 70.190309][ T2813] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.200590][ T2813] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.420972][ T2813] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.436904][ T2813] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.470588][ T2837] loop5: detected capacity change from 0 to 40427 [ 70.479672][ T2837] F2FS-fs (loop5): invalid crc value [ 70.485023][ T28] audit: type=1400 audit(1746047038.847:742): avc: denied { nlmsg_write } for pid=2840 comm="syz.0.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 70.509687][ T2837] F2FS-fs (loop5): Found nat_bits in checkpoint [ 70.569687][ T2837] F2FS-fs (loop5): Start checkpoint disabled! [ 70.590130][ T2837] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 70.690495][ T2837] F2FS-fs (loop5): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled [ 70.760888][ T43] kworker/u4:2: attempt to access beyond end of device [ 70.760888][ T43] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 70.854839][ T281] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 70.905170][ T298] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 70.919904][ T298] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.934526][ T2882] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1079'. [ 70.986235][ T2888] loop5: detected capacity change from 0 to 512 [ 71.002007][ T2888] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #16: comm syz.5.1072: corrupted inode contents [ 71.014264][ T2888] EXT4-fs error (device loop5): ext4_dirty_inode:6091: inode #16: comm syz.5.1072: mark_inode_dirty error [ 71.028283][ T2888] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #16: comm syz.5.1072: corrupted inode contents [ 71.040561][ T2888] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #16: comm syz.5.1072: mark_inode_dirty error [ 71.055164][ T2888] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #16: comm syz.5.1072: corrupted inode contents [ 71.068770][ T2888] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 71.083017][ T2888] EXT4-fs error (device loop5): ext4_do_update_inode:5226: inode #16: comm syz.5.1072: corrupted inode contents [ 71.096162][ T2894] xt_hashlimit: size too large, truncated to 1048576 [ 71.109800][ T2888] EXT4-fs error (device loop5): ext4_truncate:4313: inode #16: comm syz.5.1072: mark_inode_dirty error [ 71.121340][ T2888] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 71.131643][ T2888] EXT4-fs (loop5): 1 truncate cleaned up [ 71.137597][ T2888] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 71.148971][ T1249] EXT4-fs error (device loop5): ext4_release_dquot:6812: comm kworker/u4:5: Failed to release dquot type 1 [ 71.225718][ T2888] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.282367][ T1656] EXT4-fs (loop5): unmounting filesystem. [ 71.456007][ T281] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 71.466885][ T281] usb 2-1: USB disconnect, device number 10 [ 71.861888][ T2936] loop3: detected capacity change from 0 to 1024 [ 71.878941][ T2936] EXT4-fs: Ignoring removed nobh option [ 71.884556][ T2936] EXT4-fs: Ignoring removed bh option [ 71.943255][ T2936] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 71.968467][ T281] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 71.996374][ T276] EXT4-fs (loop3): unmounting filesystem. [ 72.017676][ T2942] device veth1_macvtap left promiscuous mode [ 72.036177][ T2942] device macsec0 entered promiscuous mode [ 72.073089][ T2952] loop1: detected capacity change from 0 to 512 [ 72.080275][ T2952] EXT4-fs (loop1): Test dummy encryption mode enabled [ 72.094802][ T2952] EXT4-fs error (device loop1): __ext4_iget:5057: inode #11: block 1: comm syz.1.1107: invalid block [ 72.115874][ T2952] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1107: couldn't read orphan inode 11 (err -117) [ 72.128606][ T2952] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 72.178492][ T281] usb 3-1: Using ep0 maxpacket: 16 [ 72.185105][ T275] EXT4-fs (loop1): unmounting filesystem. [ 72.185625][ T281] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 72.202862][ T281] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.227371][ T281] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.246755][ T281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.251500][ T2926] loop5: detected capacity change from 0 to 131072 [ 72.262970][ T2971] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1115'. [ 72.265415][ T2926] F2FS-fs (loop5): invalid crc value [ 72.272911][ T281] usb 3-1: Product: syz [ 72.282130][ T281] usb 3-1: Manufacturer: syz [ 72.287043][ T281] usb 3-1: SerialNumber: syz [ 72.292781][ T2926] F2FS-fs (loop5): Found nat_bits in checkpoint [ 72.378726][ T2926] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 72.448104][ T2926] F2FS-fs (loop5): Corrupted max_depth of 3: 16842753 [ 72.456013][ T2926] F2FS-fs (loop5): dec_valid_node_count: inconsistent i_blocks, ino:7, iblocks:0 [ 72.501431][ T281] usb 3-1: 0:2 : does not exist [ 72.510627][ T281] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 72.527077][ T3001] loop3: detected capacity change from 0 to 2048 [ 72.532369][ T281] usb 3-1: USB disconnect, device number 8 [ 72.577745][ T3001] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 72.637449][ T276] EXT4-fs (loop3): unmounting filesystem. [ 72.721028][ T1666] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 72.740048][ T3019] loop1: detected capacity change from 0 to 1024 [ 72.751887][ T3019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.752501][ T1666] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 72.769875][ T3019] EXT4-fs: Mount option(s) incompatible with ext2 [ 72.853576][ T3031] loop1: detected capacity change from 0 to 512 [ 72.861804][ T3031] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 72.871549][ T3031] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 72.880479][ T3031] System zones: 0-2, 18-18, 34-35 [ 72.886217][ T3031] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 72.897375][ T3038] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1143'. [ 73.150966][ T3055] bridge0: port 3(vlan2) entered blocking state [ 73.157336][ T3055] bridge0: port 3(vlan2) entered disabled state [ 73.168526][ T593] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 73.178544][ T281] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 73.358516][ T281] usb 1-1: Using ep0 maxpacket: 32 [ 73.364960][ T281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.376421][ T281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58947, setting to 1024 [ 73.378421][ T593] usb 2-1: Using ep0 maxpacket: 16 [ 73.388288][ T281] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 73.402249][ T281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.403185][ T593] usb 2-1: config 1 has an invalid descriptor of length 235, skipping remainder of the config [ 73.411495][ T281] usb 1-1: config 0 descriptor?? [ 73.421287][ T593] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.434672][ T3043] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 73.447254][ T593] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.457012][ T593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.465088][ T593] usb 2-1: Product: syz [ 73.469369][ T593] usb 2-1: Manufacturer: syz [ 73.473991][ T593] usb 2-1: SerialNumber: syz [ 73.500517][ T3074] loop2: detected capacity change from 0 to 2048 [ 73.520100][ T3074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 73.649328][ T3079] loop3: detected capacity change from 0 to 512 [ 73.656636][ T3079] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 73.667672][ T3079] EXT4-fs (loop3): group descriptors corrupted! [ 73.775043][ T3083] loop5: detected capacity change from 0 to 2048 [ 73.808215][ T3083] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 73.845560][ T1656] EXT4-fs (loop5): unmounting filesystem. [ 73.852223][ T281] savu 0003:1E7D:2D5A.0013: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 74.037722][ T3093] loop5: detected capacity change from 0 to 2048 [ 74.038899][ T3081] loop3: detected capacity change from 0 to 40427 [ 74.065348][ T3081] F2FS-fs (loop3): invalid crc value [ 74.080454][ T3093] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 74.080618][ T3081] F2FS-fs (loop3): Found nat_bits in checkpoint [ 74.089404][ T593] usb 2-1: unknown interface protocol 0x2e, assuming v1 [ 74.114255][ T593] usb 2-1: cannot find UAC_HEADER [ 74.131618][ T593] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 74.139558][ T281] usb 1-1: USB disconnect, device number 8 [ 74.150779][ T1656] EXT4-fs (loop5): unmounting filesystem. [ 74.156977][ T3081] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 74.242838][ T276] syz-executor: attempt to access beyond end of device [ 74.242838][ T276] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 74.341422][ T593] usb 2-1: USB disconnect, device number 11 [ 74.548663][ T279] EXT4-fs (loop2): unmounting filesystem. [ 74.648452][ T280] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 74.808775][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 74.808792][ T28] audit: type=1400 audit(1746047043.177:769): avc: denied { bind } for pid=3125 comm="syz.0.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 74.839679][ T280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.850692][ T280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.860677][ T593] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 74.868797][ T280] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.869422][ T275] EXT4-fs (loop1): unmounting filesystem. [ 74.881933][ T280] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.898514][ T280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.908134][ T280] usb 4-1: config 0 descriptor?? [ 75.079529][ T593] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 75.098610][ T3155] loop1: detected capacity change from 0 to 512 [ 75.098803][ T593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.110081][ T3155] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 75.114082][ T593] usb 3-1: config 0 descriptor?? [ 75.125365][ T3155] EXT4-fs (loop1): orphan cleanup on readonly fs [ 75.152431][ T3155] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:511: comm syz.1.1190: Block bitmap for bg 0 marked uninitialized [ 75.168777][ T3155] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 75.177947][ T3155] EXT4-fs (loop1): 1 orphan inode deleted [ 75.183962][ T3155] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 75.199056][ T3167] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1197'. [ 75.208723][ T28] audit: type=1400 audit(1746047043.577:770): avc: denied { remount } for pid=3154 comm="syz.1.1190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.208749][ T3155] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 75.243005][ T3155] EXT4-fs (loop1): re-mounted. Quota mode: none. [ 75.261997][ T3155] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:511: comm syz.1.1190: Block bitmap for bg 0 marked uninitialized [ 75.295494][ T275] EXT4-fs (loop1): unmounting filesystem. [ 75.325032][ T3182] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.335125][ T3182] F2FS-fs (loop3): Unable to read 1th superblock [ 75.345711][ T280] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 75.346139][ T3183] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1202'. [ 75.354757][ T280] plantronics 0003:047F:FFFF.0014: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 75.368741][ T3182] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 75.395349][ T3182] F2FS-fs (loop3): Unable to read 2th superblock [ 75.471895][ T3202] Zero length message leads to an empty skb [ 75.496963][ T3204] device bridge0 entered promiscuous mode [ 75.503450][ T3204] bridge0: port 3(macsec1) entered blocking state [ 75.510279][ T3204] bridge0: port 3(macsec1) entered disabled state [ 75.517780][ T3204] device bridge0 left promiscuous mode [ 75.639084][ T39] usb 4-1: USB disconnect, device number 12 [ 75.672037][ T28] audit: type=1400 audit(1746047044.037:771): avc: denied { mounton } for pid=3213 comm="syz.0.1218" path="/286/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 75.672406][ T3214] loop1: detected capacity change from 0 to 512 [ 75.700980][ T281] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 75.709572][ T28] audit: type=1400 audit(1746047044.077:772): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 75.731768][ T3214] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 75.740845][ T3214] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.779328][ T275] EXT4-fs (loop1): unmounting filesystem. [ 75.819499][ T593] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 75.829953][ T593] asix: probe of 3-1:0.0 failed with error -71 [ 75.837394][ T593] usb 3-1: USB disconnect, device number 9 [ 75.888497][ T281] usb 6-1: Using ep0 maxpacket: 8 [ 75.894869][ T281] usb 6-1: config 0 has no interfaces? [ 75.902441][ T281] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 75.911668][ T281] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 75.919963][ T281] usb 6-1: SerialNumber: syz [ 75.935086][ T281] usb 6-1: config 0 descriptor?? [ 76.010639][ T28] audit: type=1400 audit(1746047044.377:773): avc: denied { shutdown } for pid=3230 comm="syz.1.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.144426][ T593] usb 6-1: USB disconnect, device number 7 [ 76.384204][ T3245] user requested TSC rate below hardware speed [ 76.406479][ T28] audit: type=1400 audit(1746047044.767:774): avc: denied { validate_trans } for pid=3258 comm="syz.3.1234" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 76.461239][ T3263] loop3: detected capacity change from 0 to 128 [ 76.473361][ T3263] FAT-fs (loop3): Directory bread(block 162) failed [ 76.480328][ T3263] FAT-fs (loop3): Directory bread(block 163) failed [ 76.487372][ T3263] FAT-fs (loop3): Directory bread(block 164) failed [ 76.494395][ T3263] FAT-fs (loop3): Directory bread(block 165) failed [ 76.501681][ T3263] FAT-fs (loop3): Directory bread(block 166) failed [ 76.508763][ T3263] FAT-fs (loop3): Directory bread(block 167) failed [ 76.515491][ T3263] FAT-fs (loop3): Directory bread(block 168) failed [ 76.522341][ T3263] FAT-fs (loop3): Directory bread(block 169) failed [ 76.532169][ T3263] FAT-fs (loop3): Directory bread(block 162) failed [ 76.538842][ T3263] FAT-fs (loop3): Directory bread(block 163) failed [ 76.545740][ T3263] syz.3.1236: attempt to access beyond end of device [ 76.545740][ T3263] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 76.559182][ T3263] syz.3.1236: attempt to access beyond end of device [ 76.559182][ T3263] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 76.573997][ T3271] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1244'. [ 76.596890][ T28] audit: type=1400 audit(1746047044.957:775): avc: denied { mounton } for pid=3272 comm="syz.2.1246" path="/263/file0" dev="tmpfs" ino=1389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 76.620914][ T28] audit: type=1400 audit(1746047044.957:776): avc: denied { bind } for pid=3274 comm="syz.3.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.668457][ T281] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 76.788456][ T280] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 76.859571][ T281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.870811][ T281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.881042][ T281] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 76.894489][ T281] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 76.904004][ T281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.915155][ T281] usb 2-1: config 0 descriptor?? [ 76.979496][ T280] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 76.988617][ T280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.997504][ T280] usb 1-1: config 0 descriptor?? [ 77.003967][ T280] usb 1-1: selecting invalid altsetting 1 [ 77.011600][ T280] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 77.211351][ T298] usb 1-1: USB disconnect, device number 9 [ 77.324116][ T281] plantronics 0003:047F:FFFF.0015: unknown main item tag 0xd [ 77.333461][ T281] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 77.345009][ T281] plantronics 0003:047F:FFFF.0015: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 77.629502][ T281] usb 2-1: USB disconnect, device number 12 [ 77.791971][ T28] audit: type=1400 audit(1746047046.157:777): avc: denied { block_suspend } for pid=3307 comm="syz.3.1259" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 77.856970][ T3315] loop3: detected capacity change from 0 to 1024 [ 77.863580][ T3319] futex_wake_op: syz.0.1265 tries to shift op by -1; fix this program [ 77.909649][ T3315] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 77.932022][ T28] audit: type=1400 audit(1746047046.297:778): avc: denied { setcurrent } for pid=3327 comm="syz.5.1269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 77.973314][ T276] EXT4-fs (loop3): unmounting filesystem. [ 78.068689][ T3342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1275'. [ 78.122434][ T3348] loop2: detected capacity change from 0 to 2048 [ 78.149412][ T3348] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 78.169374][ T279] EXT4-fs (loop2): unmounting filesystem. [ 78.178189][ T3357] loop3: detected capacity change from 0 to 1024 [ 78.185272][ T3357] EXT4-fs: Ignoring removed bh option [ 78.200627][ T3357] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 78.221343][ T3357] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3841: comm syz.3.1282: Allocating blocks 497-513 which overlap fs metadata [ 78.235595][ T3357] EXT4-fs (loop3): pa ffff888115971000: logic 256, phys. 385, len 8 [ 78.243695][ T3357] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 78.287075][ T276] EXT4-fs (loop3): unmounting filesystem. [ 78.289665][ T3368] net_ratelimit: 3319 callbacks suppressed [ 78.289685][ T3368] Dead loop on virtual device ip6_vti0, fix it urgently! [ 78.306164][ T3368] Dead loop on virtual device ip6_vti0, fix it urgently! [ 78.313523][ T3368] Dead loop on virtual device ip6_vti0, fix it urgently! [ 78.321163][ T3368] Dead loop on virtual device ip6_vti0, fix it urgently! [ 78.328411][ T3368] Dead loop on virtual device ip6_vti0, fix it urgently! [ 78.335910][ T3368] Dead loop on virtual device ip6_vti0, fix it urgently! [ 78.477704][ T3375] loop5: detected capacity change from 0 to 40427 [ 78.484684][ T3375] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 78.492491][ T3375] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 78.501593][ T3375] F2FS-fs (loop5): invalid crc value [ 78.508283][ T3375] F2FS-fs (loop5): Found nat_bits in checkpoint [ 78.537550][ T3375] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 78.544692][ T3375] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 78.558443][ T280] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 78.586613][ T1249] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 78.596093][ T1249] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 78.687304][ T3390] 9pnet: p9_errstr2errno: server reported unknown error ¤ÑÅl0î„&IØü0‚Ñ(|9Ê’å0%cÞ»ØÞÙ$ƒQûÂMÍ- [ 78.751101][ T280] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.764739][ T280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.773534][ T280] usb 3-1: Product: syz [ 78.777769][ T280] usb 3-1: Manufacturer: syz [ 78.782486][ T280] usb 3-1: SerialNumber: syz [ 78.850466][ T3415] tmpfs: Unknown parameter 'nolazyt+>eRë0-~ÿí^¢ˆ~µÍ1"ôÐÙVøIêÿYÎ' [ 78.964839][ T3410] loop5: detected capacity change from 0 to 40427 [ 78.972115][ T3410] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0) [ 78.979738][ T3410] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 78.994612][ T3410] F2FS-fs (loop5): invalid crc value [ 79.004653][ T3410] F2FS-fs (loop5): Found nat_bits in checkpoint [ 79.051985][ T3433] loop1: detected capacity change from 0 to 512 [ 79.059035][ T3410] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 79.059158][ T3433] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.072945][ T3410] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 79.075485][ T3433] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.1309: invalid block [ 79.093490][ T3433] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1309: invalid indirect mapped block 10 (level 1) [ 79.107508][ T3433] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1309: invalid indirect mapped block 8 (level 1) [ 79.116297][ T3410] syz.5.1301: attempt to access beyond end of device [ 79.116297][ T3410] loop5: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 79.121452][ T3433] EXT4-fs (loop1): 1 truncate cleaned up [ 79.140389][ T3433] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 79.149691][ T1656] syz-executor: attempt to access beyond end of device [ 79.149691][ T1656] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 79.163989][ T1656] syz-executor: attempt to access beyond end of device [ 79.163989][ T1656] loop5: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 79.178322][ T39] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 79.322443][ T3445] loop5: detected capacity change from 0 to 512 [ 79.329799][ T3445] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 79.342603][ T3445] EXT4-fs (loop5): 1 truncate cleaned up [ 79.348528][ T3445] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 79.372438][ T1656] EXT4-fs (loop5): unmounting filesystem. [ 79.379675][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.402451][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.420568][ T39] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 79.438896][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.448181][ T39] usb 1-1: config 0 descriptor?? [ 79.468511][ T281] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 79.649692][ T281] usb 2-1: config 0 has an invalid interface number: 87 but max is 0 [ 79.657819][ T281] usb 2-1: config 0 has no interface number 0 [ 79.665428][ T281] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.d6 [ 79.674581][ T281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.682654][ T281] usb 2-1: Product: syz [ 79.686957][ T281] usb 2-1: Manufacturer: syz [ 79.691651][ T281] usb 2-1: SerialNumber: syz [ 79.696879][ T281] usb 2-1: config 0 descriptor?? [ 79.702626][ T281] ums-sddr09 2-1:0.87: USB Mass Storage device detected [ 79.803404][ T280] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 79.810046][ T593] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 79.817684][ T280] cdc_ncm 3-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 79.825183][ T280] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 79.848462][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 79.859774][ T39] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 79.866579][ T39] pyra 0003:1E7D:2CF6.0016: unknown main item tag 0x0 [ 79.874075][ T39] pyra 0003:1E7D:2CF6.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 79.908623][ T281] usb 2-1: USB disconnect, device number 13 [ 80.003860][ T280] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 80.011521][ T280] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 80.023658][ T593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.035485][ T280] usb 3-1: USB disconnect, device number 10 [ 80.041520][ T593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.051776][ T280] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 80.061004][ T593] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.075528][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.086509][ T593] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.095601][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.109944][ T593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.118757][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.132090][ T593] usb 4-1: config 0 descriptor?? [ 80.137291][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.146436][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.155417][ T1081] ================================================================== [ 80.163488][ T1081] BUG: KASAN: use-after-free in worker_thread+0x9ff/0x11f0 [ 80.170710][ T1081] Read of size 8 at addr ffff88811413ece0 by task kworker/1:4/1081 [ 80.178590][ T1081] [ 80.180921][ T1081] CPU: 1 PID: 1081 Comm: kworker/1:4 Tainted: G W 6.1.134-syzkaller-00032-g242f90b45e89 #0 [ 80.192273][ T1081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 80.202427][ T1081] Workqueue: 0x0 (events) [ 80.207027][ T1081] Call Trace: [ 80.210402][ T1081] [ 80.213328][ T1081] __dump_stack+0x21/0x24 [ 80.217661][ T1081] dump_stack_lvl+0xee/0x150 [ 80.222253][ T1081] ? __cfi_dump_stack_lvl+0x8/0x8 [ 80.227277][ T1081] ? __cfi__printk+0x8/0x8 [ 80.231696][ T1081] ? __schedule+0xb8f/0x14e0 [ 80.236459][ T1081] ? worker_thread+0x9ff/0x11f0 [ 80.241321][ T1081] print_address_description+0x71/0x210 [ 80.246865][ T1081] print_report+0x4a/0x60 [ 80.251213][ T1081] kasan_report+0x122/0x150 [ 80.255732][ T1081] ? worker_thread+0x9ff/0x11f0 [ 80.260578][ T1081] __asan_report_load8_noabort+0x14/0x20 [ 80.266216][ T1081] worker_thread+0x9ff/0x11f0 [ 80.270889][ T1081] kthread+0x281/0x320 [ 80.274949][ T1081] ? __cfi_worker_thread+0x10/0x10 [ 80.280055][ T1081] ? __cfi_kthread+0x10/0x10 [ 80.284635][ T1081] ret_from_fork+0x1f/0x30 [ 80.289072][ T1081] [ 80.292079][ T1081] [ 80.294397][ T1081] Allocated by task 280: [ 80.298621][ T1081] kasan_set_track+0x4b/0x70 [ 80.303200][ T1081] kasan_save_alloc_info+0x25/0x30 [ 80.308483][ T1081] __kasan_kmalloc+0x95/0xb0 [ 80.313094][ T1081] __kmalloc_node+0xb2/0x1e0 [ 80.317682][ T1081] kvmalloc_node+0x294/0x480 [ 80.322271][ T1081] alloc_netdev_mqs+0x8d/0xf90 [ 80.327040][ T1081] alloc_etherdev_mqs+0x37/0x40 [ 80.331894][ T1081] usbnet_probe+0x20c/0x2780 [ 80.336575][ T1081] usb_probe_interface+0x610/0xaf0 [ 80.341686][ T1081] really_probe+0x2cb/0x960 [ 80.346194][ T1081] __driver_probe_device+0x198/0x280 [ 80.351495][ T1081] driver_probe_device+0x54/0x3e0 [ 80.356519][ T1081] __device_attach_driver+0x2e9/0x4a0 [ 80.361893][ T1081] bus_for_each_drv+0x183/0x210 [ 80.366738][ T1081] __device_attach+0x2a2/0x400 [ 80.371514][ T1081] device_initial_probe+0x1a/0x20 [ 80.376543][ T1081] bus_probe_device+0xc0/0x1f0 [ 80.381312][ T1081] device_add+0xb4d/0xef0 [ 80.385643][ T1081] usb_set_configuration+0x19c2/0x1f10 [ 80.391105][ T1081] usb_generic_driver_probe+0x91/0x150 [ 80.396570][ T1081] usb_probe_device+0x159/0x270 [ 80.401437][ T1081] really_probe+0x2cb/0x960 [ 80.406045][ T1081] __driver_probe_device+0x198/0x280 [ 80.411334][ T1081] driver_probe_device+0x54/0x3e0 [ 80.416364][ T1081] __device_attach_driver+0x2e9/0x4a0 [ 80.421743][ T1081] bus_for_each_drv+0x183/0x210 [ 80.426588][ T1081] __device_attach+0x2a2/0x400 [ 80.431349][ T1081] device_initial_probe+0x1a/0x20 [ 80.436378][ T1081] bus_probe_device+0xc0/0x1f0 [ 80.441139][ T1081] device_add+0xb4d/0xef0 [ 80.445466][ T1081] usb_new_device+0xa70/0x1520 [ 80.450229][ T1081] hub_event+0x2a5d/0x4680 [ 80.454656][ T1081] process_one_work+0x71f/0xc40 [ 80.459605][ T1081] worker_thread+0xa29/0x11f0 [ 80.464283][ T1081] kthread+0x281/0x320 [ 80.468351][ T1081] ret_from_fork+0x1f/0x30 [ 80.472772][ T1081] [ 80.475084][ T1081] Freed by task 280: [ 80.479004][ T1081] kasan_set_track+0x4b/0x70 [ 80.483589][ T1081] kasan_save_free_info+0x31/0x50 [ 80.488621][ T1081] ____kasan_slab_free+0x132/0x180 [ 80.493729][ T1081] __kasan_slab_free+0x11/0x20 [ 80.498519][ T1081] slab_free_freelist_hook+0xc2/0x190 [ 80.503893][ T1081] __kmem_cache_free+0xb7/0x1b0 [ 80.508741][ T1081] kfree+0x6f/0xf0 [ 80.512462][ T1081] kvfree+0x35/0x40 [ 80.516270][ T1081] netdev_freemem+0x3f/0x60 [ 80.520767][ T1081] netdev_release+0x7f/0xb0 [ 80.525269][ T1081] device_release+0xa4/0x1d0 [ 80.529882][ T1081] kobject_put+0x19d/0x280 [ 80.534301][ T1081] put_device+0x1f/0x30 [ 80.538448][ T1081] free_netdev+0x392/0x490 [ 80.542863][ T1081] usbnet_disconnect+0x25a/0x3b0 [ 80.547797][ T1081] usb_unbind_interface+0x223/0x8d0 [ 80.552993][ T1081] device_release_driver_internal+0x508/0x820 [ 80.559067][ T1081] device_release_driver+0x19/0x20 [ 80.564182][ T1081] bus_remove_device+0x2ee/0x350 [ 80.569113][ T1081] device_del+0x6a4/0xeb0 [ 80.573446][ T1081] usb_disable_device+0x3a8/0x750 [ 80.578466][ T1081] usb_disconnect+0x31e/0x860 [ 80.583139][ T1081] hub_event+0x1bd5/0x4680 [ 80.587551][ T1081] process_one_work+0x71f/0xc40 [ 80.592398][ T1081] worker_thread+0xd2e/0x11f0 [ 80.597066][ T1081] kthread+0x281/0x320 [ 80.601130][ T1081] ret_from_fork+0x1f/0x30 [ 80.605545][ T1081] [ 80.607864][ T1081] Last potentially related work creation: [ 80.613571][ T1081] kasan_save_stack+0x3a/0x60 [ 80.618244][ T1081] __kasan_record_aux_stack+0xb6/0xc0 [ 80.623612][ T1081] kasan_record_aux_stack_noalloc+0xb/0x10 [ 80.629422][ T1081] insert_work+0x51/0x300 [ 80.633759][ T1081] __queue_work+0x9b1/0xd30 [ 80.638263][ T1081] queue_work_on+0xd2/0x140 [ 80.642766][ T1081] usbnet_link_change+0x176/0x1a0 [ 80.647789][ T1081] usbnet_probe+0x1d55/0x2780 [ 80.652464][ T1081] usb_probe_interface+0x610/0xaf0 [ 80.657579][ T1081] really_probe+0x2cb/0x960 [ 80.662099][ T1081] __driver_probe_device+0x198/0x280 [ 80.667385][ T1081] driver_probe_device+0x54/0x3e0 [ 80.672409][ T1081] __device_attach_driver+0x2e9/0x4a0 [ 80.677785][ T1081] bus_for_each_drv+0x183/0x210 [ 80.682626][ T1081] __device_attach+0x2a2/0x400 [ 80.687378][ T1081] device_initial_probe+0x1a/0x20 [ 80.692393][ T1081] bus_probe_device+0xc0/0x1f0 [ 80.697145][ T1081] device_add+0xb4d/0xef0 [ 80.701473][ T1081] usb_set_configuration+0x19c2/0x1f10 [ 80.706925][ T1081] usb_generic_driver_probe+0x91/0x150 [ 80.712378][ T1081] usb_probe_device+0x159/0x270 [ 80.717264][ T1081] really_probe+0x2cb/0x960 [ 80.721781][ T1081] __driver_probe_device+0x198/0x280 [ 80.727091][ T1081] driver_probe_device+0x54/0x3e0 [ 80.732117][ T1081] __device_attach_driver+0x2e9/0x4a0 [ 80.737485][ T1081] bus_for_each_drv+0x183/0x210 [ 80.742330][ T1081] __device_attach+0x2a2/0x400 [ 80.747101][ T1081] device_initial_probe+0x1a/0x20 [ 80.752128][ T1081] bus_probe_device+0xc0/0x1f0 [ 80.756878][ T1081] device_add+0xb4d/0xef0 [ 80.761197][ T1081] usb_new_device+0xa70/0x1520 [ 80.765950][ T1081] hub_event+0x2a5d/0x4680 [ 80.770447][ T1081] process_one_work+0x71f/0xc40 [ 80.775286][ T1081] worker_thread+0xa29/0x11f0 [ 80.779955][ T1081] kthread+0x281/0x320 [ 80.784008][ T1081] ret_from_fork+0x1f/0x30 [ 80.788454][ T1081] [ 80.790764][ T1081] The buggy address belongs to the object at ffff88811413e000 [ 80.790764][ T1081] which belongs to the cache kmalloc-4k of size 4096 [ 80.804800][ T1081] The buggy address is located 3296 bytes inside of [ 80.804800][ T1081] 4096-byte region [ffff88811413e000, ffff88811413f000) [ 80.818249][ T1081] [ 80.820561][ T1081] The buggy address belongs to the physical page: [ 80.826965][ T1081] page:ffffea0004504e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114138 [ 80.837198][ T1081] head:ffffea0004504e00 order:3 compound_mapcount:0 compound_pincount:0 [ 80.845510][ T1081] flags: 0x4000000000010200(slab|head|zone=1) [ 80.851579][ T1081] raw: 4000000000010200 ffffea000449dc00 dead000000000002 ffff888100043380 [ 80.860153][ T1081] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 80.868748][ T1081] page dumped because: kasan: bad access detected [ 80.875160][ T1081] page_owner tracks the page as allocated [ 80.880863][ T1081] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1142, tgid 1140 (syz.1.338), ts 41660708676, free_ts 41657525883 [ 80.902961][ T1081] post_alloc_hook+0x1f5/0x210 [ 80.907832][ T1081] prep_new_page+0x1c/0x110 [ 80.912339][ T1081] get_page_from_freelist+0x2c6e/0x2ce0 [ 80.918066][ T1081] __alloc_pages+0x19e/0x3a0 [ 80.922711][ T1081] alloc_slab_page+0x6e/0xf0 [ 80.927307][ T1081] new_slab+0x98/0x3d0 [ 80.931393][ T1081] ___slab_alloc+0x6f6/0xb50 [ 80.936814][ T1081] __slab_alloc+0x5e/0xa0 [ 80.941231][ T1081] __kmem_cache_alloc_node+0x203/0x2c0 [ 80.947052][ T1081] __kmalloc_node_track_caller+0xa0/0x1e0 [ 80.952866][ T1081] __alloc_skb+0x224/0x7e0 [ 80.957394][ T1081] __pskb_copy_fclone+0xa7/0xeb0 [ 80.962329][ T1081] tipc_sk_mcast_rcv+0x5ce/0xed0 [ 80.967322][ T1081] tipc_mcast_xmit+0x1110/0x1720 [ 80.972532][ T1081] __tipc_sendmsg+0x1d81/0x2680 [ 80.977394][ T1081] tipc_sendmsg+0x55/0x70 [ 80.981773][ T1081] page last free stack trace: [ 80.986430][ T1081] free_unref_page_prepare+0x742/0x750 [ 80.992056][ T1081] free_unref_page+0x8f/0x530 [ 80.996730][ T1081] __free_pages+0x67/0x100 [ 81.001136][ T1081] __free_slab+0xca/0x1a0 [ 81.005465][ T1081] __unfreeze_partials+0x160/0x190 [ 81.010653][ T1081] put_cpu_partial+0xa9/0x100 [ 81.015338][ T1081] __slab_free+0x1c4/0x280 [ 81.019745][ T1081] ___cache_free+0xbf/0xd0 [ 81.024147][ T1081] qlist_free_all+0xc6/0x140 [ 81.028739][ T1081] kasan_quarantine_reduce+0x14a/0x170 [ 81.034195][ T1081] __kasan_slab_alloc+0x24/0x80 [ 81.039037][ T1081] slab_post_alloc_hook+0x4f/0x2d0 [ 81.044155][ T1081] kmem_cache_alloc_node+0x181/0x340 [ 81.049430][ T1081] __alloc_skb+0xdf/0x7e0 [ 81.053750][ T1081] tipc_buf_acquire+0x2b/0xe0 [ 81.058414][ T1081] tipc_msg_build+0x550/0xfd0 [ 81.063089][ T1081] [ 81.065408][ T1081] Memory state around the buggy address: [ 81.071068][ T1081] ffff88811413eb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.079129][ T1081] ffff88811413ec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.087193][ T1081] >ffff88811413ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.095329][ T1081] ^ [ 81.102530][ T1081] ffff88811413ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.110576][ T1081] ffff88811413ed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.118620][ T1081] ================================================================== [ 81.126719][ T1081] Disabling lock debugging due to kernel taint [ 81.140549][ T593] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 81.150473][ T24] usb 6-1: config 0 descriptor?? [ 81.156372][ T275] EXT4-fs (loop1): unmounting filesystem. [ 81.166336][ T593] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 81.334490][ T39] pyra 0003:1E7D:2CF6.0016: couldn't init struct pyra_device [ 81.341990][ T39] pyra 0003:1E7D:2CF6.0016: couldn't install mouse [ 81.349135][ T39] pyra: probe of 0003:1E7D:2CF6.0016 failed with error -71 [ 81.357315][ T39] usb 1-1: USB disconnect, device number 10 [ 81.566106][ T24] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 81.574937][ T24] plantronics 0003:047F:FFFF.0018: hiddev97,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 82.450249][ T281] usb 6-1: USB disconnect, device number 8 [ 83.278800][ T39] usb 4-1: USB disconnect, device number 13