last executing test programs: 19.399338944s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$incfs(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r6, @ANYRESDEC=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000180)={0x50, 0x0, r7}, 0x50) mount$incfs(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 18.486961175s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180900002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) eventfd2(0x0, 0x0) 18.479157917s ago: executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b708000000000000739af8ff00000000b5090500000000007baaf08200000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18.472365878s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000040), &(0x7f0000000300)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r4}, 0x10) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 18.451491491s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000280)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f00000003c0), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 18.421815395s ago: executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4204, r1, 0x2, &(0x7f0000000000)) 12.963983441s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=@framed={{}, [@map_idx_val, @tail_call, @printk={@ld}, @initr0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ext4_es_insert_delayed_block\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r1, &(0x7f0000000980), 0x12) 12.946509834s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='ext4_mark_inode_dirty\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='ext4_mark_inode_dirty\x00', r2}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 12.932497196s ago: executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @multicast1}, &(0x7f00000000c0)=0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x7}}]}, {0x0, [0x61, 0x30, 0x2e, 0x61, 0x2e]}}, &(0x7f0000000140)=""/81, 0x37, 0x51}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7a8, '\x00', r0, r1, 0x2, 0x3, 0x2}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0xfea0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r3}) 12.922132687s ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00'}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000000000001000040"]) r3 = dup(r2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000580)={0xbe, 0x0, 0x1}) 12.664683857s ago: executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f010000000000000000000905810320000000000905820208000000000905"], 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r4, 0x5403, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) 9.434986438s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x846512678b3a18b2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001900)={'veth1_vlan\x00', @local}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r3, &(0x7f00000000c0)=""/29, 0x1d) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x301}, 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r5, 0x4b4c, &(0x7f00000000c0)={0xc7b, 0x0, 0x0, 0x0, 0x0, "99ea94b5360f4a5ece030668900f9e0d81d19c"}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYBLOB="eecaa77c375902e05babc063c7a750c596c5c46860af6c1c573251082004151b3d20e00a60ae8e6c7a8cf511c792fe6435cd5c0479ccf9fd24d5d4dc7399ad917c0d14dddd083650949cbb1737356975d4c042e8450d771a0e56ad66fcd5a2c12c0e8fcca8bef392bc187b4fb1fc130d1da56142bf2c4e72de89d3f945ac16b63021bc23d1e692c4226fb4195dc572e1b8b0d016eb0835a0639509f0630030c252bc13035cdd56baba29e8f7317ab2d624ceec761aff4270a4114046b21a39c24b0a58439aaa10fb2ec70605dbef65e1922b7d992aef26104ef1a9509ef0939f73cae7e8ef00", @ANYRES8=r0, @ANYRES32=r2], 0x0, 0x26, 0x0, 0x1, 0x198}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r7 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) socket(0x1c, 0x800, 0x40000009) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000180), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000280)='FROZEN\x00', 0x7) 3.069525175s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) 3.039458119s ago: executing program 2: syz_usb_connect$uac1(0x0, 0x9b, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xd, 0x24, 0x7, 0x0, 0x0, 0x0, "28f3203d8005"}, @feature_unit={0x11, 0x24, 0x6, 0x0, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 2.126255431s ago: executing program 4: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x14d35e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) dup3(r1, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r3, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x8, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 2.024670186s ago: executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000005fc0)=ANY=[@ANYBLOB="1c000010e286ecbabc43a20d11ad43a8ea83faac11922b637ea47bf29278baa53bcd067d349caa42c45b769f13a0a2976495afa178bfb4c00dffc023101cdb5455a310820c816e86df2a0ec12ae1a07881d7cf342bdd0235451dba62607e301208be0a6133bd81cf7ed2d0e632500e5bb233266bfdf95fb7bcef10ad74e0f8be87b522cf4d89c733eb362efd3f3b5e6d0a76c537b68e912906e28044fa51a52ffa11fc927104adc4cab6d8a6f51c2328757ab94c19eb8e63e64d7b9616d894526f77d5bf454ebd90eb43b9773b6beb7309090aff90ea3a05a59b1d", @ANYRES16=r2, @ANYBLOB="010000000000000000001b00000008009a00696dc983"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1a0cc10, &(0x7f00000059c0)=ANY=[@ANYBLOB="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", @ANYBLOB="a93e1cbfeea088b9cb059ce91c144fd901b2d208e6ec16e9c0bdf78cda5604babe81021bae593d8bf404d46fe9ae1e8a141739e9717566c21648e8f46b4fc9d9eb0a646a28283f6f61bd31a6a5c909f53dcaf2e8a1914f6cbd8d230587ca11862216e1a7ea1aaca778c2b5eea4e08eeb7bbbfd55e1ba9fbcb378636cca2dcb46a029961a41e272c878b929b276ac2741c8f3b77e7850100e289c3b6edbf5d0377206c0bc212cf6a42ececcd4e98747c0423cc4b304569431e8b347fe68e9083d419f13de6e27d28126d9a4988919"], 0x1, 0x559f, &(0x7f0000000400)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x0, 0x1, 0x0) syz_open_procfs(0x0, 0x0) setrlimit(0x1, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x42400) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1.112657428s ago: executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0xb, &(0x7f0000000000)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5509, &(0x7f00000000c0)={{}, "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"}) 1.105111699s ago: executing program 2: r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 1.093690841s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYRESOCT=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/145}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe2(0x0, 0x0) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) ioctl$ASHMEM_SET_NAME(r7, 0x8008770b, &(0x7f0000000300)='\x00\x00\x00\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) 564.073843ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 530.740468ms ago: executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x26, &(0x7f0000000240)={0x0, 0x0, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0}) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000200)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x1, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5, 0x5c010000}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 524.025409ms ago: executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, @empty, @dev={0xfe, 0x80, '\x00', 0x36}}}) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a20033000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendmsg$inet(r0, &(0x7f0000002d00)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000002bc0)=[{&(0x7f0000000200)="4a15", 0x2}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\twrm'], 0xa) 514.70256ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup(r4) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0xc0}, 0x33fe0}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}}) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) 452.96153ms ago: executing program 3: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="b000000000000000", @ANYRES64=0x0, @ANYBLOB='\x00'/102, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000088be000039dd564720460000000000000099d1ebd8fd4fd5ff"], 0xb0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[0x1, 0x1, 0x1, 0x1, 0x1]}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0), 0x48) 338.805268ms ago: executing program 3: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000005fc0)=ANY=[@ANYBLOB="1c000010e286ecbabc43a20d11ad43a8ea83faac11922b637ea47bf29278baa53bcd067d349caa42c45b769f13a0a2976495afa178bfb4c00dffc023101cdb5455a310820c816e86df2a0ec12ae1a07881d7cf342bdd0235451dba62607e301208be0a6133bd81cf7ed2d0e632500e5bb233266bfdf95fb7bcef10ad74e0f8be87b522cf4d89c733eb362efd3f3b5e6d0a76c537b68e912906e28044fa51a52ffa11fc927104adc4cab6d8a6f51c2328757ab94c19eb8e63e64d7b9616d894526f77d5bf454ebd90eb43b9773b6beb7309090aff90ea3a05a59b1d", @ANYRES16=r2, @ANYBLOB="010000000000000000001b00000008009a00696dc983"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1a0cc10, &(0x7f00000059c0)=ANY=[@ANYBLOB="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", @ANYBLOB="a93e1cbfeea088b9cb059ce91c144fd901b2d208e6ec16e9c0bdf78cda5604babe81021bae593d8bf404d46fe9ae1e8a141739e9717566c21648e8f46b4fc9d9eb0a646a28283f6f61bd31a6a5c909f53dcaf2e8a1914f6cbd8d230587ca11862216e1a7ea1aaca778c2b5eea4e08eeb7bbbfd55e1ba9fbcb378636cca2dcb46a029961a41e272c878b929b276ac2741c8f3b77e7850100e289c3b6edbf5d0377206c0bc212cf6a42ececcd4e98747c0423cc4b304569431e8b347fe68e9083d419f13de6e27d28126d9a4988919"], 0x1, 0x559f, &(0x7f0000000400)="$eJzs3M2LG2UYAPBnkm6/rYt48NaBIuxCE5rtB3qyaosf2FL8OHjSbJKGtElm2aTp2lMPHsWD/4koePLo3+BBj3oTD4o3oZKZWWn6/ZFmtf39YPLMPHnzzPsOYeGZWRLAM2s5/euPJA7FvoioRsTBJPL9pNwirkecLsa+FBGHI6Jy05aU+X8TuyNif0QcmhYvaiblW18dnRw5+fu7f37/455dB77+7qcdXTiwo16OiMFGsX91UMSsm4cb1TLfnPTyODgxKePGTI1BVuSvdtbzCleb2+OaeTzeLcZnG1dG03ix32xNY7d3Mc9vDIsTjibd7TrTD6SXmpv5cbuznsfeKMtj91px3q1rxd+2a6NxUadd1vssLx/j8XYs8p2tTrGejct5bA3HZb6om7U7W9M4KWN5umhl/XY+j/VHvcr/fe/1hle20klnc9TLhunJeuOVeuNUrbGZtTvjzolac9A+dSJd6fanw2rjTnNwuptl3X6n3soGq+lKt9WqNRrpypnOeq85TBuN+vH6sdrJ1XLvaPrW+Y/SfjtdmcY3esMr415/lF7MNtPiE6vpWv34q6vpkUb6wbkL6YX3z549d+HDT858fP71c++8WQ66bVrpytqxtbVa41htrbH6DK3/83LSD7H+5M7pX35+vMsGADyi2/r/uLX/D/0/MHf36P/j0n36/8Hl8vjJ9P9xx/6/Mtv/xzz7/2lLpf+/f/9b2YH+dyn0/w+8/upjfhvgId3lBtN97J77PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWLhfl755O99ZLo4PlPnnytQL5XESEZWIuHEH1dg9U7Na1lm6y/ilW+bwQxJ5hek59pTb/og4XW5/P/+krwIAAAA8vb69fvjLolsvXpZ3ekIsUnHTpnLw0znVSyJiafm3OVWrTF9enFOx/Pu9K7bmVC2/gbV3TsWKW2675lXtgVRnwt6bQlKEykKnAwAALMRsJ7DYLgQAAIBF+uKe7762sHmwYElsP8rcfhac/+d9xL7ygeC+mfcAAACA/6FkpycAAAAAPHF5/+/3/wAAAODpVvz+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMA/7NxdrtJAFADg0/YW/I3E+O5WfINluAQffRQW4CZYAq7AxA2wBkx8cAcqGDojSRUSYltQ7vclnd6ZC2dOgZczbQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCF9rlezD+9evu8Y5uOPXTd/N+32rmPeAAAAcC9s6tWs+WOS+o/z+NM89Dz3i4goI+JY7V7FqBWzynHqE6+vf8vhU0QTYT8+zsejiHiVj+/Phv4UAAAA4HatF8tpqtZTk5cAvpz37m8DZsYFpEWb8snrnuIVEVFPvvYUrdw3Lw7debdo+9/3XbztnFXSLGA96ClYWnI78SDLqK9J2qrW6deVzJsvsemVw8wLAABcU7sS8Dg9AADA7Xpz7QS4hD9L++LQHO4zjtMp3xB82OoBAAAA/6Hi2gkAAAAAfaqODTb1/7+0/19h/z8AAADoXdr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCFt6tVsvVhOT/1/fmac7a6b/q4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAn+/OOAiEQBmGwd31nMvc/rDRoaGxSBcLH3xgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzsz0sKhEAQRMGc8b+Tvv9hJUHPIEIENDyqqEUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzs27FvG1UYAPDPvthtCogQUCQCKEgdYKGpW1o6ghAoYuBPQIpSpwRSCm0GWkWULGwocxcEI0JIoLDlf+jcSF3K1iFDkJgYgu5855xjQ6MSnU39+0nP77vn67vvzlaV794ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACjsvhMv1/M4SV+mOnExdm9vfSntdw71qe3N+7NpS+NaxXmPnonDA6+UN+ZmKk0GAACAMZUU9f3bB2P1qaz+b3S3I+L7ZzpxUc8frvt39tZP5m/NFvX/b78+fKE76VSSHSeddHlltX22P5W+QnlcPPvIPSayK5/de0myD6T+wcbzu43seta+vXv3vWYWnqgiWwDgcZwp+jwo/h5K+9YwEwNgbEyUCu8Hja2FtE+mhpsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBV2N+KpIq5FxOzEQZza2VtfGtR/vXl/djtvF+/c2SzPmU7RiIjlldX22QrPZXQVV/PWp4urq+3rN25WHcxFxIC3bh/tnyd5+v+4TzMiekZOvzhgno+OcKxD8/QF+dczqr2Gk+n5PXLnWs9Ire+Cv7vfMYwvwPEFc/knMHifev7uSKR6zEHx3Tv+mSv8rwgAgLHQyFtaiT5obC2kY7XpiP0feuv/10px9NT9+7c7I53t7VL9//Dji/fKxyrX/62Kzu//YH7t6ufzN27eemPl6uKV9pX2Z2+ea73VOn/pwoVL89m9kvnlqLtjAgAAwH/QzFu5/q9P96//nyrF8S/r/+X6/4vvWl+Vj5Wo/wc6WPQbdiYAAADjqNmNnnv1zz9qA/aoNZvx5eLa2vVW57W7fa7zWmm6j+lE3sr1fzI97KwAAACAKuxu1HrW/y+X4jji+v/TP770c3nOJCImI65FRPvM0rXVy9Wdzkir4ofK2YGawz5TAAAAhmUyb+X1/0b2/H+9+8hDPSJePx3xV/4b/jhi/Z+8/81P5WOVn/8/X+lZjp76TOd6ZP1MxMTMsDMCAADgSXYyb2mx/3tja+GTX0592PT8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDV/g4AAP//kF4wGA==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x0, 0x1, 0x0) syz_open_procfs(0x0, 0x0) setrlimit(0x1, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x42400) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 249.522401ms ago: executing program 4: r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 240.878033ms ago: executing program 4: keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000340)='keyring\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) pwritev(r2, &(0x7f0000000680)=[{&(0x7f0000000780)="6823e4a3328425456665df2c3f3f2101996839df339286e62a23b2014f0eaf7119e0968f2a769ce5bc09f2c80d54e9c3da6dd661463c71d5f99d646c0f6985152f1bd5fffec543493ccad9d438d69c4a33794ded7fb9", 0x56}], 0x1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 205.976218ms ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 7.932209ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x51}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./bus/file0\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001fc0)=[{{&(0x7f0000000980)=@abs={0x1}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000a00)="1181578e93c448836b54c60f193ddfc74991f60679c9c395beb1d1f2084eecd65175cae3d452a79a5ddaa96899f932e2120eb5fc7e280e184bd62458fe1487db63fc63b1d3fd9dd4e67294c209a7aa1a0fae4118a426941d67172ff7d3e8c4c3ed6f890e262435305e81663f5563b9f8173e39c5d2762b9ff6644c4fb7986812be422a341bf1e9ab9678b3b48507281adc42b4ce7c2ec092101234fabcb8534164c0f2f7ec5ef7af1e8680a24cd0ea48e3901eea5469b4fd79357a09550e50bdc9aff2727379076eb9a56fb1a487baa5822de063f84f4d053a483d2cba7788e9a5ad", 0xe2}, {&(0x7f0000000340)="2d1b46f2bb3672fbe440098a412eb64be6ee", 0x12}], 0x2, &(0x7f0000000b40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20, 0x1}}, {{&(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000c00)}, {&(0x7f0000000c40)="3ad6eafc23b7b6fd0a14935c36a9a43a966a1389a50eeea59c83e46680e7336f79d36706b12ad891d1efcb2de9", 0x2d}, {0x0}, {&(0x7f0000000cc0)="1b556462ed7c58bdcc1c13cae1d7239593bc5e3aca1f6e6e38b16a3d2d2aa135ffa964eee2fb814ee078", 0x2a}, {&(0x7f0000000d00)="cc4fa9f59db5ddf955a50a4abc97c44d69db58853e", 0x15}, {&(0x7f0000000d40)="4cbfb1e57e96591636f1ab23207893632bbf017d4b42673ea4ed4e12c2dd61fc2a4d20c755bec6281fa43d0f0b67df906b902fdf8598eb22860aa39473b4c17770231516c37b3bb40d639a6d93d070bcfe6f", 0x52}, {&(0x7f0000000dc0)="b15c3092e66bd9af456f09caf610551e0c4f5d856985306950d870a7f229dace07d9f8f16237e3cd1dcb393f4f3099", 0x2f}, {&(0x7f0000000e00)="d6cbae57e2396aa9bb763951b41f16ce4bc52915d08728d6c2f253b962719e894a7b2f65aa5e85bb4019b9559d73e37122bc7d70aeecb8f371bf583d83bc7aac4b6bdbb640ed7b7eed05d230c3f9e70887420f1cc708cb125ad3d7265d83470e5e606c0a0a9999b79de52db77dd37e5a4dc79f4d47ca832872bb5f4cb564cc4605660e01eca3a5e5124a1fa776a86c06e2245c15e0537ff9faa38023ba756380a10477647ab1b842ad4ce1e589da1401f05d3b9627baa2df9344f19758fa62dba0f102386327923a421abdf3ff5ea60c599e62cc4e6a0d06eac6537ef855f8604ea3065f724868ebdfba6f7ecbfba0392fc07eb9d335", 0xf6}, {&(0x7f0000000f00)="9d616ab2c474b56e88c50eac334fadfefe628dc8b6", 0x15}], 0x9, &(0x7f0000001000)=ANY=[@ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00008000"], 0x30, 0x4}}, {{&(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001100), 0x0, &(0x7f00000011c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38, 0x2103822a1f76f583}}, {{&(0x7f0000001200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001280), 0x0, &(0x7f0000001400)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x40, 0x20000010}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001440)="8a9994b072323ed5cd743ed82ba7ef3ccdf09d79fe58452d01022bce69241ef75f451cb9afd520826b3f24b68383cd5712dc0f82171553fd4f2dc06c9bc4ad75d1f8204479e6e103862fcf", 0x4b}, {&(0x7f00000014c0)="fd8ed2ecf2e8b3238548bc147ce5b7a8af38730d288e92ad201a7b55925f494e8360036436c7f44e19460f44db08bdc5d2adf37b32e495283e0d88e6c6d934eb5490ae4f493de68128ac81c590fd146fc22f5f26bc6766a0f5543823496bc4c9c1b695756119362e7730cb9937c9133bc73f39bf79504ebe4acd0cb437101ddd32", 0x81}, {&(0x7f0000001580)="925b7fdb399dbf6ba631fb65d8939625fab128a42d76cf075804414fa606015e533206fecefdbb1cd646b878f411cc13f41a0a5794bcc9c15d546a5f72d90a78108c20843ccb20d7a31f3877babfb52092f454756f27117874cf7a0ce23ba246a6830e30a0c3b6421c6ceb87", 0x6c}, {&(0x7f0000002f80)="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", 0xe50}], 0x4, &(0x7f0000001800)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x48000}}, {{&(0x7f0000001880)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001c00)=[{0x0}, {&(0x7f00000019c0)="4f3e290f831c1798a180f9fc2e70f0eeca013caeb9075ba209f0863f94dbf1fe9e3946a4ee8682f20ca7f27be2fb9d4cb2ccc1f0ae4a908a6807f585e80a6c3c96969f2139d88aba3c", 0x49}, {&(0x7f0000001a40)="2f23a8528ae3b83d829fb2cc4fdae6d052abe62b3cb7abf22eab83827da67284fb185246b5645e28ec3cac01b96cdb710814f6d17d74ec4541e8d05dac7171200a883bbe04bf2be375b06e1e23dd509d51902528202cfeb14a4a159b2ce8347d7bd0cd1617c15508f38db6103610aa5cfd5418dbbf524148cb4639792f38d693d5a9d9c346", 0x85}, {&(0x7f0000001b00)="8f9710cf78d0b0cec4968646b8", 0xd}, {&(0x7f0000001b40)="f10daa570b390b13751ed15d319754a3b8a51d3acee6bf3220070b7d4b13621a0c6b0587186f0e031274afe7c49bb6cdb32cb77078ef93b3dec024ddaae437cfbc9e89ec8284371f0e5089af83abe8d1a4202fef61ff806b58f222c60457d935ccaf9f2a6fbcbac928a39bca1bc9d60667fa3cf53224801657487aac0d3556d5cc52bd3ad430828f1375f5937faff12b0eb450597fe53b33d6f73ad63261ee12", 0xa0}], 0x5, 0x0, 0x0, 0x24008890}}, {{0x0, 0x0, &(0x7f0000001f80), 0x0, 0x0, 0x0, 0x8084}}], 0x7, 0x4000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@bloom_filter={0x1e, 0xe4540000, 0x1a, 0x7ff, 0x2000, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2, 0x6}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f2f, 0xf, 0x3ce, &(0x7f00000007c0)="9f44948721919580684010a405dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) r7 = accept4$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001300)=0x14, 0x80000) r8 = socket(0x10, 0x5, 0x0) r9 = getpid() r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(r9, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) preadv(r10, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@mpls_getroute={0xdc, 0x1a, 0x300, 0x70bd2c, 0x25dfdbfe, {0x1c, 0x0, 0x14, 0x80, 0xfe, 0x3, 0xf699a53a947eeba5, 0x8, 0x2500}, [@RTA_VIA={0x14, 0x12, {0x3, "6a01ab78c63460389c6980031cc8"}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x67}, @RTA_VIA={0x14, 0x12, {0x27, "aa7d59aa03f28e2eb3d44cdb432e"}}, @RTA_MULTIPATH={0xc, 0x9, {0xfffa, 0x8, 0x16}}, @RTA_NEWDST={0x84, 0x13, [{0x8}, {0x6, 0x0, 0x1}, {0x4}, {0xffe01, 0x0, 0x1}, {0x8000}, {0x67c2}, {0x6}, {0x2}, {0x0, 0x0, 0x1}, {0x7ff}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0x8d45, 0x0, 0x1}, {0xd0e, 0x0, 0x1}, {0x2}, {0x1}, {0x1}, {0x5, 0x0, 0x1}, {0x9}, {0x6}, {}, {}, {0x80}, {0x9}, {0x3, 0x0, 0x1}, {0xfe126}, {0x3}, {0xebb2}, {0x1}, {0x8c4}, {0x4}]}]}, 0xdc}}, 0x24000080) write$P9_RGETLOCK(r10, &(0x7f0000000080)={0x28, 0x37, 0x2, {0x2, 0x2, 0x10001, r9, 0xa, '/dev/vcs#\x00'}}, 0x28) sendmmsg$unix(r0, &(0x7f0000001500)=[{{&(0x7f00000000c0)=@file={0x1, './bus/file0\x00'}, 0x6e, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x8080}}, {{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000003c0)="ccf23b522372b4b3067103ed29685bdffbd3d6e7c41bd104910c7d3585f2a4170f2fef51111214e4cf42685fe7c62dc94575c14645ca832cfa5000068d98ef120b04a7a02de38b223013293c8f9d54973f6ebd10f5f757b40297209682aa4b120f9a79a88b1fbe3342d20289930b9fa23ba55e690b6f68", 0x77}], 0x1, &(0x7f0000000f40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r4]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8, 0x90}}, {{&(0x7f0000001040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001200)=[{&(0x7f00000010c0)="560a6a5fee2970cdb0e01a8489d1bd2c4baaf0f6751b3f97d2e6ebbd3f937509208ef80b13ba8af5b531bfdcabe2", 0x2e}, {&(0x7f0000001100)="517f46d67b121f79d3d29df0cc576957b90f99194cad8374e1c9bba5e1b248f7779ad5143eb9176f5c0fe3f0d7f147d5cb96f98d43b03b4552586ee988538629c5e65b5b4b4a3af0751bdde74ca5", 0x4e}, {&(0x7f0000001180)="40290271a95a355025b3395371bca8c36f182336c76edbe8635a14b6cc5bab5b9a802993d0e99272803cf8c5fec176dd20e395929769e091e645a3b5ff3445dc8f2c75cccbc4b40a06afd65409ee45c18705852d537515ce", 0x58}], 0x3, &(0x7f00000013c0)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r5, r3]}}, @rights={{0x18, 0x1, 0x1, [r1, r6]}}, @rights={{0x20, 0x1, 0x1, [r4, r7, r8, r4]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r9}}}], 0x108, 0x20000000}}], 0x3, 0x20040894) chown(&(0x7f0000000180)='./bus/file0\x00', 0xee01, 0xee00) kernel console output (not intermixed with test programs): CHANGE): veth0_virt_wifi: link becomes ready [ 370.075656][T14130] device veth0_vlan entered promiscuous mode [ 370.082162][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 370.090734][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 370.098702][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 370.166100][ T54] usb 1-1: Using ep0 maxpacket: 32 [ 370.169800][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 370.188686][T14130] device veth1_macvtap entered promiscuous mode [ 370.206500][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 370.216245][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 370.238671][T11187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 370.246921][T11187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 370.285998][ T54] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 370.296289][ T54] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 370.309455][ T24] audit: type=1326 audit(2000000108.988:36574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56739f5ea9 code=0x7ffc0000 [ 370.333722][ T9] device bridge_slave_1 left promiscuous mode [ 370.333796][ T24] audit: type=1326 audit(2000000108.988:36575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56739f5ea9 code=0x7ffc0000 [ 370.340959][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.370834][ T24] audit: type=1326 audit(2000000108.988:36576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56739f5ea9 code=0x7ffc0000 [ 370.394950][ T24] audit: type=1326 audit(2000000109.008:36577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56739f5ea9 code=0x7ffc0000 [ 370.395009][ T9] device bridge_slave_0 left promiscuous mode [ 370.419241][ T24] audit: type=1326 audit(2000000109.008:36578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14153 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56739f5ea9 code=0x7ffc0000 [ 370.448735][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.460459][ T9] device veth1_macvtap left promiscuous mode [ 370.465750][ T54] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 370.469622][ T9] device veth0_vlan left promiscuous mode [ 370.481712][ T54] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 370.490318][ T54] usb 1-1: Product: syz [ 370.494426][ T54] usb 1-1: Manufacturer: syz [ 370.526047][ T15] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 370.536596][ T54] hub 1-1:4.0: bad descriptor, ignoring hub [ 370.542353][ T54] hub: probe of 1-1:4.0 failed with error -5 [ 370.554517][ T54] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 370.855787][ T1807] usb 1-1: USB disconnect, device number 48 [ 370.885701][ T15] usb 4-1: config index 0 descriptor too short (expected 804, got 36) [ 370.893884][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.904686][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.914318][ T15] usb 4-1: New USB device found, idVendor=172f, idProduct=0002, bcdDevice= 0.00 [ 370.923213][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.931977][ T15] usb 4-1: config 0 descriptor?? [ 371.298016][T11187] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 371.736197][T11187] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.746467][T11187] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.757168][T11187] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.875709][ T15] usbhid 4-1:0.0: can't add hid device: -71 [ 371.881593][ T15] usbhid: probe of 4-1:0.0 failed with error -71 [ 371.896049][ T15] usb 4-1: USB disconnect, device number 53 [ 371.935782][T11187] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 371.947795][T11187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.963916][T11187] usb 3-1: Product: syz [ 371.972102][T11187] usb 3-1: Manufacturer: syz [ 371.981703][T11187] usb 3-1: SerialNumber: syz [ 372.036153][T11187] usb 3-1: selecting invalid altsetting 1 [ 372.315717][T11187] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 372.321808][T11187] cdc_ncm 3-1:1.0: bind() failure [ 372.328764][T11187] usb 3-1: USB disconnect, device number 49 [ 373.141739][T14262] input: syz0 as /devices/virtual/input/input73 [ 374.341826][T14299] syz-executor.3[14299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 374.341880][T14299] syz-executor.3[14299] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 374.416354][ T24] kauditd_printk_skb: 5393 callbacks suppressed [ 374.416365][ T24] audit: type=1400 audit(2000000113.088:41972): avc: denied { accept } for pid=14309 comm="syz-executor.3" path="socket:[77077]" dev="sockfs" ino=77077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 374.462623][T14304] EXT4-fs (loop2): Ignoring removed nobh option [ 374.497076][T14304] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,init_itable=0x0000000000000003,nobh,usrquota,inode_readahead_blks=0x0000000000010000,max_dir_size_kb=0x00000000000007b1,nogrpid,min_batch_time=0x000000000000088d,delalloc,discard,nojournal_checksum,,errors=continue [ 374.527690][T14320] 9pnet: Insufficient options for proto=fd [ 374.662202][ T6335] tipc: Left network mode [ 374.669612][ T24] audit: type=1326 audit(2000000113.148:41973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6865d83ea9 code=0x7ffc0000 [ 374.694095][ T24] audit: type=1326 audit(2000000113.148:41974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6865d83ea9 code=0x7ffc0000 [ 374.718259][ T24] audit: type=1326 audit(2000000113.148:41975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6865d83ea9 code=0x7ffc0000 [ 374.742748][ T24] audit: type=1326 audit(2000000113.148:41976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6865d83ea9 code=0x7ffc0000 [ 375.019250][ T24] audit: type=1326 audit(2000000113.148:41977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6865d83ea9 code=0x7ffc0000 [ 375.079342][ T24] audit: type=1326 audit(2000000113.148:41978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f6865d83ea9 code=0x7ffc0000 [ 375.122517][ T24] audit: type=1326 audit(2000000113.148:41979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6865d83ea9 code=0x7ffc0000 [ 375.210259][T14329] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.217192][T14329] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.224673][T14329] device bridge_slave_0 entered promiscuous mode [ 375.232233][T14329] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.239117][T14329] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.247573][T14329] device bridge_slave_1 entered promiscuous mode [ 375.290193][T14329] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.297066][T14329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.304136][T14329] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.310942][T14329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.325148][T14337] syz-executor.1[14337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.325202][T14337] syz-executor.1[14337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 375.337645][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.361104][T12194] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.369145][T12194] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.387935][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 375.399466][ T1807] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.406361][ T1807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.413646][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 375.421754][ T1807] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.428623][ T1807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.487641][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 375.497722][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 375.508307][ T24] audit: type=1326 audit(2000000114.178:41980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14348 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 375.545875][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 375.548507][ T24] audit: type=1326 audit(2000000114.178:41981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14348 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 375.596750][T14352] EXT4-fs (loop1): Test dummy encryption mode enabled [ 375.606596][T14352] EXT4-fs error (device loop1): __ext4_iget:4958: inode #11: block 1: comm syz-executor.1: invalid block [ 375.617893][T14352] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz-executor.1: couldn't read orphan inode 11 (err -117) [ 375.630132][T14352] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 375.676692][T14329] device veth0_vlan entered promiscuous mode [ 375.683568][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 375.692186][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 375.712046][ T973] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 375.720251][ T973] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 375.902556][T14329] device veth1_macvtap entered promiscuous mode [ 375.956592][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 375.964845][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 375.974509][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 375.982657][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 375.991279][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 376.006360][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 376.014651][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 376.027578][T14376] incfs: Error accessing: ./file0. [ 376.035679][T14376] incfs: mount failed -20 [ 376.062526][T14381] 9pnet: Insufficient options for proto=fd [ 376.117819][ T6335] device bridge_slave_1 left promiscuous mode [ 376.203760][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.222138][ T6335] device bridge_slave_0 left promiscuous mode [ 376.261121][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.359395][ T6335] device veth1_macvtap left promiscuous mode [ 376.371896][ T6335] device veth0_vlan left promiscuous mode [ 376.522370][T14397] incfs_lookup_dentry err:-14 [ 376.530520][T14397] incfs: Can't find or create .incomplete dir in ./file0 [ 376.537989][T14397] incfs: mount failed -14 [ 376.728484][T14412] incfs: Error accessing: ./file0. [ 376.733722][T14412] incfs: mount failed -20 [ 377.177191][T14432] incfs_lookup_dentry err:-14 [ 377.182172][T14432] incfs: Can't find or create .incomplete dir in ./file0 [ 377.189801][T14432] incfs: mount failed -14 [ 377.657815][ T1807] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 377.727261][T14458] FAT-fs (loop4): Directory bread(block 64) failed [ 377.733736][T14458] FAT-fs (loop4): Directory bread(block 65) failed [ 377.740491][T14458] FAT-fs (loop4): Directory bread(block 66) failed [ 377.744829][T14461] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 377.746973][T14458] FAT-fs (loop4): Directory bread(block 67) failed [ 377.760923][T14458] FAT-fs (loop4): Directory bread(block 68) failed [ 377.767390][T14458] FAT-fs (loop4): Directory bread(block 69) failed [ 377.773850][T14458] FAT-fs (loop4): Directory bread(block 70) failed [ 377.780231][T14458] FAT-fs (loop4): Directory bread(block 71) failed [ 377.786846][T14458] FAT-fs (loop4): Directory bread(block 72) failed [ 377.793249][T14458] FAT-fs (loop4): Directory bread(block 73) failed [ 377.905700][ T1807] usb 1-1: Using ep0 maxpacket: 32 [ 378.025851][ T1807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.036892][ T1807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.046572][ T1807] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 378.055420][ T1807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.063716][ T1807] usb 1-1: config 0 descriptor?? [ 378.106022][ T1807] hub 1-1:0.0: USB hub found [ 378.215716][ T54] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 378.276663][T14501] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 378.319414][T14508] FAT-fs (loop1): Directory bread(block 64) failed [ 378.335960][T14508] FAT-fs (loop1): Directory bread(block 65) failed [ 378.342416][T14508] FAT-fs (loop1): Directory bread(block 66) failed [ 378.349322][T14508] FAT-fs (loop1): Directory bread(block 67) failed [ 378.356017][T14508] FAT-fs (loop1): Directory bread(block 68) failed [ 378.362376][T14508] FAT-fs (loop1): Directory bread(block 69) failed [ 378.369251][T14508] FAT-fs (loop1): Directory bread(block 70) failed [ 378.375756][T14508] FAT-fs (loop1): Directory bread(block 71) failed [ 378.382146][T14508] FAT-fs (loop1): Directory bread(block 72) failed [ 378.388566][T14508] FAT-fs (loop1): Directory bread(block 73) failed [ 378.685915][ T1807] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 378.785730][ T1807] usbhid 1-1:0.0: can't add hid device: -71 [ 378.791578][ T1807] usbhid: probe of 1-1:0.0 failed with error -71 [ 378.815725][ T54] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 378.826083][ T1807] usb 1-1: USB disconnect, device number 49 [ 378.832423][ T54] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 378.995771][ T54] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 379.004610][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.012519][ T54] usb 5-1: Product: syz [ 379.016457][ T54] usb 5-1: Manufacturer: syz [ 379.020836][ T54] usb 5-1: SerialNumber: syz [ 379.025900][ T54] usb 5-1: config 0 descriptor?? [ 379.045734][T14472] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 379.066137][ T54] dm9601: probe of 5-1:0.0 failed with error -22 [ 379.126157][T14527] device syzkaller0 entered promiscuous mode [ 379.276314][T14534] exfat: Deprecated parameter 'utf8' [ 379.281417][T14534] exfat: Bad value for 'umask' [ 379.387963][T14540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65525 sclass=netlink_route_socket pid=14540 comm=syz-executor.0 [ 379.408298][T14542] input: syz1 as /devices/virtual/input/input74 [ 379.456306][T14534] FAT-fs (loop0): Unrecognized mount option "00000270" or missing value [ 379.586840][T14546] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 379.596426][T14546] EXT4-fs (loop1): Test dummy encryption mode enabled [ 379.603155][T14546] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 379.612550][T14546] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsv0,test_dummy_encryption,max_batch_time=0x0000000000000003,nomblk_io_submit,minixdf,errors=remount-ro,data_err=abort, [ 379.685327][T14555] incfs: Can't find or create .index dir in ./file0 [ 379.696315][T14555] incfs: mount failed -14 [ 379.727410][T14556] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.734350][T14556] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.742017][T14556] device bridge_slave_0 entered promiscuous mode [ 379.748968][T14556] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.755955][T14556] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.763250][T14556] device bridge_slave_1 entered promiscuous mode [ 379.810116][T14556] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.816992][T14556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.824077][T14556] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.830851][T14556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.860484][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.868441][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.875538][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.887480][ T973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 379.895718][ T973] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.902547][ T973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.917266][T11187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 379.925342][T11187] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.932212][T11187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.939647][T11187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.949395][T11187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.968086][T11187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.979808][T14556] device veth0_vlan entered promiscuous mode [ 379.986891][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.995197][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 380.003587][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 380.019932][ T973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.029560][T14556] device veth1_macvtap entered promiscuous mode [ 380.041987][ T973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 380.058513][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 380.256341][ T9] device bridge_slave_1 left promiscuous mode [ 380.264713][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.266548][T14584] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 380.281097][T14584] EXT4-fs (loop2): Test dummy encryption mode enabled [ 380.287907][T14584] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 380.295210][ T9] device bridge_slave_0 left promiscuous mode [ 380.297475][T14584] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsv0,test_dummy_encryption,max_batch_time=0x0000000000000003,nomblk_io_submit,minixdf,errors=remount-ro,data_err=abort, [ 380.307610][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.381330][ T9] device veth1_macvtap left promiscuous mode [ 380.391036][ T9] device veth0_vlan left promiscuous mode [ 380.716557][T14600] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 380.915164][ T54] usb 5-1: USB disconnect, device number 32 [ 381.040419][ T24] kauditd_printk_skb: 80 callbacks suppressed [ 381.040453][ T24] audit: type=1107 audit(2000000119.708:42062): pid=14605 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=':' [ 381.507790][T14630] futex_wake_op: syz-executor.2 tries to shift op by -1; fix this program [ 381.615645][ T1807] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 381.766917][T14646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65525 sclass=netlink_route_socket pid=14646 comm=syz-executor.3 [ 381.848491][T14649] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 381.848491][T14649] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 381.848491][T14649] [ 381.868052][T14649] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 381.878203][T14649] EXT4-fs (loop2): Mount option "dioread_lock" incompatible with ext3 [ 382.026071][ T1807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 382.037444][ T1807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 382.049410][ T1807] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 382.063004][ T1807] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 382.072051][ T1807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.087446][T14660] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 382.105103][ T1807] usb 1-1: config 0 descriptor?? [ 382.126271][T14622] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 382.286411][ T341] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 382.525780][ T341] usb 3-1: Using ep0 maxpacket: 16 [ 382.589320][ T1807] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 382.600729][ T1807] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 382.616028][ T1807] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 382.624842][ T1807] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 382.632390][ T1807] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 382.640098][ T1807] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 382.647922][ T1807] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x0 [ 382.656552][ T1807] plantronics 0003:047F:FFFF.005D: No inputs registered, leaving [ 382.669502][ T1807] plantronics 0003:047F:FFFF.005D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 382.726277][T14670] incfs: Error accessing: ./file0. [ 382.732925][T14670] incfs: mount failed -20 [ 382.805393][ T24] audit: type=1326 audit(2000000121.448:42063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 382.842285][ T24] audit: type=1326 audit(2000000121.448:42064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 382.879891][ T24] audit: type=1326 audit(2000000121.448:42065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 382.920889][ T24] audit: type=1326 audit(2000000121.448:42066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 382.944818][ T341] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 382.944831][ T341] usb 3-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 382.944839][ T341] usb 3-1: Product: syz [ 382.944848][ T341] usb 3-1: Manufacturer: syz [ 382.944865][ T341] usb 3-1: SerialNumber: syz [ 382.966374][ T973] usb 1-1: USB disconnect, device number 50 [ 382.970760][ T24] audit: type=1326 audit(2000000121.458:42067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 383.004371][ T341] usb 3-1: config 0 descriptor?? [ 383.011230][ T24] audit: type=1326 audit(2000000121.458:42068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5a63c7627 code=0x7ffc0000 [ 383.037813][ T24] audit: type=1326 audit(2000000121.458:42069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe5a638d309 code=0x7ffc0000 [ 383.063929][ T341] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 383.071875][ T24] audit: type=1326 audit(2000000121.458:42070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 383.085999][ T341] usb 3-1: Detected FT-X [ 383.100756][ T24] audit: type=1326 audit(2000000121.458:42071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14667 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe5a63c7627 code=0x7ffc0000 [ 383.265820][ T341] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 384.256388][ T341] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 384.441665][ T15] usb 3-1: USB disconnect, device number 50 [ 384.448268][ T15] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 384.457519][ T15] ftdi_sio 3-1:0.0: device disconnected [ 384.575667][ T973] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 385.023345][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.092236][ T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.102439][ T973] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 385.111612][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.121689][ T973] usb 4-1: config 0 descriptor?? [ 385.121809][T14743] incfs: Error accessing: ./file0. [ 385.131987][T14743] incfs: mount failed -20 [ 385.151066][T14747] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 385.597109][ T973] logitech-hidpp-device 0003:046D:C086.005E: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0 [ 385.816149][ T973] usb 4-1: USB disconnect, device number 54 [ 385.948929][T14778] F2FS-fs (loop2): Found nat_bits in checkpoint [ 385.971488][T14778] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 386.045812][T12194] Bluetooth: hci0: command 0x1003 tx timeout [ 386.052131][ T40] Bluetooth: hci0: sending frame failed (-49) [ 386.361716][T14792] incfs: Error accessing: ./file0. [ 386.373707][T14792] incfs: mount failed -20 [ 386.425782][T14329] attempt to access beyond end of device [ 386.425782][T14329] loop2: rw=2049, want=45112, limit=40427 [ 386.608939][T14787] F2FS-fs (loop1): Found nat_bits in checkpoint [ 386.611025][T14808] incfs_lookup_dentry err:-14 [ 386.695786][T14808] incfs: Can't find or create .incomplete dir in ./file0 [ 386.707228][T14808] incfs: mount failed -14 [ 386.722372][T14787] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 387.153986][T14824] syz-executor.0[14824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.154043][T14824] syz-executor.0[14824] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 387.363689][T14833] device pim6reg1 entered promiscuous mode [ 387.477658][T12194] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 387.587454][ T24] kauditd_printk_skb: 2068 callbacks suppressed [ 387.587466][ T24] audit: type=1400 audit(2000000126.258:44140): avc: denied { mounton } for pid=14838 comm="syz-executor.2" path="/root/syzkaller-testdir944020081/syzkaller.ZoBY8X/47/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 387.735632][T12194] usb 2-1: Using ep0 maxpacket: 8 [ 387.758166][T14852] device wireguard0 entered promiscuous mode [ 387.855690][T12194] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 387.875667][T12194] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 387.893521][T12194] usb 2-1: config 135 has no interface number 0 [ 387.908395][T12194] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.095737][T12194] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 388.104594][T12194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.125661][T12194] usb 2-1: Product: syz [ 388.135654][T12194] usb 2-1: Manufacturer: syz [ 388.141266][T12194] usb 2-1: SerialNumber: syz [ 388.150535][ T973] Bluetooth: hci0: command 0x1001 tx timeout [ 388.156454][ T40] Bluetooth: hci0: sending frame failed (-49) [ 388.196251][T12194] uvcvideo: Found UVC 0.00 device syz (18ec:3288) [ 388.202516][T12194] uvcvideo: No valid video chain found. [ 388.398948][ T1807] usb 2-1: USB disconnect, device number 34 [ 388.948199][T14869] device pim6reg1 entered promiscuous mode [ 389.176319][T14886] incfs: Error accessing: ./file0/file0. [ 389.182080][T14886] incfs: mount failed -2 [ 389.419205][T14899] overlayfs: invalid origin (000000790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 389.433794][T14900] device wireguard0 entered promiscuous mode [ 389.579685][ T2957] Bluetooth: hci1: sending frame failed (-49) [ 390.357125][ T973] Bluetooth: hci0: command 0x1009 tx timeout [ 390.358808][T14905] F2FS-fs (loop2): Found nat_bits in checkpoint [ 390.385521][T14905] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 390.394133][T14919] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 390.401823][T14919] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 390.425524][T14919] F2FS-fs (loop1): Found nat_bits in checkpoint [ 390.456602][T14919] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 390.463455][T14919] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 390.508575][T14917] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 390.517312][T14917] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 391.016900][ T24] audit: type=1400 audit(2000000129.688:44141): avc: denied { nlmsg_read } for pid=14945 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 391.084622][ T24] audit: type=1326 audit(2000000129.748:44142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56739f5ea9 code=0x7ffc0000 [ 391.108664][ T24] audit: type=1326 audit(2000000129.748:44143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56739f5ea9 code=0x7ffc0000 [ 391.132841][ T24] audit: type=1326 audit(2000000129.758:44144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f56739f5ea9 code=0x7ffc0000 [ 391.156896][ T24] audit: type=1326 audit(2000000129.758:44145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56739f5ea9 code=0x7ffc0000 [ 391.182487][ T24] audit: type=1326 audit(2000000129.758:44146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56739f5ea9 code=0x7ffc0000 [ 391.206713][ T24] audit: type=1326 audit(2000000129.758:44147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f56739f5ea9 code=0x7ffc0000 [ 391.230617][ T973] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 391.238187][ T24] audit: type=1326 audit(2000000129.758:44148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56739f5ea9 code=0x7ffc0000 [ 391.262252][ T24] audit: type=1326 audit(2000000129.758:44149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56739f5ea9 code=0x7ffc0000 [ 391.646135][T12194] Bluetooth: hci1: command 0x1003 tx timeout [ 391.652015][T14914] Bluetooth: hci1: sending frame failed (-49) [ 391.657935][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.669766][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.679454][ T973] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 391.688351][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.697460][ T973] usb 1-1: config 0 descriptor?? [ 391.880583][T14986] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 391.890782][T14986] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.897829][T14986] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.292937][T15005] EXT4-fs error (device loop1): ext4_fill_super:4955: inode #2: comm syz-executor.1: casefold flag without casefold feature [ 392.306171][T15005] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 392.316537][T15005] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 392.316537][T15005] [ 392.326219][T15005] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 392.436360][T15012] device pim6reg1 entered promiscuous mode [ 392.628588][T15024] device pim6reg1 entered promiscuous mode [ 392.752936][ T24] audit: type=1326 audit(2000000131.418:44150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15031 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56739f5ea9 code=0x0 [ 392.930854][ T24] audit: type=1326 audit(2000000131.598:44151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f1da6ea9 code=0x7ffc0000 [ 392.955410][ T24] audit: type=1326 audit(2000000131.598:44152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f1da6ea9 code=0x7ffc0000 [ 392.979447][ T24] audit: type=1326 audit(2000000131.598:44153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fb3f1da6ea9 code=0x7ffc0000 [ 393.003389][ T24] audit: type=1326 audit(2000000131.598:44154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f1da6ea9 code=0x7ffc0000 [ 393.027674][ T24] audit: type=1326 audit(2000000131.598:44155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f1da6ea9 code=0x7ffc0000 [ 393.051686][ T24] audit: type=1326 audit(2000000131.598:44156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fb3f1da6ea9 code=0x7ffc0000 [ 393.075758][ T24] audit: type=1326 audit(2000000131.598:44157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f1da6ea9 code=0x7ffc0000 [ 393.100139][ T24] audit: type=1326 audit(2000000131.598:44158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15036 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3f1da6ea9 code=0x7ffc0000 [ 393.134271][T15045] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 393.168343][T15049] device pim6reg1 entered promiscuous mode [ 393.246700][T15053] syz-executor.2[15053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.246739][T15053] syz-executor.2[15053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 393.605714][ T973] usbhid 1-1:0.0: can't add hid device: -71 [ 393.623055][ T973] usbhid: probe of 1-1:0.0 failed with error -71 [ 393.629939][ T973] usb 1-1: USB disconnect, device number 51 [ 393.725671][ T338] Bluetooth: hci1: command 0x1001 tx timeout [ 393.731611][T14914] Bluetooth: hci1: sending frame failed (-49) [ 393.955646][T12194] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 394.196696][T15073] erofs: (device loop2): mounted with root inode @ nid 36. [ 394.204546][T15073] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 394.221902][T15076] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.4'. [ 394.395747][T12194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.406514][T12194] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.416000][T12194] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 394.424910][T12194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.458394][T12194] usb 2-1: config 0 descriptor?? [ 394.936459][T12194] zydacron 0003:13EC:0006.005F: unknown main item tag 0x0 [ 394.943448][T12194] zydacron 0003:13EC:0006.005F: unknown main item tag 0x0 [ 394.950384][T12194] zydacron 0003:13EC:0006.005F: unknown main item tag 0x0 [ 394.957317][ T973] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 394.964689][T12194] zydacron 0003:13EC:0006.005F: unknown main item tag 0x0 [ 394.965702][ T1807] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 394.971756][T12194] zydacron 0003:13EC:0006.005F: item fetching failed at offset 4/5 [ 394.986896][T12194] zydacron 0003:13EC:0006.005F: parse failed [ 394.992759][T12194] zydacron: probe of 0003:13EC:0006.005F failed with error -22 [ 395.147701][ T54] usb 2-1: USB disconnect, device number 35 [ 395.215656][ T973] usb 1-1: Using ep0 maxpacket: 16 [ 395.235690][ T1807] usb 3-1: Using ep0 maxpacket: 16 [ 395.335868][ T973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.346582][ T973] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 395.359162][ T973] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 395.367981][ T973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.376400][ T973] usb 1-1: config 0 descriptor?? [ 395.385782][ T1807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.396527][ T1807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.405996][ T1807] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.418609][ T1807] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 395.427420][ T1807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.435799][ T1807] usb 3-1: config 0 descriptor?? [ 395.805687][ T8102] Bluetooth: hci1: command 0x1009 tx timeout [ 395.906690][ T1807] koneplus 0003:1E7D:2E22.0060: item fetching failed at offset 0/2 [ 395.914778][ T1807] koneplus 0003:1E7D:2E22.0060: parse failed [ 395.915691][ T973] usbhid 1-1:0.0: can't add hid device: -71 [ 395.920707][ T1807] koneplus: probe of 0003:1E7D:2E22.0060 failed with error -22 [ 395.935706][ T973] usbhid: probe of 1-1:0.0 failed with error -71 [ 395.942930][ T973] usb 1-1: USB disconnect, device number 52 [ 396.057727][T15115] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 396.107801][ T8102] usb 3-1: USB disconnect, device number 51 [ 396.335646][ T338] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 396.585639][ T338] usb 2-1: Using ep0 maxpacket: 8 [ 396.705747][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.716579][ T338] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.726177][ T338] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 396.735089][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.752257][ T338] usb 2-1: config 0 descriptor?? [ 397.025661][ T1807] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 397.216522][T15133] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 397.245718][ T8102] Bluetooth: hci0: command 0x1003 tx timeout [ 397.251601][T14914] Bluetooth: hci0: sending frame failed (-49) [ 397.315695][ T338] usbhid 2-1:0.0: can't add hid device: -71 [ 397.321537][ T338] usbhid: probe of 2-1:0.0 failed with error -71 [ 397.328324][ T338] usb 2-1: USB disconnect, device number 36 [ 397.385780][ T1807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.396549][ T1807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.406271][ T1807] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 397.415107][ T1807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.423466][ T1807] usb 3-1: config 0 descriptor?? [ 397.505785][ T15] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 397.865817][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.876641][ T15] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.886284][ T15] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 397.899025][ T15] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 397.919121][ T15] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.927833][ T1807] zydacron 0003:13EC:0006.0061: unknown main item tag 0x0 [ 397.934763][ T1807] zydacron 0003:13EC:0006.0061: unknown main item tag 0x0 [ 397.942013][ T1807] zydacron 0003:13EC:0006.0061: unknown main item tag 0x0 [ 397.949134][ T15] usb 1-1: config 0 descriptor?? [ 397.953956][ T1807] zydacron 0003:13EC:0006.0061: unknown main item tag 0x0 [ 397.960855][ T1807] zydacron 0003:13EC:0006.0061: item fetching failed at offset 4/5 [ 397.968720][ T1807] zydacron 0003:13EC:0006.0061: parse failed [ 397.974657][ T1807] zydacron: probe of 0003:13EC:0006.0061 failed with error -22 [ 398.155546][ T1807] usb 3-1: USB disconnect, device number 52 [ 398.305708][ T15] usb 1-1: string descriptor 0 read error: -71 [ 398.405724][ T15] usbhid 1-1:0.0: can't add hid device: -71 [ 398.411528][ T15] usbhid: probe of 1-1:0.0 failed with error -71 [ 398.418366][ T15] usb 1-1: USB disconnect, device number 53 [ 398.659940][T15153] EXT4-fs (sda1): Unrecognized mount option "@" or missing value [ 398.737399][T15157] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 398.744479][T15157] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 398.756024][T15157] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2204: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 398.773589][T15157] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 398.785923][T15157] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,mblk_io_submit,lazytime,nogrpid,block_validity,user_xattr,,errors=continue [ 398.813549][T14329] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir944020081/syzkaller.ZoBY8X/95/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 398.840446][T14329] EXT4-fs error (device loop2): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 398.860993][T14329] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir944020081/syzkaller.ZoBY8X/95/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 398.893971][T14329] EXT4-fs error (device loop2): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 398.924301][T14329] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir944020081/syzkaller.ZoBY8X/95/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 398.959290][T14329] EXT4-fs error (device loop2): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 398.979470][T14329] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir944020081/syzkaller.ZoBY8X/95/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 399.005404][T14329] EXT4-fs error (device loop2): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 399.025759][T14329] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir944020081/syzkaller.ZoBY8X/95/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 399.051721][T14329] EXT4-fs error (device loop2): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 399.082033][T15179] EXT4-fs (loop1): cluster size (2048) smaller than block size (4096) [ 399.370346][T15197] fuse: Bad value for 'fd' [ 399.549769][ T325] Bluetooth: hci0: command 0x1001 tx timeout [ 399.555772][T14914] Bluetooth: hci0: sending frame failed (-49) [ 399.614963][T15198] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.621925][T15198] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.629166][T15198] device bridge_slave_0 entered promiscuous mode [ 399.638188][T15198] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.645059][T15198] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.652507][T15198] device bridge_slave_1 entered promiscuous mode [ 399.659746][T15194] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 399.667440][T15194] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 399.677417][T15194] F2FS-fs (loop1): invalid crc value [ 399.684636][T15194] F2FS-fs (loop1): Found nat_bits in checkpoint [ 399.709968][T15198] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.716858][T15198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.717985][T15194] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 399.723965][T15198] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.731087][T15194] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 399.737661][T15198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.757150][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 399.764769][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.772112][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.782384][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 399.790974][ T1807] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.797851][ T1807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.813798][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 399.833336][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.840205][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.848074][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 399.859107][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 399.874591][T15198] device veth0_vlan entered promiscuous mode [ 399.881218][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 400.103383][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 400.147224][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 400.154638][ T325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 400.208826][T15198] device veth1_macvtap entered promiscuous mode [ 400.216371][T15207] attempt to access beyond end of device [ 400.216371][T15207] loop1: rw=2049, want=79872, limit=40427 [ 400.231455][T15207] attempt to access beyond end of device [ 400.231455][T15207] loop1: rw=2049, want=81920, limit=40427 [ 400.249862][T15207] attempt to access beyond end of device [ 400.249862][T15207] loop1: rw=2049, want=53248, limit=40427 [ 400.282159][T15207] attempt to access beyond end of device [ 400.282159][T15207] loop1: rw=2049, want=68664, limit=40427 [ 400.316150][T15207] attempt to access beyond end of device [ 400.316150][T15207] loop1: rw=2049, want=77824, limit=40427 [ 400.337740][ T24] audit: type=1326 audit(2000000139.008:44159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15218 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc66b86fea9 code=0x0 [ 400.338725][T15207] attempt to access beyond end of device [ 400.338725][T15207] loop1: rw=2049, want=85872, limit=40427 [ 400.402880][T11053] attempt to access beyond end of device [ 400.402880][T11053] loop1: rw=2049, want=40968, limit=40427 [ 400.415816][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 400.423936][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 400.433539][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 400.447433][ T9] device bridge_slave_1 left promiscuous mode [ 400.453604][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.461055][ T9] device bridge_slave_0 left promiscuous mode [ 400.467370][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.474776][ T9] device veth1_macvtap left promiscuous mode [ 400.480963][ T9] device veth0_vlan left promiscuous mode [ 400.563138][ T6335] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 400.571878][ T6335] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 400.847948][T15241] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.854811][T15241] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.862471][T15241] device bridge_slave_0 entered promiscuous mode [ 400.869668][T15241] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.876549][T15241] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.883825][T15241] device bridge_slave_1 entered promiscuous mode [ 400.901319][T15248] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 400.933068][T15241] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.939915][T15241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.947014][T15241] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.953786][T15241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.973252][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 400.981034][ T1807] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.989023][ T1807] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.998145][ T973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 401.006225][ T973] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.013043][ T973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.022129][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 401.030153][ T8102] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.036986][ T8102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.057670][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 401.066285][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 401.074040][T12194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 401.083124][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 401.091472][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 401.098757][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 401.107166][T15241] device veth0_vlan entered promiscuous mode [ 401.118163][T15241] device veth1_macvtap entered promiscuous mode [ 401.125952][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 401.138877][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 401.147596][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 401.173170][ T24] audit: type=1400 audit(2000000139.838:44160): avc: denied { ioctl } for pid=15251 comm="syz-executor.1" path="/dev/uhid" dev="devtmpfs" ino=169 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 401.206151][ T8102] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 401.213311][T15252] serio: Serial port pts0 [ 401.287268][T15269] device syzkaller0 entered promiscuous mode [ 401.306499][ T24] audit: type=1400 audit(2000000139.978:44161): avc: denied { ioctl } for pid=15271 comm="syz-executor.1" path="socket:[82423]" dev="sockfs" ino=82423 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 401.366869][ T24] audit: type=1326 audit(2000000140.038:44162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15277 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ad0b77ea9 code=0x0 [ 401.455702][ T8102] usb 4-1: Using ep0 maxpacket: 8 [ 401.566022][ T54] Bluetooth: hci0: command 0x1009 tx timeout [ 401.576030][ T8102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.586773][ T8102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.596277][ T8102] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 401.605104][ T8102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.613469][ T8102] usb 4-1: config 0 descriptor?? [ 402.175692][ T8102] usbhid 4-1:0.0: can't add hid device: -71 [ 402.181579][ T8102] usbhid: probe of 4-1:0.0 failed with error -71 [ 402.188631][ T8102] usb 4-1: USB disconnect, device number 55 [ 402.275156][ T24] audit: type=1326 audit(2000000140.938:44163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4954fdaea9 code=0x7ffc0000 [ 402.299808][ T24] audit: type=1326 audit(2000000140.938:44164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4954fdaea9 code=0x7ffc0000 [ 402.324483][ T24] audit: type=1326 audit(2000000140.948:44165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4954fdaea9 code=0x7ffc0000 [ 402.348860][ T24] audit: type=1326 audit(2000000140.998:44166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4954fdaea9 code=0x7ffc0000 [ 402.373506][ T24] audit: type=1326 audit(2000000140.998:44167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4954fdaea9 code=0x7ffc0000 [ 402.397940][ T24] audit: type=1326 audit(2000000141.018:44168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15313 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4954fdaea9 code=0x7ffc0000 [ 402.434820][T15315] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 402.515695][ T54] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 402.725708][ T341] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 402.755717][ T54] usb 1-1: Using ep0 maxpacket: 32 [ 402.895928][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.906779][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.916583][ T54] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 402.925423][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.934067][ T54] usb 1-1: config 0 descriptor?? [ 402.965645][ T341] usb 3-1: Using ep0 maxpacket: 32 [ 402.976289][ T54] hub 1-1:0.0: USB hub found [ 403.096191][ T341] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.106155][ T341] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 403.205744][ T54] hub 1-1:0.0: 1 port detected [ 403.285820][ T341] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 403.294740][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.302477][ T341] usb 3-1: Product: syz [ 403.306665][ T341] usb 3-1: Manufacturer: syz [ 403.311010][ T341] usb 3-1: SerialNumber: syz [ 403.316155][ T341] usb 3-1: config 0 descriptor?? [ 403.736765][ T54] usb 1-1: USB disconnect, device number 54 [ 403.835090][T15342] syz-executor.3[15342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.835429][T15342] syz-executor.3[15342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 404.424474][T15349] tipc: Started in network mode [ 404.441280][T15349] tipc: Own node identity fc, cluster identity 4711 [ 404.448280][T15349] tipc: Enabling of bearer rejected, failed to enable media [ 404.818023][T15376] EXT4-fs (loop0): 1 orphan inode deleted [ 404.823589][T15376] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 404.842349][T15376] ext4 filesystem being mounted at /root/syzkaller-testdir1914666139/syzkaller.JUVi8M/65/file1 supports timestamps until 2038 (0x7fffffff) [ 404.985729][T12194] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 405.008303][T15381] syz-executor.0[15381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.008630][T15381] syz-executor.0[15381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.337782][T12194] usb 4-1: Using ep0 maxpacket: 32 [ 405.340798][T15383] tipc: Started in network mode [ 405.359346][T15383] tipc: Own node identity fc, cluster identity 4711 [ 405.365993][T15383] tipc: Enabling of bearer rejected, failed to enable media [ 405.459405][ T341] usb 3-1: USB disconnect, device number 53 [ 405.465703][T12194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.467642][T15385] syz-executor.2[15385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.476545][T15385] syz-executor.2[15385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.476697][T12194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.509378][T12194] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 405.521192][T12194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.535515][T12194] usb 4-1: config 0 descriptor?? [ 405.576231][T12194] hub 4-1:0.0: USB hub found [ 405.609228][ T24] kauditd_printk_skb: 14 callbacks suppressed [ 405.609239][ T24] audit: type=1326 audit(2000000144.278:44183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15398 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ad0b77ea9 code=0x0 [ 405.664982][T14556] EXT4-fs warning (device loop0): __ext4_unlink:3401: inode #16: comm syz-executor.0: Deleting file 'file3' with no links [ 405.677758][T14556] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #17: comm syz-executor.0: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 405.694907][T14556] EXT4-fs (loop0): Remounting filesystem read-only [ 405.701809][T14556] EXT4-fs error (device loop0): ext4_ext_check_inode:500: inode #17: comm syz-executor.0: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 405.777347][T15409] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 405.782393][T15413] tipc: Started in network mode [ 405.794189][T15413] tipc: Own node identity fc, cluster identity 4711 [ 405.795734][T12194] hub 4-1:0.0: 1 port detected [ 405.800842][T15413] tipc: Enabling of bearer rejected, failed to enable media [ 405.807654][T15409] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,dioread_nolock,usrquota,data_err=abort,data_err=abort,,errors=continue [ 405.842862][ T6335] tipc: Left network mode [ 405.923124][T15418] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.930191][T15418] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.937732][T15418] device bridge_slave_0 entered promiscuous mode [ 405.945691][T15418] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.952602][T15418] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.959969][T15418] device bridge_slave_1 entered promiscuous mode [ 405.975515][T15423] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 406.010259][T15418] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.017139][T15418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.024186][T15418] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.030989][T15418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.051999][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 406.060137][ T1807] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.067761][ T1807] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.078337][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 406.086427][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.093274][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.103713][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 406.112126][ T1807] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.118986][ T1807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.136169][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 406.143926][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 406.154348][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 406.155655][ T8102] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 406.168203][T15418] device veth0_vlan entered promiscuous mode [ 406.179417][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 406.187559][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 406.194778][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 406.207761][T15418] device veth1_macvtap entered promiscuous mode [ 406.216335][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 406.228788][T11187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 406.240554][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 406.245658][ T338] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 406.266862][T15425] syz-executor.0[15425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.266901][T15425] syz-executor.0[15425] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.287142][ T6335] device bridge_slave_1 left promiscuous mode [ 406.305762][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.313330][ T6335] device bridge_slave_0 left promiscuous mode [ 406.321046][T12194] usb 4-1: USB disconnect, device number 56 [ 406.327942][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.336776][ T6335] device veth1_macvtap left promiscuous mode [ 406.342853][ T6335] device veth0_vlan left promiscuous mode [ 406.405645][ T8102] usb 5-1: Using ep0 maxpacket: 16 [ 406.495861][ T338] usb 3-1: Using ep0 maxpacket: 8 [ 406.535774][ T8102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.546945][ T8102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.556498][ T8102] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 406.569127][ T8102] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 406.577912][ T8102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.586543][ T8102] usb 5-1: config 0 descriptor?? [ 406.625786][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.636983][ T338] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.647155][ T338] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 406.656226][ T338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.666726][ T338] usb 3-1: config 0 descriptor?? [ 406.686452][ T54] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 406.945684][ T54] usb 1-1: Using ep0 maxpacket: 32 [ 407.056362][ T8102] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 407.063688][ T8102] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 407.070877][ T8102] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 407.075754][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.078326][ T8102] microsoft 0003:045E:07DA.0062: No inputs registered, leaving [ 407.089121][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.106031][ T8102] microsoft 0003:045E:07DA.0062: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 407.106062][ T54] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 407.126064][ T8102] microsoft 0003:045E:07DA.0062: no inputs found [ 407.126072][ T8102] microsoft 0003:045E:07DA.0062: could not initialize ff, continuing anyway [ 407.142693][ T24] audit: type=1326 audit(2000000145.808:44184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6865d83ea9 code=0x7ffc0000 [ 407.166739][ T24] audit: type=1326 audit(2000000145.818:44185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6865d83ea9 code=0x7ffc0000 [ 407.199986][ T24] audit: type=1326 audit(2000000145.868:44186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6865d83ea9 code=0x7ffc0000 [ 407.207384][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.225299][ T24] audit: type=1326 audit(2000000145.898:44187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6865d83ea9 code=0x7ffc0000 [ 407.256639][ T54] usb 1-1: config 0 descriptor?? [ 407.263008][ T24] audit: type=1326 audit(2000000145.898:44188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6865d83ea9 code=0x7ffc0000 [ 407.268217][ T8102] usb 5-1: USB disconnect, device number 33 [ 407.287321][ T24] audit: type=1326 audit(2000000145.898:44189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6865d83ea9 code=0x7ffc0000 [ 407.317303][ T24] audit: type=1326 audit(2000000145.898:44190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6865d83ea9 code=0x7ffc0000 [ 407.342439][ T54] hub 1-1:0.0: USB hub found [ 407.347635][ T24] audit: type=1326 audit(2000000145.898:44191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6865d83ea9 code=0x7ffc0000 [ 407.371540][ T338] usbhid 3-1:0.0: can't add hid device: -71 [ 407.371643][ T338] usbhid: probe of 3-1:0.0 failed with error -71 [ 407.383655][ T24] audit: type=1326 audit(2000000145.898:44192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15451 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6865d83ea9 code=0x7ffc0000 [ 407.393669][ T338] usb 3-1: USB disconnect, device number 54 [ 407.555733][ T54] hub 1-1:0.0: 1 port detected [ 407.758903][T15436] serio: Serial port pts1 [ 407.881445][T15462] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 407.972291][T15474] SELinux: security_context_str_to_sid(r) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 408.047394][ T54] usb 1-1: USB disconnect, device number 55 [ 408.295800][ T338] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 408.525658][T12194] Bluetooth: hci0: command 0x1003 tx timeout [ 408.531990][ T40] Bluetooth: hci0: sending frame failed (-49) [ 408.545636][ T338] usb 5-1: Using ep0 maxpacket: 16 [ 408.701005][ T338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.735337][ T338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.745002][ T338] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 408.757573][ T338] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 408.766489][ T338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.774780][ T338] usb 5-1: config 0 descriptor?? [ 408.776557][T15506] erofs: (device loop0): mounted with root inode @ nid 36. [ 408.789299][T15506] erofs: (device loop0): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 408.798790][T15506] attempt to access beyond end of device [ 408.798790][T15506] loop0: rw=0, want=304, limit=16 [ 408.809309][T15506] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 409.049918][T15527] tipc: Started in network mode [ 409.054655][T15527] tipc: Own node identity fc, cluster identity 4711 [ 409.061298][T15527] tipc: Enabling of bearer rejected, failed to enable media [ 409.256716][ T338] microsoft 0003:045E:07DA.0063: unknown main item tag 0x0 [ 409.264628][ T338] microsoft 0003:045E:07DA.0063: unknown main item tag 0x0 [ 409.271719][ T338] microsoft 0003:045E:07DA.0063: unknown main item tag 0x0 [ 409.279232][ T338] microsoft 0003:045E:07DA.0063: No inputs registered, leaving [ 409.288098][ T338] microsoft 0003:045E:07DA.0063: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 409.299389][ T338] microsoft 0003:045E:07DA.0063: no inputs found [ 409.305432][ T338] microsoft 0003:045E:07DA.0063: could not initialize ff, continuing anyway [ 409.327006][ T54] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 409.459136][T11187] usb 5-1: USB disconnect, device number 34 [ 409.497463][T15557] ip6t_rpfilter: unknown options [ 409.628456][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 409.725899][ T54] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 409.734761][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.743142][ T54] usb 4-1: config 0 descriptor?? [ 409.757220][T15578] F2FS-fs (loop0): invalid crc value [ 409.763416][T15578] F2FS-fs (loop0): Found nat_bits in checkpoint [ 409.785545][T15578] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 409.905003][T15418] attempt to access beyond end of device [ 409.905003][T15418] loop0: rw=2049, want=45104, limit=40427 [ 410.087453][T15593] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 410.218827][T15529] device batadv_slave_0 entered promiscuous mode [ 410.228357][T15528] device batadv_slave_0 left promiscuous mode [ 410.235720][ T54] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 410.245679][ T54] asix: probe of 4-1:0.0 failed with error -71 [ 410.252214][ T54] usb 4-1: USB disconnect, device number 57 [ 410.347524][T15610] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 410.510258][T15624] device syzkaller0 entered promiscuous mode [ 410.605746][ T338] Bluetooth: hci0: command 0x1001 tx timeout [ 410.611624][ T40] Bluetooth: hci0: sending frame failed (-49) [ 410.745390][T15642] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 410.823877][T15647] device gretap0 entered promiscuous mode [ 410.830643][T15647] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 410.838571][T15647] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 410.856178][T11187] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 410.977296][T15656] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 411.125725][T11187] usb 3-1: Using ep0 maxpacket: 32 [ 411.286484][T11187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.297382][T11187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.306985][T11187] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 411.315911][T11187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.324410][T11187] usb 3-1: config 0 descriptor?? [ 411.366134][T11187] hub 3-1:0.0: USB hub found [ 411.527904][T15672] EXT4-fs (loop0): 1 orphan inode deleted [ 411.533513][T15672] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 411.552177][T15672] ext4 filesystem being mounted at /root/syzkaller-testdir3540588613/syzkaller.Lm0bf2/48/file1 supports timestamps until 2038 (0x7fffffff) [ 411.567144][T15630] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 411.635709][T11187] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 411.727406][T15682] syz-executor.0[15682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.727749][T15682] syz-executor.0[15682] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 411.777724][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 411.889774][T15681] 9pnet: Could not find request transport: xen [ 411.945732][T11187] usbhid 3-1:0.0: can't add hid device: -71 [ 411.951552][T11187] usbhid: probe of 3-1:0.0 failed with error -71 [ 411.995893][T11187] usb 3-1: USB disconnect, device number 55 [ 412.016354][T15700] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 412.025782][T15700] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 412.032905][T15700] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (20000) [ 412.396454][T15724] tmpfs: Unknown parameter 'ÿ' [ 412.405822][ T15] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 412.477030][T15731] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 412.484971][T15731] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 412.695646][ T8102] Bluetooth: hci0: command 0x1009 tx timeout [ 412.766038][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.775789][T11187] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 412.777013][ T15] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 412.796878][ T15] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 412.805777][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.814219][ T15] usb 4-1: config 0 descriptor?? [ 413.032317][ T24] kauditd_printk_skb: 6979 callbacks suppressed [ 413.032330][ T24] audit: type=1326 audit(2000000151.698:51172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 413.062501][ T24] audit: type=1326 audit(2000000151.698:51173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 413.086539][ T24] audit: type=1326 audit(2000000151.698:51174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 413.110615][ T24] audit: type=1326 audit(2000000151.698:51175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 413.134701][ T24] audit: type=1326 audit(2000000151.698:51176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 413.159244][ T24] audit: type=1326 audit(2000000151.698:51177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 413.183211][ T24] audit: type=1326 audit(2000000151.698:51178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 413.207247][ T24] audit: type=1326 audit(2000000151.698:51179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 413.231569][ T24] audit: type=1326 audit(2000000151.698:51180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 413.233847][T11187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.256088][ T24] audit: type=1326 audit(2000000151.698:51181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15735 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 413.295683][T11187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.305253][T11187] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 413.306657][ T15] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 413.317741][T11187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.331503][ T15] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 413.341223][ T15] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 413.342649][T11187] usb 1-1: config 0 descriptor?? [ 413.348688][ T15] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 413.360610][ T15] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 413.368075][ T15] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 413.376538][ T15] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 413.384084][ T15] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 413.391500][ T15] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 413.398964][ T15] plantronics 0003:047F:FFFF.0064: unknown main item tag 0x0 [ 413.407915][ T15] plantronics 0003:047F:FFFF.0064: unbalanced collection at end of report description [ 413.418184][ T15] plantronics 0003:047F:FFFF.0064: parse failed [ 413.424550][ T15] plantronics: probe of 0003:047F:FFFF.0064 failed with error -22 [ 413.549492][T15751] EXT4-fs (loop4): Unrecognized mount option "fsuuid=67491ed9-b1ac-0be6-52eb-fd2fdc6" or missing value [ 413.593898][ T15] usb 4-1: USB disconnect, device number 58 [ 413.926914][T11187] hid-multitouch 0003:0EEF:72D0.0065: item fetching failed at offset 3/5 [ 413.935732][T11187] hid-multitouch: probe of 0003:0EEF:72D0.0065 failed with error -22 [ 414.128474][T12194] usb 1-1: USB disconnect, device number 56 [ 414.177092][T15791] futex_wake_op: syz-executor.2 tries to shift op by 32; fix this program [ 414.404786][T15818] futex_wake_op: syz-executor.2 tries to shift op by 32; fix this program [ 414.575660][ T8102] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 415.085732][ T8102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.096499][ T8102] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 415.109146][ T8102] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 415.118068][ T8102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.126450][ T8102] usb 5-1: config 0 descriptor?? [ 415.389236][T15849] device syzkaller0 entered promiscuous mode [ 415.600760][ T8102] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 415.608438][ T8102] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 415.615892][ T8102] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 415.681431][ T8102] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 415.688989][ T8102] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 415.696720][ T8102] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 415.706032][ T8102] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 415.713940][ T8102] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 415.721557][ T8102] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 415.728885][ T8102] plantronics 0003:047F:FFFF.0066: unknown main item tag 0x0 [ 415.780503][ T8102] plantronics 0003:047F:FFFF.0066: unbalanced collection at end of report description [ 415.790634][ T8102] plantronics 0003:047F:FFFF.0066: parse failed [ 415.797172][ T8102] plantronics: probe of 0003:047F:FFFF.0066 failed with error -22 [ 415.805480][ T8102] usb 5-1: USB disconnect, device number 35 [ 416.091194][T15869] syz-executor.3[15869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.091242][T15869] syz-executor.3[15869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.107250][T15869] hub 6-0:1.0: USB hub found [ 416.123321][T15869] hub 6-0:1.0: 1 port detected [ 416.129345][T15869] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 416.275023][T15877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 416.391542][T15886] syz-executor.4[15886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.391600][T15886] syz-executor.4[15886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.404554][T15886] netem: incorrect ge model size [ 416.421081][T15886] netem: change failed [ 416.506173][T15898] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev sda1, type ext4) errno=-22 [ 416.526015][T15896] syz-executor.4[15896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.526073][T15896] syz-executor.4[15896] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 416.550391][T15896] hub 6-0:1.0: USB hub found [ 416.566577][T15896] hub 6-0:1.0: 1 port detected [ 416.572710][T15896] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 417.160818][T15973] incfs_lookup_dentry err:-14 [ 417.165374][T15973] incfs: Can't find or create .incomplete dir in ./file0 [ 417.172650][T15973] incfs: mount failed -14 [ 417.230282][T15986] syz-executor.2[15986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.230336][T15986] syz-executor.2[15986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.256868][T15989] EXT4-fs (loop0): quotafile must be on filesystem root [ 417.346419][T15995] syz-executor.3[15995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.346478][T15995] syz-executor.3[15995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.472030][T16006] incfs_lookup_dentry err:-14 [ 417.489721][T16006] incfs: Can't find or create .incomplete dir in ./file0 [ 417.497059][T16006] incfs: mount failed -14 [ 417.644277][T16025] syz-executor.3[16025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.644376][T16025] syz-executor.3[16025] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 417.750116][T16035] futex_wake_op: syz-executor.3 tries to shift op by 32; fix this program [ 417.976902][T16062] futex_wake_op: syz-executor.3 tries to shift op by 32; fix this program [ 417.993104][T16064] overlayfs: invalid redirect ((null)) [ 418.076450][T16070] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev sda1, type ext4) errno=-22 [ 418.299504][T16092] input: syz0 as /devices/virtual/input/input75 [ 418.528366][ T9] tipc: Left network mode [ 418.662256][T16102] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.669194][T16102] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.676548][T16102] device bridge_slave_0 entered promiscuous mode [ 418.686523][T16102] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.693399][T16102] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.700560][T16102] device bridge_slave_1 entered promiscuous mode [ 418.909630][T12194] Bluetooth: hci0: command 0x1003 tx timeout [ 418.923194][ T40] Bluetooth: hci0: sending frame failed (-49) [ 419.027466][T16102] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.034353][T16102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.041497][T16102] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.048360][T16102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.075921][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 419.083301][ T8102] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.090711][ T8102] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.100674][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 419.109862][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.116731][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.132366][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 419.140719][ T1807] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.147680][ T1807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.160255][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 419.175925][ T8102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 419.190083][T16122] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 419.208344][ T973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 419.219535][T16102] device veth0_vlan entered promiscuous mode [ 419.227169][T16124] syz-executor.3[16124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.227224][T16124] syz-executor.3[16124] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.232185][T16102] device veth1_macvtap entered promiscuous mode [ 419.258069][ T973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 419.266521][ T973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 419.267483][T16124] /dev/nullb0: Can't open blockdev [ 419.284378][ T973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 419.292353][T12194] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 419.301231][ T973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 419.310542][ T973] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 419.318029][ T973] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 419.376929][T16132] EXT4-fs (loop2): Test dummy encryption mode enabled [ 419.383548][T16132] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 419.392624][T16132] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #17: comm syz-executor.2: iget: bogus i_mode (0) [ 419.404445][T16132] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz-executor.2: couldn't read orphan inode 17 (err -117) [ 419.416847][T16132] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv0,abort,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue [ 419.432547][ T9] device bridge_slave_1 left promiscuous mode [ 419.445688][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.453149][ T9] device bridge_slave_0 left promiscuous mode [ 419.459446][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.467426][ T9] device veth1_macvtap left promiscuous mode [ 419.473336][ T9] device veth0_vlan left promiscuous mode [ 419.482645][T16139] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 419.498601][T16140] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz-executor.2: bg 0: block 7: invalid block bitmap [ 419.561501][T16102] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir2951071484/syzkaller.FNbne5/1/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 419.591121][T16102] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir2951071484/syzkaller.FNbne5/1/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 419.615156][T16102] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir2951071484/syzkaller.FNbne5/1/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 419.639518][T16102] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir2951071484/syzkaller.FNbne5/1/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 419.664360][T16102] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir2951071484/syzkaller.FNbne5/1/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 419.689223][T16102] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir2951071484/syzkaller.FNbne5/1/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 419.714522][T16102] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir2951071484/syzkaller.FNbne5/1/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 419.738410][T12194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.746536][T16102] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir2951071484/syzkaller.FNbne5/1/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 419.756276][T12194] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.774121][T16102] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir2951071484/syzkaller.FNbne5/1/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0 [ 419.806541][T12194] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 419.817481][T12194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.826777][T12194] usb 1-1: config 0 descriptor?? [ 420.100572][T16178] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.107732][T16178] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.114927][T16178] device bridge_slave_0 entered promiscuous mode [ 420.123947][T16178] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.131000][T16178] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.138482][T16178] device bridge_slave_1 entered promiscuous mode [ 420.189407][T16178] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.196294][T16178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.203424][T16178] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.210282][T16178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.240151][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 420.247819][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.250060][T16189] input: syz1 as /devices/virtual/input/input76 [ 420.261247][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.278398][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 420.286585][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.293456][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.300810][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 420.308957][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.315836][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.331054][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 420.342720][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 420.361893][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 420.375838][T16178] device veth0_vlan entered promiscuous mode [ 420.386955][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 420.395088][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 420.402594][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 420.413468][T16178] device veth1_macvtap entered promiscuous mode [ 420.421493][ T15] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 420.436136][ T1807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 420.446091][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 420.795903][T11187] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 420.939058][T16110] udc-core: couldn't find an available UDC or it's busy [ 420.946074][T16110] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 420.955721][T12194] uclogic 0003:256C:006D.0067: failed retrieving string descriptor #200: -71 [ 420.964390][T12194] uclogic 0003:256C:006D.0067: failed retrieving pen parameters: -71 [ 420.972380][T12194] uclogic 0003:256C:006D.0067: failed probing pen v2 parameters: -71 [ 420.980326][T12194] uclogic 0003:256C:006D.0067: failed probing parameters: -71 [ 420.987630][T12194] uclogic: probe of 0003:256C:006D.0067 failed with error -71 [ 420.987881][ T9] device bridge_slave_1 left promiscuous mode [ 420.996320][T12194] usb 1-1: USB disconnect, device number 57 [ 421.000988][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.013523][ T338] Bluetooth: hci0: command 0x1001 tx timeout [ 421.019489][ T40] Bluetooth: hci0: sending frame failed (-49) [ 421.019632][ T9] device bridge_slave_0 left promiscuous mode [ 421.031620][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.039336][ T9] device veth1_macvtap left promiscuous mode [ 421.045157][ T9] device veth0_vlan left promiscuous mode [ 421.205740][T11187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.216764][T11187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.226840][T11187] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 421.235691][T11187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.244076][T11187] usb 3-1: config 0 descriptor?? [ 421.277705][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 421.277717][ T24] audit: type=1326 audit(2000000159.948:51232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16212 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6865d83ea9 code=0x0 [ 421.674323][T16225] input: syz0 as /devices/virtual/input/input77 [ 421.820508][ T24] audit: type=1326 audit(2000000160.488:51233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 421.867345][ T24] audit: type=1326 audit(2000000160.488:51234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 421.923538][ T24] audit: type=1326 audit(2000000160.488:51235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 421.980131][ T24] audit: type=1326 audit(2000000160.488:51236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 421.987280][T16252] syz-executor.4[16252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.004296][T16252] syz-executor.4[16252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.018561][ T24] audit: type=1326 audit(2000000160.488:51237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 422.054703][ T24] audit: type=1326 audit(2000000160.488:51238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 422.079372][ T24] audit: type=1326 audit(2000000160.488:51239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 422.103539][ T24] audit: type=1326 audit(2000000160.488:51240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 422.140864][ T24] audit: type=1326 audit(2000000160.488:51241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 422.245764][T11187] usbhid 3-1:0.0: can't add hid device: -71 [ 422.251600][T11187] usbhid: probe of 3-1:0.0 failed with error -71 [ 422.258272][T11187] usb 3-1: USB disconnect, device number 56 [ 422.945516][T16274] sch_tbf: burst 1399 is lower than device veth0_to_team mtu (1514) ! [ 423.096229][T12194] Bluetooth: hci0: command 0x1009 tx timeout [ 423.168948][T16292] input: syz0 as /devices/virtual/input/input78 [ 423.575667][T11187] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 423.870218][T16318] syz-executor.4[16318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.870256][T16318] syz-executor.4[16318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 423.883612][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 423.917162][T16320] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 423.943227][T16322] ªªªªªª: renamed from vlan0 [ 423.985744][T11187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.996619][T11187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.008724][T11187] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 424.017860][T11187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.026573][T11187] usb 3-1: config 0 descriptor?? [ 425.245808][T11187] usbhid 3-1:0.0: can't add hid device: -71 [ 425.251590][T11187] usbhid: probe of 3-1:0.0 failed with error -71 [ 425.258406][T11187] usb 3-1: USB disconnect, device number 57 [ 426.882848][T16358] syz-executor.0[16358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.882907][T16358] syz-executor.0[16358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 426.896391][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 426.992328][T16379] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 427.028976][T16371] SELinux: security_context_str_to_sid(s) failed for (dev bpf, type bpf) errno=-22 [ 427.310970][T16391] incfs: Can't find or create .index dir in ./file0 [ 427.317496][T16391] incfs: mount failed -126 [ 427.475750][ T8102] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 427.896490][ T8102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.930584][ T8102] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.940393][ T8102] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 427.949277][ T8102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.957772][ T8102] usb 4-1: config 0 descriptor?? [ 427.963434][T16400] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 428.540774][ T8102] sony 0003:054C:0268.0068: unknown main item tag 0x0 [ 428.562572][ T8102] sony 0003:054C:0268.0068: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 428.574623][ T8102] sony 0003:054C:0268.0068: failed to claim input [ 428.850400][T16454] fuse: Bad value for 'fd' [ 428.868055][T16454] incfs: Error accessing: ./file0/file0. [ 428.873785][T16454] incfs: mount failed -2 [ 428.980676][ T325] usb 4-1: USB disconnect, device number 59 [ 429.067464][T16461] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 429.076367][T16461] ext4 filesystem being mounted at /root/syzkaller-testdir1616261594/syzkaller.xorHBH/20/bus supports timestamps until 2038 (0x7fffffff) [ 429.971203][T16500] fuse: Bad value for 'fd' [ 429.981450][T16500] incfs: Error accessing: ./file0/file0. [ 429.987213][T16500] incfs: mount failed -2 [ 430.675660][T11187] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 430.705655][ T324] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 430.945635][ T324] usb 1-1: Using ep0 maxpacket: 16 [ 431.035752][T11187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.046552][T11187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.056127][T11187] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 431.064958][T11187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.073794][T11187] usb 4-1: config 0 descriptor?? [ 431.225842][ T324] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 431.234899][ T324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.242860][ T324] usb 1-1: Product: syz [ 431.246852][ T324] usb 1-1: Manufacturer: syz [ 431.251230][ T324] usb 1-1: SerialNumber: syz [ 431.258076][ T324] usb 1-1: config 0 descriptor?? [ 431.296129][ T324] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 431.303657][ T324] usb 1-1: Detected FT232H [ 431.333357][T16558] futex_wake_op: syz-executor.2 tries to shift op by -1; fix this program [ 431.505739][ T324] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 431.518975][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 431.518987][ T24] audit: type=1326 audit(2000000170.188:51271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58618c3ea9 code=0x7ffc0000 [ 431.525680][ T324] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 431.549047][ T24] audit: type=1326 audit(2000000170.188:51272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58618c3ea9 code=0x7ffc0000 [ 431.579506][ T324] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 431.579667][ T24] audit: type=1326 audit(2000000170.188:51273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f58618c3ea9 code=0x7ffc0000 [ 431.586672][ T324] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 431.617588][ T24] audit: type=1326 audit(2000000170.228:51274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58618c3ea9 code=0x7ffc0000 [ 431.630602][ T324] usb 1-1: USB disconnect, device number 58 [ 431.647262][ T24] audit: type=1326 audit(2000000170.228:51275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58618c3ea9 code=0x7ffc0000 [ 431.671299][ T24] audit: type=1326 audit(2000000170.228:51276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f58618c3ea9 code=0x7ffc0000 [ 431.695993][ T324] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 431.705424][ T324] ftdi_sio 1-1:0.0: device disconnected [ 431.712285][ T24] audit: type=1326 audit(2000000170.348:51277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58618c3ea9 code=0x7ffc0000 [ 431.746142][ T24] audit: type=1326 audit(2000000170.348:51278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58618c3ea9 code=0x7ffc0000 [ 432.035760][T11187] usbhid 4-1:0.0: can't add hid device: -71 [ 432.041565][T11187] usbhid: probe of 4-1:0.0 failed with error -71 [ 432.048674][T11187] usb 4-1: USB disconnect, device number 60 [ 432.702625][T16634] incfs: Can't find or create .index dir in ./file0 [ 432.709581][T16634] incfs: mount failed -126 [ 432.895647][ T702] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 432.967523][T16642] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 432.976347][T16642] ext4 filesystem being mounted at /root/syzkaller-testdir1616261594/syzkaller.xorHBH/54/bus supports timestamps until 2038 (0x7fffffff) [ 433.639413][ T702] usb 1-1: Using ep0 maxpacket: 8 [ 433.686396][T16653] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿ0x0000000000000000ÿÿÿÿÿÿÿÿ00000000000000000000000" or missing value [ 433.815726][ T702] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.826611][ T702] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 433.853082][ T702] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 433.985715][ T702] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 434.000724][ T702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 434.008910][ T702] usb 1-1: SerialNumber: syz [ 434.028333][T16632] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 434.046223][ T702] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 434.052746][ T702] usb-storage 1-1:1.0: USB Mass Storage device detected [ 434.092953][ T702] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 434.381982][T16700] incfs: Can't find or create .index dir in ./file0 [ 434.388942][T16700] incfs: mount failed -126 [ 434.564889][T16705] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 434.576207][T16705] netlink: 472 bytes leftover after parsing attributes in process `syz-executor.2'. [ 434.840457][T16711] FAT-fs (loop2): Unrecognized mount option "ÿÿÿÿÿÿÿÿ0x0000000000000000ÿÿÿÿÿÿÿÿ00000000000000000000000" or missing value [ 434.958392][ T8102] usb 1-1: USB disconnect, device number 59 [ 435.115782][T16727] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 435.128725][T16727] ext4 filesystem being mounted at /root/syzkaller-testdir1597552375/syzkaller.lL0o4Y/249/file0 supports timestamps until 2038 (0x7fffffff) [ 435.178096][T16727] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 435.201575][T16727] EXT4-fs error (device loop4): ext4_dirty_inode:6079: inode #2: comm syz-executor.4: mark_inode_dirty error [ 435.228513][T16727] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 435.245298][T16727] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #2: comm syz-executor.4: mark_inode_dirty error [ 435.738920][T16761] input: syz0 as /devices/virtual/input/input81 [ 435.842954][T16764] incfs: Can't find or create .index dir in ./file0 [ 435.849501][T16764] incfs: mount failed -126 [ 436.439629][T16785] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. [ 436.745803][ T54] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 436.778677][T16800] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 436.788690][T16800] ext4 filesystem being mounted at /root/syzkaller-testdir1616261594/syzkaller.xorHBH/65/file0 supports timestamps until 2038 (0x7fffffff) [ 436.819326][T16800] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 436.828277][T16800] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz-executor.2: mark_inode_dirty error [ 436.840650][T16800] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 436.849155][T16800] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz-executor.2: mark_inode_dirty error [ 437.045725][ T54] usb 1-1: Using ep0 maxpacket: 8 [ 437.056374][ T24] audit: type=1400 audit(2000000175.728:51279): avc: denied { mounton } for pid=16819 comm="syz-executor.3" path="/root/syzkaller-testdir3980361494/syzkaller.5o8qfF/237/file0/file0" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 437.205829][ T54] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.216594][ T54] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 437.226397][ T54] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 437.300146][T16842] overlayfs: statfs failed on './file0' [ 437.316050][ T54] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 437.330489][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 437.339038][ T54] usb 1-1: SerialNumber: syz [ 437.395747][T16788] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 437.416170][ T54] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 437.423100][ T54] usb-storage 1-1:1.0: USB Mass Storage device detected [ 437.433257][ T54] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 438.158786][T16878] fuse: Unknown parameter '0xffffffffffffffff' [ 438.728599][ T702] usb 1-1: USB disconnect, device number 60 [ 438.743283][T16888] overlayfs: statfs failed on './file0' [ 439.015958][ T324] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 439.905797][ T324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.916582][ T324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.930939][ T324] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 439.940124][ T324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.951587][ T324] usb 5-1: config 0 descriptor?? [ 439.989697][T16919] fuse: Unknown parameter '0xffffffffffffffff' [ 440.456023][ T324] hid (null): bogus close delimiter [ 440.675750][ T324] usb 5-1: language id specifier not provided by device, defaulting to English [ 440.877249][T16938] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,nombcache,dioread_lock,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,,errors=continue [ 440.901364][ T24] audit: type=1400 audit(2000000179.568:51280): avc: denied { setattr } for pid=16937 comm="syz-executor.2" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 441.120766][ T324] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0069/input/input82 [ 441.136609][ T324] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0069/input/input83 [ 441.152261][ T324] uclogic 0003:256C:006D.0069: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 441.351191][ T703] usb 5-1: USB disconnect, device number 36 [ 442.256101][T16976] syz-executor.2[16976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.256160][T16976] syz-executor.2[16976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.426815][T16973] F2FS-fs (loop4): Unrecognized mount option "nod…scard" or missing value [ 442.989115][T17000] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 442.998827][T17000] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.3'. [ 443.008160][T17000] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 443.017087][T16994] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 443.021820][T17000] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.3'. [ 443.024630][T16994] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 443.027745][T16994] F2FS-fs (loop2): Found nat_bits in checkpoint [ 443.074557][T16994] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 443.081444][T16994] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 443.094823][T16992] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 443.103630][T16992] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 443.395550][ T24] audit: type=1326 audit(2000000182.058:51281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17013 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 443.419897][ T24] audit: type=1326 audit(2000000182.098:51282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17013 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 443.444440][ T24] audit: type=1326 audit(2000000182.108:51283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17013 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 443.469670][ T24] audit: type=1326 audit(2000000182.138:51284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17013 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 443.482234][T17016] SELinux: security_context_str_to_sid(Õ) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 443.518616][ T24] audit: type=1326 audit(2000000182.138:51285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17013 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 443.549603][ T24] audit: type=1326 audit(2000000182.168:51286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17013 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 443.573701][ T24] audit: type=1326 audit(2000000182.168:51287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17013 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 443.606738][ T24] audit: type=1326 audit(2000000182.168:51288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17013 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 443.655658][ T24] audit: type=1326 audit(2000000182.168:51289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17013 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 443.725671][ T24] audit: type=1326 audit(2000000182.168:51290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17013 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fe5a63c9ea9 code=0x7ffc0000 [ 444.070044][T17031] device pim6reg1 entered promiscuous mode [ 444.687834][T17058] SELinux: security_context_str_to_sid(Õ) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 446.028947][T17094] SELinux: security_context_str_to_sid(Õ) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 446.369409][T17102] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 446.382919][T17102] EXT4-fs (loop4): 1 orphan inode deleted [ 446.388490][T17102] EXT4-fs (loop4): 1 truncate cleaned up [ 446.393953][T17102] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota, [ 446.395638][ T54] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 446.675645][ T54] usb 3-1: Using ep0 maxpacket: 32 [ 446.815832][ T54] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 446.826509][ T54] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 446.835972][ T54] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 447.045808][ T54] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 447.054729][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.062530][ T54] usb 3-1: Product: syz [ 447.066555][ T54] usb 3-1: Manufacturer: syz [ 447.070879][ T54] usb 3-1: SerialNumber: syz [ 447.186384][T17116] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 447.193935][T17116] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 447.202879][T17116] F2FS-fs (loop4): invalid crc value [ 447.209693][T17116] F2FS-fs (loop4): Found nat_bits in checkpoint [ 447.232212][T17116] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 447.239153][T17116] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 447.443541][T17123] attempt to access beyond end of device [ 447.443541][T17123] loop4: rw=2049, want=78360, limit=40427 [ 447.605797][ T54] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 447.637877][ T54] usb 3-1: USB disconnect, device number 58 [ 447.977523][ T6335] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 447.986319][ T6335] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 448.956702][T17170] EXT4-fs (loop2): Ignoring removed orlov option [ 448.962948][T17170] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 449.024862][T17170] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 449.052433][T17170] EXT4-fs error (device loop2): get_max_inline_xattr_value_size:68: inode #12: comm syz-executor.2: corrupt xattr in inline inode [ 449.065942][T17170] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2204: inode #12: comm syz-executor.2: corrupted in-inode xattr [ 449.083109][T16178] ================================================================== [ 449.091011][T16178] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xc67/0xc80 [ 449.098904][T16178] Read of size 4 at addr ffff888121837000 by task syz-executor.2/16178 [ 449.106959][T16178] [ 449.109140][T16178] CPU: 0 PID: 16178 Comm: syz-executor.2 Tainted: G W 5.10.214-syzkaller-00187-ge6f44899ce5d #0 [ 449.120680][T16178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 449.130572][T16178] Call Trace: [ 449.133708][T16178] dump_stack_lvl+0x1e2/0x24b [ 449.138469][T16178] ? bfq_pos_tree_add_move+0x43b/0x43b [ 449.143761][T16178] ? panic+0x80b/0x80b [ 449.147669][T16178] ? ext4_mark_iloc_dirty+0x2c23/0x3e60 [ 449.153052][T16178] print_address_description+0x81/0x3b0 [ 449.158428][T16178] kasan_report+0x179/0x1c0 [ 449.162770][T16178] ? __ext4_journal_ensure_credits+0x470/0x470 [ 449.168762][T16178] ? ext4_xattr_delete_inode+0xc67/0xc80 [ 449.174234][T16178] ? ext4_xattr_delete_inode+0xc67/0xc80 [ 449.179700][T16178] __asan_report_load4_noabort+0x14/0x20 [ 449.185162][T16178] ext4_xattr_delete_inode+0xc67/0xc80 [ 449.190477][T16178] ? sb_end_intwrite+0x110/0x110 [ 449.195230][T16178] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 449.201134][T16178] ? __kasan_check_read+0x11/0x20 [ 449.206001][T16178] ext4_evict_inode+0x1095/0x1730 [ 449.210868][T16178] ? ext4_inode_is_fast_symlink+0x360/0x360 [ 449.216584][T16178] ? inode_io_list_del_locked+0x1ad/0x210 [ 449.222139][T16178] ? _raw_spin_unlock+0x4d/0x70 [ 449.226826][T16178] ? ext4_inode_is_fast_symlink+0x360/0x360 [ 449.232554][T16178] evict+0x2a3/0x6c0 [ 449.236284][T16178] iput+0x632/0x7e0 [ 449.239930][T16178] vfs_rmdir+0x271/0x3f0 [ 449.244006][T16178] do_rmdir+0x2cf/0x5c0 [ 449.248002][T16178] ? d_delete_notify+0xd0/0xd0 [ 449.252600][T16178] ? strncpy_from_user+0x18e/0x2d0 [ 449.257571][T16178] ? getname_flags+0x1fd/0x520 [ 449.262154][T16178] __x64_sys_unlinkat+0xdf/0xf0 [ 449.266834][T16178] do_syscall_64+0x34/0x70 [ 449.271106][T16178] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 449.276826][T16178] RIP: 0033:0x7f58618c3687 [ 449.281217][T16178] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 449.300817][T16178] RSP: 002b:00007ffc9f9e6298 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 449.309053][T16178] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f58618c3687 [ 449.316863][T16178] RDX: 0000000000000200 RSI: 00007ffc9f9e7440 RDI: 00000000ffffff9c [ 449.324689][T16178] RBP: 00007f5861920636 R08: 0000000000000000 R09: 0000000000000000 [ 449.332485][T16178] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffc9f9e7440 [ 449.340294][T16178] R13: 00007f5861920636 R14: 000000000006d967 R15: 0000000000000007 [ 449.348138][T16178] [ 449.350270][T16178] The buggy address belongs to the page: [ 449.355848][T16178] page:ffffea0004860dc0 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x1 pfn:0x121837 [ 449.366159][T16178] flags: 0x4000000000000000() [ 449.370674][T16178] raw: 4000000000000000 ffffea0004aa60c8 ffffea0004f5d188 0000000000000000 [ 449.379095][T16178] raw: 0000000000000001 0000000000000000 00000000ffffff7f 0000000000000000 [ 449.387681][T16178] page dumped because: kasan: bad access detected [ 449.393944][T16178] page_owner tracks the page as freed [ 449.399147][T16178] page last allocated via order 0, migratetype Movable, gfp_mask 0x8100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|0x8000000), pid 17169, ts 449046612556, free_ts 449080696323 [ 449.415639][T16178] prep_new_page+0x166/0x180 [ 449.420059][T16178] get_page_from_freelist+0x2d8c/0x2f30 [ 449.425438][T16178] __alloc_pages_nodemask+0x435/0xaf0 [ 449.430646][T16178] wp_page_copy+0x201/0x1940 [ 449.435070][T16178] do_wp_page+0x71b/0xca0 [ 449.439239][T16178] handle_pte_fault+0x1685/0x3e30 [ 449.444099][T16178] __handle_speculative_fault+0x13a6/0x1ec0 [ 449.449844][T16178] exc_page_fault+0x234/0x5b0 [ 449.454344][T16178] asm_exc_page_fault+0x1e/0x30 [ 449.459027][T16178] page last free stack trace: [ 449.463546][T16178] free_unref_page_prepare+0x2ae/0x2d0 [ 449.468840][T16178] free_unref_page_list+0x122/0xb20 [ 449.473867][T16178] release_pages+0xea0/0xef0 [ 449.478296][T16178] free_pages_and_swap_cache+0x8a/0xa0 [ 449.483587][T16178] tlb_finish_mmu+0x177/0x320 [ 449.488100][T16178] exit_mmap+0x312/0x5c0 [ 449.492180][T16178] __mmput+0x95/0x2d0 [ 449.496000][T16178] mmput+0x59/0x170 [ 449.499664][T16178] do_exit+0xbda/0x2a50 [ 449.503811][T16178] do_group_exit+0x141/0x310 [ 449.508236][T16178] get_signal+0x10a0/0x1410 [ 449.512577][T16178] arch_do_signal_or_restart+0xbd/0x17c0 [ 449.518047][T16178] exit_to_user_mode_loop+0x9b/0xd0 [ 449.523084][T16178] syscall_exit_to_user_mode+0xc5/0x1d0 [ 449.528461][T16178] do_syscall_64+0x40/0x70 [ 449.532714][T16178] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 449.538436][T16178] [ 449.540604][T16178] Memory state around the buggy address: [ 449.546087][T16178] ffff888121836f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.553976][T16178] ffff888121836f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.561886][T16178] >ffff888121837000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 449.569770][T16178] ^ 2033/05/18 03:36:28 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 449.573680][T16178] ffff888121837080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 449.581577][T16178] ffff888121837100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 449.589469][T16178] ================================================================== [ 449.597368][T16178] Disabling lock debugging due to kernel taint