last executing test programs: 2.98379983s ago: executing program 2 (id=711): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x309, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b80)={0x18, &(0x7f0000000080)={0x0, 0x0, 0x8, {0x8, 0x0, "4d8188a6c50f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.795954545s ago: executing program 3 (id=716): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)='d', 0x1}, {&(0x7f0000000180)="c5cf5a452f8e40ff496f4f892c31c6cd2de4288a5ea3413c13dc3a8925f64b9868b4b7", 0x23}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb7", 0x13}, {&(0x7f0000000000)=')', 0x1}], 0x2}}], 0x2, 0x0) 1.835932192s ago: executing program 4 (id=726): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x1000000000000010, 0x80802, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendmmsg$inet(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a00)="117ee3561a1ba706c1dfc0dfa2ac9eba06ae", 0x12}], 0x1}}], 0x1, 0x0) r2 = dup2(r1, r1) write$cgroup_int(r2, &(0x7f00000009c0), 0x12) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}}, 0x0) 1.681092585s ago: executing program 4 (id=729): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x85, &(0x7f0000000e80), 0x4) 1.665040556s ago: executing program 4 (id=730): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000012c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000001400)={0x0, 0xffffffff000}) 1.639035068s ago: executing program 3 (id=717): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x1, 0x0, 0x2}, {}]}) 1.555910704s ago: executing program 3 (id=733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000002c0)={0x20, r1, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) 1.546339135s ago: executing program 3 (id=734): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x7, 'vlan0\x00'}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x3d, 0x0, 0x1}, {}, {0x6}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080009000b020000", 0x24) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b36, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000140), 0x9) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x1, @dev}}, 0x1e) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2, 0x0, 0x2}, 0x48) listen(r1, 0x6) 1.415718886s ago: executing program 1 (id=736): syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x800000, &(0x7f00000000c0), 0xfe, 0x4ef, &(0x7f0000000380)="$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") mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x0, 0x40, 0x8, 0x2, 0x0, 0x1}, 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) shutdown(r4, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a}, 0x90) syz_emit_ethernet(0xdc0, &(0x7f0000000280)=ANY=[], 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x0, &(0x7f00000003c0), 0x0}, 0x90) 1.143286218s ago: executing program 4 (id=740): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40086602, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f0000000340)='./file0\x00', 0x145142, 0x0) sendfile(r4, r4, 0x0, 0x800000009) syz_fuse_handle_req(r2, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 902.747927ms ago: executing program 0 (id=744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000002c0)={0x20, r1, 0x401, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x20}}, 0x0) 849.202662ms ago: executing program 0 (id=745): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x402, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x250, &(0x7f0000002680)="$eJzs3EFrI2UYB/DHbt1tu+ymBxEUxBe96GXY1g8gQXZBLCh1I+pBmLVTDR2TkgmViLh78+rnWDx6E9Qv0Is37956EbzsQYw0Sd1kjYiwcWrz+0H7PuHNH55hJuGZQHLy7lefHOxX2X7ej5W1FCsR9+JBxOZpNfHEZF0Z1Zdj2r14+eqvPz339nvvv9Hc2bm5m9Kt5u1XtlNK15//7tPPv37hh/7Vd765/u2VON784OSX7Z+Pnz5+5uT32x+3q9SuUqfbT3m60+328ztlkfba1UGW0ltlkVdFaneqojezv192Dw8HKe/sXds47BVVlfLOIB0Ug9Tvpn5vkPKP8nYnZVmWrm0E/6R1f3c3b9bdBQuzevqv12vmlyJi/S/brft1NAUA1Ot8z/+nU4v5f3HM/8vgdP7fmLx+Z5n/AQAAAAAAAAAAAADg/+DBcNgYDoeNs/Xs70pErEXE2eO6+2QxnP/lNvXFvbWI8suj1lFrvI73m/vRjjKKuBGN+G10PUyM61uv79y8kUY24/vy7iR/96h1aTa/FY3YnJ/fGufTbP7J2JjOb0cjnpqf356bvxwvvTiVz6IRP34Y3Shjb3RdP8x/sZXSa2/uPJJfHz0PAAAALoIs/Wnu/XuW/d3+OP8vPh945P56NZ5drffYAQAAYFlUg88O8rIseooLWLwaEeegDcV0sfa4T8p6LKLVut+ZAACAx+3h0F93JwAAAAAAAAAAAAAAAAAAALC8/osfPKv7GAEAAAAAAAAAAAAAAAAAAAAAAOC8+CMAAP//i7gqKA==") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x4003e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) r3 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7U\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n\x8f~\xd0\xe2y-l\xef_\xb0\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xfe{\xfd\x8a\xa3Eo\tCv\xad\x18\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4\a\x00\x00\x00\x00\x00\x00\x00\x94\xb6\xe8\x885\x92#\x8dE \x86[N\xa7\xd03\xa8\xb4,\x85p\xbd\x88\x02\x1d\xf3\xd5X\xa0\xa9M\xca\xc7\x8b\x8cu\xf0\x00\x00\x00\x00\x00i\xc7\xe7\xbc\xd2\x1e\xf99|\x93\xc7\x7flk\xd2\xa0\xe9\x99`\xff\xf6\xfb\xc4\x9a[\x05\\\x96<\x92\xea}\xec\xac\x17\x9f7\xc0\xa1P\xd0\xf2\x8f\xdc\xf2\xb0\vV\xf7%4_\xba\x81\x95cLW\xfcw\xe0\x97wS\x15\xe4F\xb3\x8a\x9f\b\f\x10z\x14>\x03\xf9\xb0\x95\xbd\xaaF\x02\x86.\xbf\x85\xcfo)G\xb1m\xa8\x01H\x1fO\x9d\x9a\x1b\xfd\xaaf\x96\x92\x96\x1b\xfd\x8e\x10\x8a\x9e:\xa5\x14\xb0`\x82\xd8k\xfd\xd2XNh\xd3\xa3\x03\xb1\x10d)\x11.\xe8~\x8c\x19x\x8f\x82Y\xb9\xc8W\xd1\xa8\xa6b9\xbc\x1a\xff\xc5\xdcObsvRc\x13gb\xa4\x0e~\xbb\r\xb7!\x19\x17\xd56\xec\xb5\xe3\xd2\xa3\x17i\x1c?\xcb\x85\xbe\x13\xa13\x05\x8c\xa6Z\x87\xe0\x91]Bp\xd1\xabg\xd9p\xa9)n\xc5t\x8a\xcb\x1e\xec\x92\xdco\xc1\xe2\x12\xd3\xd1\x19\b&%\xf8a&9\x1b?\f\xd8\xa8\x1a\xc8q\x17\xc2]N\x9c\x80\xb1\x13\xb3\xd6\x01\xad\xc26\x13\x93\xd0\x80$\xc8\x05\x91\x9b\xa8\x02\xc3\x87\xc9\x86^\xb8\x7f\xec\\n\x05\xbf\xd7\x15\xce\xff\x00\xe7\xd9\xc5\r\x00\x02\x00\x00\x00\x00\x00\x00\x15\xd2\xd4~\x88\x19der\xa9B\x91m=\xcd\xf7\x9f\xaa\xe7\x9f\x11\x19\xf8\xe6\x16\x7f\xa8W\xf3\xbf\xcbq\x9d\x14#\xb0}\xb4#\x10\xa3\xc8\xff\xc3\x06\xe9^7\x86\x85\xd4:\x8dQd&E\xf4F\xc7l&\x19\xe6\x95\xec\xa1\n\x9cx\x8d\xf2\xec|\xccYR\xaeZ\xd2\x84\xed0\x00\x00\x00\x00\x00\x00\x00', 0x0) r4 = dup(r3) write$cgroup_pid(r4, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) sendfile(r3, r4, &(0x7f0000000100), 0x6c03) capset(&(0x7f0000001580)={0x19980330}, &(0x7f00000002c0)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) ftruncate(r0, 0x7fff) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000002e80)='Z', 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x4e35, r0, &(0x7f00000001c0), 0x0, 0x5}]) 759.855818ms ago: executing program 4 (id=746): r0 = syz_usb_connect$cdc_ecm(0x2, 0xbc, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaa, 0x1, 0x1, 0x9, 0xa0, 0x65, [{{0x9, 0x4, 0x0, 0x5, 0x3, 0x2, 0x6, 0x0, 0x60, {{0x7, 0x24, 0x6, 0x0, 0x0, "4218"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1f, 0x9, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0xf1b}, @mdlm_detail={0x50, 0x24, 0x13, 0x9, "bcada22b6b60a1dd6f16c49a0e218d58f034fbd9ee3d5f434f3a15b1c269d4b675d7dbccc98401ecfc8c538c19e61934e40579899a8e09871a0b042b8f79477311beb262785ef511eea8530c"}, @mdlm_detail={0x8, 0x24, 0x13, 0x6, "f6ac36b0"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x9, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xfa, 0x9, 0x7f}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x8, 0x8, 0x80, 0xff, 0x1}, 0x0, 0xfffffffffffffffe, 0x3, [{0x91, &(0x7f00000005c0)=@string={0x91, 0x3, "e8c955f903ade07785346108aa273d54e3c6c7d0927cb040ceafe541180cd02da0f332a8f8c9301e3a1bfe6efbf64655ab1557dde330a318c24dcab857aaf264d601956b3632f41b7edaf65fcb090bb774d1f7e8c9f058247692939d11439a75f60d1cba0fa7ad98df0346bfcb66d3b219744aa735da9386cad89ec8f8eedbd7bf09f746fe88c4fe26ed26d7182274"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x458}}, {0x81, &(0x7f0000000680)=@string={0x81, 0x3, "a72b3d22aabac555f077a8ff88fe2b271c154769d24399eea0d112221495e82dcb9e740af680a5188600f82f35592cfbfa1cb0aba22a1ff26bdfe15c5a97ae7f3dd85be82332dbc9dbd08d84122eec1f6a0d490475bc04210510308ae82f7c26a0f3041c3975941c39de8f1d2e1f8b89cd87016533b17a702217bf0c04ccd3"}}]}) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100009bd702085039000f00a10000000109021b090500021091b30000000000000000000000000100000000916b36c58f1b"], 0x0) syz_usb_connect$uac1(0x0, 0xb7, &(0x7f0000000a00)=ANY=[@ANYBLOB="12015002000000206b1d01014000010203010902a50003012070060904000000010100000a240181000702010205240406050924030406030601800c240704040008ca80a2a7b00c240201fd0101020600951f0904010000010200000904010101010200000905010900040903170725010207000009040200000102000009040201010102000008240201bf0420b511240201200400000000000000000000000724010868021009058209d0040620050725010129ffff8d1eef499a5fb6a305bd8a852646dc69acffa8b7aa0d50b202c8d12ecb0c9856e0e0e615e82305c8c49a9a7fc931de445346fa111f34932e579d6ad2d3244b09b4c94b3d82af51062940f0f95e3c2cae01dea196bb72b45b4be7e5778aa2a333a869f43dc0a050b143c5c17d1244f968aa3ff5310c8ebe5003c3c9b54948028cd5b42e269fbed1074940a8b7b8f243082e3c0d9cc95385ad095fbdbda17db4098624e7bd9bb114dcb89681bd4b4fe4944a66c7a861e6c70bdc522256"], &(0x7f0000000540)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x1f, 0x1f, 0x7, 0x40, 0x3}, 0x48, &(0x7f00000003c0)={0x5, 0xf, 0x48, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x2, 0x8}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x4, 0xf000, 0x7ff}, @generic={0x26, 0x10, 0x2, "155e62e4f1744e87fff87e05593ffd1e1718b92f134a49f4b5254a26b3d0b6d481e01b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1c, 0x5, 0x20, 0x8}]}, 0x4, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41f}}, {0x2e, &(0x7f0000000500)=ANY=[@ANYBLOB="2e03a266b6a98758c1c60857eb5ced3a801a5f715863c1480440d8468737e71013b1acbea719bd1556c452fba1ab"]}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000840)={0x14, &(0x7f0000000740)={0x20, 0x23, 0xaf, {0xaf, 0x4, "e88dda3f3649712316d3583bf7dea63804d2828b517a9b3ade1ba995d2ec84e135497385efa69b5c83ebb6d08166e89d97269431f30653168b8271e3e83e224b1186e81135ab9e9c16f352c3b389ccaaee21b5637f596701ece6519245accd528875e84641595d88aff29f7b04cae307b9dcd34e46babbc94869cce6ab3008c8c4a1b2979eb6727e84c5fb913f9d2809d766646f3d3ddff56a49d4f824ec9f82e26b3e166365572dcee5c854ff"}}, &(0x7f0000000800)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x1c, &(0x7f0000000880)={0x20, 0x16, 0xa0, "75a8398cb8499a95805e4664e365227b95792bd1e40d0edab3f474323644a21b5be322c76b29b1e3baaf0138101ecf89751d683a37f16253be69742bd0a08f82f12a3bff22818aea36a4b9a0d775b87f7b71256843bd10cb2e22fc1041b693839909a6c4e85011a3b02c45ac4333a74cc7cfedebf2dc2b8fc93104fd783fb38ece92ce31a1f54219f907f59cbe4cbd768d61c33581161b919f8506a38766074c"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x2}}) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102000000ff2505a8a44000010203010902240001013a40939dd61e0ef05a0004020701010009050102080001070009058202000208080400e17e223d000000000000"], &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x7f, 0xf0, 0x4, 0x20, 0x3d}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) 721.930032ms ago: executing program 0 (id=748): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000ac0)={[{@grpquota}, {@nojournal_checksum}, {@nombcache}]}, 0x1, 0x508, &(0x7f0000000400)="$eJzs3c9vI1cdAPCvvevE2U2729IDIGiXtrCg1TqJt42qHqCcEEKVED2CtA2OE0Wx4yh2ShMikZ65IlGJExz5Azj3xJ0LghuXckDiRwRqkDgMmvE4dbN2Y22ydhp/PtJo3syb9fe99c579tdrvwCm1p2IOIyImYh4OyJu5ecL+RZvdLf0uo+ODmrHRwe1QiTJW/8sZPXpuej7M6mb+WOWI+IH34n4ceHRuO29/c2VRqO+kx8vdJrbC+29/fsbzZX1+np9q1pdXlpefO3Bq9UL6+sLzZm89OUP/3D4jZ+mzZrPz/T34yJ1u146iZO6HhHfexLBJuBa3p+ZSTeEx1KMiGcj4sXs/r8V17JnEwC4ypLkViS9F/2z6TEAcNUVsxxYoVjJcwHzUSxWKt0c3nNxo9hotTv31lq7W6vdXNntKBXXNuZiMc8V3o5SYW2jUV/Kyh8fV08dP4iIZyLiF7Nz2XGl1mqsTvi1DwBMq5un5v//zHbn/5EM+FwPAPiMKE+6AQDA2Jn/AWD6mP8BYPqY/wFg+nTn/7lJNwMAGCPv/wFg+pj/AWCqfP/NN9MtOT46qCU/i1h9Z293s/XO/dV6e7PS3K1Vaq2d7cp6q7We/WZP86zHa7Ra20uvxO67t7+53e4stPf2HzZbu1udh9nvej+sl7KrDsfRNQBgiGde+ODPhXRGfn0u26JvLYfSRFsGPGnFSTcAmJhrk24AMDFW+4LpdY73+NIDcEWc9VPe5UFfEEqSJBlyvcEBLr+7X5D/h2nVl//3v4Bhysj/w/SS/4fplSSFUdf8j1EvBAAuNzl+YMjn/8/m+9/mHw78aPX0Fe8/yVYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5dZb/7eSrwU+H8VipRLxVETcjlJhbaNRX4yIpyPiT7Ol2fR4acJtBgDOq/i3Qr7+191bL89/our5myfFmYj4ya/e+uW7K53Ozh8jZgr/mu2d77yfn6+Ov/UAwNl683S273sj/9HRQa23jbM9f/92RJS78Y+PZuL4JP71uJ7ty1GKiBv/LuTHXYW+3MV5HL4XEZ8f1P9CzGc5kO7Kp6fjp7GfGmv84ifiF7O67j79u/jcBbQFps0H6fjzxqD7rxh3sv3g+7+cjVDnl49/6UPVjrMx8OP4vfHv2pDx786oMV75/Xe7pblH696L+OL1iF7s477xpxe/MCT+yyPG/8uXnn9xWF3y64i7MTh+f6yFTnN7ob23f3+jubJeX69vVavLS8uLrz14tbqQ5agXhs8G/3j93tPD6tL+3xgSv3xG/786Yv9/87+3f/iVT4n/9ZcGxS/Gc58SP50TvzZi/JUbvysPq0vjrw7p/1nP/70R43/41/1Hlg0HACanvbe/udJo1HcUFC5/If0newmaMbDwrXHFmonBVT9/qXtPn6pKkseKNWzEuIisG3AZnNz0EfHfSTcGAAAAAAAAAAAAAAAYaBzfWJp0HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi6/h8AAP//H5LP5g==") creat(&(0x7f0000000040)='./bus\x00', 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 695.013384ms ago: executing program 3 (id=749): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000180)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x1000) ftruncate(r0, 0xc17a) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000006c0), 0x208e24b) 636.230729ms ago: executing program 2 (id=750): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x6) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "401000", 0x64, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x19, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @nop, @mss={0xfe, 0x4, 0x89f9}, @sack_perm={0x4, 0x2}, @generic={0x0, 0xa, "8bfbd54ae56dd076"}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0xa, [0x0, 0x0]}, @md5sig={0x13, 0x12, "7a32407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0xa, "111fad2ea7434823"}, @exp_fastopen={0xfe, 0x6, 0xf989, "b43e"}]}}}}}}}}, 0x0) 626.534019ms ago: executing program 3 (id=751): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x1810000, &(0x7f00000007c0)=ANY=[], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = socket$key(0xf, 0x3, 0x2) write$binfmt_script(r0, 0x0, 0x208e24b) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141182, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$incfs(0xffffffffffffff9c, &(0x7f0000000440)='.log\x00', 0x0, 0x100) ftruncate(r1, 0x2007ffb) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000080000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) keyctl$unlink(0x18, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) 620.11442ms ago: executing program 2 (id=752): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x1, 0x400, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001f85236ccc4ce75fa61b6d6978d0", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 608.679641ms ago: executing program 1 (id=753): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20) splice(r0, &(0x7f0000000040), r2, 0x0, 0x808, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="01", 0x1}], 0x1, 0x0) 459.953733ms ago: executing program 1 (id=754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x1, 0x0, 0x2}, {}]}) 399.922358ms ago: executing program 0 (id=755): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x3, 0x5}, @array]}}, 0x0, 0x42}, 0x20) 390.960278ms ago: executing program 1 (id=756): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000c80)={'#! ', './file1/file0', [], 0xa, "3e4e8424600ca63cc6aaf7205e58b97b7273e25c2664a1bef7330a8a1a80515d78d7cac1196476fba9beca885be798640635faf002b6f583f5a90bfd48ca376a6baf5e1e6858aa40f9c0381904e9a6f0b8db29636c647aae32454d87aab88d7f6b52b02d1ef25f7969843d9263202a62"}, 0x81) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080), 0x4) 319.780424ms ago: executing program 2 (id=757): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x402, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x250, &(0x7f0000002680)="$eJzs3EFrI2UYB/DHbt1tu+ymBxEUxBe96GXY1g8gQXZBLCh1I+pBmLVTDR2TkgmViLh78+rnWDx6E9Qv0Is37956EbzsQYw0Sd1kjYiwcWrz+0H7PuHNH55hJuGZQHLy7lefHOxX2X7ej5W1FCsR9+JBxOZpNfHEZF0Z1Zdj2r14+eqvPz339nvvv9Hc2bm5m9Kt5u1XtlNK15//7tPPv37hh/7Vd765/u2VON784OSX7Z+Pnz5+5uT32x+3q9SuUqfbT3m60+328ztlkfba1UGW0ltlkVdFaneqojezv192Dw8HKe/sXds47BVVlfLOIB0Ug9Tvpn5vkPKP8nYnZVmWrm0E/6R1f3c3b9bdBQuzevqv12vmlyJi/S/brft1NAUA1Ot8z/+nU4v5f3HM/8vgdP7fmLx+Z5n/AQAAAAAAAAAAAADg/+DBcNgYDoeNs/Xs70pErEXE2eO6+2QxnP/lNvXFvbWI8suj1lFrvI73m/vRjjKKuBGN+G10PUyM61uv79y8kUY24/vy7iR/96h1aTa/FY3YnJ/fGufTbP7J2JjOb0cjnpqf356bvxwvvTiVz6IRP34Y3Shjb3RdP8x/sZXSa2/uPJJfHz0PAAAALoIs/Wnu/XuW/d3+OP8vPh945P56NZ5drffYAQAAYFlUg88O8rIseooLWLwaEeegDcV0sfa4T8p6LKLVut+ZAACAx+3h0F93JwAAAAAAAAAAAAAAAAAAALC8/osfPKv7GAEAAAAAAAAAAAAAAAAAAAAAAOC8+CMAAP//i7gqKA==") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x800, &(0x7f0000000040)=0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x4003e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) r3 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7U\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n\x8f~\xd0\xe2y-l\xef_\xb0\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x88\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xfe{\xfd\x8a\xa3Eo\tCv\xad\x18\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4\a\x00\x00\x00\x00\x00\x00\x00\x94\xb6\xe8\x885\x92#\x8dE \x86[N\xa7\xd03\xa8\xb4,\x85p\xbd\x88\x02\x1d\xf3\xd5X\xa0\xa9M\xca\xc7\x8b\x8cu\xf0\x00\x00\x00\x00\x00i\xc7\xe7\xbc\xd2\x1e\xf99|\x93\xc7\x7flk\xd2\xa0\xe9\x99`\xff\xf6\xfb\xc4\x9a[\x05\\\x96<\x92\xea}\xec\xac\x17\x9f7\xc0\xa1P\xd0\xf2\x8f\xdc\xf2\xb0\vV\xf7%4_\xba\x81\x95cLW\xfcw\xe0\x97wS\x15\xe4F\xb3\x8a\x9f\b\f\x10z\x14>\x03\xf9\xb0\x95\xbd\xaaF\x02\x86.\xbf\x85\xcfo)G\xb1m\xa8\x01H\x1fO\x9d\x9a\x1b\xfd\xaaf\x96\x92\x96\x1b\xfd\x8e\x10\x8a\x9e:\xa5\x14\xb0`\x82\xd8k\xfd\xd2XNh\xd3\xa3\x03\xb1\x10d)\x11.\xe8~\x8c\x19x\x8f\x82Y\xb9\xc8W\xd1\xa8\xa6b9\xbc\x1a\xff\xc5\xdcObsvRc\x13gb\xa4\x0e~\xbb\r\xb7!\x19\x17\xd56\xec\xb5\xe3\xd2\xa3\x17i\x1c?\xcb\x85\xbe\x13\xa13\x05\x8c\xa6Z\x87\xe0\x91]Bp\xd1\xabg\xd9p\xa9)n\xc5t\x8a\xcb\x1e\xec\x92\xdco\xc1\xe2\x12\xd3\xd1\x19\b&%\xf8a&9\x1b?\f\xd8\xa8\x1a\xc8q\x17\xc2]N\x9c\x80\xb1\x13\xb3\xd6\x01\xad\xc26\x13\x93\xd0\x80$\xc8\x05\x91\x9b\xa8\x02\xc3\x87\xc9\x86^\xb8\x7f\xec\\n\x05\xbf\xd7\x15\xce\xff\x00\xe7\xd9\xc5\r\x00\x02\x00\x00\x00\x00\x00\x00\x15\xd2\xd4~\x88\x19der\xa9B\x91m=\xcd\xf7\x9f\xaa\xe7\x9f\x11\x19\xf8\xe6\x16\x7f\xa8W\xf3\xbf\xcbq\x9d\x14#\xb0}\xb4#\x10\xa3\xc8\xff\xc3\x06\xe9^7\x86\x85\xd4:\x8dQd&E\xf4F\xc7l&\x19\xe6\x95\xec\xa1\n\x9cx\x8d\xf2\xec|\xccYR\xaeZ\xd2\x84\xed0\x00\x00\x00\x00\x00\x00\x00', 0x0) r4 = dup(r3) write$cgroup_pid(r4, &(0x7f0000000040)=0xffffffffffffffff, 0xe) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r3, 0x0) sendfile(r3, r4, &(0x7f0000000100), 0x6c03) capset(&(0x7f0000001580)={0x19980330}, &(0x7f00000002c0)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) ftruncate(r0, 0x7fff) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000002e80)='Z', 0x1, 0x0, 0x0, 0x0, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x4e35, r0, &(0x7f00000001c0), 0x0, 0x5}]) 319.298674ms ago: executing program 1 (id=758): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18, &(0x7f0000000300)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/103}, @flat=@handle}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 304.024825ms ago: executing program 0 (id=759): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0), 0x81, 0x79e, &(0x7f00000018c0)="$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") open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1081000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x15) r1 = open(&(0x7f0000000080)='./bus\x00', 0x181102, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000000c0)) 276.818167ms ago: executing program 1 (id=760): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x309, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b80)={0x18, &(0x7f0000000080)={0x0, 0x0, 0x8, {0x8, 0x0, "4d8188a6c50f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 208.288603ms ago: executing program 2 (id=761): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x6) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "401000", 0x64, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x19, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @nop, @mss={0xfe, 0x4, 0x89f9}, @sack_perm={0x4, 0x2}, @generic={0x0, 0xa, "8bfbd54ae56dd076"}, @exp_smc={0xfe, 0x6}, @sack={0x5, 0xa, [0x0, 0x0]}, @md5sig={0x13, 0x12, "7a32407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0xa, "111fad2ea7434823"}, @exp_fastopen={0xfe, 0x6, 0xf989, "b43e"}]}}}}}}}}, 0x0) 170.088806ms ago: executing program 4 (id=747): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000540)='./bus\x00', 0x10, &(0x7f0000000500)=ANY=[@ANYRES64=0x0], 0x81, 0x374, &(0x7f0000000980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 99.794022ms ago: executing program 2 (id=762): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x1800080, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES64, @ANYRESDEC=0x0, @ANYRES64, @ANYRESHEX, @ANYRES16, @ANYBLOB="94e2ecd74dadb7a3431a2a12d23da61f44f9a92b3ef85e0fe56697a91ef504722569085c499f5d85778bbc9595c4a3e1bea2ed4dc5ea726f17a6bacc8686dade69d292d6ff76ba1afdc2b950a6b482c1e45cdf63255aa862514dbb67f2facedeed0c8b7db3cd59ecf07f92cc8bab529d9985773ac9d911501bb6fbba8df7703fc733e7ac3c4cfe47bcbc157dc5b3ab45e25bb371f6daeb571253be0839de582fd2335bd2ba08736dcc324ad2e135cf20efbacb994e9c2a0231ba78203ff0d920057f9fcba884a3c59d2ea98fab8f70514777b74986a7", @ANYRES32=0x0], 0x1, 0x5549, &(0x7f0000009300)="$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") creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x40106614, 0x0) 0s ago: executing program 0 (id=763): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x20) splice(r0, &(0x7f0000000040), r2, 0x0, 0x808, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="01", 0x1}], 0x1, 0x0) kernel console output (not intermixed with test programs): dit: type=1400 audit(1719986196.090:143): avc: denied { create } for pid=483 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.736658][ T514] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 30.761173][ T18] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.761237][ T514] EXT4-fs (loop3): This should not happen!! Data will be lost [ 30.761237][ T514] [ 30.770745][ T23] audit: type=1400 audit(1719986196.130:144): avc: denied { write } for pid=483 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.801172][ T514] EXT4-fs (loop3): Total free blocks count 0 [ 30.811352][ T514] EXT4-fs (loop3): Free/Dirty block details [ 30.821259][ T514] EXT4-fs (loop3): free_blocks=68451041280 [ 30.828845][ T514] EXT4-fs (loop3): dirty_blocks=16 [ 30.833877][ T514] EXT4-fs (loop3): Block reservation details [ 30.839900][ T514] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 30.851538][ T24] usb 3-1: USB disconnect, device number 2 [ 30.881247][ T13] usb 3-1: Failed to suspend device, error -71 [ 30.891225][ T358] usb 4-1: string descriptor 0 read error: -71 [ 30.911302][ T358] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 30.920101][ T358] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 30.928214][ T358] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 30.933609][ T599] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 30.939707][ T358] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 30.949943][ T599] ext4 filesystem being mounted at /24/bus supports timestamps until 2038 (0x7fffffff) [ 30.957325][ T358] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 30.975504][ T358] usb 4-1: USB disconnect, device number 2 [ 30.981317][ T591] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.021284][ T18] usb 2-1: Using ep0 maxpacket: 32 [ 31.051485][ T604] netlink: 'syz.0.89': attribute type 4 has an invalid length. [ 31.063632][ T604] netlink: 'syz.0.89': attribute type 4 has an invalid length. [ 31.421334][ T18] usb 2-1: New USB device found, idVendor=03f0, idProduct=0107, bcdDevice= 2.00 [ 31.430279][ T18] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.438120][ T18] usb 2-1: Product: syz [ 31.442192][ T591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.452805][ T18] usb 2-1: Manufacturer: syz [ 31.457205][ T18] usb 2-1: SerialNumber: syz [ 31.461660][ T591] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.474968][ T591] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.484114][ T18] usb 2-1: config 0 descriptor?? [ 31.488998][ T591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.497979][ T591] usb 5-1: config 0 descriptor?? [ 31.521771][ T18] usb-storage 2-1:0.0: USB Mass Storage device detected [ 31.725006][ T124] usb 2-1: USB disconnect, device number 2 [ 31.734610][ T631] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 31.748474][ T631] ext4 filesystem being mounted at /12/bus supports timestamps until 2038 (0x7fffffff) [ 31.931292][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.962656][ T591] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 31.972979][ T591] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 31.986389][ T591] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 32.068462][ T645] EXT4-fs (loop3): blocks per group (0) and clusters per group (16384) inconsistent [ 32.191544][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 32.361715][ T13] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 32.373072][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.384272][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.394524][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 32.409406][ T13] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 32.418461][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.427386][ T13] usb 3-1: config 0 descriptor?? [ 32.597055][ T663] cgroup: syz.1.111 (663) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 32.608460][ T405] usb 5-1: USB disconnect, device number 3 [ 32.613256][ T663] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 32.677759][ T627] binder: transaction release 5 bad object at offset 536871744, size 72 [ 32.701293][ T124] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 33.161245][ T13] usbhid 3-1:0.0: can't add hid device: -71 [ 33.167068][ T13] usbhid: probe of 3-1:0.0 failed with error -71 [ 33.175054][ T13] usb 3-1: USB disconnect, device number 3 [ 33.221185][ T124] usb 4-1: Using ep0 maxpacket: 8 [ 33.531550][ T683] EXT4-fs (loop4): blocks per group (0) and clusters per group (16384) inconsistent [ 33.681283][ T124] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=65.25 [ 33.690201][ T124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.698759][ T124] usb 4-1: Product: syz [ 33.703039][ T124] usb 4-1: Manufacturer: syz [ 33.707493][ T124] usb 4-1: SerialNumber: syz [ 33.712782][ T124] usb 4-1: config 0 descriptor?? [ 33.901179][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 34.031450][ T124] usb 4-1: unknown interface protocol 0x2, assuming v1 [ 34.038306][ T124] usb 4-1: cannot find UAC_HEADER [ 34.043381][ T124] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 34.050883][ T124] usb 4-1: USB disconnect, device number 3 [ 34.058123][ T354] syz-executor (354) used greatest stack depth: 19416 bytes left [ 34.079015][ T698] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nouid32,nodiscard,auto_da_alloc=0x000000000000003f,,errors=continue [ 34.141268][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 34.210301][ T703] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.217248][ T703] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.224549][ T703] device bridge_slave_0 entered promiscuous mode [ 34.232083][ T703] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.238901][ T703] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.246705][ T703] device bridge_slave_1 entered promiscuous mode [ 34.279982][ T707] Â: renamed from pim6reg1 [ 34.314957][ T703] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.321850][ T703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.328962][ T703] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.335808][ T703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.365290][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.374578][ T124] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.382481][ T124] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.393135][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.401605][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.408453][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.425357][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.435019][ T591] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.441431][ T13] usb 5-1: New USB device found, idVendor=03f0, idProduct=0107, bcdDevice= 2.00 [ 34.441872][ T591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.450706][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.450717][ T13] usb 5-1: Product: syz [ 34.450732][ T13] usb 5-1: Manufacturer: syz [ 34.475103][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.475278][ T13] usb 5-1: SerialNumber: syz [ 34.488586][ T13] usb 5-1: config 0 descriptor?? [ 34.497173][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.520034][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.535574][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.554825][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.570605][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.586617][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.600742][ T13] usb-storage 5-1:0.0: USB Mass Storage device detected [ 34.868672][ T358] usb 5-1: USB disconnect, device number 4 [ 34.899183][ T727] proc: Unknown parameter 'no' [ 34.911371][ T405] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.918736][ T124] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 35.022153][ T674] device bridge_slave_1 left promiscuous mode [ 35.028159][ T674] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.035381][ T674] device bridge_slave_0 left promiscuous mode [ 35.041674][ T674] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.311485][ T124] usb 2-1: Using ep0 maxpacket: 8 [ 35.461308][ T405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.472175][ T124] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 35.483055][ T124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.493802][ T405] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 35.506523][ T124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.516104][ T405] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.524941][ T124] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 35.537706][ T405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.546056][ T124] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 35.555210][ T405] usb 3-1: config 0 descriptor?? [ 35.560132][ T124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.569568][ T124] usb 2-1: config 0 descriptor?? [ 35.815808][ T717] binder: BINDER_SET_CONTEXT_MGR already set [ 35.819268][ T742] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nouid32,nodiscard,auto_da_alloc=0x000000000000003f,,errors=continue [ 35.822127][ T717] binder: 716:717 ioctl 4018620d 20000040 returned -16 [ 35.845368][ T23] kauditd_printk_skb: 20 callbacks suppressed [ 35.845381][ T23] audit: type=1400 audit(1719986201.230:165): avc: denied { append } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=9408 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.883819][ T23] audit: type=1400 audit(1719986201.230:166): avc: denied { open } for pid=144 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9408 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.907022][ T23] audit: type=1400 audit(1719986201.230:167): avc: denied { getattr } for pid=144 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9408 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.032719][ T405] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 36.042217][ T405] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 36.058645][ T405] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 36.079896][ T748] Â: renamed from pim6reg1 [ 36.085750][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.092609][ T750] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.099960][ T750] device bridge_slave_0 entered promiscuous mode [ 36.109433][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.116528][ T750] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.123929][ T750] device bridge_slave_1 entered promiscuous mode [ 36.151231][ T124] usbhid 2-1:0.0: can't add hid device: -71 [ 36.157085][ T124] usbhid: probe of 2-1:0.0 failed with error -71 [ 36.164962][ T124] usb 2-1: USB disconnect, device number 3 [ 36.198567][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.205446][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.212572][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.219398][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.259285][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.266529][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.274394][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.281886][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.298200][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.306581][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.313435][ T358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.332736][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.343704][ T591] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.350550][ T591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.358654][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.392330][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.410836][ T23] audit: type=1400 audit(1719986201.790:168): avc: denied { create } for pid=760 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.412073][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.443648][ T23] audit: type=1400 audit(1719986201.820:169): avc: denied { read } for pid=760 comm="syz.4.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.475306][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.492427][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.518197][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.527429][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.536273][ T7] device bridge_slave_1 left promiscuous mode [ 36.542438][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.550018][ T7] device bridge_slave_0 left promiscuous mode [ 36.556464][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.620476][ T124] usb 3-1: USB disconnect, device number 4 [ 36.665228][ T770] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.679545][ T770] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 36.700422][ T770] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a802c01c, mo2=0002] [ 36.708812][ T770] System zones: 0-2, 18-18, 34-34 [ 36.715211][ T770] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 36.730108][ T770] EXT4-fs (loop1): 1 truncate cleaned up [ 36.735836][ T591] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 36.743741][ T770] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 36.913674][ T782] proc: Unknown parameter 'no' [ 37.038885][ T783] EXT4-fs error (device loop1): ext4_generic_delete_entry:2620: inode #2: block 3: comm syz.1.149: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 37.058424][ T23] audit: type=1400 audit(1719986202.420:170): avc: denied { remove_name } for pid=769 comm="syz.1.149" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.085236][ T783] EXT4-fs error (device loop1) in ext4_delete_entry:2679: Corrupt filesystem [ 37.109999][ T783] EXT4-fs warning (device loop1): ext4_rename_delete:3787: inode #2: comm syz.1.149: Deleting old file: nlink 4, error=-117 [ 37.125988][ T23] audit: type=1400 audit(1719986202.420:171): avc: denied { rename } for pid=769 comm="syz.1.149" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.153580][ T23] audit: type=1400 audit(1719986202.420:172): avc: denied { unlink } for pid=769 comm="syz.1.149" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.177808][ T23] audit: type=1400 audit(1719986202.540:173): avc: denied { write } for pid=785 comm="syz.3.153" name="kvm" dev="devtmpfs" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 37.211266][ T591] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 37.226091][ T591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.241197][ T591] usb 5-1: config 0 descriptor?? [ 37.356721][ T23] audit: type=1400 audit(1719986202.740:174): avc: denied { mount } for pid=801 comm="syz.2.160" name="/" dev="ramfs" ino=16522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 37.416869][ T800] EXT4-fs (loop3): blocks per group (0) and clusters per group (16384) inconsistent [ 37.489881][ T805] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.497096][ T805] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.504614][ T805] device bridge_slave_0 entered promiscuous mode [ 37.511684][ T805] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.518550][ T805] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.526176][ T805] device bridge_slave_1 entered promiscuous mode [ 37.592281][ T805] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.599110][ T805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.606266][ T805] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.613012][ T805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.636701][ T807] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 37.652668][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.660063][ T18] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.667814][ T18] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.691601][ T814] proc: Unknown parameter 'no' [ 37.705620][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.723873][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.730711][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.756016][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.764386][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.771236][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.793350][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.805282][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.851907][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.869355][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.893117][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.908919][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.920667][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.938372][ T834] capability: warning: `syz.3.172' uses deprecated v2 capabilities in a way that may be insecure [ 38.021198][ T124] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.098025][ T840] 9pnet: Insufficient options for proto=fd [ 38.122227][ T7] device bridge_slave_1 left promiscuous mode [ 38.128209][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.135894][ T7] device bridge_slave_0 left promiscuous mode [ 38.142028][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.261195][ T124] usb 2-1: Using ep0 maxpacket: 16 [ 38.361284][ T591] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 38.371111][ T591] asix: probe of 5-1:0.0 failed with error -71 [ 38.377931][ T591] usb 5-1: USB disconnect, device number 5 [ 38.384798][ T124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.395582][ T124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.405064][ T124] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 38.413931][ T124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.422863][ T124] usb 2-1: config 0 descriptor?? [ 38.478283][ T848] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 38.644822][ T865] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 38.768821][ T873] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 38.903965][ T124] savu 0003:1E7D:2D5A.0005: item fetching failed at offset 2/5 [ 38.913614][ T124] savu 0003:1E7D:2D5A.0005: parse failed [ 38.919121][ T124] savu: probe of 0003:1E7D:2D5A.0005 failed with error -22 [ 38.991994][ T884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 39.264448][ T124] usb 2-1: USB disconnect, device number 4 [ 39.305494][ T892] erofs: (device loop2): mounted with opts: , root inode @ nid 36. [ 39.393805][ T901] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 39.553122][ T910] 9pnet: Insufficient options for proto=fd [ 39.631686][ T121] cfg80211: failed to load regulatory.db [ 39.683287][ T358] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 39.802317][ T924] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 40.007637][ T923] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 40.023633][ T923] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 40.037948][ T923] F2FS-fs (loop0): invalid crc value [ 40.045952][ T923] F2FS-fs (loop0): Found nat_bits in checkpoint [ 40.061324][ T358] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 40.073490][ T358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.091494][ T358] usb 4-1: config 0 descriptor?? [ 40.117282][ T923] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 40.124291][ T923] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 40.355676][ T939] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 41.463143][ T953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.217'. [ 41.472245][ T953] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 41.481528][ T953] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 41.498768][ T750] attempt to access beyond end of device [ 41.498768][ T750] loop0: rw=2049, want=45104, limit=40427 [ 41.633592][ T933] F2FS-fs (loop1): invalid crc value [ 41.841300][ T933] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 41.915831][ T974] netlink: 277 bytes leftover after parsing attributes in process `syz.4.223'. [ 42.063028][ T358] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 42.072965][ T358] asix: probe of 4-1:0.0 failed with error -32 [ 42.098510][ T23] kauditd_printk_skb: 19 callbacks suppressed [ 42.098521][ T23] audit: type=1400 audit(1719986207.480:194): avc: denied { create } for pid=932 comm="syz.1.212" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 42.115687][ T358] usb 4-1: USB disconnect, device number 4 [ 42.380133][ T986] netlink: 32 bytes leftover after parsing attributes in process `syz.0.227'. [ 42.618403][ T993] EXT4-fs (loop1): Ignoring removed orlov option [ 42.628932][ T993] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 42.647849][ T993] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 42.676288][ T993] EXT4-fs error (device loop1): ext4_generic_delete_entry:2620: inode #2: block 16: comm syz.1.229: bad entry in directory: rec_len is too small for name_len - offset=44, inode=12, rec_len=16, size=1024 fake=0 [ 42.696671][ T993] EXT4-fs error (device loop1) in ext4_delete_entry:2679: Corrupt filesystem [ 42.875603][ T1017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1017 comm=syz.1.239 [ 43.073851][ T1031] netlink: 277 bytes leftover after parsing attributes in process `syz.3.240'. [ 43.284924][ T1030] EXT4-fs (loop2): Ignoring removed orlov option [ 43.307254][ T1030] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 43.342828][ T1030] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 43.387420][ T1030] EXT4-fs error (device loop2): ext4_generic_delete_entry:2620: inode #2: block 16: comm syz.2.245: bad entry in directory: rec_len is too small for name_len - offset=44, inode=12, rec_len=16, size=1024 fake=0 [ 43.494361][ T1030] EXT4-fs error (device loop2) in ext4_delete_entry:2679: Corrupt filesystem [ 43.961903][ T23] audit: type=1400 audit(1719986209.350:195): avc: denied { setopt } for pid=1057 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.981741][ T23] audit: type=1400 audit(1719986209.370:196): avc: denied { bind } for pid=1057 comm="syz.3.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.036542][ T1058] 9pnet: Insufficient options for proto=fd [ 44.043365][ T23] audit: type=1326 audit(1719986209.430:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402e375b99 code=0x7ffc0000 [ 44.076260][ T23] audit: type=1326 audit(1719986209.450:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f402e375b99 code=0x7ffc0000 [ 44.099533][ T23] audit: type=1326 audit(1719986209.450:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402e375b99 code=0x7ffc0000 [ 44.122750][ T23] audit: type=1326 audit(1719986209.450:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f402e375b99 code=0x7ffc0000 [ 44.145963][ T23] audit: type=1326 audit(1719986209.450:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402e375b99 code=0x7ffc0000 [ 44.173029][ T1070] netlink: 32 bytes leftover after parsing attributes in process `syz.2.257'. [ 44.185491][ T23] audit: type=1326 audit(1719986209.450:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f402e375b99 code=0x7ffc0000 [ 44.196536][ T1007] F2FS-fs (loop4): invalid crc value [ 44.209172][ T23] audit: type=1326 audit(1719986209.450:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1066 comm="syz.3.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f402e375b99 code=0x7ffc0000 [ 44.328988][ T1079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1079 comm=syz.3.261 [ 44.391601][ T1078] EXT4-fs (loop0): Ignoring removed orlov option [ 44.397769][ T1078] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 44.473546][ T1078] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 44.509692][ T1007] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 44.538961][ T1078] EXT4-fs error (device loop0): ext4_generic_delete_entry:2620: inode #2: block 16: comm syz.0.262: bad entry in directory: rec_len is too small for name_len - offset=44, inode=12, rec_len=16, size=1024 fake=0 [ 44.559922][ T1078] EXT4-fs error (device loop0) in ext4_delete_entry:2679: Corrupt filesystem [ 44.642907][ T1089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 44.651896][ T1089] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 44.661211][ T1089] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 44.742565][ T1086] netlink: 277 bytes leftover after parsing attributes in process `syz.1.264'. [ 45.101199][ T591] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 45.114965][ T1105] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 45.125625][ T1105] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 45.142632][ T1105] F2FS-fs (loop2): invalid crc value [ 45.149862][ T1105] F2FS-fs (loop2): Found nat_bits in checkpoint [ 45.185597][ T1105] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 45.192546][ T1105] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 45.438449][ T1126] EXT4-fs (loop1): Ignoring removed orlov option [ 45.458391][ T1126] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 45.465755][ T591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 45.489712][ T591] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 45.501517][ T591] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.514937][ T591] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.524423][ T1131] fuse: Bad value for 'fd' [ 45.524902][ T591] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.538247][ T1126] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 45.571822][ T591] usb 1-1: config 0 descriptor?? [ 45.581892][ T1126] EXT4-fs error (device loop1): ext4_generic_delete_entry:2620: inode #2: block 16: comm syz.1.276: bad entry in directory: rec_len is too small for name_len - offset=44, inode=12, rec_len=16, size=1024 fake=0 [ 45.602214][ T1103] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 45.609234][ T1126] EXT4-fs error (device loop1) in ext4_delete_entry:2679: Corrupt filesystem [ 46.035642][ T805] attempt to access beyond end of device [ 46.035642][ T805] loop2: rw=2049, want=45104, limit=40427 [ 46.367316][ T1147] netlink: 32 bytes leftover after parsing attributes in process `syz.1.281'. [ 46.382874][ T591] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 46.390273][ T591] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 46.397520][ T591] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 46.404776][ T591] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 46.412017][ T591] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 46.419258][ T591] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 46.434020][ T591] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 46.448436][ T591] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 46.462788][ T591] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 46.466064][ T1149] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 46.491284][ T1149] ext4 filesystem being mounted at /39/bus supports timestamps until 2038 (0x7fffffff) [ 46.530950][ T591] hid (null): unknown global tag 0xe [ 46.539242][ T591] hid-generic 0000:0000:0000.0007: unknown main item tag 0xd [ 46.563824][ T591] hid-generic 0000:0000:0000.0007: unknown main item tag 0xd [ 46.579727][ T591] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.598400][ T591] hid-generic 0000:0000:0000.0007: unknown main item tag 0x7 [ 46.615535][ T591] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 46.633429][ T591] hid-generic 0000:0000:0000.0007: unknown global tag 0xe [ 46.651253][ T591] hid-generic 0000:0000:0000.0007: item 0 1 1 14 parsing failed [ 46.720739][ T591] hid-generic: probe of 0000:0000:0000.0007 failed with error -22 [ 46.972954][ T1161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 46.983938][ T1161] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 46.993494][ T1161] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 47.246387][ T1157] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 47.264845][ T1157] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 47.278812][ T1157] F2FS-fs (loop3): invalid crc value [ 47.286316][ T1157] F2FS-fs (loop3): Found nat_bits in checkpoint [ 47.355274][ T1157] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 47.362878][ T1157] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 47.391320][ T1157] attempt to access beyond end of device [ 47.391320][ T1157] loop3: rw=2049, want=53368, limit=40427 [ 47.413499][ T1157] attempt to access beyond end of device [ 47.413499][ T1157] loop3: rw=34817, want=79904, limit=40427 [ 47.424993][ T1157] attempt to access beyond end of device [ 47.424993][ T1157] loop3: rw=34817, want=80912, limit=40427 [ 47.441017][ T356] attempt to access beyond end of device [ 47.441017][ T356] loop3: rw=2049, want=45104, limit=40427 [ 47.471168][ T591] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 47.901184][ T591] usb 5-1: Using ep0 maxpacket: 8 [ 48.021243][ T591] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 48.039862][ T23] kauditd_printk_skb: 22 callbacks suppressed [ 48.039876][ T23] audit: type=1400 audit(1719986213.420:226): avc: denied { ioctl } for pid=1181 comm="syz.3.288" path="socket:[18064]" dev="sockfs" ino=18064 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.040211][ T591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.049384][ T1182] Zero length message leads to an empty skb [ 48.101443][ T591] usb 5-1: config 0 descriptor?? [ 48.326532][ T1185] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 48.342568][ T1185] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 48.354246][ T1185] F2FS-fs (loop3): invalid crc value [ 48.361391][ T591] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 48.361598][ T1185] F2FS-fs (loop3): Found nat_bits in checkpoint [ 48.416432][ T1185] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 48.423347][ T1185] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 48.453069][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.459971][ T1197] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.473579][ T1197] device bridge_slave_0 entered promiscuous mode [ 48.483382][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.490212][ T1197] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.507230][ T1197] device bridge_slave_1 entered promiscuous mode [ 48.571283][ T591] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 48.571714][ T5] usb 1-1: USB disconnect, device number 2 [ 48.591595][ T591] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 48.612697][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.619536][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.626717][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.633568][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.646184][ T1205] netlink: 32 bytes leftover after parsing attributes in process `syz.0.297'. [ 48.655129][ T591] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 48.690949][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.698919][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.706323][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.724882][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.733740][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.740683][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.748393][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.756645][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.763508][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.783537][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.791571][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.813635][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.822705][ T377] device bridge_slave_1 left promiscuous mode [ 48.828806][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.837144][ T377] device bridge_slave_0 left promiscuous mode [ 48.844911][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.911392][ T591] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 48.930184][ T591] asix: probe of 5-1:0.0 failed with error -71 [ 48.946132][ T591] usb 5-1: USB disconnect, device number 6 [ 49.041543][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.059404][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.302774][ T1208] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 49.345178][ T1208] ext4 filesystem being mounted at /21/bus supports timestamps until 2038 (0x7fffffff) [ 49.346512][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.393257][ T5] hid (null): unknown global tag 0xe [ 49.414720][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.420056][ T5] hid-generic 0000:0000:0000.0008: unknown main item tag 0xd [ 49.450270][ T5] hid-generic 0000:0000:0000.0008: unknown main item tag 0xd [ 49.482868][ T5] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.491381][ T5] hid-generic 0000:0000:0000.0008: unknown main item tag 0x7 [ 49.498579][ T5] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 49.525777][ T5] hid-generic 0000:0000:0000.0008: unknown global tag 0xe [ 49.533234][ T5] hid-generic 0000:0000:0000.0008: item 0 1 1 14 parsing failed [ 49.541854][ T5] hid-generic: probe of 0000:0000:0000.0008 failed with error -22 [ 49.550141][ T356] attempt to access beyond end of device [ 49.550141][ T356] loop3: rw=2049, want=45104, limit=40427 [ 49.779298][ T1224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 49.788259][ T1224] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 49.798101][ T1224] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 49.902284][ T1221] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 49.911458][ T1221] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 49.928577][ T1221] F2FS-fs (loop1): invalid crc value [ 49.952394][ T1221] F2FS-fs (loop1): Found nat_bits in checkpoint [ 49.998187][ T1221] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 50.005140][ T1221] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 50.201697][ T23] audit: type=1400 audit(1719986215.590:227): avc: denied { getopt } for pid=1220 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.291216][ T5] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 50.329129][ T23] audit: type=1400 audit(1719986215.650:228): avc: denied { create } for pid=1244 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.542127][ T23] audit: type=1400 audit(1719986215.660:229): avc: denied { listen } for pid=1244 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.610846][ T23] audit: type=1400 audit(1719986215.990:230): avc: denied { bind } for pid=1248 comm="syz.4.309" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.631000][ T5] usb 1-1: Using ep0 maxpacket: 32 [ 50.649269][ T23] audit: type=1400 audit(1719986216.020:231): avc: denied { node_bind } for pid=1248 comm="syz.4.309" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 50.761314][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.782689][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.806769][ T5] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 50.822931][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.835950][ T5] usb 1-1: config 0 descriptor?? [ 50.871694][ T5] hub 1-1:0.0: USB hub found [ 50.905180][ T1260] EXT4-fs error (device loop4): __ext4_iget:5217: inode #14: block 1886221359: comm syz.4.314: invalid block [ 50.916852][ T1260] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.314: couldn't read orphan inode 14 (err -117) [ 51.224731][ T5] hub 1-1:0.0: 1 port detected [ 51.229697][ T1260] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,minixdf,auto_da_alloc,nouid32,journal_ioprio=0x0000000000000000,quota,,errors=continue [ 51.253397][ T1260] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038 (0x7fffffff) [ 51.314471][ T23] audit: type=1400 audit(1719986216.700:232): avc: denied { map } for pid=1259 comm="syz.4.314" path="/45/file1/blkio.bfq.io_wait_time_recursive" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.344679][ T1270] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 51.360450][ T1270] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038 (0x7fffffff) [ 51.482168][ T1265] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 51.491161][ T1265] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 51.505831][ T1265] F2FS-fs (loop1): Found nat_bits in checkpoint [ 51.514586][ T23] audit: type=1400 audit(1719986216.900:233): avc: denied { read write } for pid=1278 comm="syz.4.317" name="usbmon0" dev="devtmpfs" ino=9265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.568056][ T23] audit: type=1400 audit(1719986216.900:234): avc: denied { open } for pid=1278 comm="syz.4.317" path="/dev/usbmon0" dev="devtmpfs" ino=9265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.606712][ T1265] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 51.613950][ T23] audit: type=1400 audit(1719986216.920:235): avc: denied { map } for pid=1278 comm="syz.4.317" path="/dev/usbmon0" dev="devtmpfs" ino=9265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.638148][ T1265] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 51.673954][ T1197] attempt to access beyond end of device [ 51.673954][ T1197] loop1: rw=2049, want=45104, limit=40427 [ 51.689706][ T1285] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 51.845055][ T1283] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 51.859458][ T1283] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 51.872174][ T1283] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.872174][ T1283] [ 51.881881][ T1283] EXT4-fs (loop3): Total free blocks count 0 [ 51.887672][ T1283] EXT4-fs (loop3): Free/Dirty block details [ 51.893461][ T5] hub 1-1:0.0: activate --> -90 [ 51.898128][ T1283] EXT4-fs (loop3): free_blocks=39626 [ 51.903968][ T1283] EXT4-fs (loop3): dirty_blocks=4094 [ 51.909106][ T1283] EXT4-fs (loop3): Block reservation details [ 51.914960][ T1283] EXT4-fs (loop3): i_reserved_data_blocks=4094 [ 51.935944][ T1288] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.951246][ T1288] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.964385][ T1288] device bridge_slave_0 entered promiscuous mode [ 51.964944][ T1270] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2045 with error 28 [ 51.983669][ T1270] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.983669][ T1270] [ 51.995426][ T1288] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.002358][ T591] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 52.009717][ T1288] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.017703][ T1288] device bridge_slave_1 entered promiscuous mode [ 52.153535][ T1288] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.160370][ T1288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.167527][ T1288] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.174267][ T1288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.227720][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.241324][ T591] usb 5-1: Using ep0 maxpacket: 8 [ 52.246278][ T405] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.256316][ T405] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.277432][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.285921][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.292790][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.311892][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.321375][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.328206][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.342168][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.352333][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.378502][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.391200][ T591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.403342][ T591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.406714][ T7] device bridge_slave_1 left promiscuous mode [ 52.419322][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.426307][ T591] usb 5-1: New USB device found, idVendor=056a, idProduct=4135, bcdDevice= 0.cc [ 52.435548][ T7] device bridge_slave_0 left promiscuous mode [ 52.435691][ T591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.450339][ T591] usb 5-1: config 0 descriptor?? [ 52.450800][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.541405][ T24] usb 1-1: USB disconnect, device number 3 [ 52.571349][ T5] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 52.578190][ T5] usb 1-1-port1: attempt power cycle [ 52.601336][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.614557][ T1318] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 52.636293][ T1313] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 52.640653][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.642895][ T1318] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038 (0x7fffffff) [ 52.654687][ T1313] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 52.671922][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.692762][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.732754][ T1313] F2FS-fs (loop1): Found nat_bits in checkpoint [ 52.825805][ T1313] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 52.841175][ T1313] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 52.898734][ T1197] attempt to access beyond end of device [ 52.898734][ T1197] loop1: rw=2049, want=45104, limit=40427 [ 52.934294][ T591] wacom 0003:056A:4135.0009: Unknown device_type for 'HID 056a:4135'. Ignoring. [ 52.967184][ T1329] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 52.993614][ T1329] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 53.020220][ T1329] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.020220][ T1329] [ 53.030615][ T1329] EXT4-fs (loop3): Total free blocks count 0 [ 53.036630][ T1329] EXT4-fs (loop3): Free/Dirty block details [ 53.042756][ T1329] EXT4-fs (loop3): free_blocks=39626 [ 53.047881][ T1329] EXT4-fs (loop3): dirty_blocks=4094 [ 53.053360][ T1329] EXT4-fs (loop3): Block reservation details [ 53.059186][ T1329] EXT4-fs (loop3): i_reserved_data_blocks=4094 [ 53.155127][ T24] usb 5-1: USB disconnect, device number 7 [ 53.191347][ T1318] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2045 with error 28 [ 53.205022][ T1318] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.205022][ T1318] [ 53.463437][ T1343] EXT4-fs error (device loop0): __ext4_iget:5217: inode #14: block 1886221359: comm syz.0.339: invalid block [ 53.501184][ T1343] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.339: couldn't read orphan inode 14 (err -117) [ 53.531332][ T1343] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,minixdf,auto_da_alloc,nouid32,journal_ioprio=0x0000000000000000,quota,,errors=continue [ 53.561386][ T1343] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038 (0x7fffffff) [ 53.657111][ T1352] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 53.694346][ T1352] ext4 filesystem being mounted at /8/bus supports timestamps until 2038 (0x7fffffff) [ 53.708665][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.739241][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.761197][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.782140][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.789860][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.797498][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.804741][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.821570][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.833671][ T23] kauditd_printk_skb: 6 callbacks suppressed [ 53.833682][ T23] audit: type=1400 audit(1719986219.220:242): avc: denied { unmount } for pid=355 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 53.869593][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.877350][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.891457][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.909078][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.921490][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.928806][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.951167][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.958379][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.979695][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.986935][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.994375][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 54.011233][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 54.018908][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 54.026623][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 54.034771][ T24] hid-generic 0000:0000:0000.000A: collection stack underflow [ 54.042421][ T24] hid-generic 0000:0000:0000.000A: item 0 0 0 12 parsing failed [ 54.050215][ T24] hid-generic: probe of 0000:0000:0000.000A failed with error -22 [ 54.132018][ T1362] xt_TCPMSS: Only works on TCP SYN packets [ 54.239065][ T23] audit: type=1400 audit(1719986219.620:243): avc: denied { setcheckreqprot } for pid=1371 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 54.422287][ T23] audit: type=1400 audit(1719986219.740:244): avc: denied { create } for pid=1367 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.499373][ T23] audit: type=1400 audit(1719986219.740:245): avc: denied { getopt } for pid=1367 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.595317][ T1370] EXT4-fs (loop3): 1 orphan inode deleted [ 54.600878][ T1370] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 54.641194][ T405] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 54.659738][ T1370] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038 (0x7fffffff) [ 55.134015][ T405] usb 5-1: Using ep0 maxpacket: 32 [ 55.202401][ T23] audit: type=1400 audit(1719986220.590:246): avc: denied { create } for pid=1393 comm="syz.0.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.261257][ T405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.282505][ T405] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.294064][ T1391] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 55.321263][ T1391] ext4 filesystem being mounted at /14/bus supports timestamps until 2038 (0x7fffffff) [ 55.330823][ T405] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 55.349848][ T405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.376300][ T405] usb 5-1: config 0 descriptor?? [ 55.431843][ T405] hub 5-1:0.0: USB hub found [ 55.651560][ T405] hub 5-1:0.0: 1 port detected [ 55.809958][ T1409] xt_TCPMSS: Only works on TCP SYN packets [ 55.942657][ T1415] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=continue,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue [ 55.988870][ T1415] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038 (0x7fffffff) [ 56.100876][ T1423] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.113390][ T1423] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.121192][ T1423] device bridge_slave_0 entered promiscuous mode [ 56.130470][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.137459][ T1423] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.145238][ T1423] device bridge_slave_1 entered promiscuous mode [ 56.221973][ T23] audit: type=1400 audit(1719986221.610:247): avc: denied { write } for pid=1423 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.255293][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.262170][ T1423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.269295][ T1423] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.276076][ T1423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.283686][ T23] audit: type=1400 audit(1719986221.630:248): avc: denied { read } for pid=1423 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 56.321738][ T405] hub 5-1:0.0: activate --> -90 [ 56.326688][ T1415] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 56.341037][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.348890][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.358119][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.359458][ T1415] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 56.379107][ T1415] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.379107][ T1415] [ 56.388459][ T1422] F2FS-fs (loop2): Found nat_bits in checkpoint [ 56.388896][ T1415] EXT4-fs (loop3): Total free blocks count 0 [ 56.398713][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.408454][ T1415] EXT4-fs (loop3): Free/Dirty block details [ 56.411863][ T594] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.414467][ T1415] EXT4-fs (loop3): free_blocks=39626 [ 56.421032][ T594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.426767][ T1415] EXT4-fs (loop3): dirty_blocks=4094 [ 56.438998][ T1415] EXT4-fs (loop3): Block reservation details [ 56.445576][ T1415] EXT4-fs (loop3): i_reserved_data_blocks=4094 [ 56.473021][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.481553][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.488401][ T358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.496625][ T1422] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 56.504345][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.518318][ T1429] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2045 with error 28 [ 56.530106][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.532035][ T1429] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.532035][ T1429] [ 56.548648][ T1422] F2FS-fs (loop2): Unexpected flush for atomic writes: ino=10, npages=1 [ 56.568533][ T1288] attempt to access beyond end of device [ 56.568533][ T1288] loop2: rw=2049, want=45104, limit=40427 [ 56.580377][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.611395][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.624265][ T674] device bridge_slave_1 left promiscuous mode [ 56.632313][ T674] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.639945][ T674] device bridge_slave_0 left promiscuous mode [ 56.653190][ T674] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.782416][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.801490][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.809856][ T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.847715][ T23] audit: type=1400 audit(1719986222.230:249): avc: denied { mount } for pid=1423 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 56.967822][ T23] audit: type=1400 audit(1719986222.350:250): avc: denied { mount } for pid=1449 comm="syz.2.366" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 57.001941][ T405] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 57.009423][ T121] usb 5-1: USB disconnect, device number 8 [ 57.021049][ T405] usb 5-1-port1: attempt power cycle [ 57.028492][ T23] audit: type=1400 audit(1719986222.390:251): avc: denied { unmount } for pid=1288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 57.508297][ T1486] kvm: emulating exchange as write [ 57.752622][ T1514] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 57.766788][ T1514] ext4 filesystem being mounted at /95/bus supports timestamps until 2038 (0x7fffffff) [ 58.091352][ T358] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 58.253023][ T1537] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 58.267757][ T1537] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 58.280391][ T1537] F2FS-fs (loop0): invalid crc value [ 58.287560][ T1537] F2FS-fs (loop0): Found nat_bits in checkpoint [ 58.341187][ T358] usb 3-1: Using ep0 maxpacket: 32 [ 58.402019][ T1537] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 58.408946][ T1537] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 58.461269][ T358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.478490][ T358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.496277][ T358] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 58.512445][ T358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.547735][ T358] usb 3-1: config 0 descriptor?? [ 58.566324][ T1566] APIC base relocation is unsupported by KVM [ 58.591818][ T358] hub 3-1:0.0: USB hub found [ 58.743656][ T1569] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 58.770912][ T1569] ext4 filesystem being mounted at /10/bus supports timestamps until 2038 (0x7fffffff) [ 58.811229][ T358] hub 3-1:0.0: 1 port detected [ 58.901342][ T23] kauditd_printk_skb: 12 callbacks suppressed [ 58.901352][ T23] audit: type=1400 audit(1719986224.290:264): avc: denied { connect } for pid=1574 comm="syz.1.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.008979][ T23] audit: type=1400 audit(1719986224.290:265): avc: denied { ioctl } for pid=1574 comm="syz.1.417" path="socket:[22836]" dev="sockfs" ino=22836 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.036299][ T23] audit: type=1400 audit(1719986224.420:266): avc: denied { accept } for pid=1535 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.404311][ T750] attempt to access beyond end of device [ 59.404311][ T750] loop0: rw=2049, want=45104, limit=40427 [ 59.516226][ T1586] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 59.516226][ T1586] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 59.516226][ T1586] [ 59.542475][ T1586] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.551999][ T1586] EXT4-fs (loop1): fragment/cluster size (1024) != block size (4096) [ 59.571296][ T358] hub 3-1:0.0: activate --> -90 [ 59.649073][ T1592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 59.746423][ T23] audit: type=1400 audit(1719986225.130:267): avc: denied { accept } for pid=1597 comm="syz.3.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 59.857741][ T1610] xt_l2tp: unknown flags: 10 [ 60.061265][ T722] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 60.088852][ T1614] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 60.108457][ T1614] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 60.120594][ T1614] F2FS-fs (loop0): invalid crc value [ 60.129081][ T1614] F2FS-fs (loop0): Found nat_bits in checkpoint [ 60.189401][ T1614] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 60.196341][ T1614] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 60.230363][ T121] usb 3-1: USB disconnect, device number 5 [ 60.241303][ T358] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 60.251526][ T358] usb 3-1-port1: attempt power cycle [ 60.451147][ T18] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 60.581281][ T722] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1071, bcdDevice=6e.9b [ 60.590343][ T722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.622153][ T722] usb 4-1: Product: syz [ 60.626142][ T722] usb 4-1: Manufacturer: syz [ 60.630562][ T722] usb 4-1: SerialNumber: syz [ 60.641495][ T722] usb 4-1: config 0 descriptor?? [ 60.915921][ T722] cdc_mbim 4-1:0.0: bind() failure [ 60.961938][ T1640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.982403][ T18] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.001189][ T18] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.014058][ T18] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.024173][ T18] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.055674][ T750] attempt to access beyond end of device [ 61.055674][ T750] loop0: rw=2049, want=45104, limit=40427 [ 61.067067][ T18] usb 2-1: config 0 descriptor?? [ 61.219241][ T1651] netlink: 44 bytes leftover after parsing attributes in process `syz.2.443'. [ 61.562346][ T18] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 61.571710][ T18] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 61.581055][ T18] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 61.608665][ T1666] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 61.627713][ T1673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.321379][ T594] usb 2-1: USB disconnect, device number 5 [ 62.746929][ T358] usb 4-1: USB disconnect, device number 5 [ 62.905270][ T1710] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 63.379123][ T1729] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 63.379123][ T1729] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 63.379123][ T1729] [ 63.409418][ T1729] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.419525][ T1729] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) [ 63.878682][ T1751] 9pnet: p9_fd_create_unix (1751): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 64.486885][ T1755] TCP: tcp_parse_options: Illegal window scaling value 250 > 14 received [ 64.931224][ T5] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 65.135297][ T1798] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,noblock_validity,nodelalloc,errors=remount-ro,min_batch_time=0x0000000000000076,delalloc,delalloc,auto_da_alloc=0x0000000000000003,errors=remount-ro, [ 65.158938][ T23] audit: type=1400 audit(1719986230.540:268): avc: denied { setattr } for pid=1797 comm="syz.1.490" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.166530][ T1798] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.490: bg 0: block 161: padding at end of block bitmap is not set [ 65.194920][ T1798] EXT4-fs (loop1): Remounting filesystem read-only [ 65.201186][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 65.201528][ T1798] EXT4-fs error (device loop1) in ext4_evict_inode:276: Readonly filesystem [ 65.280378][ T1804] TCP: tcp_parse_options: Illegal window scaling value 250 > 14 received [ 65.321270][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.334097][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.344080][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 65.356893][ T124] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 65.365017][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 65.374262][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.383386][ T5] usb 1-1: config 0 descriptor?? [ 65.541854][ T1812] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 65.549395][ T1812] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 65.588901][ T1812] F2FS-fs (loop1): Found nat_bits in checkpoint [ 65.689871][ T1812] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 65.696811][ T1812] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 65.701205][ T124] usb 5-1: Using ep0 maxpacket: 16 [ 65.797983][ T23] audit: type=1400 audit(1719986231.180:269): avc: denied { getopt } for pid=1818 comm="syz.3.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 65.851375][ T124] usb 5-1: config 0 has no interfaces? [ 65.856861][ T124] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 65.920142][ T5] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 65.941470][ T124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.963406][ T5] microsoft 0003:045E:07DA.000C: item 0 0 0 9 parsing failed [ 65.976274][ T124] usb 5-1: config 0 descriptor?? [ 65.981595][ T5] microsoft 0003:045E:07DA.000C: parse failed [ 65.987626][ T5] microsoft: probe of 0003:045E:07DA.000C failed with error -22 [ 66.025456][ T23] audit: type=1400 audit(1719986231.410:270): avc: denied { read } for pid=1827 comm="syz.2.501" name="msr" dev="devtmpfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.049723][ T23] audit: type=1400 audit(1719986231.410:271): avc: denied { open } for pid=1827 comm="syz.2.501" path="/dev/cpu/0/msr" dev="devtmpfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.073763][ T23] audit: type=1400 audit(1719986231.410:272): avc: denied { write } for pid=1827 comm="syz.2.501" name="msr" dev="devtmpfs" ino=1137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 66.103863][ T594] usb 1-1: USB disconnect, device number 8 [ 66.176077][ T1832] TCP: tcp_parse_options: Illegal window scaling value 250 > 14 received [ 66.223427][ T1794] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 66.235890][ T1834] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.239512][ T124] usb 5-1: USB disconnect, device number 13 [ 66.244314][ T1834] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.378107][ T1848] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 66.384456][ T1851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.510'. [ 66.415389][ T1848] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,usrjquota=,errors=remount-ro,norecovery,bsddf,nomblk_io_submit,grpquota,barrier=0xfffffffffffffffe,user_xattr,jqfmt=vfsold, [ 66.445173][ T1857] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 66.455110][ T1857] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 66.474689][ T1859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.513'. [ 66.483391][ T1859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 66.492213][ T1859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 66.520242][ T1848] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #15: block 1803188595: comm syz.2.509: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 66.521580][ T1861] TCP: tcp_parse_options: Illegal window scaling value 250 > 14 received [ 66.535971][ T1848] EXT4-fs (loop2): Remounting filesystem read-only [ 66.581139][ T1863] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.604000][ T1863] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.688662][ T1866] EXT4-fs (loop3): Ignoring removed nobh option [ 66.699805][ T1866] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 66.848561][ T1880] FAT-fs (loop2): Directory bread(block 64) failed [ 66.856270][ T1880] FAT-fs (loop2): Directory bread(block 65) failed [ 66.870219][ T1880] FAT-fs (loop2): Directory bread(block 66) failed [ 66.880536][ T1880] FAT-fs (loop2): Directory bread(block 67) failed [ 66.891656][ T1878] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 66.905248][ T1878] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 66.924479][ T1888] cgroup1: none used incorrectly [ 66.929347][ T1880] FAT-fs (loop2): Directory bread(block 68) failed [ 66.937511][ T1880] FAT-fs (loop2): Directory bread(block 69) failed [ 66.946643][ T1880] FAT-fs (loop2): Directory bread(block 70) failed [ 66.953255][ T1880] FAT-fs (loop2): Directory bread(block 71) failed [ 66.960189][ T1880] FAT-fs (loop2): Directory bread(block 72) failed [ 66.967263][ T1880] FAT-fs (loop2): Directory bread(block 73) failed [ 66.973816][ T1878] F2FS-fs (loop0): Found nat_bits in checkpoint [ 67.055255][ T1878] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 67.090623][ T1894] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 67.090919][ T1889] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.105806][ T1889] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.113898][ T1878] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 67.120814][ T1878] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 67.122200][ T1889] device bridge_slave_0 entered promiscuous mode [ 67.142780][ T1894] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,usrjquota=,errors=remount-ro,norecovery,bsddf,nomblk_io_submit,grpquota,barrier=0xfffffffffffffffe,user_xattr,jqfmt=vfsold, [ 67.149679][ T1889] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.169001][ T1889] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.177169][ T23] audit: type=1400 audit(1719986232.560:273): avc: denied { mounton } for pid=1875 comm="syz.0.521" path="/74/bus/bus" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.185823][ T1889] device bridge_slave_1 entered promiscuous mode [ 67.235820][ T23] audit: type=1400 audit(1719986232.600:274): avc: denied { view } for pid=1875 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 67.243100][ T1894] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #15: block 1803188595: comm syz.4.526: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 67.272192][ T1894] EXT4-fs (loop4): Remounting filesystem read-only [ 67.358556][ T1889] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.365402][ T1889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.372562][ T1889] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.379380][ T1889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.416036][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.424029][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.437250][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.444772][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.453379][ T1907] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 67.461544][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.462817][ T1907] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038 (0x7fffffff) [ 67.470470][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.513379][ T722] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.520261][ T722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.546502][ T23] audit: type=1400 audit(1719986232.930:275): avc: denied { ioctl } for pid=1906 comm="syz.4.529" path="/dev/cpu/0/msr" dev="devtmpfs" ino=1137 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 67.557454][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.601393][ T23] audit: type=1400 audit(1719986232.930:276): avc: denied { link } for pid=1906 comm="syz.4.529" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 67.625648][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.631483][ T594] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 67.635169][ T722] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.647709][ T722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.661499][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.671043][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.679959][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.695189][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.764990][ T1920] device syzkaller0 entered promiscuous mode [ 67.804055][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.813408][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.891983][ T23] audit: type=1400 audit(1719986233.250:277): avc: denied { relabelfrom } for pid=1919 comm="syz.1.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 67.906755][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.920476][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.929738][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.939753][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.948769][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.958525][ T594] usb 3-1: Using ep0 maxpacket: 16 [ 67.965090][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.974049][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.982746][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.056249][ T1935] SELinux: security_context_str_to_sid(Õÿÿÿ) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 68.202264][ T594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.271432][ T594] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.281312][ T594] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 68.293975][ T594] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 68.302881][ T594] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.311758][ T1933] EXT4-fs (loop3): Ignoring removed orlov option [ 68.317915][ T1933] EXT4-fs (loop3): Ignoring removed oldalloc option [ 68.325196][ T594] usb 3-1: config 0 descriptor?? [ 68.330445][ T1933] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.341532][ T1933] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 68.351082][ T1933] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 68.507205][ T1941] EXT4-fs (loop3): Ignoring removed nobh option [ 68.516889][ T1941] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 68.525935][ T1944] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.535522][ T1944] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.618495][ T1937] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 68.626570][ T1937] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 68.645000][ T1937] F2FS-fs (loop4): Found nat_bits in checkpoint [ 68.661555][ T7] device bridge_slave_1 left promiscuous mode [ 68.668902][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.691885][ T7] device bridge_slave_0 left promiscuous mode [ 68.705041][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.761869][ T1937] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 68.787004][ T1937] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 68.792893][ T594] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 68.794005][ T1937] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 68.802661][ T594] microsoft 0003:045E:07DA.000D: item 0 0 0 9 parsing failed [ 68.817458][ T594] microsoft 0003:045E:07DA.000D: parse failed [ 68.840358][ T594] microsoft: probe of 0003:045E:07DA.000D failed with error -22 [ 68.879280][ T1967] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 68.888494][ T1967] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038 (0x7fffffff) [ 68.986710][ T1976] device syzkaller0 entered promiscuous mode [ 69.019632][ T722] usb 3-1: USB disconnect, device number 10 [ 69.220234][ T1989] cgroup1: none used incorrectly [ 69.291892][ T1992] FAT-fs (loop1): Unrecognized mount option "shortnaqe=lower" or missing value [ 69.685465][ T2006] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 69.716474][ T2013] erofs: (device loop1): mounted with opts: , root inode @ nid 36. [ 69.724238][ T2013] SELinux: (dev loop1, type erofs) getxattr errno 117 [ 69.905261][ T2032] cgroup1: none used incorrectly [ 70.403189][ T2053] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 70.686842][ T2084] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,,errors=continue [ 70.752477][ T23] kauditd_printk_skb: 8 callbacks suppressed [ 70.752488][ T23] audit: type=1400 audit(1719986236.140:286): avc: denied { link } for pid=2082 comm="syz.2.585" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.787853][ T2075] F2FS-fs (loop0): Found nat_bits in checkpoint [ 70.790892][ T2095] EXT4-fs (loop1): invalid journal inode [ 70.839229][ T2075] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 70.846748][ T2095] EXT4-fs (loop1): can't get journal size [ 70.884395][ T2095] EXT4-fs (loop1): 1 truncate cleaned up [ 70.894371][ T23] audit: type=1400 audit(1719986236.280:287): avc: denied { mounton } for pid=2101 comm="syz.3.590" path="/10/file0" dev="tmpfs" ino=26490 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 70.896885][ T2095] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 70.961337][ T2095] EXT4-fs warning (device loop1): ext4_group_add:1704: No reserved GDT blocks, can't resize [ 71.410321][ T2116] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 71.419759][ T2116] EXT4-fs (loop0): orphan cleanup on readonly fs [ 71.427160][ T2116] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz.0.591: bg 0: block 248: padding at end of block bitmap is not set [ 71.441568][ T2116] Quota error (device loop0): write_blk: dquota write failed [ 71.448816][ T2116] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 71.459685][ T2116] EXT4-fs (loop0): 1 truncate cleaned up [ 71.465569][ T2116] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,grpquota,quota,noblock_validity,nodiscard,nomblk_io_submit,,errors=continue [ 72.078675][ T2129] F2FS-fs (loop0): invalid crc value [ 72.100894][ T2144] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 72.122081][ T2144] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 72.130491][ T2129] F2FS-fs (loop0): Found nat_bits in checkpoint [ 72.183943][ T2129] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 72.200014][ T750] attempt to access beyond end of device [ 72.200014][ T750] loop0: rw=2049, want=45104, limit=40427 [ 72.292012][ T2120] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 72.302220][ T2120] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 72.324949][ T2120] F2FS-fs (loop3): invalid crc value [ 72.378355][ T2120] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.565349][ T2120] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 72.581172][ T2120] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 72.684610][ T23] audit: type=1400 audit(1719986238.070:288): avc: denied { write } for pid=2119 comm="syz.3.597" name="file1" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.753824][ T23] audit: type=1400 audit(1719986238.090:289): avc: denied { add_name } for pid=2119 comm="syz.3.597" name="file3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.774770][ T23] audit: type=1400 audit(1719986238.100:290): avc: denied { remove_name } for pid=2119 comm="syz.3.597" name="file3" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.797463][ T23] audit: type=1400 audit(1719986238.100:291): avc: denied { rename } for pid=2119 comm="syz.3.597" name="file3" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.861150][ T23] audit: type=1400 audit(1719986238.100:292): avc: denied { reparent } for pid=2119 comm="syz.3.597" name="file3" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.889147][ T2168] EXT4-fs (loop0): invalid journal inode [ 72.901716][ T2168] EXT4-fs (loop0): can't get journal size [ 72.918395][ T2168] EXT4-fs (loop0): 1 truncate cleaned up [ 72.924597][ T2168] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 72.954440][ T2168] EXT4-fs warning (device loop0): ext4_group_add:1704: No reserved GDT blocks, can't resize [ 73.251169][ T124] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 73.318670][ T2187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.615'. [ 73.330349][ T2187] [ 73.334895][ T2183] FAT-fs (loop0): Unrecognized mount option "shortnaqe=lower" or missing value [ 73.356111][ T2187] ********************************************************** [ 73.369241][ T2187] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 73.377023][ T2187] ** ** [ 73.384857][ T2187] ** trace_printk() being used. Allocating extra memory. ** [ 73.393143][ T2187] ** ** [ 73.400458][ T2187] ** This means that this is a DEBUG kernel and it is ** [ 73.408006][ T2187] ** unsafe for production use. ** [ 73.415840][ T2187] ** ** [ 73.423264][ T2187] ** If you see this message and you are not debugging ** [ 73.430489][ T2187] ** the kernel, report this immediately to your vendor! ** [ 73.438356][ T2187] ** ** [ 73.447949][ T2187] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 73.447978][ T2193] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.462214][ T2193] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.469760][ T2187] ********************************************************** [ 73.491138][ T124] usb 5-1: Using ep0 maxpacket: 16 [ 73.553277][ T2192] device bridge_slave_1 left promiscuous mode [ 73.559344][ T2192] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.567153][ T2192] device bridge_slave_0 left promiscuous mode [ 73.573217][ T2192] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.597309][ T2191] F2FS-fs (loop3): invalid crc value [ 73.605182][ T2191] F2FS-fs (loop3): Found nat_bits in checkpoint [ 73.645322][ T2191] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 73.745197][ T124] usb 5-1: config 0 has no interfaces? [ 73.750820][ T124] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 73.753023][ T2200] erofs: (device loop0): mounted with opts: , root inode @ nid 36. [ 73.760155][ T124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.767432][ T2200] SELinux: (dev loop0, type erofs) getxattr errno 117 [ 73.805087][ T124] usb 5-1: config 0 descriptor?? [ 73.812159][ T1889] attempt to access beyond end of device [ 73.812159][ T1889] loop3: rw=2049, want=45104, limit=40427 [ 74.021706][ T2204] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 74.043894][ T2204] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.056201][ T2179] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 74.065063][ T2204] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.619: bg 0: block 248: padding at end of block bitmap is not set [ 74.121399][ T2204] Quota error (device loop1): write_blk: dquota write failed [ 74.132942][ T2204] EXT4-fs (loop1): 1 truncate cleaned up [ 74.171569][ T2204] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,grpquota,quota,noblock_validity,nodiscard,nomblk_io_submit,,errors=continue [ 74.183714][ T124] usb 5-1: USB disconnect, device number 14 [ 74.408517][ T2222] EXT4-fs (loop3): invalid journal inode [ 74.441496][ T2222] EXT4-fs (loop3): can't get journal size [ 74.476327][ T2222] EXT4-fs (loop3): 1 truncate cleaned up [ 74.491734][ T2222] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 74.520579][ T2230] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 74.556340][ T2222] EXT4-fs warning (device loop3): ext4_group_add:1704: No reserved GDT blocks, can't resize [ 74.792579][ T2212] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 74.800144][ T2212] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 74.848225][ T2212] F2FS-fs (loop0): invalid crc value [ 75.101202][ T124] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 75.147423][ T2212] F2FS-fs (loop0): Found nat_bits in checkpoint [ 75.229991][ T2212] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 75.237285][ T2212] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 75.351150][ T124] usb 4-1: Using ep0 maxpacket: 16 [ 75.398218][ T2238] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 75.407013][ T2238] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 75.419853][ T2238] F2FS-fs (loop1): Found nat_bits in checkpoint [ 75.458871][ T2238] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 75.465761][ T2238] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 75.473182][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.484761][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.494639][ T124] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 75.507526][ T124] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 75.516586][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.525690][ T124] usb 4-1: config 0 descriptor?? [ 75.530811][ T1423] attempt to access beyond end of device [ 75.530811][ T1423] loop1: rw=524288, want=45072, limit=40427 [ 75.530857][ T1423] attempt to access beyond end of device [ 75.530857][ T1423] loop1: rw=0, want=45072, limit=40427 [ 75.584366][ T7] attempt to access beyond end of device [ 75.584366][ T7] loop1: rw=2049, want=41056, limit=40427 [ 75.679800][ T2271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.639'. [ 75.703564][ T5] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 75.713739][ T2269] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 75.723613][ T2269] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.730406][ T2269] EXT4-fs warning (device loop0): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 75.744952][ T2269] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 75.751846][ T2269] EXT4-fs error (device loop0): ext4_validate_block_bitmap:418: comm syz.0.635: bg 0: block 40: padding at end of block bitmap is not set [ 75.768989][ T23] kauditd_printk_skb: 5 callbacks suppressed [ 75.768998][ T23] audit: type=1400 audit(1719986241.150:297): avc: denied { mount } for pid=2275 comm="syz.2.640" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 75.800131][ T2269] EXT4-fs error (device loop0) in ext4_free_blocks:5019: Corrupt filesystem [ 75.810959][ T2269] EXT4-fs (loop0): 1 truncate cleaned up [ 75.816835][ T2269] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 75.846346][ T23] audit: type=1400 audit(1719986241.230:298): avc: denied { mounton } for pid=2275 comm="syz.2.640" path="/66/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 75.893537][ T2276] EXT4-fs (loop2): Unsupported blocksize for fs encryption [ 75.896933][ T2269] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #16: comm syz.0.635: corrupted xattr block 31 [ 75.912849][ T2269] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 75.922957][ T2269] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #16: comm syz.0.635: corrupted xattr block 31 [ 75.935068][ T2269] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 75.944539][ T2269] EXT4-fs error (device loop0): ext4_xattr_block_get:544: inode #16: comm syz.0.635: corrupted xattr block 31 [ 75.956543][ T2269] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=16 [ 75.965656][ T23] audit: type=1400 audit(1719986241.350:299): avc: denied { read } for pid=2268 comm="syz.0.635" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 76.012972][ T124] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 76.026797][ T124] microsoft 0003:045E:07DA.000E: item 0 0 0 9 parsing failed [ 76.035520][ T124] microsoft 0003:045E:07DA.000E: parse failed [ 76.043167][ T124] microsoft: probe of 0003:045E:07DA.000E failed with error -22 [ 76.081207][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.092068][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.101788][ T5] usb 5-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 76.110623][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.120016][ T5] usb 5-1: config 0 descriptor?? [ 76.126801][ T2281] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.134175][ T2281] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.141722][ T2281] device bridge_slave_0 entered promiscuous mode [ 76.148821][ T2281] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.155752][ T2281] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.163936][ T23] audit: type=1400 audit(1719986241.550:300): avc: denied { unmount } for pid=1288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.164659][ T2281] device bridge_slave_1 entered promiscuous mode [ 76.200118][ T23] audit: type=1400 audit(1719986241.580:301): avc: denied { getopt } for pid=2285 comm="syz.2.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.225222][ T124] usb 4-1: USB disconnect, device number 6 [ 76.284855][ T2290] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 76.293801][ T2281] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.300657][ T2281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.307802][ T2281] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.314662][ T2281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.314974][ T2290] EXT4-fs (loop2): re-mounted. Opts: (null) [ 76.321998][ T23] audit: type=1400 audit(1719986241.700:302): avc: denied { rmdir } for pid=2289 comm="syz.2.645" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.354229][ T23] audit: type=1400 audit(1719986241.700:303): avc: denied { rename } for pid=2289 comm="syz.2.645" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.366334][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.376589][ T23] audit: type=1400 audit(1719986241.700:304): avc: denied { unlink } for pid=2289 comm="syz.2.645" name="file2" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.404927][ T23] audit: type=1400 audit(1719986241.700:305): avc: denied { rename } for pid=2289 comm="syz.2.645" name="file2" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.404975][ T722] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.434254][ T722] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.463039][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.472047][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.478881][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.487282][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.495353][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.502490][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.509642][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.526784][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.546560][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.573138][ T9] device bridge_slave_1 left promiscuous mode [ 76.579123][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.587331][ T9] device bridge_slave_0 left promiscuous mode [ 76.593737][ T5] wacom 0003:056A:0309.000F: unknown main item tag 0x0 [ 76.593743][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.608681][ T2299] request_module fs-btrfs succeeded, but still no fs? [ 76.610208][ T5] wacom 0003:056A:0309.000F: hidraw0: USB HID v0.00 Device [HID 056a:0309] on usb-dummy_hcd.4-1/input0 [ 76.741282][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 76.794903][ T591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.819472][ T591] usb 5-1: USB disconnect, device number 15 [ 76.827318][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.845467][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.869722][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.878634][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.888137][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.896752][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.161722][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.214774][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.227754][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.236663][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.247385][ T24] usb 3-1: config 0 descriptor?? [ 77.255065][ T2309] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 77.263798][ T2309] EXT4-fs (loop1): orphan cleanup on readonly fs [ 77.270480][ T2309] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=2 [ 77.279806][ T2309] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 77.294540][ T2309] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 77.312735][ T2309] EXT4-fs (loop1): 1 truncate cleaned up [ 77.318192][ T2309] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 77.329417][ T2313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.650'. [ 77.341854][ T2309] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2221: inode #15: comm syz.1.651: corrupted in-inode xattr [ 77.365696][ T2313] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.372738][ T2313] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.384211][ T2313] device bridge_slave_1 left promiscuous mode [ 77.390179][ T2313] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.398110][ T2313] device bridge_slave_0 left promiscuous mode [ 77.404093][ T2313] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.524959][ T2323] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 77.533657][ T2323] EXT4-fs (loop4): orphan cleanup on readonly fs [ 77.540348][ T2323] EXT4-fs warning (device loop4): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 77.562069][ T2323] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 77.847578][ T2323] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz.4.656: bg 0: block 40: padding at end of block bitmap is not set [ 77.873671][ T24] plantronics 0003:047F:FFFF.0010: ignoring exceeding usage max [ 77.885070][ T2323] EXT4-fs error (device loop4) in ext4_free_blocks:5019: Corrupt filesystem [ 77.895491][ T2323] EXT4-fs (loop4): 1 truncate cleaned up [ 77.895556][ T24] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 77.900937][ T2323] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 77.919808][ T24] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 77.929054][ T2323] EXT4-fs error (device loop4): ext4_xattr_block_get:544: inode #16: comm syz.4.656: corrupted xattr block 31 [ 77.944149][ T2323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 77.965624][ T2323] EXT4-fs error (device loop4): ext4_xattr_block_get:544: inode #16: comm syz.4.656: corrupted xattr block 31 [ 77.981140][ T2323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 77.991006][ T2323] EXT4-fs error (device loop4): ext4_xattr_block_get:544: inode #16: comm syz.4.656: corrupted xattr block 31 [ 78.002840][ T2323] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 78.072858][ T2346] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 78.094395][ T2346] EXT4-fs (loop3): re-mounted. Opts: (null) [ 78.241245][ T722] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 78.262470][ T2358] bridge0: port 3(gretap0) entered blocking state [ 78.268734][ T2358] bridge0: port 3(gretap0) entered disabled state [ 78.277752][ T2358] device gretap0 entered promiscuous mode [ 78.283761][ T2358] bridge0: port 3(gretap0) entered blocking state [ 78.289979][ T2358] bridge0: port 3(gretap0) entered forwarding state [ 78.303239][ T2358] device gretap0 left promiscuous mode [ 78.309105][ T2358] bridge0: port 3(gretap0) entered disabled state [ 78.734629][ T2365] SELinux: security_context_str_to_sid(Õÿÿÿ) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 78.966050][ T2368] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nojournal_checksum,nombcache,,errors=continue [ 78.978192][ T2368] ext4 filesystem being mounted at /100/bus supports timestamps until 2038 (0x7fffffff) [ 79.027702][ T2368] EXT4-fs error (device loop4): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 93 vs 96 free clusters [ 79.058066][ T381] usb 3-1: USB disconnect, device number 11 [ 79.081347][ T722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.093477][ T722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.114081][ T722] usb 1-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 79.123160][ T722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.132516][ T722] usb 1-1: config 0 descriptor?? [ 79.245961][ T2381] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 79.261587][ T2381] EXT4-fs (loop3): re-mounted. Opts: (null) [ 79.693629][ T722] wacom 0003:056A:0309.0011: unknown main item tag 0x0 [ 79.723867][ T722] wacom 0003:056A:0309.0011: hidraw0: USB HID v0.00 Device [HID 056a:0309] on usb-dummy_hcd.0-1/input0 [ 79.822121][ T2407] bridge0: port 3(gretap0) entered blocking state [ 79.828374][ T2407] bridge0: port 3(gretap0) entered disabled state [ 79.837399][ T2407] device gretap0 entered promiscuous mode [ 79.843518][ T2407] bridge0: port 3(gretap0) entered blocking state [ 79.849735][ T2407] bridge0: port 3(gretap0) entered forwarding state [ 79.877752][ T2407] device gretap0 left promiscuous mode [ 79.883472][ T2407] bridge0: port 3(gretap0) entered disabled state [ 79.993499][ T381] usb 1-1: USB disconnect, device number 9 [ 80.114754][ T2406] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nojournal_checksum,nombcache,,errors=continue [ 80.143925][ T2406] ext4 filesystem being mounted at /6/bus supports timestamps until 2038 (0x7fffffff) [ 80.164024][ T2406] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 93 vs 96 free clusters [ 80.242382][ T2422] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge0 [ 80.297147][ T2419] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 80.310606][ T2419] EXT4-fs (loop3): re-mounted. Opts: (null) [ 80.747032][ T2447] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.758708][ T2447] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 80.903206][ T23] kauditd_printk_skb: 6 callbacks suppressed [ 80.903222][ T23] audit: type=1326 audit(1719986246.290:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2459 comm="syz.0.703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1824f04b99 code=0x0 [ 81.004951][ T23] audit: type=1400 audit(1719986246.390:313): avc: denied { listen } for pid=2459 comm="syz.0.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 81.123564][ T2463] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 81.132446][ T2463] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038 (0x7fffffff) [ 81.152614][ T2444] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 81.160327][ T2444] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 81.211272][ T2474] 9pnet: p9_fd_create_unix (2474): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 81.292645][ T2440] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 81.386585][ T2440] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 81.403025][ T2444] F2FS-fs (loop4): Found nat_bits in checkpoint [ 81.410300][ T2440] F2FS-fs (loop3): Found nat_bits in checkpoint [ 81.477944][ T2444] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 81.484980][ T2444] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 81.485167][ T2440] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 81.499172][ T2440] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 81.603711][ T1889] attempt to access beyond end of device [ 81.603711][ T1889] loop3: rw=524288, want=45072, limit=40427 [ 81.652193][ T1889] attempt to access beyond end of device [ 81.652193][ T1889] loop3: rw=0, want=45072, limit=40427 [ 81.717418][ T7] attempt to access beyond end of device [ 81.717418][ T7] loop3: rw=2049, want=41056, limit=40427 [ 82.409589][ T23] audit: type=1326 audit(1719986247.790:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2514 comm="syz.1.719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd287624b99 code=0x0 [ 82.471160][ T124] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 82.495940][ T2510] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.503322][ T2510] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.511425][ T2510] device bridge_slave_0 entered promiscuous mode [ 82.519687][ T2510] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.526697][ T2510] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.534082][ T2510] device bridge_slave_1 entered promiscuous mode [ 82.609222][ T2522] 9pnet: p9_fd_create_unix (2522): address too long: ./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 82.852205][ T7] device bridge_slave_1 left promiscuous mode [ 82.944835][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.952102][ T7] device bridge_slave_0 left promiscuous mode [ 82.958089][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.058634][ T2510] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.065490][ T2510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.072699][ T2510] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.079521][ T2510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.106389][ T405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.114441][ T405] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.121786][ T124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.134357][ T124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.144211][ T124] usb 3-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 83.153152][ T124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.161646][ T405] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.168929][ T124] usb 3-1: config 0 descriptor?? [ 83.191252][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.200517][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.210234][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.217105][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.247483][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.256125][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.264438][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.271298][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.279070][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.287433][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.295508][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.317570][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.359702][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.375001][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.400200][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.408081][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.422348][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.430909][ T722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.448409][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.457508][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.473913][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.482652][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.574138][ T2555] FAT-fs (loop0): Directory bread(block 64) failed [ 83.581164][ T2555] FAT-fs (loop0): Directory bread(block 65) failed [ 83.594040][ T2555] FAT-fs (loop0): Directory bread(block 66) failed [ 83.610294][ T2555] FAT-fs (loop0): Directory bread(block 67) failed [ 83.617774][ T23] audit: type=1326 audit(1719986249.000:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2561 comm="syz.3.734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15137beb99 code=0x0 [ 83.640781][ T2555] FAT-fs (loop0): Directory bread(block 68) failed [ 83.647579][ T2555] FAT-fs (loop0): Directory bread(block 69) failed [ 83.656535][ T2555] FAT-fs (loop0): Directory bread(block 70) failed [ 83.667760][ T124] wacom 0003:056A:0309.0012: unknown main item tag 0x0 [ 83.677404][ T2555] FAT-fs (loop0): Directory bread(block 71) failed [ 83.685326][ T2555] FAT-fs (loop0): Directory bread(block 72) failed [ 83.694593][ T124] wacom 0003:056A:0309.0012: hidraw0: USB HID v0.00 Device [HID 056a:0309] on usb-dummy_hcd.2-1/input0 [ 83.705599][ T2555] FAT-fs (loop0): Directory bread(block 73) failed [ 83.782961][ T2566] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 83.792148][ T2566] EXT4-fs (loop1): orphan cleanup on readonly fs [ 83.798596][ T2566] EXT4-fs warning (device loop1): ext4_enable_quotas:6100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 83.814040][ T2550] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 83.817166][ T2566] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 83.826278][ T2550] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 83.827898][ T2566] EXT4-fs error (device loop1): ext4_validate_block_bitmap:418: comm syz.1.736: bg 0: block 40: padding at end of block bitmap is not set [ 83.842383][ T2550] F2FS-fs (loop4): Found nat_bits in checkpoint [ 83.859202][ T2566] EXT4-fs error (device loop1) in ext4_free_blocks:5019: Corrupt filesystem [ 83.883781][ T124] usb 3-1: USB disconnect, device number 12 [ 83.902028][ T2566] EXT4-fs (loop1): 1 truncate cleaned up [ 83.908154][ T2566] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 83.939548][ T2550] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 83.947759][ T2550] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 83.955103][ T2566] EXT4-fs error (device loop1): ext4_xattr_block_get:544: inode #16: comm syz.1.736: corrupted xattr block 31 [ 83.968841][ T2566] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 83.981669][ T2566] EXT4-fs error (device loop1): ext4_xattr_block_get:544: inode #16: comm syz.1.736: corrupted xattr block 31 [ 83.994007][ T2566] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 83.998971][ T355] attempt to access beyond end of device [ 83.998971][ T355] loop4: rw=524288, want=45072, limit=40427 [ 84.004387][ T2566] EXT4-fs error (device loop1): ext4_xattr_block_get:544: inode #16: comm syz.1.736: corrupted xattr block 31 [ 84.014537][ T355] attempt to access beyond end of device [ 84.014537][ T355] loop4: rw=0, want=45072, limit=40427 [ 84.040272][ T2566] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 84.082974][ T7] attempt to access beyond end of device [ 84.082974][ T7] loop4: rw=2049, want=41056, limit=40427 [ 84.438064][ T2597] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.445379][ T2597] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.453255][ T2597] device bridge_slave_0 entered promiscuous mode [ 84.460012][ T2597] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.466883][ T2597] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.474420][ T2597] device bridge_slave_1 entered promiscuous mode [ 84.574481][ T2597] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.581357][ T2597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.588476][ T2597] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.595238][ T2597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.654050][ T2604] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nojournal_checksum,nombcache,,errors=continue [ 84.666462][ T2604] ext4 filesystem being mounted at /123/bus supports timestamps until 2038 (0x7fffffff) [ 84.692045][ T594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.700814][ T594] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.708528][ T2604] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 93 vs 96 free clusters [ 84.722505][ T594] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.758619][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.766905][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.773758][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.786514][ T381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.795439][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.802486][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.859405][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.870124][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.900518][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.912169][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.927109][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.943480][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.956827][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.012384][ T2609] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 85.022047][ T2609] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 85.035619][ T2628] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 85.048964][ T2609] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.079780][ T2637] FAT-fs (loop4): Directory bread(block 64) failed [ 85.107413][ T2637] FAT-fs (loop4): Directory bread(block 65) failed [ 85.117718][ T750] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 85.133873][ T2637] FAT-fs (loop4): Directory bread(block 66) failed [ 85.140188][ T2637] FAT-fs (loop4): Directory bread(block 67) failed [ 85.147795][ T750] EXT4-fs error (device loop0): __ext4_iget:5217: inode #13: block 127754: comm syz-executor: invalid block [ 85.159909][ T2637] FAT-fs (loop4): Directory bread(block 68) failed [ 85.166870][ T750] EXT4-fs error (device loop0): __ext4_iget:5217: inode #13: block 127754: comm syz-executor: invalid block [ 85.171161][ T405] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 85.178509][ T2637] FAT-fs (loop4): Directory bread(block 69) failed [ 85.192189][ T2609] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 85.195711][ T2637] FAT-fs (loop4): Directory bread(block 70) failed [ 85.205756][ T2609] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 85.206042][ T2637] FAT-fs (loop4): Directory bread(block 71) failed [ 85.223131][ T2637] FAT-fs (loop4): Directory bread(block 72) failed [ 85.231242][ T2637] FAT-fs (loop4): Directory bread(block 73) failed [ 85.243257][ T23] audit: type=1400 audit(1719986250.630:316): avc: denied { write } for pid=2608 comm="syz.3.751" name="urandom" dev="devtmpfs" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 85.278577][ T2636] ------------[ cut here ]------------ [ 85.283945][ T2636] kernel BUG at fs/buffer.c:3027! [ 85.321318][ T2636] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 85.327210][ T2636] CPU: 0 PID: 2636 Comm: kmmpd-loop0 Not tainted 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 85.337878][ T2636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 85.347802][ T2636] RIP: 0010:submit_bh_wbc+0x831/0x850 [ 85.352994][ T2636] Code: 10 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 48 8b 7c 24 10 e8 00 8d ea ff e9 05 fe ff ff e8 e6 a7 ba ff 0f 0b e8 df a7 ba ff <0f> 0b e8 d8 a7 ba ff 0f 0b e8 d1 a7 ba ff 0f 0b e8 ca a7 ba ff 0f [ 85.372622][ T2636] RSP: 0018:ffff8881e78b7bf0 EFLAGS: 00010293 [ 85.378524][ T2636] RAX: ffffffff81a99121 RBX: 0000000000000000 RCX: ffff8881e10c4ec0 [ 85.386332][ T2636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.394144][ T2636] RBP: 0000000000003800 R08: ffffffff81a98994 R09: ffffed103b1c8494 [ 85.402046][ T2636] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 85.409855][ T2636] R13: ffff8881d8e42498 R14: 0000000000000001 R15: 0000000000000000 [ 85.417669][ T2636] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 85.426436][ T2636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.432855][ T2636] CR2: 0000001b2e61fffc CR3: 00000001f2ad5000 CR4: 00000000003406b0 [ 85.440668][ T2636] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.448476][ T2636] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.456281][ T2636] Call Trace: [ 85.459422][ T2636] ? __die+0xb4/0x100 [ 85.463241][ T2636] ? die+0x26/0x50 [ 85.466794][ T2636] ? do_trap+0x1e7/0x340 [ 85.470879][ T2636] ? submit_bh_wbc+0x831/0x850 [ 85.475480][ T2636] ? submit_bh_wbc+0x831/0x850 [ 85.480072][ T2636] ? do_invalid_op+0xfb/0x110 [ 85.484586][ T2636] ? submit_bh_wbc+0x831/0x850 [ 85.489286][ T2636] ? invalid_op+0x1e/0x30 [ 85.493452][ T2636] ? submit_bh_wbc+0xa4/0x850 [ 85.497951][ T2636] ? submit_bh_wbc+0x831/0x850 [ 85.502559][ T2636] ? submit_bh_wbc+0x831/0x850 [ 85.507153][ T2636] ? debug_smp_processor_id+0x20/0x20 [ 85.512384][ T2636] submit_bh+0x21/0x30 [ 85.516270][ T2636] write_mmp_block+0x3ff/0x5b0 [ 85.520870][ T2636] ? console_conditional_schedule+0x10/0x10 [ 85.526598][ T2636] ? check_preemption_disabled+0x9f/0x320 [ 85.532154][ T2636] ? read_mmp_block+0x8a0/0x8a0 [ 85.536840][ T2636] kmmpd+0x7de/0xa10 [ 85.540575][ T2636] ? write_mmp_block+0x5b0/0x5b0 [ 85.545342][ T2636] ? __wake_up_locked+0xb7/0x110 [ 85.550118][ T2636] ? __kthread_parkme+0xb0/0x1b0 [ 85.554889][ T2636] kthread+0x2da/0x360 [ 85.558794][ T2636] ? write_mmp_block+0x5b0/0x5b0 [ 85.563568][ T2636] ? kthread_blkcg+0xd0/0xd0 [ 85.567993][ T2636] ret_from_fork+0x1f/0x30 [ 85.572244][ T2636] Modules linked in: [ 85.587078][ T2636] ---[ end trace 8b7664ca426ef090 ]--- [ 85.592634][ T2636] RIP: 0010:submit_bh_wbc+0x831/0x850 [ 85.600544][ T2636] Code: 10 80 e1 07 80 c1 03 38 c1 0f 8c 14 fe ff ff 48 8b 7c 24 10 e8 00 8d ea ff e9 05 fe ff ff e8 e6 a7 ba ff 0f 0b e8 df a7 ba ff <0f> 0b e8 d8 a7 ba ff 0f 0b e8 d1 a7 ba ff 0f 0b e8 ca a7 ba ff 0f [ 85.620515][ T2510] attempt to access beyond end of device [ 85.620515][ T2510] loop3: rw=2049, want=45112, limit=40427 [ 85.628295][ T2636] RSP: 0018:ffff8881e78b7bf0 EFLAGS: 00010293 [ 85.638656][ T2636] RAX: ffffffff81a99121 RBX: 0000000000000000 RCX: ffff8881e10c4ec0 [ 85.649292][ T2636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 85.657713][ T2636] RBP: 0000000000003800 R08: ffffffff81a98994 R09: ffffed103b1c8494 [ 85.665817][ T2636] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 85.673632][ T2636] R13: ffff8881d8e42498 R14: 0000000000000001 R15: 0000000000000000 [ 85.681824][ T2636] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 85.690566][ T2636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.697040][ T2636] CR2: 0000000020001000 CR3: 00000001e2d43000 CR4: 00000000003406a0 [ 85.704820][ T2636] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.713480][ T2636] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.721300][ T2636] Kernel panic - not syncing: Fatal exception [ 85.727449][ T2636] Kernel Offset: disabled [ 85.731573][ T2636] Rebooting in 86400 seconds..