last executing test programs: 3.754099871s ago: executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x61, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9a, 0x91, 0xac, 0x0, 0x1b3d, 0x19d, 0xf36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xeb, 0x0, 0x6, 0x55, 0x9a, 0x67, 0x20, [], [{}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x40}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfa}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40}}]}}]}}]}}, 0x0) 3.124964217s ago: executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r0) 3.10959243s ago: executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_request_inode\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_request_inode\x00', r3}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 3.04226107s ago: executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2b, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000100)='U', 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000000640), &(0x7f00000006c0)=""/172}, 0x20) 3.003842845s ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000000280)) ioctl$KDSKBMODE(0xffffffffffffffff, 0x5450, 0x0) poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) chroot(0x0) 2.945289964s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) dup(r2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 2.832478251s ago: executing program 4: open(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000007f80)='./bus\x00', 0x4840, 0x0) sendfile(r1, r2, 0x0, 0x1000000201005) read$FUSE(r2, &(0x7f0000003780)={0x2020}, 0x2020) 2.796345937s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/203, 0x3}], 0x300) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r6, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000240)="60dbc0f4", 0x4}], 0x1}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, 0xffffffffffffffff, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) 2.423727543s ago: executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x8946, 0x0) 2.410833955s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='jbd2_write_superblock\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='jbd2_write_superblock\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) close(0x4) 2.3783746s ago: executing program 1: accept$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KDDISABIO(r0, 0x541b) 2.362655792s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) 2.316842699s ago: executing program 4: gettid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000240)={0x78, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, {0x4, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}}}, 0x78) close(0xffffffffffffffff) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) 2.204495686s ago: executing program 4: syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x2a08095, &(0x7f00000024c0)=ANY=[], 0x0, 0x2b0, &(0x7f00000017c0)="$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") r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800}, 0x20) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000080)={0x3, 'vlan0\x00', {}, 0x2}) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e22, 0x80000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00)\x00'], 0x30}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0xc) 1.350026945s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) 1.335789877s ago: executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x31, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1, 0xffd201}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@empty}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast}, {@multicast1}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x3}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 656.77166ms ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = eventfd2(0x0, 0x0) r2 = dup(r1) r3 = dup3(r2, r0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0x8903, &(0x7f0000000100)) 647.598601ms ago: executing program 3: r0 = socket$inet_icmp(0x2, 0x2, 0x1) fcntl$dupfd(r0, 0x0, r0) r1 = gettid() getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) signalfd(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) setsockopt$packet_drop_memb(r2, 0x102, 0x7, 0x0, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) 582.629191ms ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180100001700000000000000a54b0000850000007500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='signal_generate\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 572.224693ms ago: executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="8a96308a62e4"}]}, 0x30}}, 0x0) 562.862214ms ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mkdir(0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r5}}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/59, 0x3b) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0xc, 0x2, [{}]}, @NHA_GROUP_TYPE={0x6}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 537.121178ms ago: executing program 1: poll(0x0, 0x0, 0x64) rt_sigreturn() syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000004080)=ANY=[], 0x220) write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20}, 0xfdef) 477.116077ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000040000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 456.98991ms ago: executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x118c833, &(0x7f00000003c0), 0x4, 0x18e, &(0x7f0000000200)="$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") connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) 425.884435ms ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0xde, 0x9, 0x6, '\x00', 0xf8}, {0x0, 0x7d, 0x0, '\x00', 0xf2}, {0x40, 0x4}, {0x0, 0xa5, 0x5, '\x00', 0x8}, {0x30, 0x7, 0x3}, {0x1f, 0x0, 0xfa}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 256.123531ms ago: executing program 0: inotify_init() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) rt_sigreturn() futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) 168.318854ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x9, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 138.250029ms ago: executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x61, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9a, 0x91, 0xac, 0x0, 0x1b3d, 0x19d, 0xf36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xeb, 0x0, 0x6, 0x55, 0x9a, 0x67, 0x20, [], [{}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x40}}, {}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfa}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x40}}]}}]}}]}}, 0x0) 115.574872ms ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000ddbb59600000000000000000000000000f5ff0000000000000000000000000000feffffff00002000000000000000000000000000000000000200000000dfff0000000000000000180000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001500000000000000100073397a5f74756e00001000000000000079615330000000000000000000000000b76fb8645f736c61e4df8dd63f4316ed73697430000000002000000000000000aaaaaaaaaa0000000000feff0080c20000000000000000000000e8000000e8000000180100006c696d6974004000000000800000000002000000000000000000000000000000200000000000000000f9ff210000009400000000000000003830"]}, 0x1b2) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) kernel console output (not intermixed with test programs): ig 0 descriptor?? [ 1459.000488][T23478] loop4: detected capacity change from 0 to 256 [ 1459.183092][T23483] loop2: detected capacity change from 0 to 256 [ 1459.205493][T23477] loop3: detected capacity change from 0 to 40427 [ 1459.219904][T23477] F2FS-fs (loop3): Unrecognized mount option "ifline_xattr" or missing value [ 1460.285053][T23494] loop2: detected capacity change from 0 to 256 [ 1461.337319][T23503] loop2: detected capacity change from 0 to 256 [ 1461.488968][T23509] syz-executor.0[23509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1461.489045][T23509] syz-executor.0[23509] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1461.572501][T23512] loop4: detected capacity change from 0 to 512 [ 1462.243624][T23512] ext4: Unknown parameter 'nouser_xattr' [ 1462.324179][ T373] usb 2-1: string descriptor 0 read error: -71 [ 1463.226084][ T373] uclogic 0003:256C:006D.0110: failed retrieving string descriptor #200: -71 [ 1463.234843][ T373] uclogic 0003:256C:006D.0110: failed retrieving pen parameters: -71 [ 1463.238002][T23526] loop0: detected capacity change from 0 to 256 [ 1463.243109][ T373] uclogic 0003:256C:006D.0110: failed probing pen v2 parameters: -71 [ 1463.257774][ T373] uclogic 0003:256C:006D.0110: failed probing parameters: -71 [ 1463.265101][ T373] uclogic: probe of 0003:256C:006D.0110 failed with error -71 [ 1463.289004][ T373] usb 2-1: USB disconnect, device number 65 [ 1463.317927][ T3964] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1463.330709][T23530] overlayfs: failed to resolve './file0': -2 [ 1463.760753][T23534] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1463.966623][ T373] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1466.606515][ T373] usb 2-1: device descriptor read/all, error -71 [ 1466.976483][ T373] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1467.336573][ T373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1467.347403][ T373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.359286][ T373] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1467.385685][T23570] loop0: detected capacity change from 0 to 512 [ 1467.403149][T23570] ext4: Unknown parameter 'nouser_xattr' [ 1467.410492][ T373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.496666][ T373] usb 2-1: config 0 descriptor?? [ 1468.203246][T23582] loop3: detected capacity change from 0 to 512 [ 1468.381352][T23582] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 1468.382400][T23582] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 1468.383046][T23582] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 1468.383448][T23582] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 1468.384151][T23582] EXT4-fs (loop3): 1 orphan inode deleted [ 1468.384198][T23582] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1468.441879][T23579] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 234881024 (level 0) [ 1468.500117][T23588] overlayfs: failed to resolve './file0': -2 [ 1468.626870][T15944] EXT4-fs (loop3): unmounting filesystem. [ 1469.066487][ T19] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1469.266515][ T373] uclogic 0003:256C:006D.0111: failed retrieving string descriptor #100: -71 [ 1469.275169][ T373] uclogic 0003:256C:006D.0111: failed retrieving pen parameters: -71 [ 1469.283215][ T373] uclogic 0003:256C:006D.0111: failed probing pen v1 parameters: -71 [ 1469.291263][ T373] uclogic 0003:256C:006D.0111: failed probing parameters: -71 [ 1469.291714][T23597] loop0: detected capacity change from 0 to 40427 [ 1469.298733][ T373] uclogic: probe of 0003:256C:006D.0111 failed with error -71 [ 1469.316191][ T373] usb 2-1: USB disconnect, device number 67 [ 1469.317524][T23597] F2FS-fs (loop0): Unrecognized mount option "ifline_xattr" or missing value [ 1469.330680][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 1469.462581][ T19] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1469.470947][ T19] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1469.479680][ T19] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1469.516314][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1469.528524][ T19] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1469.538046][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1469.547630][ T19] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1469.569250][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1469.582154][ T19] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1469.592505][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.601489][ T19] usb 4-1: config 0 descriptor?? [ 1470.128397][T23610] loop0: detected capacity change from 0 to 256 [ 1470.135208][ T19] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1470.150158][T23610] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1470.167950][ T19] usb 4-1: USB disconnect, device number 70 [ 1470.181442][ T19] usblp0: removed [ 1470.273296][T23614] device pim6reg1 entered promiscuous mode [ 1470.341844][T23615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1470.844356][T23625] loop3: detected capacity change from 0 to 512 [ 1470.851013][T23625] ext4: Unknown parameter 'nouser_xattr' [ 1470.911706][T23625] loop3: detected capacity change from 0 to 256 [ 1470.918339][T23625] exfat: Unknown parameter '„eüd`@_ÄQQDgôAPçJ’§“&mÝi›NóùÀiι÷æ~Ϲ!'÷Ç齌­"∘ˆˆ—#¢˜OOó´Ø.ìw—»ïåvJ"ËÞúkI>­·®vy2"®wßSñµ/G|39·¹»·±T«U·ór¥Uߪ4w÷n®×—ÖªkÕÍùù¹×^_xua6Ë' [ 1471.003944][T23627] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1471.934544][T23635] loop3: detected capacity change from 0 to 256 [ 1472.229244][ T3964] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1472.826493][ T19] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1472.833919][ T313] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1472.949795][T23657] device pim6reg1 entered promiscuous mode [ 1473.235742][T23662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=23662 comm=syz-executor.4 [ 1473.249997][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1473.250050][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1473.272447][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.285339][ T19] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1473.295362][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.304091][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.333865][ T19] usb 1-1: config 0 descriptor?? [ 1473.339146][ T313] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1473.349863][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.360833][ T313] usb 2-1: config 0 descriptor?? [ 1473.813290][T23666] serio: Serial port ptm0 [ 1473.969478][T23669] 9pnet_fd: Insufficient options for proto=fd [ 1474.515284][T23676] loop3: detected capacity change from 0 to 512 [ 1474.522020][T23676] ext4: Unknown parameter 'nouser_xattr' [ 1474.556527][ T19] usb 1-1: string descriptor 0 read error: -71 [ 1474.572085][T23676] loop3: detected capacity change from 0 to 256 [ 1474.578727][T23676] exfat: Unknown parameter '„eüd`@_ÄQQDgôAPçJ’§“&mÝi›NóùÀiι÷æ~Ϲ!'÷Ç齌­"∘ˆˆ—#¢˜OOó´Ø.ìw—»ïåvJ"ËÞúkI>­·®vy2"®wßSñµ/G|39·¹»·±T«U·ór¥Uߪ4w÷n®×—ÖªkÕÍùù¹×^_xua6Ë' [ 1474.596154][ T19] uclogic 0003:256C:006D.0112: failed retrieving string descriptor #200: -71 [ 1474.604831][ T19] uclogic 0003:256C:006D.0112: failed retrieving pen parameters: -71 [ 1474.612684][ T19] uclogic 0003:256C:006D.0112: failed probing pen v2 parameters: -71 [ 1474.620711][ T19] uclogic 0003:256C:006D.0112: failed probing parameters: -71 [ 1474.628033][ T19] uclogic: probe of 0003:256C:006D.0112 failed with error -71 [ 1474.639608][ T19] usb 1-1: USB disconnect, device number 76 [ 1474.806531][ T313] uclogic 0003:256C:006D.0113: failed retrieving string descriptor #100: -71 [ 1474.815237][ T313] uclogic 0003:256C:006D.0113: failed retrieving pen parameters: -71 [ 1474.823703][ T313] uclogic 0003:256C:006D.0113: failed probing pen v1 parameters: -71 [ 1474.831695][ T313] uclogic 0003:256C:006D.0113: failed probing parameters: -71 [ 1474.838990][ T313] uclogic: probe of 0003:256C:006D.0113 failed with error -71 [ 1474.847266][ T313] usb 2-1: USB disconnect, device number 68 [ 1475.062015][T23683] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1475.091391][T23685] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1478.390468][T23725] loop3: detected capacity change from 0 to 512 [ 1478.402933][T23725] ext4: Unknown parameter 'nouser_xattr' [ 1478.459551][T23725] loop3: detected capacity change from 0 to 256 [ 1478.466109][T23725] exfat: Unknown parameter '„eüd`@_ÄQQDgôAPçJ’§“&mÝi›NóùÀiι÷æ~Ϲ!'÷Ç齌­"∘ˆˆ—#¢˜OOó´Ø.ìw—»ïåvJ"ËÞúkI>­·®vy2"®wßSñµ/G|39·¹»·±T«U·ór¥Uߪ4w÷n®×—ÖªkÕÍùù¹×^_xua6Ë' [ 1478.547747][T23732] loop4: detected capacity change from 0 to 512 [ 1478.611160][ T28] audit: type=1326 audit(1718758101.640:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23720 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7090c7cf29 code=0x0 [ 1478.639737][T23734] loop2: detected capacity change from 0 to 512 [ 1478.646865][T23732] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz-executor.4: inode #1: comm syz-executor.4: iget: illegal inode # [ 1478.676748][T23732] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 1 err=-117 [ 1478.691275][T23732] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz-executor.4: inode #1: comm syz-executor.4: iget: illegal inode # [ 1478.705426][T23732] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 1 err=-117 [ 1478.706620][T23734] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 1478.731875][T23727] 9pnet_fd: Insufficient options for proto=fd [ 1478.738306][T23732] EXT4-fs (loop4): 1 orphan inode deleted [ 1478.743850][T23732] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1478.753694][T23732] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 234881024 (level 0) [ 1478.829670][T23734] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 1478.843261][T23734] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 1478.877366][T23734] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 1478.906870][T23734] EXT4-fs (loop2): 1 orphan inode deleted [ 1478.916471][T23734] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1478.957952][T18659] EXT4-fs (loop4): unmounting filesystem. [ 1479.267668][T23748] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1479.297293][T18933] EXT4-fs (loop2): unmounting filesystem. [ 1479.803358][T23758] loop2: detected capacity change from 0 to 512 [ 1479.857206][T23758] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 1479.871951][T23758] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 1479.886224][T23758] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 1479.900740][T23758] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 1479.914484][T23758] EXT4-fs (loop2): 1 orphan inode deleted [ 1479.920117][T23758] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1479.956859][T23755] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 234881024 (level 0) [ 1480.152670][T23767] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1480.520913][T18933] EXT4-fs (loop2): unmounting filesystem. [ 1480.776497][ T313] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1481.925652][T23789] loop0: detected capacity change from 0 to 512 [ 1481.937017][T23789] ext4: Unknown parameter 'nouser_xattr' [ 1482.001119][T23789] loop0: detected capacity change from 0 to 256 [ 1482.007822][T23789] exfat: Unknown parameter '„eüd`@_ÄQQDgôAPçJ’§“&mÝi›NóùÀiι÷æ~Ϲ!'÷Ç齌­"∘ˆˆ—#¢˜OOó´Ø.ìw—»ïåvJ"ËÞúkI>­·®vy2"®wßSñµ/G|39·¹»·±T«U·ór¥Uߪ4w÷n®×—ÖªkÕÍùù¹×^_xua6Ë' [ 1482.076527][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1482.142540][T23796] loop3: detected capacity change from 0 to 512 [ 1482.165146][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1482.175105][ T313] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1482.196514][ T28] audit: type=1326 audit(1718758105.220:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23786 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14eb47cf29 code=0x0 [ 1482.223460][ T313] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 1482.232620][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.232784][T23796] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 1482.244539][ T313] usb 2-1: config 0 descriptor?? [ 1482.258992][T23796] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 1482.272426][T23796] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 1482.286334][T23796] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 1482.300152][T23796] EXT4-fs (loop3): 1 orphan inode deleted [ 1482.305805][T23796] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1482.321398][T23790] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 234881024 (level 0) [ 1483.928265][T15944] EXT4-fs (loop3): unmounting filesystem. [ 1484.016115][T23818] loop2: detected capacity change from 0 to 256 [ 1484.034216][T23818] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1484.076533][ T313] usbhid 2-1:0.0: can't add hid device: -71 [ 1484.082286][ T313] usbhid: probe of 2-1:0.0 failed with error -71 [ 1484.109564][ T313] usb 2-1: USB disconnect, device number 69 [ 1484.266937][T23818] device pim6reg1 entered promiscuous mode [ 1485.009612][T23843] loop1: detected capacity change from 0 to 512 [ 1485.016166][T23843] ext4: Unknown parameter 'nouser_xattr' [ 1485.087787][ T3964] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1486.100028][T23847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1486.181587][T23843] loop1: detected capacity change from 0 to 256 [ 1486.198147][T23843] exfat: Unknown parameter '„eüd`@_ÄQQDgôAPçJ’§“&mÝi›NóùÀiι÷æ~Ϲ!'÷Ç齌­"∘ˆˆ—#¢˜OOó´Ø.ìw—»ïåvJ"ËÞúkI>­·®vy2"®wßSñµ/G|39·¹»·±T«U·ór¥Uߪ4w÷n®×—ÖªkÕÍùù¹×^_xua6Ë' [ 1486.236600][ T313] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1486.403227][T23857] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1487.018372][T22844] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1487.091505][ T313] usb 3-1: Using ep0 maxpacket: 32 [ 1487.276728][ T313] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1487.289553][T23868] loop1: detected capacity change from 0 to 512 [ 1487.301595][ T313] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1487.311534][T23868] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz-executor.1: inode #1: comm syz-executor.1: iget: illegal inode # [ 1487.325815][T23868] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 1 err=-117 [ 1487.339072][T23868] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz-executor.1: inode #1: comm syz-executor.1: iget: illegal inode # [ 1487.352835][ T313] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1487.361679][T23868] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 1 err=-117 [ 1487.374158][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1487.374391][T23868] EXT4-fs (loop1): 1 orphan inode deleted [ 1487.389345][T23868] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1487.405746][T23868] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 234881024 (level 0) [ 1487.420087][ T313] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1487.429649][ T313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1487.439440][ T313] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1487.450005][ T313] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1487.463275][ T313] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1487.472233][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.483107][ T313] usb 3-1: config 0 descriptor?? [ 1487.606738][T22844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1487.624004][T22844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1487.634573][T22844] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1487.644080][T22844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.669148][T22844] usb 4-1: config 0 descriptor?? [ 1487.831385][ T313] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 73 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1487.866229][ T313] usb 3-1: USB disconnect, device number 73 [ 1487.976393][ T313] usblp0: removed [ 1487.977352][ T9848] EXT4-fs (loop1): unmounting filesystem. [ 1488.166995][T23879] loop0: detected capacity change from 0 to 256 [ 1488.175842][T23879] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1488.306543][ T335] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1488.339003][T23879] device pim6reg1 entered promiscuous mode [ 1488.916521][ T335] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1488.927239][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1488.936499][T22844] usb 4-1: string descriptor 0 read error: -71 [ 1488.938104][ T335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1488.953377][ T335] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1488.966501][T22844] uclogic 0003:256C:006D.0114: failed retrieving string descriptor #200: -71 [ 1488.975161][T22844] uclogic 0003:256C:006D.0114: failed retrieving pen parameters: -71 [ 1488.983050][T22844] uclogic 0003:256C:006D.0114: failed probing pen v2 parameters: -71 [ 1488.990960][T22844] uclogic 0003:256C:006D.0114: failed probing parameters: -71 [ 1488.998415][T22844] uclogic: probe of 0003:256C:006D.0114 failed with error -71 [ 1489.007258][T22844] usb 4-1: USB disconnect, device number 71 [ 1489.066330][ T335] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1489.075639][ T335] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1489.083698][ T335] usb 2-1: Manufacturer: syz [ 1489.089118][ T335] usb 2-1: config 0 descriptor?? [ 1489.431906][T23899] loop3: detected capacity change from 0 to 256 [ 1489.440694][T23899] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1489.528116][T23901] loop4: detected capacity change from 0 to 512 [ 1489.534738][T23901] ext4: Unknown parameter 'nouser_xattr' [ 1489.575823][ T335] appleir 0003:05AC:8243.0115: No inputs registered, leaving [ 1489.651444][ T338] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1489.703644][T23901] loop4: detected capacity change from 0 to 256 [ 1489.715436][ T335] appleir 0003:05AC:8243.0115: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1489.730712][ T338] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1489.766545][T23901] exfat: Unknown parameter '„eüd`@_ÄQQDgôAPçJ’§“&mÝi›NóùÀiι÷æ~Ϲ!'÷Ç齌­"∘ˆˆ—#¢˜OOó´Ø.ìw—»ïåvJ"ËÞúkI>­·®vy2"®wßSñµ/G|39·¹»·±T«U·ór¥Uߪ4w÷n®×—ÖªkÕÍùù¹×^_xua6Ë' [ 1489.774413][ T338] Buffer I/O error on dev loop4, logical block 0, async page read [ 1489.795087][ T335] usb 2-1: USB disconnect, device number 70 [ 1490.080224][T23908] loop0: detected capacity change from 0 to 512 [ 1490.089362][T23908] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor.0: inode #1: comm syz-executor.0: iget: illegal inode # [ 1490.103080][T23908] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 1 err=-117 [ 1490.115661][T23908] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor.0: inode #1: comm syz-executor.0: iget: illegal inode # [ 1490.129327][T23908] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 1 err=-117 [ 1490.141906][T23908] EXT4-fs (loop0): 1 orphan inode deleted [ 1490.147482][T23908] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1490.158964][T23908] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 234881024 (level 0) [ 1491.418144][T23925] loop3: detected capacity change from 0 to 512 [ 1491.485630][T23925] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 1491.528275][ T335] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1491.535715][T23925] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 1491.551147][T23925] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 1491.566111][T23925] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 1491.580053][T23925] EXT4-fs (loop3): 1 orphan inode deleted [ 1491.585604][T23925] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1491.595726][T23925] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 234881024 (level 0) [ 1491.772716][T21835] EXT4-fs (loop0): unmounting filesystem. [ 1491.796261][T15944] EXT4-fs (loop3): unmounting filesystem. [ 1491.879805][T23928] loop1: detected capacity change from 0 to 40427 [ 1491.887580][ T335] usb 5-1: Using ep0 maxpacket: 32 [ 1491.895859][T23937] loop0: detected capacity change from 0 to 256 [ 1491.897565][T23928] F2FS-fs (loop1): Unrecognized mount option "ifline_xattr" or missing value [ 1492.167117][T23937] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1492.316626][ T335] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1492.439120][ T335] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1492.453325][ T335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.468430][ T335] usb 5-1: config 0 descriptor?? [ 1492.507218][ T335] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1492.541649][T23934] device pim6reg1 entered promiscuous mode [ 1492.574595][T23943] loop1: detected capacity change from 0 to 256 [ 1492.588957][T23943] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1492.789671][T23952] loop0: detected capacity change from 0 to 256 [ 1492.800425][T23950] device pim6reg1 entered promiscuous mode [ 1492.820819][T23952] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1492.944641][T23957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.140151][T23957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.717874][T23971] overlayfs: failed to resolve './file0': -2 [ 1494.441174][T22844] usb 5-1: USB disconnect, device number 70 [ 1496.659392][T23988] loop3: detected capacity change from 0 to 512 [ 1496.668108][T23987] serio: Serial port ptm0 [ 1496.718587][T23988] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 1496.734424][T23988] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 1496.747434][T23988] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 1496.761791][T23988] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 1496.774773][T23988] EXT4-fs (loop3): 1 orphan inode deleted [ 1496.780450][T23988] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1496.791298][T23988] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 234881024 (level 0) [ 1496.946091][T15944] EXT4-fs (loop3): unmounting filesystem. [ 1496.967430][T23982] loop0: detected capacity change from 0 to 40427 [ 1496.991077][T23982] F2FS-fs (loop0): Unrecognized mount option "ifline_xattr" or missing value [ 1498.141311][T24014] loop0: detected capacity change from 0 to 256 [ 1498.151369][T24014] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1498.356776][T24020] device pim6reg1 entered promiscuous mode [ 1498.418402][T24024] loop1: detected capacity change from 0 to 256 [ 1498.512540][T24025] loop2: detected capacity change from 0 to 512 [ 1498.598964][T24025] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 1498.704365][T24030] loop4: detected capacity change from 0 to 512 [ 1498.726920][T24025] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 1498.745241][T24025] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 1498.771415][T24025] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 1498.786317][T24030] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz-executor.4: inode #1: comm syz-executor.4: iget: illegal inode # [ 1498.800715][T24030] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 1 err=-117 [ 1498.814250][T24025] EXT4-fs (loop2): 1 orphan inode deleted [ 1498.819938][T24025] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1498.826846][T24030] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz-executor.4: inode #1: comm syz-executor.4: iget: illegal inode # [ 1498.835757][T24025] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 234881024 (level 0) [ 1498.856940][T24030] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 1 err=-117 [ 1498.881774][T24030] EXT4-fs (loop4): 1 orphan inode deleted [ 1498.887411][T24030] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1499.049772][T24022] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 234881024 (level 0) [ 1499.292865][T18659] EXT4-fs (loop4): unmounting filesystem. [ 1499.391849][T18933] EXT4-fs (loop2): unmounting filesystem. [ 1499.937237][T24044] serio: Serial port ptm0 [ 1500.664236][T23036] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1500.926436][T23036] usb 2-1: Using ep0 maxpacket: 32 [ 1501.046534][T23036] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1501.057835][T23036] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1501.071422][T23036] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1501.084759][T23036] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1501.135548][T23036] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1501.145999][T23036] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1501.155961][T23036] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1501.175474][T24071] loop4: detected capacity change from 0 to 256 [ 1501.201589][T24071] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1501.256488][T23036] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1501.325437][T23036] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1501.343956][T23036] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.356666][T23036] usb 2-1: config 0 descriptor?? [ 1501.396162][T24075] overlayfs: failed to resolve './file0': -2 [ 1501.450399][T24078] device pim6reg1 entered promiscuous mode [ 1501.617859][T23036] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1501.650807][T23036] usb 2-1: USB disconnect, device number 71 [ 1501.676912][T23036] usblp0: removed [ 1502.661747][T23991] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1502.670117][T24098] loop4: detected capacity change from 0 to 512 [ 1502.678847][T24088] loop0: detected capacity change from 0 to 512 [ 1502.688552][T24088] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor.0: inode #1: comm syz-executor.0: iget: illegal inode # [ 1502.704738][T24098] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz-executor.4: inode #1: comm syz-executor.4: iget: illegal inode # [ 1502.705137][T24088] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 1 err=-117 [ 1502.757445][T24098] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 1 err=-117 [ 1502.770660][T24088] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor.0: inode #1: comm syz-executor.0: iget: illegal inode # [ 1502.784844][T24098] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz-executor.4: inode #1: comm syz-executor.4: iget: illegal inode # [ 1502.794657][T24088] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 1 err=-117 [ 1502.867234][T24088] EXT4-fs (loop0): 1 orphan inode deleted [ 1502.872826][T24088] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1502.881532][T24098] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 1 err=-117 [ 1502.904767][T24088] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 234881024 (level 0) [ 1502.991129][T24106] serio: Serial port ptm0 [ 1503.071307][T24098] EXT4-fs (loop4): 1 orphan inode deleted [ 1503.126361][T24098] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1503.147841][T24096] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 234881024 (level 0) [ 1503.192982][T21835] EXT4-fs (loop0): unmounting filesystem. [ 1503.306580][T23991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1503.352097][T23991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1503.368174][T24116] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1503.371960][T23991] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1503.398139][T18659] EXT4-fs (loop4): unmounting filesystem. [ 1503.403814][T23991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.429695][T23991] usb 3-1: config 0 descriptor?? [ 1503.924263][T24118] loop1: detected capacity change from 0 to 40427 [ 1503.937880][T24118] F2FS-fs (loop1): Unrecognized mount option "ifline_xattr" or missing value [ 1503.986713][T23991] hid (null): bogus close delimiter [ 1505.406503][T23991] usb 3-1: string descriptor 0 read error: -71 [ 1505.436694][T23991] uclogic 0003:256C:006D.0116: failed retrieving string descriptor #200: -71 [ 1505.464406][T24136] loop2: detected capacity change from 0 to 256 [ 1505.470912][T23991] uclogic 0003:256C:006D.0116: failed retrieving pen parameters: -71 [ 1505.481453][T24136] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1505.493640][T23991] uclogic 0003:256C:006D.0116: failed probing pen v2 parameters: -71 [ 1505.501563][T23991] uclogic 0003:256C:006D.0116: failed probing parameters: -71 [ 1505.510704][T23991] uclogic: probe of 0003:256C:006D.0116 failed with error -71 [ 1505.526118][T23991] usb 3-1: USB disconnect, device number 74 [ 1505.924124][T24137] loop4: detected capacity change from 0 to 40427 [ 1505.979948][T24137] F2FS-fs (loop4): Unrecognized mount option "ifline_xattr" or missing value [ 1506.026539][ T313] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1506.532398][ T313] usb 2-1: Using ep0 maxpacket: 32 [ 1506.670455][T24163] serio: Serial port ptm0 [ 1507.506706][ T313] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1507.733586][ T313] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1507.733613][ T313] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1507.733664][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1507.733685][ T313] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1507.733708][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1507.733729][ T313] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1507.733750][ T313] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1507.733782][ T313] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1507.733804][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.743114][ T313] usb 2-1: config 0 descriptor?? [ 1507.883363][T24180] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1507.987456][ T313] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1508.011458][ T313] usb 2-1: USB disconnect, device number 72 [ 1508.026663][ T313] usblp0: removed [ 1508.304766][T24191] loop3: detected capacity change from 0 to 256 [ 1508.310951][ T6] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1508.342865][T24191] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1508.368550][T24187] loop2: detected capacity change from 0 to 40427 [ 1508.385830][T24187] F2FS-fs (loop2): Unrecognized mount option "ifline_xattr" or missing value [ 1508.676903][T23036] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1508.876501][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1508.887244][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1508.896773][ T6] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1508.905591][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.914222][ T6] usb 1-1: config 0 descriptor?? [ 1508.936530][T23036] usb 4-1: Using ep0 maxpacket: 32 [ 1509.056501][T23036] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1509.064779][T23036] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1509.075406][T23036] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1509.084455][T23036] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1509.086500][T22844] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1509.136461][T23036] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1509.146037][T23036] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1509.155543][T23036] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1509.171531][T23036] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1509.184437][T23036] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1509.193361][T23036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.201887][T23036] usb 4-1: config 0 descriptor?? [ 1509.446753][ T6] hid (null): bogus close delimiter [ 1509.598489][T24209] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1509.666508][ T6] usb 1-1: language id specifier not provided by device, defaulting to English [ 1509.667729][T23036] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1509.686562][T22844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1509.692440][T23036] usb 4-1: USB disconnect, device number 72 [ 1509.702822][T22844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1509.705089][T23036] usblp0: removed [ 1509.719127][T22844] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1509.728156][T22844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.739928][T22844] usb 2-1: config 0 descriptor?? [ 1510.224126][ T6] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0117/input/input62 [ 1510.242496][ T6] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0117/input/input63 [ 1510.259458][ T6] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0117/input/input64 [ 1510.274750][ T6] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0117/input/input65 [ 1510.290847][ T6] uclogic 0003:256C:006D.0117: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 1510.494714][T24219] serio: Serial port ptm0 [ 1510.525820][ T335] usb 1-1: USB disconnect, device number 77 [ 1510.724067][T24223] loop3: detected capacity change from 0 to 512 [ 1510.732885][T24223] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 1510.746671][T24223] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 1510.759552][T24223] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 1510.773521][T24223] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 1510.786576][T24223] EXT4-fs (loop3): 1 orphan inode deleted [ 1510.792301][T24223] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1510.808908][T24223] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 234881024 (level 0) [ 1510.965286][T24229] overlayfs: failed to resolve './file1': -2 [ 1511.126500][T22844] uclogic 0003:256C:006D.0118: failed retrieving string descriptor #100: -71 [ 1511.135149][T22844] uclogic 0003:256C:006D.0118: failed retrieving pen parameters: -71 [ 1511.143160][T22844] uclogic 0003:256C:006D.0118: failed probing pen v1 parameters: -71 [ 1511.151056][T22844] uclogic 0003:256C:006D.0118: failed probing parameters: -71 [ 1511.158341][T22844] uclogic: probe of 0003:256C:006D.0118 failed with error -71 [ 1511.170013][T22844] usb 2-1: USB disconnect, device number 73 [ 1511.299087][T15944] EXT4-fs (loop3): unmounting filesystem. [ 1511.731621][T24243] overlayfs: failed to resolve './file0': -2 [ 1511.825383][T24248] loop1: detected capacity change from 0 to 256 [ 1511.850014][T24248] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1512.177273][T24253] device pim6reg1 entered promiscuous mode [ 1512.556451][T23036] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1512.709275][T24266] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1512.718820][T24266] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1512.731207][T24267] device pim6reg1 entered promiscuous mode [ 1512.800530][T24269] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1513.266668][T23036] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1513.359933][T23036] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1513.376804][T23036] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1513.397371][T23036] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.417274][T23036] usb 1-1: config 0 descriptor?? [ 1513.906681][T23036] hid (null): bogus close delimiter [ 1514.126505][T23036] usb 1-1: language id specifier not provided by device, defaulting to English [ 1514.563841][T23036] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0119/input/input66 [ 1514.590957][T23036] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0119/input/input67 [ 1514.613909][T23036] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0119/input/input68 [ 1514.637044][T23036] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0119/input/input69 [ 1514.676301][T23036] uclogic 0003:256C:006D.0119: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 1514.699323][T24301] loop2: detected capacity change from 0 to 512 [ 1514.733277][T24301] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 1514.762214][T22844] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1514.772285][T24301] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 1514.787918][T24301] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 1514.793047][T23036] usb 1-1: USB disconnect, device number 78 [ 1514.807650][T24301] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 1514.839675][T24301] EXT4-fs (loop2): 1 orphan inode deleted [ 1514.867374][T24301] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1515.395294][T18933] EXT4-fs (loop2): unmounting filesystem. [ 1515.406487][T22844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1515.412710][T24311] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1515.417261][T22844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1515.426481][T24311] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1515.436303][T22844] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1515.728398][T22844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.741097][T22844] usb 4-1: config 0 descriptor?? [ 1516.092753][T24318] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1516.347841][T24330] device pim6reg1 entered promiscuous mode [ 1516.644436][T24337] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1517.266504][T22844] uclogic 0003:256C:006D.011A: failed retrieving string descriptor #100: -71 [ 1517.275136][T22844] uclogic 0003:256C:006D.011A: failed retrieving pen parameters: -71 [ 1517.315153][T22844] uclogic 0003:256C:006D.011A: failed probing pen v1 parameters: -71 [ 1517.326454][T22844] uclogic 0003:256C:006D.011A: failed probing parameters: -71 [ 1517.341780][T22844] uclogic: probe of 0003:256C:006D.011A failed with error -71 [ 1517.361183][T22844] usb 4-1: USB disconnect, device number 73 [ 1518.103700][T24346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.113409][T24346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.121877][T24346] device bridge_slave_0 entered promiscuous mode [ 1518.128817][T24346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.135730][T24346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.143579][T24346] device bridge_slave_1 entered promiscuous mode [ 1518.250611][T24361] loop2: detected capacity change from 0 to 512 [ 1518.322845][T24361] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 1518.330543][T24346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.343189][T24346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1518.363587][T24361] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 1518.376366][T24361] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 1518.378190][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.411479][T24361] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 1518.424046][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1518.431450][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1518.448973][T23991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1518.457580][T23991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1518.465612][T23991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.472481][T23991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1518.473979][T24361] EXT4-fs (loop2): 1 orphan inode deleted [ 1518.480002][T23991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1518.493725][T23991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.500580][T23991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1518.508110][T24361] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1518.525157][T22844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1518.538086][T22844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1518.578524][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1518.596791][ T6] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1518.600166][T24346] device veth0_vlan entered promiscuous mode [ 1518.631350][T23036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1518.647221][T23036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1518.673705][T23036] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1518.687905][ T9002] device bridge_slave_1 left promiscuous mode [ 1518.700278][ T9002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.720258][ T9002] device bridge_slave_0 left promiscuous mode [ 1518.731354][ T9002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.746345][ T9002] device veth1_macvtap left promiscuous mode [ 1518.792381][T18933] EXT4-fs (loop2): unmounting filesystem. [ 1519.206527][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1519.217552][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1519.227611][ T6] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1519.236987][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.249015][ T6] usb 1-1: config 0 descriptor?? [ 1519.252402][T24346] device veth1_macvtap entered promiscuous mode [ 1519.260755][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1519.268776][T24372] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1519.282787][T22844] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1519.293678][T22844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1519.316102][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1519.326332][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1519.341119][T24381] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1519.676470][T22844] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1520.056642][T22844] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1520.067535][T22844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1520.078322][T22844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1520.088003][T22844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1520.196765][T22844] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1520.205727][T22844] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1520.213611][T22844] usb 4-1: Manufacturer: syz [ 1520.221885][T22844] usb 4-1: config 0 descriptor?? [ 1520.236531][ T6] usb 1-1: string descriptor 0 read error: -71 [ 1520.267679][ T6] uclogic 0003:256C:006D.011B: failed retrieving string descriptor #200: -71 [ 1520.276531][ T6] uclogic 0003:256C:006D.011B: failed retrieving pen parameters: -71 [ 1520.284399][ T6] uclogic 0003:256C:006D.011B: failed probing pen v2 parameters: -71 [ 1520.292420][ T6] uclogic 0003:256C:006D.011B: failed probing parameters: -71 [ 1520.299820][ T6] uclogic: probe of 0003:256C:006D.011B failed with error -71 [ 1520.307123][ T313] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1520.647625][ T6] usb 1-1: USB disconnect, device number 79 [ 1520.827415][T22844] appleir 0003:05AC:8243.011C: No inputs registered, leaving [ 1520.835748][T22844] appleir 0003:05AC:8243.011C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1520.971218][T24407] loop0: detected capacity change from 0 to 40427 [ 1520.978438][T24407] F2FS-fs (loop0): Unrecognized mount option "ifline_xattr" or missing value [ 1521.034147][ T373] usb 4-1: USB disconnect, device number 74 [ 1521.046495][ T313] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1521.068052][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1521.090585][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1521.100340][ T313] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1521.186534][ T313] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1521.195445][ T313] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1521.203604][ T313] usb 2-1: Manufacturer: syz [ 1521.426593][ T313] usb 2-1: config 0 descriptor?? [ 1521.566541][T22844] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1522.128431][ T313] appleir 0003:05AC:8243.011D: No inputs registered, leaving [ 1522.140183][ T313] appleir 0003:05AC:8243.011D: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1522.176459][T22844] usb 5-1: Using ep0 maxpacket: 32 [ 1522.240613][ T313] usb 2-1: USB disconnect, device number 74 [ 1522.347952][T22844] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1522.361951][T22844] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1522.370397][T22844] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1522.379225][T22844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1522.386673][T24429] loop0: detected capacity change from 0 to 512 [ 1522.388652][T22844] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1522.404739][T24430] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1522.413262][T24430] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1522.430357][T22844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1522.440246][T22844] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1522.441110][T24429] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor.0: inode #1: comm syz-executor.0: iget: illegal inode # [ 1522.453967][T22844] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1522.463472][T24429] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 1 err=-117 [ 1522.489266][T24429] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor.0: inode #1: comm syz-executor.0: iget: illegal inode # [ 1522.503551][T24429] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 1 err=-117 [ 1522.587737][T24429] EXT4-fs (loop0): 1 orphan inode deleted [ 1522.614416][T24429] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1522.713208][T22844] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1522.722126][T22844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.730618][T22844] usb 5-1: config 0 descriptor?? [ 1522.987811][T22844] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1523.018780][T22844] usb 5-1: USB disconnect, device number 71 [ 1523.039528][T22844] usblp0: removed [ 1523.149738][T21835] EXT4-fs (loop0): unmounting filesystem. [ 1523.165210][T24442] loop0: detected capacity change from 0 to 256 [ 1523.625172][T24448] loop2: detected capacity change from 0 to 40427 [ 1523.632199][T24448] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1523.639876][T24448] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1523.648628][T24448] F2FS-fs (loop2): invalid crc value [ 1523.655066][T24448] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1523.696742][T24448] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1523.703623][T24448] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1523.881596][ T28] audit: type=1326 audit(1718758146.910:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24454 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7090c7cf29 code=0x0 [ 1523.966531][T22844] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1524.139584][T13942] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1524.148424][T24465] loop0: detected capacity change from 0 to 40427 [ 1524.148942][T13942] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1524.167890][T24465] F2FS-fs (loop0): Unrecognized mount option "ifline_xattr" or missing value [ 1524.325664][T24471] loop3: detected capacity change from 0 to 512 [ 1524.366879][T22844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1524.381966][T22844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1524.393733][T22844] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1524.403765][T24471] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 1524.417443][T22844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.587864][T24471] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 1524.677702][T22844] usb 5-1: config 0 descriptor?? [ 1524.683034][T24471] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 1524.697083][T24471] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 1524.730026][T24471] EXT4-fs (loop3): 1 orphan inode deleted [ 1524.747116][T24471] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1524.774915][T24468] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 234881024 (level 0) [ 1525.516463][ T6] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1525.517108][T15944] EXT4-fs (loop3): unmounting filesystem. [ 1525.849776][T24498] loop0: detected capacity change from 0 to 512 [ 1525.922023][T22844] hid (null): bogus close delimiter [ 1525.967791][T24498] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor.0: inode #1: comm syz-executor.0: iget: illegal inode # [ 1526.022376][T24498] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 1 err=-117 [ 1526.036472][T22844] usb 5-1: language id specifier not provided by device, defaulting to English [ 1526.046452][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 1526.068559][T24498] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor.0: inode #1: comm syz-executor.0: iget: illegal inode # [ 1526.122783][T24498] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 1 err=-117 [ 1526.144436][T24498] EXT4-fs (loop0): 1 orphan inode deleted [ 1526.150058][T24498] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1526.176495][ T6] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1526.184691][ T6] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1526.193152][ T6] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1526.201897][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1526.211342][ T6] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1526.220802][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1526.230340][ T6] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1526.240036][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1526.252835][ T6] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1526.261695][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.270126][ T6] usb 2-1: config 0 descriptor?? [ 1526.455537][T21835] EXT4-fs (loop0): unmounting filesystem. [ 1526.463102][T22844] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.011E/input/input70 [ 1526.485499][T24507] loop0: detected capacity change from 0 to 256 [ 1526.504098][T22844] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.011E/input/input71 [ 1526.521386][T22844] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.011E/input/input72 [ 1526.547126][ T6] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 75 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1526.565383][T22844] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.011E/input/input73 [ 1526.581931][ T6] usb 2-1: USB disconnect, device number 75 [ 1526.589536][ T6] usblp0: removed [ 1526.608230][T22844] uclogic 0003:256C:006D.011E: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 1526.893342][T22844] usb 5-1: USB disconnect, device number 72 [ 1527.648090][T24515] loop3: detected capacity change from 0 to 40427 [ 1527.694081][T24515] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1527.701765][T24515] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1527.709784][ T28] audit: type=1326 audit(1718758150.730:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24523 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7090c7cf29 code=0x0 [ 1527.716043][T24520] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1527.740524][T24515] F2FS-fs (loop3): invalid crc value [ 1527.748632][T24515] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1527.786243][T24515] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1527.793218][T24515] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1527.929561][T24527] loop2: detected capacity change from 0 to 40427 [ 1527.939520][T24527] F2FS-fs (loop2): Unrecognized mount option "ifline_xattr" or missing value [ 1528.753799][T13942] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1528.763064][T13942] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1529.827494][T24568] loop4: detected capacity change from 0 to 256 [ 1529.937790][T24572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1530.225327][ T6] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1530.233296][T22844] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1530.636634][ T6] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1530.647363][T22844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1530.658268][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1530.669371][T22844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1530.703390][T22844] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1530.708240][T24578] loop4: detected capacity change from 0 to 256 [ 1530.712277][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1530.728181][T22844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.736179][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1530.750488][T22844] usb 4-1: config 0 descriptor?? [ 1530.778531][T24579] overlayfs: failed to resolve './file0': -2 [ 1530.836519][ T6] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1530.845413][ T6] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1530.853328][ T6] usb 2-1: Manufacturer: syz [ 1530.859824][ T6] usb 2-1: config 0 descriptor?? [ 1531.042711][T24583] loop0: detected capacity change from 0 to 256 [ 1531.166272][ T28] audit: type=1326 audit(1718758154.190:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24584 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb0f07cf29 code=0x0 [ 1531.413278][ T6] appleir 0003:05AC:8243.011F: No inputs registered, leaving [ 1531.422396][ T6] appleir 0003:05AC:8243.011F: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1531.845360][T22844] usb 4-1: string descriptor 0 read error: -71 [ 1531.860382][ T6] usb 2-1: USB disconnect, device number 76 [ 1531.876538][T22844] uclogic 0003:256C:006D.0120: failed retrieving string descriptor #200: -71 [ 1531.885340][T22844] uclogic 0003:256C:006D.0120: failed retrieving pen parameters: -71 [ 1531.893474][T22844] uclogic 0003:256C:006D.0120: failed probing pen v2 parameters: -71 [ 1531.901805][T22844] uclogic 0003:256C:006D.0120: failed probing parameters: -71 [ 1531.909314][T22844] uclogic: probe of 0003:256C:006D.0120 failed with error -71 [ 1531.920418][T22844] usb 4-1: USB disconnect, device number 75 [ 1531.993333][T24595] loop0: detected capacity change from 0 to 40427 [ 1532.007904][T24595] F2FS-fs (loop0): Unrecognized mount option "ifline_xattr" or missing value [ 1532.016707][T24597] fuse: Invalid rootmode [ 1532.022961][ T28] audit: type=1326 audit(1718758155.050:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24596 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb0f07cf29 code=0x0 [ 1532.124219][T24598] 9pnet_fd: Insufficient options for proto=fd [ 1533.858651][T24626] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1534.219043][T24618] loop3: detected capacity change from 0 to 40427 [ 1534.247847][T24618] F2FS-fs (loop3): Unrecognized mount option "ifline_xattr" or missing value [ 1534.341305][T24633] overlayfs: failed to resolve './file0': -2 [ 1534.376962][T24635] loop1: detected capacity change from 0 to 256 [ 1534.684915][ T28] audit: type=1326 audit(1718758157.710:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24638 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b24a7cf29 code=0x0 [ 1534.820181][T24642] syz-executor.3[24642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1534.820264][T24642] syz-executor.3[24642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1535.378528][T24653] loop4: detected capacity change from 0 to 256 [ 1535.575589][ T335] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1536.335079][T24668] overlayfs: failed to resolve './file0': -2 [ 1536.612192][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1536.626712][ T335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1536.636938][ T335] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1536.647963][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1536.656678][ T335] usb 1-1: config 0 descriptor?? [ 1536.816767][T24682] loop3: detected capacity change from 0 to 256 [ 1536.835388][T24682] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1537.245783][T24685] device pim6reg1 entered promiscuous mode [ 1537.390370][T24688] loop2: detected capacity change from 0 to 256 [ 1537.456700][ T3964] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1537.944140][T24696] overlayfs: failed to resolve './file0': -2 [ 1537.967681][T24698] fuse: Bad value for 'fd' [ 1537.973713][ T28] audit: type=1326 audit(1718758161.000:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24697 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f819827cf29 code=0x0 [ 1538.138632][ T335] usb 1-1: string descriptor 0 read error: -71 [ 1538.151314][T24701] 9pnet_fd: Insufficient options for proto=fd [ 1538.176561][ T335] uclogic 0003:256C:006D.0121: failed retrieving string descriptor #200: -71 [ 1538.327149][ T335] uclogic 0003:256C:006D.0121: failed retrieving pen parameters: -71 [ 1538.335215][ T335] uclogic 0003:256C:006D.0121: failed probing pen v2 parameters: -71 [ 1538.343436][ T335] uclogic 0003:256C:006D.0121: failed probing parameters: -71 [ 1538.351244][ T335] uclogic: probe of 0003:256C:006D.0121 failed with error -71 [ 1538.359418][ T335] usb 1-1: USB disconnect, device number 80 [ 1538.676112][T24708] syz-executor.1[24708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1538.676184][T24708] syz-executor.1[24708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1540.236498][ T4280] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1540.437293][T24738] loop0: detected capacity change from 0 to 256 [ 1540.477209][ T3964] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1540.550705][T24741] serio: Serial port ptm0 [ 1543.446445][ T4280] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1543.453841][ T4280] usb 5-1: can't read configurations, error -71 [ 1543.480807][T24771] fuse: Bad value for 'fd' [ 1543.485536][T24773] syz-executor.1[24773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1543.485604][T24773] syz-executor.1[24773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1543.498824][T24761] overlayfs: failed to resolve './file0': -2 [ 1544.202307][ T28] audit: type=1326 audit(1718758167.230:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24767 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb0f07cf29 code=0x0 [ 1545.028096][T24783] 9pnet_fd: Insufficient options for proto=fd [ 1545.596460][T24796] serio: Serial port ptm0 [ 1546.037044][T24798] loop3: detected capacity change from 0 to 512 [ 1546.138690][T24798] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 1546.156711][T24798] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 1546.182481][T24798] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 1546.246606][T24798] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 1546.304983][T24798] EXT4-fs (loop3): 1 orphan inode deleted [ 1546.322825][T24798] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1546.436491][T22665] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1546.806625][T22665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1546.834200][T22665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1546.872221][T22665] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1546.920224][T22665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.097565][T24819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1547.118416][T22665] usb 5-1: config 0 descriptor?? [ 1547.200591][T15944] EXT4-fs (loop3): unmounting filesystem. [ 1547.516436][T24749] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1547.906479][T24749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1547.917175][T24749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1547.932075][T24749] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1547.941015][T24749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.956877][T24749] usb 4-1: config 0 descriptor?? [ 1548.136597][T22665] usb 5-1: string descriptor 0 read error: -71 [ 1548.156462][T22665] uclogic 0003:256C:006D.0122: failed retrieving string descriptor #200: -71 [ 1548.165231][T22665] uclogic 0003:256C:006D.0122: failed retrieving pen parameters: -71 [ 1548.177316][T22665] uclogic 0003:256C:006D.0122: failed probing pen v2 parameters: -71 [ 1548.185308][T22665] uclogic 0003:256C:006D.0122: failed probing parameters: -71 [ 1548.192622][T22665] uclogic: probe of 0003:256C:006D.0122 failed with error -71 [ 1548.200768][T22665] usb 5-1: USB disconnect, device number 75 [ 1548.436461][ T4280] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1548.606806][T24836] fuse: Bad value for 'fd' [ 1548.612760][ T28] audit: type=1326 audit(1718758171.640:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24835 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb0f07cf29 code=0x0 [ 1548.715743][T24839] 9pnet_fd: Insufficient options for proto=fd [ 1548.936512][ T4280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1548.947301][ T4280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1548.956876][ T4280] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1548.965791][ T4280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.976003][ T4280] usb 2-1: config 0 descriptor?? [ 1549.068557][T24844] overlayfs: failed to resolve './file0': -2 [ 1549.316556][T24749] uclogic 0003:256C:006D.0123: failed retrieving string descriptor #100: -71 [ 1549.325373][T24749] uclogic 0003:256C:006D.0123: failed retrieving pen parameters: -71 [ 1549.334299][T24749] uclogic 0003:256C:006D.0123: failed probing pen v1 parameters: -71 [ 1549.343576][T24749] uclogic 0003:256C:006D.0123: failed probing parameters: -71 [ 1549.351963][T24749] uclogic: probe of 0003:256C:006D.0123 failed with error -71 [ 1549.378864][T24749] usb 4-1: USB disconnect, device number 76 [ 1549.715798][T24853] serio: Serial port ptm0 [ 1549.756512][T23036] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1550.236475][T23036] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1550.247246][T23036] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1550.256754][T23036] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1550.265569][T23036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.274119][T23036] usb 5-1: config 0 descriptor?? [ 1550.433079][ T4280] uclogic 0003:256C:006D.0124: failed retrieving string descriptor #100: -71 [ 1550.441821][ T4280] uclogic 0003:256C:006D.0124: failed retrieving pen parameters: -71 [ 1550.449807][ T4280] uclogic 0003:256C:006D.0124: failed probing pen v1 parameters: -71 [ 1550.457873][ T4280] uclogic 0003:256C:006D.0124: failed probing parameters: -71 [ 1550.465583][ T4280] uclogic: probe of 0003:256C:006D.0124 failed with error -71 [ 1550.474618][ T4280] usb 2-1: USB disconnect, device number 77 [ 1550.661002][T24867] loop2: detected capacity change from 0 to 512 [ 1550.677457][T24867] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 1550.691464][T24867] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 1550.704167][T24867] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 1550.756665][T23036] hid (null): bogus close delimiter [ 1550.762469][T24867] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 1550.800598][T24867] EXT4-fs (loop2): 1 orphan inode deleted [ 1550.810070][T24867] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1550.966612][T23036] usb 5-1: language id specifier not provided by device, defaulting to English [ 1551.424497][T23036] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0125/input/input74 [ 1551.449771][T23036] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0125/input/input75 [ 1551.478094][T23036] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0125/input/input76 [ 1551.486511][ T4280] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1551.502971][T23036] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0125/input/input77 [ 1551.521145][T18933] EXT4-fs (loop2): unmounting filesystem. [ 1551.582229][T23036] uclogic 0003:256C:006D.0125: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 1551.615042][T24749] usb 5-1: USB disconnect, device number 76 [ 1551.876730][ T28] audit: type=1326 audit(1718758174.850:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24889 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f819827cf29 code=0x0 [ 1551.925274][T24892] 9pnet_fd: Insufficient options for proto=fd [ 1552.246494][ T4280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1552.326088][ T4280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1552.335715][ T4280] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1552.344909][ T4280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.353663][ T4280] usb 2-1: config 0 descriptor?? [ 1552.663370][T24906] serio: Serial port ptm0 [ 1553.277801][T24916] loop4: detected capacity change from 0 to 256 [ 1553.291411][T24916] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1553.432328][T24922] loop0: detected capacity change from 0 to 256 [ 1553.796522][ T4280] usb 2-1: string descriptor 0 read error: -71 [ 1553.816532][ T4280] uclogic 0003:256C:006D.0126: failed retrieving string descriptor #200: -71 [ 1553.825372][ T4280] uclogic 0003:256C:006D.0126: failed retrieving pen parameters: -71 [ 1553.839790][ T4280] uclogic 0003:256C:006D.0126: failed probing pen v2 parameters: -71 [ 1553.847963][ T4280] uclogic 0003:256C:006D.0126: failed probing parameters: -71 [ 1553.855445][ T4280] uclogic: probe of 0003:256C:006D.0126 failed with error -71 [ 1553.870836][ T4280] usb 2-1: USB disconnect, device number 78 [ 1554.566475][ T373] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1554.666476][ T4280] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1554.956695][ T373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1554.980971][ T373] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.991063][ T373] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1555.000157][ T373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.013619][ T373] usb 2-1: config 0 descriptor?? [ 1555.073541][ T28] audit: type=1326 audit(1718758178.100:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24946 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb0f07cf29 code=0x0 [ 1555.175272][T24948] 9pnet_fd: Insufficient options for proto=fd [ 1555.276556][ T4280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.287544][ T4280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1555.297152][ T4280] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1555.305966][ T4280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.314387][ T4280] usb 3-1: config 0 descriptor?? [ 1555.596692][ T373] usbhid 2-1:0.0: can't add hid device: -71 [ 1555.602476][ T373] usbhid: probe of 2-1:0.0 failed with error -71 [ 1555.609347][ T373] usb 2-1: USB disconnect, device number 79 [ 1555.806805][ T4280] hid (null): bogus close delimiter [ 1556.218380][T24961] serio: Serial port ptm0 [ 1556.421838][ T4280] usb 3-1: language id specifier not provided by device, defaulting to English [ 1556.435033][T24969] loop3: detected capacity change from 0 to 256 [ 1556.443839][T24969] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1556.644547][T24972] device pim6reg1 entered promiscuous mode [ 1556.912350][T24975] loop0: detected capacity change from 0 to 256 [ 1556.919256][ T4280] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0127/input/input78 [ 1556.932030][ T4280] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0127/input/input79 [ 1556.946170][T24975] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1556.951017][ T4280] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0127/input/input80 [ 1556.989422][ T4280] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0127/input/input81 [ 1557.008096][ T4280] uclogic 0003:256C:006D.0127: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 1557.022262][ T4280] usb 3-1: USB disconnect, device number 75 [ 1557.379786][T24984] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1557.907461][T13498] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1558.585536][T24992] loop0: detected capacity change from 0 to 40427 [ 1558.639461][T24992] F2FS-fs (loop0): Unrecognized mount option "ifline_xattr" or missing value [ 1558.654579][ T28] audit: type=1326 audit(1718758181.660:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24998 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f819827cf29 code=0x0 [ 1558.737212][ T3964] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1558.737487][T25004] 9pnet_fd: Insufficient options for proto=fd [ 1559.029804][ T4280] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1559.079395][T13498] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1559.090562][T13498] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1559.100323][T13498] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1559.109362][T13498] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.119594][T13498] usb 2-1: config 0 descriptor?? [ 1559.456593][ T4280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1559.467497][ T4280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1559.477097][ T4280] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1559.485888][ T4280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.506471][T23036] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1559.559348][T25016] serio: Serial port ptm0 [ 1559.721579][ T4280] usb 5-1: config 0 descriptor?? [ 1559.866426][T23036] usb 1-1: Using ep0 maxpacket: 32 [ 1559.986466][T23036] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1559.996636][T23036] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1560.009285][T23036] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1560.018080][T23036] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.026443][T23036] usb 1-1: config 0 descriptor?? [ 1560.066892][T23036] hub 1-1:0.0: bad descriptor, ignoring hub [ 1560.072660][T23036] hub: probe of 1-1:0.0 failed with error -5 [ 1560.078727][T23036] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1560.216592][T13498] usb 2-1: string descriptor 0 read error: -71 [ 1560.246535][T13498] uclogic 0003:256C:006D.0128: failed retrieving string descriptor #200: -71 [ 1560.255274][T13498] uclogic 0003:256C:006D.0128: failed retrieving pen parameters: -71 [ 1560.263469][T13498] uclogic 0003:256C:006D.0128: failed probing pen v2 parameters: -71 [ 1560.273948][T13498] uclogic 0003:256C:006D.0128: failed probing parameters: -71 [ 1560.281511][T13498] uclogic: probe of 0003:256C:006D.0128 failed with error -71 [ 1560.288959][ T4280] usbhid 5-1:0.0: can't add hid device: -71 [ 1560.294960][ T4280] usbhid: probe of 5-1:0.0 failed with error -71 [ 1560.303099][ T4280] usb 5-1: USB disconnect, device number 77 [ 1560.309841][T13498] usb 2-1: USB disconnect, device number 80 [ 1560.611357][T25031] loop2: detected capacity change from 0 to 256 [ 1560.668310][T25031] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1561.587454][T25046] overlayfs: failed to resolve './file0': -2 [ 1562.267553][T25056] loop4: detected capacity change from 0 to 256 [ 1562.453411][ T335] usb 1-1: USB disconnect, device number 81 [ 1562.524431][T25065] serio: Serial port ptm0 [ 1563.160436][T25080] loop0: detected capacity change from 0 to 256 [ 1563.169952][T25080] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1563.226450][T23849] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1563.245440][T25082] loop2: detected capacity change from 0 to 256 [ 1563.254318][T25082] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1563.329536][T25084] device pim6reg1 entered promiscuous mode [ 1563.406464][ T335] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1563.696476][T23849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1563.707240][T23849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1563.716752][T23849] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1563.725588][T23849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.733957][T23849] usb 2-1: config 0 descriptor?? [ 1563.766554][ T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1563.777325][ T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1563.802437][ T335] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1563.811415][ T335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.819954][ T335] usb 5-1: config 0 descriptor?? [ 1564.656500][ T335] usbhid 5-1:0.0: can't add hid device: -71 [ 1564.662370][ T335] usbhid: probe of 5-1:0.0 failed with error -71 [ 1564.669367][ T335] usb 5-1: USB disconnect, device number 78 [ 1564.684752][T25103] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1565.056794][T23849] usb 2-1: string descriptor 0 read error: -71 [ 1565.086471][T23849] uclogic 0003:256C:006D.0129: failed retrieving string descriptor #200: -71 [ 1565.095155][T23849] uclogic 0003:256C:006D.0129: failed retrieving pen parameters: -71 [ 1565.096444][T22665] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1565.103267][T23849] uclogic 0003:256C:006D.0129: failed probing pen v2 parameters: -71 [ 1565.118265][T23849] uclogic 0003:256C:006D.0129: failed probing parameters: -71 [ 1565.125592][T23849] uclogic: probe of 0003:256C:006D.0129 failed with error -71 [ 1565.136457][T23849] usb 2-1: USB disconnect, device number 81 [ 1565.346488][T22665] usb 3-1: Using ep0 maxpacket: 32 [ 1565.466507][T22665] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1565.476723][T22665] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1565.489512][T22665] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1565.498437][T22665] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.507048][T22665] usb 3-1: config 0 descriptor?? [ 1565.550919][T22665] hub 3-1:0.0: bad descriptor, ignoring hub [ 1565.629960][T22665] hub: probe of 3-1:0.0 failed with error -5 [ 1565.636109][T22665] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1565.755534][T25120] overlayfs: failed to resolve './file0': -2 [ 1565.768437][T25119] overlayfs: failed to resolve './file0': -2 [ 1565.932827][T25122] loop0: detected capacity change from 0 to 256 [ 1566.926221][T25141] loop0: detected capacity change from 0 to 256 [ 1566.939285][T25140] loop3: detected capacity change from 0 to 256 [ 1566.951018][T25140] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1567.614674][T25154] loop2: detected capacity change from 0 to 256 [ 1567.639785][T25154] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1567.714421][ T335] usb 3-1: USB disconnect, device number 76 [ 1567.842311][T25157] device pim6reg1 entered promiscuous mode [ 1568.246466][T23849] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1568.266428][ T335] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1568.419064][T25166] loop4: detected capacity change from 0 to 512 [ 1568.576360][T25166] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz-executor.4: inode #1: comm syz-executor.4: iget: illegal inode # [ 1568.590525][T25166] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 1 err=-117 [ 1568.603379][T25166] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz-executor.4: inode #1: comm syz-executor.4: iget: illegal inode # [ 1568.617244][T25166] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 1 err=-117 [ 1568.630122][T25166] EXT4-fs (loop4): 1 orphan inode deleted [ 1568.635706][T25166] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1568.765940][T25173] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1568.786546][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1568.992919][ T335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1569.041270][T24346] EXT4-fs (loop4): unmounting filesystem. [ 1569.052423][ T335] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1569.061319][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.070053][ T335] usb 4-1: config 0 descriptor?? [ 1569.076461][T23849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1569.091414][T23849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1569.101087][T23849] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1569.110092][T23849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.126228][T23849] usb 2-1: config 0 descriptor?? [ 1569.180446][T25182] loop4: detected capacity change from 0 to 256 [ 1569.189119][T25181] overlayfs: failed to resolve './file0': -2 [ 1569.207406][ T3964] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1569.843935][T25191] loop0: detected capacity change from 0 to 256 [ 1569.877063][ T3964] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1569.916567][T23849] usbhid 2-1:0.0: can't add hid device: -71 [ 1569.923958][T23849] usbhid: probe of 2-1:0.0 failed with error -71 [ 1569.931301][T23849] usb 2-1: USB disconnect, device number 82 [ 1570.067417][T25193] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1570.236615][ T335] usb 4-1: string descriptor 0 read error: -71 [ 1570.256610][ T335] uclogic 0003:256C:006D.012A: failed retrieving string descriptor #200: -71 [ 1570.265250][ T335] uclogic 0003:256C:006D.012A: failed retrieving pen parameters: -71 [ 1570.273147][ T335] uclogic 0003:256C:006D.012A: failed probing pen v2 parameters: -71 [ 1570.281140][ T335] uclogic 0003:256C:006D.012A: failed probing parameters: -71 [ 1570.288460][ T335] uclogic: probe of 0003:256C:006D.012A failed with error -71 [ 1570.298875][ T335] usb 4-1: USB disconnect, device number 77 [ 1570.415325][T25199] loop1: detected capacity change from 0 to 256 [ 1570.424096][T25199] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1570.558543][ T4280] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1571.433571][T25208] loop0: detected capacity change from 0 to 256 [ 1573.026425][ T4280] usb 5-1: Using ep0 maxpacket: 32 [ 1573.070367][T25213] loop1: detected capacity change from 0 to 40427 [ 1573.077559][T25213] F2FS-fs (loop1): Unrecognized mount option "ifline_xattr" or missing value [ 1573.126436][ T373] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1573.155054][T25227] loop2: detected capacity change from 0 to 512 [ 1573.226468][ T4280] usb 5-1: unable to read config index 0 descriptor/all [ 1573.234855][ T4280] usb 5-1: can't read configurations, error -71 [ 1573.260750][T25227] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 1573.276416][T23849] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1573.276879][T25227] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 1573.927601][T25227] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz-executor.2: inode #1: comm syz-executor.2: iget: illegal inode # [ 1573.942772][T25227] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 1 err=-117 [ 1573.955471][T25227] EXT4-fs (loop2): 1 orphan inode deleted [ 1573.961074][T25227] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1573.966427][ T373] usb 4-1: Using ep0 maxpacket: 32 [ 1574.275951][T25239] loop4: detected capacity change from 0 to 256 [ 1574.286020][ T373] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1574.315068][ T373] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1574.327435][ T373] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1574.336278][ T373] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.344599][ T373] usb 4-1: config 0 descriptor?? [ 1574.350007][ T3964] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1574.366575][T25220] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1574.396221][ T373] hub 4-1:0.0: USB hub found [ 1574.428870][T18933] EXT4-fs (loop2): unmounting filesystem. [ 1574.576540][ T373] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1574.716440][ T335] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1574.726438][ T373] usbhid 4-1:0.0: can't add hid device: -71 [ 1574.732214][ T373] usbhid: probe of 4-1:0.0 failed with error -71 [ 1574.746459][T23849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.757212][T23849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1574.766849][T23849] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1574.766944][ T373] usb 4-1: USB disconnect, device number 78 [ 1574.775759][T23849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.796658][T23849] usb 1-1: config 0 descriptor?? [ 1574.815238][T25247] loop3: detected capacity change from 0 to 40427 [ 1574.822311][T25247] F2FS-fs (loop3): Unrecognized mount option "ifline_xattr" or missing value [ 1574.866498][T22844] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1574.966430][ T335] usb 3-1: Using ep0 maxpacket: 32 [ 1574.971313][T25249] loop4: detected capacity change from 0 to 256 [ 1575.012919][ T3964] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1575.186535][ T335] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1575.195208][ T335] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1575.263057][T25254] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1575.356338][ T335] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1575.366320][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1575.383844][ T335] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1575.394576][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1575.405397][ T335] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1575.408306][T23849] hid (null): bogus close delimiter [ 1575.415299][ T335] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1575.432860][ T335] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1575.441728][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.449998][ T335] usb 3-1: config 0 descriptor?? [ 1575.500974][T25256] loop3: detected capacity change from 0 to 256 [ 1575.509703][T25256] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1575.576524][T22844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1575.587422][T22844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1575.597256][T22844] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1575.606111][T22844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.620153][T23849] usb 1-1: language id specifier not provided by device, defaulting to English [ 1575.773078][ T335] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 77 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1575.788515][T22844] usb 2-1: config 0 descriptor?? [ 1575.886526][ T335] usb 3-1: USB disconnect, device number 77 [ 1575.893818][ T335] usblp0: removed [ 1576.005971][T25262] overlayfs: failed to resolve './file0': -2 [ 1576.157617][T23849] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.012B/input/input82 [ 1576.170230][T23849] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.012B/input/input83 [ 1576.182839][T23849] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.012B/input/input84 [ 1576.196186][T23849] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.012B/input/input85 [ 1576.211522][T23849] uclogic 0003:256C:006D.012B: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 1576.357926][T25265] loop3: detected capacity change from 0 to 512 [ 1576.368937][ T335] usb 1-1: USB disconnect, device number 82 [ 1576.369339][T25265] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 1576.388019][T25265] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.3: missing EA_INODE flag [ 1576.399897][T25265] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 2 err=-117 [ 1576.412672][T25265] EXT4-fs (loop3): 1 orphan inode deleted [ 1576.418255][T25265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1576.446481][T22844] usbhid 2-1:0.0: can't add hid device: -71 [ 1576.452326][T22844] usbhid: probe of 2-1:0.0 failed with error -71 [ 1576.461948][T22844] usb 2-1: USB disconnect, device number 83 [ 1577.407147][ T28] audit: type=1326 audit(1718758200.440:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25276 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b24a7cf29 code=0x0 [ 1577.431710][T15944] EXT4-fs (loop3): unmounting filesystem. [ 1577.508219][T25282] 9pnet_fd: Insufficient options for proto=fd [ 1577.956430][T23849] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1578.226494][T23849] usb 5-1: Using ep0 maxpacket: 32 [ 1578.246809][T25292] loop2: detected capacity change from 0 to 256 [ 1578.295133][ T3964] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1578.347481][T25296] loop0: detected capacity change from 0 to 512 [ 1578.361284][T25296] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 1578.374575][T25296] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.0: missing EA_INODE flag [ 1578.386444][T23849] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1578.397068][T25296] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 2 err=-117 [ 1578.409696][T23849] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1578.414275][T25296] EXT4-fs (loop0): 1 orphan inode deleted [ 1578.428302][T25296] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1578.701491][T23849] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1578.710456][T23849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.728573][T23849] usb 5-1: config 0 descriptor?? [ 1578.770355][T23849] hub 5-1:0.0: bad descriptor, ignoring hub [ 1578.776199][T23849] hub: probe of 5-1:0.0 failed with error -5 [ 1578.782743][T23849] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1578.881225][T22844] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1578.923735][T25308] serio: Serial port ptm0 [ 1579.777949][T21835] EXT4-fs (loop0): unmounting filesystem. [ 1579.883333][T25320] overlayfs: failed to resolve './file0': -2 [ 1580.186399][T22844] usb 4-1: Using ep0 maxpacket: 32 [ 1580.306440][T22844] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1580.314609][T22844] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1580.336403][T22844] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1580.345190][T22844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1580.366399][T22844] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1580.375868][T22844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1580.396112][T22844] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1580.405712][T22844] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1580.418482][T22844] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1580.427313][T22844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.438798][T22844] usb 4-1: config 0 descriptor?? [ 1580.699148][T22844] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 79 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1580.712743][T22844] usb 4-1: USB disconnect, device number 79 [ 1580.721458][T22844] usblp0: removed [ 1580.737225][T25330] device pim6reg1 entered promiscuous mode [ 1580.926610][ T373] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1581.286574][ T373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.297571][ T373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1581.307253][ T373] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1581.316177][ T373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.335531][ T373] usb 1-1: config 0 descriptor?? [ 1581.578067][T25339] loop4: detected capacity change from 0 to 32768 [ 1581.592302][T25344] loop2: detected capacity change from 0 to 256 [ 1581.616528][T22844] usb 5-1: USB disconnect, device number 81 [ 1581.628286][ T3964] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1581.672725][ T338] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1581.936534][ T373] usbhid 1-1:0.0: can't add hid device: -71 [ 1581.948048][ T373] usbhid: probe of 1-1:0.0 failed with error -71 [ 1581.957463][ T373] usb 1-1: USB disconnect, device number 83 [ 1582.385028][T25355] loop3: detected capacity change from 0 to 40427 [ 1582.398963][T25355] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1582.471473][T25355] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1582.710265][ T28] audit: type=1400 audit(1718758205.740:708): avc: denied { mount } for pid=25357 comm="syz-executor.0" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1582.801380][T25370] devpts: called with bogus options [ 1582.806563][ T28] audit: type=1400 audit(1718758205.830:709): avc: denied { remount } for pid=25357 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1582.906067][T15944] syz-executor.3: attempt to access beyond end of device [ 1582.906067][T15944] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1583.136062][ T28] audit: type=1400 audit(1718758206.160:710): avc: denied { bind } for pid=25379 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1583.265756][ T28] audit: type=1400 audit(1718758206.290:711): avc: denied { unmount } for pid=21835 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1583.310675][T25393] loop0: detected capacity change from 0 to 256 [ 1583.601191][T25399] loop2: detected capacity change from 0 to 40427 [ 1583.762483][T25399] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1583.810816][ T28] audit: type=1400 audit(1718758206.840:712): avc: denied { append } for pid=25409 comm="syz-executor.1" name="event2" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1583.830806][T25399] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1583.972145][T18933] syz-executor.2: attempt to access beyond end of device [ 1583.972145][T18933] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1584.096435][T22844] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1584.216463][T23849] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1584.383720][ T335] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1584.486415][T22844] usb 2-1: Using ep0 maxpacket: 32 [ 1584.516418][ T4280] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1584.646567][T23849] usb 5-1: Using ep0 maxpacket: 8 [ 1584.746487][ T335] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1584.757247][ T335] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1584.766406][ T4280] usb 3-1: Using ep0 maxpacket: 8 [ 1584.776491][T22844] usb 2-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=71.71 [ 1584.785332][T22844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.793212][T23849] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1584.800955][T23849] usb 5-1: config 0 has no interface number 0 [ 1584.806952][T23849] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1584.817630][T22844] usb 2-1: Product: syz [ 1584.821604][T22844] usb 2-1: Manufacturer: syz [ 1584.826030][T22844] usb 2-1: SerialNumber: syz [ 1584.830509][T23849] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1584.839536][T23849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1584.846460][ T335] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1584.847583][T22844] usb 2-1: config 0 descriptor?? [ 1584.858344][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1584.861689][T23849] usb 5-1: config 0 descriptor?? [ 1584.871521][ T335] usb 4-1: SerialNumber: syz [ 1584.907756][ T4280] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1584.996470][ T4280] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1585.005383][ T4280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1585.013531][ T4280] usb 3-1: SerialNumber: syz [ 1585.109273][T24749] usb 2-1: USB disconnect, device number 84 [ 1585.316482][T23849] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1585.486827][T25423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1585.495060][T25423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1585.566421][T23849] usb 1-1: Using ep0 maxpacket: 8 [ 1585.577719][ T335] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1585.606434][ T373] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1585.696617][T23849] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.706811][T23849] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1585.715468][T23849] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1585.724402][T23849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.757247][T23849] hub 1-1:1.0: bad descriptor, ignoring hub [ 1585.763013][T23849] hub: probe of 1-1:1.0 failed with error -5 [ 1585.778619][T25419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1585.786916][T25419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1585.795048][T25419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1585.803556][T25419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1585.813453][T25419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1585.821860][T25419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1585.846491][ T373] usb 2-1: Using ep0 maxpacket: 32 [ 1585.937731][ T4280] cdc_ether 3-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1585.966447][ T373] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.976481][ T373] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1585.985216][ T373] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1585.994198][ T373] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.037508][ T4280] usb 4-1: USB disconnect, device number 80 [ 1586.066951][ T4280] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 1586.077998][ T335] usb 1-1: USB disconnect, device number 84 [ 1586.346874][T25423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.355179][T25423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.363236][T25423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.371509][T25423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.426441][T23036] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1586.437545][T25410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.445900][T25410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.454225][T25410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1586.462747][T25410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1586.470807][ T4280] usb 2-1: USB disconnect, device number 85 [ 1586.666486][T23036] usb 1-1: Using ep0 maxpacket: 8 [ 1586.786513][T23036] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.796604][T23036] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1586.805380][T23036] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1586.814700][T23036] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.876879][T23036] hub 1-1:1.0: bad descriptor, ignoring hub [ 1586.882640][T23036] hub: probe of 1-1:1.0 failed with error -5 [ 1586.948477][ T4280] usb 5-1: USB disconnect, device number 82 [ 1587.164021][T25502] loop4: detected capacity change from 0 to 32768 [ 1587.170187][T25504] loop1: detected capacity change from 0 to 32768 [ 1587.196574][T24749] usb 1-1: USB disconnect, device number 85 [ 1587.241272][T25509] loop4: detected capacity change from 0 to 256 [ 1587.248255][ T102] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1587.257903][ T102] Buffer I/O error on dev loop1, logical block 0, async page read [ 1587.265778][ T102] loop1: unable to read partition table [ 1587.271403][ T102] loop1: partition table beyond EOD, truncated [ 1587.390162][T24749] usb 3-1: USB disconnect, device number 78 [ 1587.407084][T24749] cdc_ether 3-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 1588.553114][T25538] loop4: detected capacity change from 0 to 1024 [ 1588.603410][T25538] EXT4-fs: Invalid want_extra_isize 2176 [ 1588.604997][T25549] tap0: tun_chr_ioctl cmd 1074025677 [ 1588.614142][T25549] tap0: linktype set to 773 [ 1588.674516][T25558] loop4: detected capacity change from 0 to 256 [ 1588.674655][T25561] loop3: detected capacity change from 0 to 256 [ 1589.607055][T25561] 9pnet_fd: p9_fd_create_tcp (25561): problem connecting socket to 127.0.0.1 [ 1589.795323][T25587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.803084][T25587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.811232][T25587] device bridge_slave_0 entered promiscuous mode [ 1589.830585][T25587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.837666][T25587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.844975][T25587] device bridge_slave_1 entered promiscuous mode [ 1589.956016][T25587] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.962923][T25587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1589.970004][T25587] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.976780][T25587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1590.857645][T25641] loop0: detected capacity change from 0 to 256 [ 1590.888275][T25643] loop2: detected capacity change from 0 to 256 [ 1590.894712][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.974617][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.974735][ T338] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1590.992651][T25641] 9pnet_fd: p9_fd_create_tcp (25641): problem connecting socket to 127.0.0.1 [ 1591.008235][ T1228] device bridge_slave_1 left promiscuous mode [ 1591.014368][ T1228] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.022304][ T1228] device bridge_slave_0 left promiscuous mode [ 1591.058404][ T1228] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.070421][ T1228] device veth1_macvtap left promiscuous mode [ 1591.776879][T22844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1591.784192][T22844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1591.796678][T22844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1591.811192][T22844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1591.854103][T22844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.861000][T22844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1591.898552][T22844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1591.918930][T22844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1591.933269][T22844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1591.940147][T22844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1591.998234][T24749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1592.006134][T24749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1592.024166][T24749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1592.034242][T24749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1592.052461][T24749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1592.066751][T24749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1592.084234][T25587] device veth0_vlan entered promiscuous mode [ 1592.093831][T22844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1592.103797][T22844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1592.124505][T25587] device veth1_macvtap entered promiscuous mode [ 1592.138163][T24749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1592.147139][T24749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1592.161996][T24749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1592.189127][T24749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1592.199465][T25669] input: syz1 as /devices/virtual/input/input86 [ 1592.205045][T24749] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1592.243886][T24749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1592.258544][T24749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1592.275432][T24749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1592.292575][T24749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1592.330710][ T28] audit: type=1400 audit(1718758215.360:713): avc: denied { create } for pid=25672 comm="syz-executor.3" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1592.353530][T25666] loop4: detected capacity change from 0 to 40427 [ 1592.365432][T25666] F2FS-fs (loop4): Unrecognized mount option "–" or missing value [ 1592.445624][ T28] audit: type=1400 audit(1718758215.360:714): avc: denied { map } for pid=25672 comm="syz-executor.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1592.499164][ T28] audit: type=1400 audit(1718758215.360:715): avc: denied { read write } for pid=25672 comm="syz-executor.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=86850 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1593.034629][ T28] audit: type=1400 audit(1718758215.570:716): avc: denied { getopt } for pid=25676 comm="syz-executor.3" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1593.359993][ T28] audit: type=1400 audit(1718758215.570:717): avc: denied { accept } for pid=25676 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1593.406681][ T28] audit: type=1400 audit(1718758215.630:718): avc: denied { write } for pid=25676 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1593.434011][ T28] audit: type=1400 audit(1718758215.630:719): avc: denied { nlmsg_read } for pid=25676 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1593.470335][ T28] audit: type=1400 audit(1718758216.500:720): avc: denied { write } for pid=25691 comm="syz-executor.4" name="ppp" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1593.606520][T25703] loop4: detected capacity change from 0 to 256 [ 1593.846404][T22665] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1594.086425][T22665] usb 4-1: Using ep0 maxpacket: 8 [ 1594.099289][T25716] device pim6reg1 entered promiscuous mode [ 1594.200486][T25724] syz-executor.2[25724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1594.200556][T25724] syz-executor.2[25724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1594.206496][T22665] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.234661][T22665] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1594.243921][T22665] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1594.253394][T22665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.316887][T22665] hub 4-1:1.0: bad descriptor, ignoring hub [ 1594.329626][T22665] hub: probe of 4-1:1.0 failed with error -5 [ 1594.432905][T25746] 9pnet_fd: Insufficient options for proto=fd [ 1594.926494][T22665] usb 4-1: USB disconnect, device number 81 [ 1594.946459][T24749] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1595.101046][T25780] loop4: detected capacity change from 0 to 256 [ 1595.136962][ T3964] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1595.206475][T22665] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1595.286488][T23036] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1595.525809][T25787] loop0: detected capacity change from 0 to 512 [ 1595.536705][T23036] usb 4-1: Using ep0 maxpacket: 8 [ 1595.568675][T25787] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1595.577646][T22665] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1595.577667][T25787] ext4 filesystem being mounted at /root/syzkaller-testdir2491411334/syzkaller.y296Yw/207/file0 supports timestamps until 2038 (0x7fffffff) [ 1595.588804][T22665] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1595.612402][T22665] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1595.621383][T22665] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.632421][T22665] usb 2-1: config 0 descriptor?? [ 1595.646457][T24749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1595.657225][T24749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1595.666477][T23036] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.667214][T24749] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1595.677505][T23036] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1595.691196][T24749] usb 3-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 1595.698179][T23036] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1595.707843][T24749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.718164][T21835] EXT4-fs (loop0): unmounting filesystem. [ 1595.726891][T24749] usb 3-1: config 0 descriptor?? [ 1595.729205][T23036] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.787486][T23036] hub 4-1:1.0: bad descriptor, ignoring hub [ 1595.793295][T23036] hub: probe of 4-1:1.0 failed with error -5 [ 1596.043591][T25798] kvm: emulating exchange as write [ 1596.106526][T23036] usb 4-1: USB disconnect, device number 82 [ 1596.176446][T22665] usbhid 2-1:0.0: can't add hid device: -71 [ 1596.182475][T22665] usbhid: probe of 2-1:0.0 failed with error -71 [ 1596.244802][T22665] usb 2-1: USB disconnect, device number 86 [ 1596.826222][T25820] syz-executor.0[25820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1596.826268][T25820] syz-executor.0[25820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1597.202570][T25837] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1597.308414][T25840] BUG: unable to handle page fault for address: ffffffffff600000 [ 1597.315972][T25840] #PF: supervisor read access in kernel mode [ 1597.321786][T25840] #PF: error_code(0x0000) - not-present page [ 1597.327602][T25840] PGD 6e12067 P4D 6e12067 PUD 6e14067 PMD 6e16067 PTE 0 [ 1597.334369][T25840] Oops: 0000 [#1] PREEMPT SMP KASAN [ 1597.339404][T25840] CPU: 0 PID: 25840 Comm: syz-executor.0 Not tainted 6.1.78-syzkaller-00017-g12709c5c1ed2 #0 [ 1597.349503][T25840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1597.359391][T25840] RIP: 0010:copy_from_kernel_nofault+0x86/0x2d0 [ 1597.365466][T25840] Code: 48 89 55 d0 0f 85 de 01 00 00 ff 02 bf 07 00 00 00 4c 89 ee e8 ab 39 d2 ff 49 83 fd 07 76 58 4d 89 fe 49 83 c7 08 49 83 c5 f8 <49> 8b 1c 24 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 [ 1597.384907][T25840] RSP: 0018:ffffc900037bf050 EFLAGS: 00010257 [ 1597.390806][T25840] RAX: 0000000000000002 RBX: 00007ffffffff000 RCX: ffff88812261bcc0 [ 1597.398619][T25840] RDX: ffff88812261c860 RSI: 0000000000000008 RDI: 0000000000000007 [ 1597.406522][T25840] RBP: ffffc900037bf088 R08: ffffffff81a33e95 R09: ffffed10244c3799 [ 1597.414328][T25840] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffff600000 [ 1597.422190][T25840] R13: 0000000000000000 R14: ffffc900037bf0e8 R15: ffffc900037bf0f0 [ 1597.429954][T25840] FS: 00007f66bd0546c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1597.436427][ T471] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1597.438714][T25840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1597.438733][T25840] CR2: ffffffffff600000 CR3: 000000011616f000 CR4: 00000000003526b0 [ 1597.460331][T25840] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1597.468142][T25840] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1597.475953][T25840] Call Trace: [ 1597.479073][T25840] [ 1597.481855][T25840] ? __die_body+0x62/0xb0 [ 1597.486012][T25840] ? __die+0x7e/0x90 [ 1597.489746][T25840] ? 0xffffffffff600000 [ 1597.493736][T25840] ? page_fault_oops+0x7f9/0xa90 [ 1597.498514][T25840] ? 0xffffffffff600000 [ 1597.502507][T25840] ? kernelmode_fixup_or_oops+0x270/0x270 [ 1597.508060][T25840] ? stack_trace_snprint+0xf0/0xf0 [ 1597.513007][T25840] ? 0xffffffffff600000 [ 1597.517025][T25840] ? exc_page_fault+0x537/0x700 [ 1597.521684][T25840] ? 0xffffffffff600000 [ 1597.525677][T25840] ? asm_exc_page_fault+0x27/0x30 [ 1597.530537][T25840] ? 0xffffffffff600000 [ 1597.534530][T25840] ? copy_from_kernel_nofault+0x75/0x2d0 [ 1597.540001][T25840] ? copy_from_kernel_nofault+0x86/0x2d0 [ 1597.545468][T25840] ? 0xffffffffff600000 [ 1597.549461][T25840] bpf_probe_read_compat+0x112/0x180 [ 1597.554579][T25840] bpf_prog_baa065642a502c00+0x64/0x68 [ 1597.559875][T25840] bpf_trace_run6+0x1ea/0x350 [ 1597.564386][T25840] ? bpf_trace_run5+0x2f0/0x2f0 [ 1597.569077][T25840] __bpf_trace_ext4_ext_remove_space_done+0x4c/0x60 [ 1597.575498][T25840] ext4_ext_remove_space+0x4d4e/0x4f50 [ 1597.580792][T25840] ? __ext4_handle_dirty_metadata+0x2cd/0x830 [ 1597.586693][T25840] ? __kasan_check_write+0x14/0x20 [ 1597.591641][T25840] ? ext4_es_insert_extent+0x2ff0/0x2ff0 [ 1597.597107][T25840] ? __kasan_check_write+0x14/0x20 [ 1597.602058][T25840] ? _raw_write_trylock+0x1a0/0x1a0 [ 1597.607091][T25840] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 1597.612904][T25840] ? ext4_es_remove_extent+0x297/0x460 [ 1597.618199][T25840] ? ext4_es_lookup_extent+0x950/0x950 [ 1597.623494][T25840] ext4_ext_truncate+0x1f4/0x320 [ 1597.628266][T25840] ext4_truncate+0x96c/0xfb0 [ 1597.632693][T25840] ? __ext4_mark_inode_dirty+0x7d0/0x7d0 [ 1597.638160][T25840] ext4_setattr+0x1107/0x1a50 [ 1597.642672][T25840] ? current_time+0x1af/0x2f0 [ 1597.647189][T25840] ? ext4_write_inode+0x740/0x740 [ 1597.652045][T25840] notify_change+0xd53/0x1010 [ 1597.656561][T25840] ? cap_inode_need_killpriv+0x51/0x60 [ 1597.661855][T25840] do_truncate+0x21c/0x300 [ 1597.666107][T25840] ? put_page_bootmem+0x1a0/0x1a0 [ 1597.670971][T25840] path_openat+0x2726/0x2d60 [ 1597.675394][T25840] ? kasan_save_alloc_info+0x1f/0x30 [ 1597.680513][T25840] ? slab_post_alloc_hook+0x53/0x2c0 [ 1597.685642][T25840] ? getname+0x19/0x20 [ 1597.689544][T25840] ? do_filp_open+0x480/0x480 [ 1597.694055][T25840] do_filp_open+0x230/0x480 [ 1597.698395][T25840] ? vfs_tmpfile+0x480/0x480 [ 1597.702827][T25840] ? alloc_fd+0x4fa/0x5a0 [ 1597.706987][T25840] do_sys_openat2+0x13f/0x850 [ 1597.711500][T25840] ? do_sys_open+0x220/0x220 [ 1597.715925][T25840] ? __this_cpu_preempt_check+0x13/0x20 [ 1597.721306][T25840] ? xfd_validate_state+0x6f/0x170 [ 1597.726254][T25840] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 1597.731983][T25840] __x64_sys_openat+0x243/0x290 [ 1597.736671][T25840] ? __ia32_sys_open+0x270/0x270 [ 1597.741443][T25840] ? switch_fpu_return+0xe/0x10 [ 1597.746128][T25840] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 1597.751598][T25840] do_syscall_64+0x3d/0xb0 [ 1597.755851][T25840] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1597.761585][T25840] RIP: 0033:0x7f66bc27cf29 [ 1597.765834][T25840] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1597.785281][T25840] RSP: 002b:00007f66bd0540c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1597.793519][T25840] RAX: ffffffffffffffda RBX: 00007f66bc3b3f80 RCX: 00007f66bc27cf29 [ 1597.801327][T25840] RDX: 0000000000007a05 RSI: 0000000020000180 RDI: ffffffffffffff9c [ 1597.809141][T25840] RBP: 00007f66bc2ec074 R08: 0000000000000000 R09: 0000000000000000 [ 1597.816957][T25840] R10: 0000000000001700 R11: 0000000000000246 R12: 0000000000000000 [ 1597.824764][T25840] R13: 000000000000000b R14: 00007f66bc3b3f80 R15: 00007ffd11301b58 [ 1597.832585][T25840] [ 1597.835437][T25840] Modules linked in: [ 1597.839186][T25840] CR2: ffffffffff600000 [ 1597.843164][T25840] ---[ end trace 0000000000000000 ]--- [ 1597.848458][T25840] RIP: 0010:copy_from_kernel_nofault+0x86/0x2d0 [ 1597.854533][T25840] Code: 48 89 55 d0 0f 85 de 01 00 00 ff 02 bf 07 00 00 00 4c 89 ee e8 ab 39 d2 ff 49 83 fd 07 76 58 4d 89 fe 49 83 c7 08 49 83 c5 f8 <49> 8b 1c 24 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 [ 1597.873974][T25840] RSP: 0018:ffffc900037bf050 EFLAGS: 00010257 [ 1597.879876][T25840] RAX: 0000000000000002 RBX: 00007ffffffff000 RCX: ffff88812261bcc0 [ 1597.887690][T25840] RDX: ffff88812261c860 RSI: 0000000000000008 RDI: 0000000000000007 [ 1597.895499][T25840] RBP: ffffc900037bf088 R08: ffffffff81a33e95 R09: ffffed10244c3799 [ 1597.903310][T25840] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffff600000 [ 1597.911121][T25840] R13: 0000000000000000 R14: ffffc900037bf0e8 R15: ffffc900037bf0f0 [ 1597.918932][T25840] FS: 00007f66bd0546c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1597.927698][T25840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1597.934206][T25840] CR2: ffffffffff600000 CR3: 000000011616f000 CR4: 00000000003526b0 [ 1597.942023][T25840] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1597.949831][T25840] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1597.957644][T25840] Kernel panic - not syncing: Fatal exception [ 1597.963816][T25840] Kernel Offset: disabled [ 1597.967939][T25840] Rebooting in 86400 seconds..