last executing test programs: 1m13.04678831s ago: executing program 32 (id=213): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000006c0)=0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x50, 0x0, &(0x7f0000000340)=[@enter_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x4, 0x0, &(0x7f00000001c0)="de54803e"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000800)="2d4413f0"}) 1m13.00319792s ago: executing program 33 (id=234): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0xea, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000940)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x8, r1, 0x0}]) 1m2.267267681s ago: executing program 34 (id=572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000140)=0x1000) 59.659656865s ago: executing program 5 (id=648): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) geteuid() 59.607915806s ago: executing program 5 (id=649): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x555e, &(0x7f0000005f80)="$eJzs3EtvG1UUAOA7TpPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKKhJ48R9fJ80PjPX12fusUaRzkzkADy15tPff03CxXAmhDATQjifhHw/KbbcSgwvhBAuhRBK/9iSYvzvgbkQwtkQwsVR8pgzKd768srw8vIvb/323Q+nT5376tsfp1c1MG0vhhC6m3F/pxtj1orxTjFeG7bz2L0+LGJ8o3u3OM5i3Gmu5xl2auN5tTxea8X52eZ2fxQ3OrX6KLbaG/n4Zi+esD9sjfPkH7hT28qPG831PLb7WR5be3Fdu3vxb9tefxDzNIp8H+fpw2AwjnG8uduM9WzezWO9NyjGY96s0dwdxWERi9OFetZp5OtYP8o3/Wh7u93b3k2Hza1+O+uly5XqS5XqjXJ1K2s0B83r5Vq3ceN6utDqjKaVB81ad6WVZa1Os1LPuovpQqteL1er6cLN5nq71kur1cq1ytXy8mKxdyV9/fb7aaeRLoziq+3e9ly70083sq00fmIxXapce3kxvVxN311dS9feuXVrde29D29+cPuV1TdfKybdt6x0Yenq0lK5erW8VF18cI1zx13/6AQHrH9wlPo/KxZ9iPqTQ10NcEguMIBDu6//D/p/4OFdPOC8x73/D5Ps/0ctlf7/wf1v6ej9/5H634fs/ydW/wTufzxq9cOR6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5aP81+/Ua+Mx+PzxXjF4qh54rjJIRQCiH8+R9mwty+nDNFntn/mT/7rzV8n4Q8w+gcp4vtbAhhpdj+ePa4vwUAAAB4cn3zyaUvYrceX+anvSBOUrxpUzr/0YTyJSGE2fmfJ5StNHp5fkLJ8uv7VNidULb8BtYzE0oWb7mdmlS2A5kZh08v3BvMC0piKJ3ocgAAgBMxsy+cbBcCAADASfp82gtgOpIwfpQ5fhac/+f9vUebZ/a9BwAAADyGkmkvAAAAADh2ef/v9/8AAADgyRZ//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiLnbvJWRqI4wD8b/uWDz8iMe69ijs4hkdw6VI4gJfgCHgFL8AZcOcRDDW0E5IqJMZObSTPk3TKtOQ3M9DNTJMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAMX2rD5svn95+HppzbobJMxoAAADgllN92LQfVl39ebr+Ml16nepFRJQR8fvMfRlVzHqZVcqpb36/aepf+vA1ok24tDFPx7OIeJeO6tXYvwIAAAA8ruNuv+5m612xmrpD/Evdok354n2mvCIi6tX3TGnlpXiTKax9vp/iY6a0dgFrkSmsW3J7un1vlquRvqp3SiNZbNs/sa2V47QLAABMqT8TuDMLAQAA4AF8mLoDTKO4Ftf3jPPulF4ILns1AAAA4D9UTN0BAAAAYHTt/H/4/n9NM/b+fz/s/wcAAAB/rdv/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDGd6sPmuNuv793f/mHOuRkm34gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Mn+vKNACIRBGOxd35nM/Q8rDRoam1SB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv38xtFFQcA/Ls7O0tBibWaHqoGEw96kXZBkKMeNI0H/wSTpmyxuogCByGNphc9mZ5J1OjRGBNNvfE/cKYJF7xx6KEmnjXzqww/lA2pM0v7+SRv3nd2J+993+yG8O2bFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKttvx4vdMk6yw3QRV6/d3Flbzvqt+/rM9Y1bc1nL4s6jJvr6rb1PfrK9VD85Nls7+bL5ZAAAADgYkqq+j4jb6eZi1nen8/o/ra7Jav4fjhZxVc/fX/dv7axNlW/NVfX/77/deX53oulinmzQldXRcOHBVHr/0xIn3jOPvKKX3/n8Zy9J/oF031t/bjvN72fnmxs33unn4aEmsgUAHsfxqi+D6v9DWT9oMzEADoxerfCu6v9kut2cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJqwvR5PVXEnIuZ6d+PM1s7a8sP66xu35qp2+tq1jfqY2RBpRKysjoZpg2uZdJeuXP14aTQaXmw+OBYR7c1eBh+McU3Ef19Tfj2jvVX8e9CZjDRaDbrl5zMp+exlUH339n7klv5BAgBgH0qORlmPp2VdfzvdXMxe68xE/P3jvfX/q7U4xqz/73x4+mZ9xnr9P2hqmRPv2+8izn86f+nK1ddXzy+dG54bfvLGicGbg5NnTp06M5/dq4X5legOF9pOFAAAgCdYv2z1+r878+D+/5FaHGPW/599P/iiPlei/n+ou5t+bWcCAABwEPV3o2df/uvPTv2tqaLr9Pvx+dLlyxcHxXH3/ERxbDzlx3CobPX6P5lpOysAAACgCdvrnXv2/8/W4hhz///pn174pT5mEhGHIy5ExPD48oXR2eaWM9Ga+EXlfKJ+2ysFAACgLYfLVuz/9/L9/zR//r+7+8hDNyJee6WIq791NU79n7z71c/1uerP/59sbokTqTtb3I+8n43ozbadEQAAAPvZVNmyYv+PdHPxo1+PvN/3/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA0/4JAAD//880Myg=") mkdir(&(0x7f0000000180)='./file1\x00', 0xa198adcdb8b1e84b) lsetxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000140), &(0x7f00000001c0)=ANY=[], 0xbed, 0x0) rmdir(&(0x7f0000000000)='./file1\x00') 59.159641775s ago: executing program 5 (id=660): r0 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x0, 0x80}, &(0x7f0000000140), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000340)={0x9, 0x0, &(0x7f0000000200)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000400)={0x800, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 58.90192199s ago: executing program 5 (id=665): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x2, 0x2}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x2, 0x1}, 0x3}}, 0x10, 0x0}, 0x80801) 58.862230751s ago: executing program 5 (id=668): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x6, 0x0, 0x4, 0x232a, 0xfffffffd, 0x2}) 58.671520674s ago: executing program 7 (id=677): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x9}, @local=@item_012={0x2, 0x2, 0x4, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "af45cee1"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000040)={0x1, 0xffffffff, 0x10001, 0x5, 0x3, 0xf}) 57.064441428s ago: executing program 5 (id=694): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x54, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3") 56.923669011s ago: executing program 7 (id=695): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 56.893694861s ago: executing program 7 (id=696): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 56.881462402s ago: executing program 7 (id=697): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mincore(&(0x7f0000a8a000/0x1000)=nil, 0x1000, &(0x7f0000000400)=""/18) 56.868416402s ago: executing program 7 (id=698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) 56.833982073s ago: executing program 7 (id=699): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x2, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1, 0x81, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) 36.780533684s ago: executing program 35 (id=701): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff8500000006000000850000009e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000800)="0000000000000000606b53cc7273", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 36.722510946s ago: executing program 36 (id=641): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 36.705594806s ago: executing program 37 (id=685): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) 36.673438707s ago: executing program 38 (id=694): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x54, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3") 36.633644517s ago: executing program 39 (id=699): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x28bd, 0x933, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x2, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1, 0x81, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xb, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) 33.619958589s ago: executing program 9 (id=721): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 33.559275091s ago: executing program 9 (id=723): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, 0x0) 33.464538323s ago: executing program 9 (id=725): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x221809, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000001c0)={[{@uid={'uid', 0x3d, r1}}]}) 33.324753245s ago: executing program 9 (id=727): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 33.299716746s ago: executing program 9 (id=728): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000400)='ext4_mb_release_group_pa\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) 32.596427701s ago: executing program 9 (id=739): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="12040500effc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 32.548481562s ago: executing program 40 (id=739): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="12040500effc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 28.627373422s ago: executing program 6 (id=821): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0]) 28.589219043s ago: executing program 6 (id=823): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = eventfd(0x0) read$eventfd(r1, &(0x7f0000000240), 0x8) writev(r1, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)="27a8104ce45cd4d5", 0x8}], 0x8) 28.501357054s ago: executing program 6 (id=824): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000007100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001f40)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@multicast, @broadcast, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x1}}, {@canfd={0xd, {{0x2, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "01394bdbdabec3657852f4187029f4f85d6520ae22ab354bc8af7b260cae02d0b10d8885d4097e538a1050109f0f2ca5e6c28e901fb864606c551a632de8fb87"}}}}, 0x0) 28.462248345s ago: executing program 6 (id=825): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000000700)="$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") mount$incfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000240)='./file1\x00', 0x4000423) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) 28.301342909s ago: executing program 6 (id=826): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x6, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x102, 0xfffffffb, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x4, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x400, 0xc584, 0xffff, 0x20cd3, 0x7, 0x1f, 0x404, 0x4, 0x8, 0x10, 0x7, 0x6, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0xe58, 0x1000, 0x80040101, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x3, 0x10, 0x4, 0x200, 0x2851, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a8, 0x6, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x3, 0xfffffffd, 0x4a, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 28.21972455s ago: executing program 6 (id=828): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000040)="f5", 0x1) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e04, @loopback}, 0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 28.180479411s ago: executing program 41 (id=828): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000040)="f5", 0x1) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e04, @loopback}, 0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 2.88406364s ago: executing program 3 (id=1428): syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f00000002c0)="fde6d2", 0x3) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.595961867s ago: executing program 8 (id=1460): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x8, r2, 0x5}) 1.541808048s ago: executing program 8 (id=1464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000080)) 1.510379349s ago: executing program 4 (id=1467): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b70800000000000003010902"], 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000000)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1.491591409s ago: executing program 8 (id=1468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) fspick(0xffffffffffffffff, 0x0, 0x1) 1.47036141s ago: executing program 8 (id=1469): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") creat(&(0x7f0000001740)='./bus\x00', 0xa1) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x66842, 0x19) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x5efff, 0x0, 0x0) 1.44452638s ago: executing program 3 (id=1470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000140)='sys_exit\x00', r1}, 0x18) 1.405317021s ago: executing program 3 (id=1472): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='virtio_transport_alloc_pkt\x00', r1}, 0x18) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.357577902s ago: executing program 3 (id=1473): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) pipe2(0x0, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) 1.357064682s ago: executing program 8 (id=1474): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) getcwd(&(0x7f0000000000)=""/60, 0x3c) 1.280689413s ago: executing program 0 (id=1476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r1}, 0x18) getpriority(0x1, 0x0) 1.277629614s ago: executing program 3 (id=1477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.260749004s ago: executing program 8 (id=1478): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 1.215000465s ago: executing program 42 (id=1478): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 1.196045335s ago: executing program 0 (id=1480): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) time(0x0) 1.195954765s ago: executing program 3 (id=1481): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7", @ANYRES16=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x66101) 1.195734075s ago: executing program 0 (id=1482): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 1.125694147s ago: executing program 0 (id=1483): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x13}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.112639077s ago: executing program 0 (id=1484): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 1.056352388s ago: executing program 0 (id=1485): mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}, 0x0, 0x0, 0x0}, 0x0) 439.761421ms ago: executing program 1 (id=1495): creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f00000023c0)=ANY=[@ANYBLOB="5300000007000046009d40ed"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 412.275231ms ago: executing program 1 (id=1496): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0xdd48, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, {0xa, 0x4e22, 0x6462, @empty, 0x5e}, 0x0, {[0x3, 0x9, 0x3a, 0x2, 0x0, 0xb, 0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) 392.712612ms ago: executing program 2 (id=1497): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000001f80)="118f", 0x2}], 0x2) 384.362552ms ago: executing program 1 (id=1498): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) 375.830152ms ago: executing program 2 (id=1499): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) capget(&(0x7f0000000400)={0x19980330}, 0x0) 344.272493ms ago: executing program 2 (id=1500): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffeb6}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 265.477304ms ago: executing program 2 (id=1501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{0xc0010015}]}) 247.309765ms ago: executing program 1 (id=1502): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 238.928525ms ago: executing program 4 (id=1503): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x24060400) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 209.114776ms ago: executing program 4 (id=1504): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f00000008c0)='cmdline\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) getdents(r0, &(0x7f0000000f40)=""/243, 0xf3) 188.910046ms ago: executing program 4 (id=1505): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x20, 0xd}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 128.829397ms ago: executing program 4 (id=1506): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) stat(0x0, 0x0) 124.717477ms ago: executing program 1 (id=1507): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) io_destroy(0x0) 109.157237ms ago: executing program 2 (id=1508): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 336.31µs ago: executing program 4 (id=1509): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000376, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) io_pgetevents(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) 119.06µs ago: executing program 1 (id=1510): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r2, 0x7, '\x00', 0x0, r1, 0x0, 0x3}, 0x50) 0s ago: executing program 2 (id=1511): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x7ffff088) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. [ 22.023717][ T28] audit: type=1400 audit(1757978694.042:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.025582][ T274] cgroup: Unknown subsys name 'net' [ 22.046412][ T28] audit: type=1400 audit(1757978694.042:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.073658][ T28] audit: type=1400 audit(1757978694.082:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.073828][ T274] cgroup: Unknown subsys name 'devices' [ 22.189097][ T274] cgroup: Unknown subsys name 'hugetlb' [ 22.194733][ T274] cgroup: Unknown subsys name 'rlimit' [ 22.329975][ T28] audit: type=1400 audit(1757978694.352:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.353318][ T28] audit: type=1400 audit(1757978694.352:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.371310][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.378365][ T28] audit: type=1400 audit(1757978694.352:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.409806][ T28] audit: type=1400 audit(1757978694.412:70): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.435243][ T28] audit: type=1400 audit(1757978694.412:71): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.435489][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.460825][ T28] audit: type=1400 audit(1757978694.452:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.460854][ T28] audit: type=1400 audit(1757978694.452:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.303689][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.310865][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.318511][ T284] device bridge_slave_0 entered promiscuous mode [ 23.334615][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.341698][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.349141][ T284] device bridge_slave_1 entered promiscuous mode [ 23.377185][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.384320][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.391744][ T283] device bridge_slave_0 entered promiscuous mode [ 23.411314][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.418381][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.425773][ T283] device bridge_slave_1 entered promiscuous mode [ 23.432381][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.439451][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.446779][ T282] device bridge_slave_0 entered promiscuous mode [ 23.460113][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.467151][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.474501][ T285] device bridge_slave_0 entered promiscuous mode [ 23.487833][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.494958][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.502425][ T282] device bridge_slave_1 entered promiscuous mode [ 23.509042][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.516091][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.523533][ T286] device bridge_slave_0 entered promiscuous mode [ 23.530229][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.537307][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.544853][ T285] device bridge_slave_1 entered promiscuous mode [ 23.560976][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.568073][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.575458][ T286] device bridge_slave_1 entered promiscuous mode [ 23.800454][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.807554][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.814840][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.822070][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.834007][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.841118][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.848411][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.855432][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.874104][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.881189][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.888490][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.895631][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.912433][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.919501][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.926793][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.933841][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.945715][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.952778][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.960079][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.967119][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.016322][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.023766][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.031144][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.039016][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.046215][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.053758][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.060961][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.068273][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.075417][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.082708][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.090641][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.098150][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.119382][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.127089][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.134920][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.143206][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.150249][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.157695][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.165854][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.172903][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.180403][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.188590][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.195604][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.230212][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.241000][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.248680][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.256531][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.264992][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.272603][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.281230][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.289459][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.296489][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.303940][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.312188][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.319264][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.326585][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.334685][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.342710][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.350647][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.358701][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.366803][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.373836][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.381319][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.389587][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.396600][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.403967][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.412212][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.419247][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.426687][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.434880][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.441920][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.449394][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.480639][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.489335][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.498110][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.506214][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.525670][ T282] device veth0_vlan entered promiscuous mode [ 24.536672][ T284] device veth0_vlan entered promiscuous mode [ 24.547486][ T283] device veth0_vlan entered promiscuous mode [ 24.554044][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.562207][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.570776][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.579321][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.587616][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.595494][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.603668][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.611724][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.619708][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.627899][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.636204][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.644687][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.652806][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.661039][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.669152][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.677596][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.685092][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.692874][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.700446][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.708150][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.715539][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.725303][ T286] device veth0_vlan entered promiscuous mode [ 24.739603][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.747658][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.755708][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.764171][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.773348][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.780949][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.793021][ T286] device veth1_macvtap entered promiscuous mode [ 24.801135][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.808923][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.817318][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.828008][ T285] device veth0_vlan entered promiscuous mode [ 24.835067][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.843097][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.859423][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.867612][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.875017][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.883431][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.891927][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.900243][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.910167][ T283] device veth1_macvtap entered promiscuous mode [ 24.919414][ T284] device veth1_macvtap entered promiscuous mode [ 24.930409][ T282] device veth1_macvtap entered promiscuous mode [ 24.937272][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.945051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.952904][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.961804][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.970216][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.978521][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.986776][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.995209][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.003409][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.013469][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.021783][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.039921][ T285] device veth1_macvtap entered promiscuous mode [ 25.049276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.057751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.066041][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.074535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.083076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.091626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.100011][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.108305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.116379][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.124378][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.132827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.153223][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.163480][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.164212][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 25.182726][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.191937][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.201841][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.210192][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.324577][ T353] loop0: detected capacity change from 0 to 128 [ 25.366033][ T353] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 25.385288][ T353] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 25.461317][ T282] EXT4-fs (loop0): unmounting filesystem. [ 25.654086][ T392] overlayfs: missing 'lowerdir' [ 25.764195][ T409] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 25.770189][ T409] pim6reg0: linktype set to 270 [ 25.797168][ T407] SELinux: ebitmap: truncated map [ 25.802356][ T407] SELinux: failed to load policy [ 25.802835][ T413] loop0: detected capacity change from 0 to 512 [ 25.828014][ T413] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 25.841160][ T413] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.34: casefold flag without casefold feature [ 25.857233][ T413] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.34: couldn't read orphan inode 15 (err -117) [ 25.884317][ T413] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 25.909099][ T413] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #2: comm syz.0.34: invalid size [ 25.918480][ T424] loop3: detected capacity change from 0 to 128 [ 25.929808][ T282] EXT4-fs (loop0): unmounting filesystem. [ 25.946334][ T424] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 25.956707][ T424] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 25.987697][ T433] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.007010][ T283] EXT4-fs (loop3): unmounting filesystem. [ 26.062618][ T442] netlink: 'syz.0.46': attribute type 13 has an invalid length. [ 26.075073][ T442] gretap0: refused to change device tx_queue_len [ 26.081993][ T442] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 26.224559][ T456] Zero length message leads to an empty skb [ 26.245819][ T442] syz.0.46 (442) used greatest stack depth: 22304 bytes left [ 26.347087][ T475] loop3: detected capacity change from 0 to 256 [ 26.353609][ T475] ======================================================= [ 26.353609][ T475] WARNING: The mand mount option has been deprecated and [ 26.353609][ T475] and is ignored by this kernel. Remove the mand [ 26.353609][ T475] option from the mount to silence this warning. [ 26.353609][ T475] ======================================================= [ 26.396972][ T482] capability: warning: `syz.4.64' uses deprecated v2 capabilities in a way that may be insecure [ 26.433536][ T475] FAT-fs (loop3): Directory bread(block 64) failed [ 26.450399][ T475] FAT-fs (loop3): Directory bread(block 65) failed [ 26.456962][ T475] FAT-fs (loop3): Directory bread(block 66) failed [ 26.473837][ T475] FAT-fs (loop3): Directory bread(block 67) failed [ 26.486817][ T475] FAT-fs (loop3): Directory bread(block 68) failed [ 26.493690][ T475] FAT-fs (loop3): Directory bread(block 69) failed [ 26.500563][ T475] FAT-fs (loop3): Directory bread(block 70) failed [ 26.507296][ T475] FAT-fs (loop3): Directory bread(block 71) failed [ 26.540511][ T475] FAT-fs (loop3): Directory bread(block 72) failed [ 26.558694][ T475] FAT-fs (loop3): Directory bread(block 73) failed [ 26.598875][ T489] syz.4.66 (489) used greatest stack depth: 21888 bytes left [ 26.602719][ T37] kernel write not supported for file /58/net/sockstat6 (pid: 37 comm: kworker/1:1) [ 26.641038][ T498] netlink: 104 bytes leftover after parsing attributes in process `syz.2.69'. [ 26.703729][ T504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.73'. [ 26.715823][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.730236][ T504] device bridge_slave_1 left promiscuous mode [ 26.736445][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.919147][ T535] binder: 534:535 ioctl c0306201 200000000640 returned -22 [ 27.005629][ T549] loop4: detected capacity change from 0 to 512 [ 27.059779][ T549] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 27.087810][ T549] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.102473][ T549] EXT4-fs (loop4): shut down requested (1) [ 27.108949][ T549] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 27.109387][ T28] kauditd_printk_skb: 89 callbacks suppressed [ 27.109403][ T28] audit: type=1400 audit(1757978699.142:163): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 27.167985][ T549] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 27.180385][ T28] audit: type=1400 audit(1757978699.142:164): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.196935][ T561] loop2: detected capacity change from 0 to 2048 [ 27.202780][ T28] audit: type=1400 audit(1757978699.142:165): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.240003][ T286] EXT4-fs (loop4): unmounting filesystem. [ 27.247025][ T28] audit: type=1400 audit(1757978699.142:166): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.307179][ T28] audit: type=1400 audit(1757978699.142:167): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.372550][ T28] audit: type=1400 audit(1757978699.142:168): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.396349][ T28] audit: type=1400 audit(1757978699.142:169): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.420735][ T561] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 27.472015][ T561] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.485397][ T28] audit: type=1400 audit(1757978699.242:170): avc: denied { remove_name } for pid=548 comm="syz.4.93" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.487171][ T561] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 27.521555][ T561] EXT4-fs (loop2): This should not happen!! Data will be lost [ 27.521555][ T561] [ 27.531972][ T561] EXT4-fs (loop2): Total free blocks count 0 [ 27.538133][ T561] EXT4-fs (loop2): Free/Dirty block details [ 27.545759][ T561] EXT4-fs (loop2): free_blocks=2415919104 [ 27.549306][ T580] loop3: detected capacity change from 0 to 256 [ 27.562728][ T561] EXT4-fs (loop2): dirty_blocks=32 [ 27.568295][ T561] EXT4-fs (loop2): Block reservation details [ 27.574291][ T561] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 27.580475][ T28] audit: type=1400 audit(1757978699.242:171): avc: denied { unlink } for pid=548 comm="syz.4.93" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.602565][ T28] audit: type=1400 audit(1757978699.362:172): avc: denied { create } for pid=562 comm="syz.4.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 27.639942][ T580] FAT-fs (loop3): Directory bread(block 64) failed [ 27.646647][ T580] FAT-fs (loop3): Directory bread(block 65) failed [ 27.661165][ T580] FAT-fs (loop3): Directory bread(block 66) failed [ 27.673611][ T580] FAT-fs (loop3): Directory bread(block 67) failed [ 27.680465][ T580] FAT-fs (loop3): Directory bread(block 68) failed [ 27.696098][ T580] FAT-fs (loop3): Directory bread(block 69) failed [ 27.696160][ T8] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 27.703123][ T580] FAT-fs (loop3): Directory bread(block 70) failed [ 27.729206][ T580] FAT-fs (loop3): Directory bread(block 71) failed [ 27.753664][ T580] FAT-fs (loop3): Directory bread(block 72) failed [ 27.766323][ T580] FAT-fs (loop3): Directory bread(block 73) failed [ 27.844366][ T580] syz.3.104: attempt to access beyond end of device [ 27.844366][ T580] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 27.977508][ T627] loop1: detected capacity change from 0 to 1024 [ 28.010065][ T627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 28.026124][ T627] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.062650][ T627] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.125: Freeing blocks not in datazone - block = 0, count = 16 [ 28.095162][ T644] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 28.136746][ T284] EXT4-fs (loop1): unmounting filesystem. [ 28.144468][ T652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.137'. [ 28.350990][ T693] device ip6gretap0 entered promiscuous mode [ 28.456146][ T710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 28.477093][ T287] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.495955][ T712] loop4: detected capacity change from 0 to 4096 [ 28.534761][ T712] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 28.577371][ T712] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.163: corrupted inode contents [ 28.597285][ T712] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #15: comm syz.4.163: mark_inode_dirty error [ 28.624017][ T712] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.163: corrupted inode contents [ 28.641618][ T712] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.163: mark_inode_dirty error [ 28.653597][ T712] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.163: corrupted inode contents [ 28.665727][ T712] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.163: mark_inode_dirty error [ 28.680390][ T712] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.163: corrupted inode contents [ 28.692654][ T712] EXT4-fs error (device loop4): ext4_truncate:4314: inode #15: comm syz.4.163: mark_inode_dirty error [ 28.704119][ T712] EXT4-fs error (device loop4) in ext4_setattr:5660: Corrupt filesystem [ 28.716449][ T722] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.163: corrupted inode contents [ 28.717073][ T287] usb 2-1: Using ep0 maxpacket: 16 [ 28.760766][ T287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.772686][ T287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.779945][ T286] EXT4-fs (loop4): unmounting filesystem. [ 28.790649][ T287] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 28.800189][ T730] loop0: detected capacity change from 0 to 512 [ 28.807030][ T287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.816482][ T287] usb 2-1: config 0 descriptor?? [ 28.827268][ T730] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.882541][ T730] EXT4-fs (loop0): 1 orphan inode deleted [ 28.888602][ T730] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 28.897858][ T43] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 28.907258][ T730] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.936748][ T282] EXT4-fs (loop0): unmounting filesystem. [ 28.971174][ T747] loop0: detected capacity change from 0 to 128 [ 28.972413][ T748] loop2: detected capacity change from 0 to 256 [ 28.995596][ T748] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xc0e7db9a, utbl_chksum : 0xe619d30d) [ 29.018406][ T747] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 29.036505][ T747] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.047988][ T748] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 29.066568][ T747] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.175: No space for directory leaf checksum. Please run e2fsck -D. [ 29.089888][ T747] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.175: Directory block failed checksum [ 29.137427][ T747] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.175: No space for directory leaf checksum. Please run e2fsck -D. [ 29.156591][ T747] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.175: checksumming directory block 0 [ 29.178731][ T282] EXT4-fs (loop0): unmounting filesystem. [ 29.193691][ T756] loop0: detected capacity change from 0 to 16 [ 29.203874][ T756] erofs: (device loop0): mounted with root inode @ nid 36. [ 29.233872][ T287] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 29.248014][ T756] erofs: (device loop0): erofs_read_inode: bogus i_mode (4355) @ nid 46 [ 29.458731][ T287] usb 2-1: USB disconnect, device number 2 [ 29.853483][ T839] tun0: tun_chr_ioctl cmd 1074025676 [ 29.864180][ T839] tun0: owner set to 0 [ 29.872891][ T841] loop4: detected capacity change from 0 to 4096 [ 29.909118][ T841] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 29.947979][ T841] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 80: comm syz.4.218: path /74/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 30.104817][ T286] EXT4-fs (loop4): unmounting filesystem. [ 30.419457][ T884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.238'. [ 30.561238][ T896] netlink: 'syz.0.244': attribute type 11 has an invalid length. [ 30.577025][ T896] netlink: 36 bytes leftover after parsing attributes in process `syz.0.244'. [ 30.597117][ T19] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.615243][ T898] loop1: detected capacity change from 0 to 1024 [ 30.630546][ T898] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.668289][ T898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 30.684456][ T900] loop0: detected capacity change from 0 to 4096 [ 30.709144][ T284] EXT4-fs (loop1): unmounting filesystem. [ 30.724737][ T900] EXT4-fs (loop0): Test dummy encryption mode enabled [ 30.743848][ T900] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 30.757142][ T900] System zones: 0-5 [ 30.761936][ T900] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 30.787092][ T19] usb 3-1: Using ep0 maxpacket: 8 [ 30.793980][ T19] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.853493][ T907] loop1: detected capacity change from 0 to 512 [ 30.861423][ T19] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.873677][ T19] usb 3-1: config 0 interface 0 has no altsetting 0 [ 30.891137][ T907] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 30.902688][ T19] usb 3-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 30.921964][ T907] EXT4-fs (loop1): Unsupported encryption level 249 [ 30.932040][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.953220][ T282] EXT4-fs (loop0): unmounting filesystem. [ 30.962094][ T19] usb 3-1: config 0 descriptor?? [ 30.993856][ T907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'. [ 31.383376][ T19] ntrig 0003:1B96:0004.0002: unknown main item tag 0x0 [ 31.402522][ T19] ntrig 0003:1B96:0004.0002: unknown main item tag 0x0 [ 31.418114][ T19] ntrig 0003:1B96:0004.0002: unknown main item tag 0x0 [ 31.435170][ T19] ntrig 0003:1B96:0004.0002: unknown main item tag 0x0 [ 31.442097][ T19] ntrig 0003:1B96:0004.0002: unknown main item tag 0x0 [ 32.646997][ C1] sched: RT throttling activated [ 32.654947][ T19] ntrig 0003:1B96:0004.0002: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.2-1/input0 [ 32.678468][ T19] usb 3-1: USB disconnect, device number 2 [ 34.640093][ T933] fido_id[933]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 34.688357][ T930] netlink: 300 bytes leftover after parsing attributes in process `syz.1.257'. [ 34.707062][ T930] tipc: Invalid UDP bearer configuration [ 34.707085][ T930] tipc: Enabling of bearer rejected, failed to enable media [ 34.760088][ T935] raw_sendmsg: syz.0.260 forgot to set AF_INET. Fix it! [ 34.847891][ T941] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 34.923795][ T947] loop0: detected capacity change from 0 to 512 [ 35.071360][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 35.071376][ T28] audit: type=1400 audit(1757978707.092:232): avc: denied { setopt } for pid=960 comm="syz.0.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.112801][ T963] loop0: detected capacity change from 0 to 2048 [ 35.200494][ T963] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 35.209172][ T963] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.276074][ T28] audit: type=1400 audit(1757978707.292:233): avc: denied { ioctl } for pid=962 comm="syz.0.274" path="/66/file0/file0/file0" dev="loop0" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.301775][ T282] EXT4-fs (loop0): unmounting filesystem. [ 35.304622][ T37] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.444763][ T959] loop1: detected capacity change from 0 to 40427 [ 35.463121][ T959] F2FS-fs (loop1): invalid crc value [ 35.473767][ T959] F2FS-fs (loop1): Found nat_bits in checkpoint [ 35.540367][ T37] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.571701][ T37] usb 3-1: config 0 interface 0 has no altsetting 0 [ 35.591913][ T37] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 35.617657][ T959] F2FS-fs (loop1): Start checkpoint disabled! [ 35.623825][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.643285][ T37] usb 3-1: config 0 descriptor?? [ 35.667417][ T959] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 35.781626][ T28] audit: type=1400 audit(1757978707.802:234): avc: denied { append } for pid=954 comm="syz.1.272" path="/38/file0/memory.events" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.782338][ T959] F2FS-fs (loop1): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem [ 35.959253][ T10] kworker/u4:1: attempt to access beyond end of device [ 35.959253][ T10] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 35.992450][ T973] loop0: detected capacity change from 0 to 40427 [ 36.062189][ T973] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.087356][ T37] nintendo 0003:057E:2009.0003: unknown main item tag 0x0 [ 36.107368][ T37] nintendo 0003:057E:2009.0003: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.2-1/input0 [ 36.237088][ T37] nintendo 0003:057E:2009.0003: failed reading SPI flash; ret=-38 [ 36.246002][ T37] nintendo 0003:057E:2009.0003: using factory cal for left stick [ 36.265844][ T973] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 36.297704][ T37] nintendo 0003:057E:2009.0003: failed reading SPI flash; ret=-38 [ 36.308733][ T37] nintendo 0003:057E:2009.0003: using factory cal for right stick [ 36.337038][ T37] nintendo 0003:057E:2009.0003: failed reading SPI flash; ret=-38 [ 36.355938][ T973] syz.0.276: attempt to access beyond end of device [ 36.355938][ T973] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 36.369773][ T37] nintendo 0003:057E:2009.0003: Failed to read left stick cal, using defaults; e=-38 [ 36.397038][ T37] nintendo 0003:057E:2009.0003: failed reading SPI flash; ret=-38 [ 36.405238][ T973] syz.0.276: attempt to access beyond end of device [ 36.405238][ T973] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 36.427028][ T37] nintendo 0003:057E:2009.0003: Failed to read right stick cal, using defaults; e=-38 [ 36.446819][ T37] nintendo 0003:057E:2009.0003: failed reading SPI flash; ret=-38 [ 36.467738][ T37] nintendo 0003:057E:2009.0003: using factory cal for IMU [ 36.474977][ T37] nintendo 0003:057E:2009.0003: failed reading SPI flash; ret=-38 [ 36.494489][ T37] nintendo 0003:057E:2009.0003: Failed to read IMU cal, using defaults; ret=-38 [ 36.513947][ T37] nintendo 0003:057E:2009.0003: Unable to read IMU calibration data [ 36.524498][ T282] syz-executor: attempt to access beyond end of device [ 36.524498][ T282] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 36.547576][ T37] nintendo 0003:057E:2009.0003: Failed to set report mode; ret=-38 [ 36.565661][ T37] nintendo 0003:057E:2009.0003: Failed to initialize controller; ret=-38 [ 36.585388][ T37] nintendo 0003:057E:2009.0003: probe - fail = -38 [ 36.602195][ T37] nintendo: probe of 0003:057E:2009.0003 failed with error -38 [ 36.611307][ T28] audit: type=1400 audit(1757978708.632:235): avc: denied { ioctl } for pid=985 comm="syz.1.279" path="/dev/input/event1" dev="devtmpfs" ino=261 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 36.625229][ T37] usb 3-1: USB disconnect, device number 3 [ 36.798127][ T28] audit: type=1400 audit(1757978708.822:236): avc: denied { read write } for pid=991 comm="syz.1.282" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 36.850056][ T28] audit: type=1400 audit(1757978708.822:237): avc: denied { open } for pid=991 comm="syz.1.282" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 36.914438][ T28] audit: type=1400 audit(1757978708.882:238): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 37.119181][ T28] audit: type=1400 audit(1757978709.142:239): avc: denied { write } for pid=1017 comm="syz.1.293" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 37.222350][ T28] audit: type=1400 audit(1757978709.242:240): avc: denied { listen } for pid=1025 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.272478][ T28] audit: type=1400 audit(1757978709.282:241): avc: denied { append } for pid=1029 comm="syz.1.298" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 37.668654][ T1036] loop2: detected capacity change from 0 to 512 [ 37.716250][ T1036] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 37.735267][ T1036] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.797036][ T285] EXT4-fs (loop2): unmounting filesystem. [ 38.145563][ T1052] loop0: detected capacity change from 0 to 256 [ 38.203132][ T1052] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 38.265910][ T1060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.310'. [ 38.354785][ T1067] x_tables: unsorted entry at hook 1 [ 38.507450][ T1077] loop2: detected capacity change from 0 to 128 [ 38.547197][ T1077] FAT-fs (loop2): Directory bread(block 414) failed [ 38.560691][ T1077] FAT-fs (loop2): Directory bread(block 415) failed [ 38.603085][ T1077] FAT-fs (loop2): Directory bread(block 416) failed [ 38.625607][ T1077] FAT-fs (loop2): Directory bread(block 417) failed [ 38.652403][ T1077] FAT-fs (loop2): Directory bread(block 418) failed [ 38.663478][ T1077] FAT-fs (loop2): Directory bread(block 419) failed [ 38.670893][ T1077] FAT-fs (loop2): Directory bread(block 420) failed [ 38.751479][ T1077] FAT-fs (loop2): Directory bread(block 421) failed [ 38.794323][ T1077] FAT-fs (loop2): Directory bread(block 414) failed [ 38.835521][ T1077] FAT-fs (loop2): Directory bread(block 415) failed [ 39.137476][ T1085] loop1: detected capacity change from 0 to 131072 [ 39.147118][ T1085] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 39.155238][ T1085] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 39.167302][ T1085] F2FS-fs (loop1): invalid crc value [ 39.199939][ T1085] F2FS-fs (loop1): Found nat_bits in checkpoint [ 39.246190][ T1111] process 'syz.2.332' launched './file1' with NULL argv: empty string added [ 39.259435][ T1085] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 39.266602][ T1085] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 39.372020][ T1117] loop0: detected capacity change from 0 to 1024 [ 39.398333][ T1117] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.460418][ T1117] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 39.519831][ T1117] EXT4-fs error (device loop0): ext4_free_blocks:6210: comm syz.0.335: Freeing blocks not in datazone - block = 0, count = 4096 [ 39.566034][ T1117] EXT4-fs (loop0): Remounting filesystem read-only [ 39.604068][ T1117] EXT4-fs (loop0): 1 orphan inode deleted [ 39.632708][ T1117] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.706363][ T282] EXT4-fs (loop0): unmounting filesystem. [ 40.117183][ T1150] Driver unsupported XDP return value 0 on prog (id 85) dev N/A, expect packet loss! [ 42.961103][ T1138] syz.0.346 (1138) used greatest stack depth: 20928 bytes left [ 43.127033][ T288] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 43.172292][ T1179] loop2: detected capacity change from 0 to 1024 [ 43.214251][ T1186] loop0: detected capacity change from 0 to 256 [ 43.227710][ T1186] exfat: Deprecated parameter 'namecase' [ 43.234131][ T1179] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #3: block 1: comm syz.2.361: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.248151][ T1186] exfat: Deprecated parameter 'utf8' [ 43.273719][ T1186] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 43.287151][ T1179] __quota_error: 6 callbacks suppressed [ 43.287165][ T1179] Quota error (device loop2): write_blk: dquota write failed [ 43.317067][ T1179] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 43.327213][ T288] usb 2-1: Using ep0 maxpacket: 16 [ 43.333441][ T288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.368758][ T1186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 43.377666][ T1179] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.361: Failed to acquire dquot type 0 [ 43.389074][ T288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.409122][ T1179] EXT4-fs error (device loop2): ext4_free_blocks:6210: comm syz.2.361: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.420374][ T288] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 43.431674][ T1179] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.361: Invalid inode bitmap blk 0 in block_group 0 [ 43.441618][ T288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.467953][ T1179] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 43.495383][ T288] usb 2-1: config 0 descriptor?? [ 43.497036][ T1179] EXT4-fs (loop2): 1 orphan inode deleted [ 43.510782][ T1178] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.537576][ T1179] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.571640][ T1178] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 43.587032][ T1178] EXT4-fs error (device loop2): ext4_release_dquot:6837: comm kworker/u4:6: Failed to release dquot type 0 [ 43.617468][ T285] EXT4-fs (loop2): unmounting filesystem. [ 43.678232][ T1194] loop0: detected capacity change from 0 to 4096 [ 43.726363][ T1194] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.748369][ T28] audit: type=1400 audit(1757978715.772:248): avc: denied { remount } for pid=1193 comm="syz.0.368" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.788897][ T282] EXT4-fs (loop0): unmounting filesystem. [ 43.883718][ T28] audit: type=1400 audit(1757978715.902:249): avc: denied { write } for pid=1202 comm="syz.0.371" path="socket:[20545]" dev="sockfs" ino=20545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.914243][ T288] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 43.927029][ T288] konepure 0003:1E7D:2DB4.0004: unknown main item tag 0x0 [ 43.948804][ T288] konepure 0003:1E7D:2DB4.0004: item fetching failed at offset 2/4 [ 43.964334][ T1210] cgroup: No subsys list or none specified [ 43.966947][ T28] audit: type=1400 audit(1757978715.952:250): avc: denied { remount } for pid=1204 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.992167][ T288] konepure 0003:1E7D:2DB4.0004: parse failed [ 44.010961][ T288] konepure: probe of 0003:1E7D:2DB4.0004 failed with error -22 [ 44.051376][ T28] audit: type=1400 audit(1757978715.962:251): avc: denied { connect } for pid=1206 comm="syz.0.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.097154][ T28] audit: type=1400 audit(1757978715.982:252): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.142641][ T288] usb 2-1: USB disconnect, device number 3 [ 44.159297][ T28] audit: type=1400 audit(1757978716.022:253): avc: denied { read write } for pid=1208 comm="syz.0.374" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.184508][ T28] audit: type=1400 audit(1757978716.022:254): avc: denied { open } for pid=1208 comm="syz.0.374" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.289549][ T1227] loop0: detected capacity change from 0 to 512 [ 44.324174][ T1227] EXT4-fs (loop0): Test dummy encryption mode enabled [ 44.341184][ T1227] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.363101][ T1227] EXT4-fs (loop0): 1 truncate cleaned up [ 44.377033][ T1227] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 44.408052][ T1227] EXT4-fs warning (device loop0): __ext4fs_dirhash:270: inode #12: comm syz.0.382: Siphash requires key [ 44.459573][ T282] EXT4-fs (loop0): unmounting filesystem. [ 45.742806][ T1248] IPv6: sit1: Disabled Multicast RS [ 45.818755][ T1242] loop1: detected capacity change from 0 to 40427 [ 45.839634][ T1242] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 45.947959][ T1242] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 46.552297][ T1242] F2FS-fs (loop1): Found nat_bits in checkpoint [ 47.682734][ T1242] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 47.689952][ T1242] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 47.723792][ T1246] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.740349][ T1246] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.753473][ T1246] device bridge_slave_0 entered promiscuous mode [ 47.763415][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.770164][ T1267] loop2: detected capacity change from 0 to 1024 [ 47.771866][ T1245] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.785076][ T1245] device bridge_slave_0 entered promiscuous mode [ 47.795541][ T1267] EXT4-fs: Invalid want_extra_isize 2 [ 47.803971][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.813585][ T1246] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.844788][ T1246] device bridge_slave_1 entered promiscuous mode [ 47.856675][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.879551][ T1245] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.899605][ T1245] device bridge_slave_1 entered promiscuous mode [ 48.096210][ T1246] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.103332][ T1246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.193201][ T10] device bridge_slave_0 left promiscuous mode [ 48.210778][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.246561][ T10] device veth1_macvtap left promiscuous mode [ 48.252713][ T10] device veth0_vlan left promiscuous mode [ 48.291537][ T1288] loop1: detected capacity change from 0 to 40427 [ 48.305816][ T1288] F2FS-fs (loop1): invalid crc value [ 48.331279][ T1288] F2FS-fs (loop1): Found nat_bits in checkpoint [ 48.373315][ T1288] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 48.406887][ T1327] device veth1_macvtap left promiscuous mode [ 48.413151][ T1327] device macsec0 entered promiscuous mode [ 48.425740][ T284] syz-executor: attempt to access beyond end of device [ 48.425740][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 48.444545][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.454636][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.462577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.481292][ T1329] device veth1_macvtap entered promiscuous mode [ 48.491614][ T1329] device macsec0 left promiscuous mode [ 48.506789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.518349][ T1333] loop2: detected capacity change from 0 to 512 [ 48.531155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.539944][ T1333] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.542548][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.556143][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.564517][ T1333] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 48.589674][ T1333] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 48.593958][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.607280][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.614414][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.617307][ T1333] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 48.640016][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.649373][ T1333] System zones: 0-2, 18-18, 34-35 [ 48.654972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.663649][ T1333] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 48.672801][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.681461][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.690050][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.697117][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.700925][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 48.700939][ T28] audit: type=1400 audit(1757978720.722:260): avc: denied { read write } for pid=1341 comm="syz.1.418" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.708819][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.733973][ T28] audit: type=1400 audit(1757978720.732:261): avc: denied { open } for pid=1341 comm="syz.1.418" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 48.772721][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.773349][ T285] EXT4-fs (loop2): unmounting filesystem. [ 48.781148][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.793586][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.801439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.809547][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.819238][ T6] hid-generic F669:0002:0004.0005: hidraw0: HID v0.08 Device [syz1] on syz0 [ 48.842741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.862652][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.885806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.888495][ T1344] fido_id[1344]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 48.906419][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.923253][ T1246] device veth0_vlan entered promiscuous mode [ 48.934478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.947251][ T1352] overlayfs: failed to resolve './file0': -2 [ 48.949210][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.993940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.002180][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.018297][ T1359] kvm [1358]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xffffffffffffffff [ 49.029265][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.035749][ T1365] loop2: detected capacity change from 0 to 128 [ 49.047432][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.066142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.074763][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.092817][ T1246] device veth1_macvtap entered promiscuous mode [ 49.103580][ T1365] syz.2.431: attempt to access beyond end of device [ 49.103580][ T1365] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 49.107607][ T1245] device veth0_vlan entered promiscuous mode [ 49.133785][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.146849][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.155412][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.163952][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.171745][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.190258][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.199481][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.209226][ T1245] device veth1_macvtap entered promiscuous mode [ 49.227367][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.235356][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.244847][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.253571][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.263956][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.301279][ T28] audit: type=1400 audit(1757978721.322:262): avc: denied { mounton } for pid=1246 comm="syz-executor" path="/root/syzkaller.0cFOGY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.312157][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.338770][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.347620][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.355888][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.407038][ T669] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 49.451416][ T1383] loop6: detected capacity change from 0 to 8192 [ 49.476373][ T1383] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 49.492977][ T1383] FAT-fs (loop6): Filesystem has been set read-only [ 49.566936][ T1398] loop5: detected capacity change from 0 to 512 [ 49.598149][ T669] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 49.613027][ T669] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 49.624355][ T1398] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.444: bg 0: block 248: padding at end of block bitmap is not set [ 49.644598][ T1398] Quota error (device loop5): write_blk: dquota write failed [ 49.652440][ T1387] mmap: syz.0.439 (1387) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.664552][ T1398] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 49.677198][ T669] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 49.686360][ T669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.696776][ T10] device bridge_slave_1 left promiscuous mode [ 49.710697][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.713251][ T1398] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.444: Failed to acquire dquot type 1 [ 49.730131][ T1398] EXT4-fs (loop5): 1 truncate cleaned up [ 49.732318][ T669] usb 2-1: Product: syz [ 49.735806][ T1398] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 49.735912][ T1398] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.755468][ T669] usb 2-1: Manufacturer: syz [ 49.792955][ T669] usb 2-1: SerialNumber: syz [ 49.801037][ T10] device bridge_slave_0 left promiscuous mode [ 49.810813][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.815578][ T669] usb 2-1: config 0 descriptor?? [ 49.821468][ T28] audit: type=1400 audit(1757978721.832:263): avc: denied { create } for pid=1395 comm="syz.5.444" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 49.844796][ T1367] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 49.853039][ T10] device veth1_macvtap left promiscuous mode [ 49.858793][ T1367] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 49.862982][ T10] device veth0_vlan left promiscuous mode [ 49.866663][ T1246] EXT4-fs (loop5): unmounting filesystem. [ 49.877901][ T731] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 49.886876][ T731] EXT4-fs error (device loop5): ext4_release_dquot:6837: comm kworker/u4:5: Failed to release dquot type 1 [ 50.082641][ T1367] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 50.094339][ T1367] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 50.132567][ T1413] loop5: detected capacity change from 0 to 32768 [ 50.190916][ T1413] loop5: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 50.217798][ T28] audit: type=1400 audit(1757978722.242:264): avc: denied { read write } for pid=1433 comm="syz.2.459" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 50.346538][ T28] audit: type=1400 audit(1757978722.242:265): avc: denied { open } for pid=1433 comm="syz.2.459" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 50.512591][ T669] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 50.713468][ T669] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 50.789991][ T669] usb 2-1: USB disconnect, device number 4 [ 50.811267][ T1462] loop2: detected capacity change from 0 to 512 [ 50.837493][ T1462] EXT4-fs: Ignoring removed nobh option [ 50.853593][ T1462] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.468: iget: bad i_size value: 38620345925642 [ 50.892950][ T1462] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.468: couldn't read orphan inode 15 (err -117) [ 50.928139][ T1462] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 50.949725][ T1471] loop6: detected capacity change from 0 to 256 [ 50.978444][ T28] audit: type=1400 audit(1757978723.002:266): avc: denied { mounton } for pid=1472 comm="syz.6.473" path="/15/file0" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 51.052184][ T285] EXT4-fs (loop2): unmounting filesystem. [ 51.111257][ T1486] loop2: detected capacity change from 0 to 256 [ 51.135203][ T1486] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.154313][ T1486] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 51.165875][ T1486] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 51.256771][ T1493] loop6: detected capacity change from 0 to 256 [ 51.259136][ T1452] udevd[1452]: inotify_add_watch(7, /dev/loop5p24, 10) failed: No such file or directory [ 51.287753][ T1449] udevd[1449]: inotify_add_watch(7, /dev/loop5p26, 10) failed: No such file or directory [ 51.287754][ T345] udevd[345]: inotify_add_watch(7, /dev/loop5p25, 10) failed: No such file or directory [ 51.289647][ T1448] udevd[1448]: inotify_add_watch(7, /dev/loop5p28, 10) failed: No such file or directory [ 51.299200][ T1450] udevd[1450]: inotify_add_watch(7, /dev/loop5p27, 10) failed: No such file or directory [ 51.308732][ T337] udevd[337]: inotify_add_watch(7, /dev/loop5p29, 10) failed: No such file or directory [ 51.341796][ T1493] FAT-fs (loop6): Directory bread(block 64) failed [ 51.345464][ T1447] udevd[1447]: inotify_add_watch(7, /dev/loop5p31, 10) failed: No such file or directory [ 51.349822][ T734] udevd[734]: inotify_add_watch(7, /dev/loop5p30, 10) failed: No such file or directory [ 51.360654][ T343] udevd[343]: inotify_add_watch(7, /dev/loop5p32, 10) failed: No such file or directory [ 51.377233][ T1493] FAT-fs (loop6): Directory bread(block 65) failed [ 51.385447][ T1451] udevd[1451]: inotify_add_watch(7, /dev/loop5p33, 10) failed: No such file or directory [ 51.407512][ T1493] FAT-fs (loop6): Directory bread(block 66) failed [ 51.414081][ T1493] FAT-fs (loop6): Directory bread(block 67) failed [ 51.468734][ T1493] FAT-fs (loop6): Directory bread(block 68) failed [ 51.475340][ T1493] FAT-fs (loop6): Directory bread(block 69) failed [ 51.505130][ T1493] FAT-fs (loop6): Directory bread(block 70) failed [ 51.543207][ T1493] FAT-fs (loop6): Directory bread(block 71) failed [ 51.598412][ T1493] FAT-fs (loop6): Directory bread(block 72) failed [ 51.615819][ T1493] FAT-fs (loop6): Directory bread(block 73) failed [ 52.209022][ T1545] loop5: detected capacity change from 0 to 512 [ 52.279197][ T1545] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 52.371625][ T1540] loop6: detected capacity change from 0 to 40427 [ 52.393428][ T1540] F2FS-fs (loop6): invalid crc value [ 52.409424][ T1246] EXT4-fs (loop5): unmounting filesystem. [ 52.429174][ T1540] F2FS-fs (loop6): Found nat_bits in checkpoint [ 52.548338][ T1537] loop2: detected capacity change from 0 to 40427 [ 52.550533][ T1540] F2FS-fs (loop6): Start checkpoint disabled! [ 52.565716][ T1537] F2FS-fs (loop2): fault_injection options not supported [ 52.580540][ T1537] F2FS-fs (loop2): invalid crc value [ 52.591407][ T1540] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 52.610882][ T1537] F2FS-fs (loop2): Found nat_bits in checkpoint [ 52.662499][ T1575] loop5: detected capacity change from 0 to 2048 [ 52.702010][ T1537] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 52.733726][ T1575] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 52.754403][ T1575] EXT4-fs (loop5): shut down requested (2) [ 52.772603][ T334] kworker/u4:3: attempt to access beyond end of device [ 52.772603][ T334] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 52.787296][ T1246] EXT4-fs (loop5): unmounting filesystem. [ 52.815685][ T285] syz-executor: attempt to access beyond end of device [ 52.815685][ T285] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 52.830129][ T1586] loop5: detected capacity change from 0 to 512 [ 52.880224][ T1452] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.014924][ T1597] loop6: detected capacity change from 0 to 512 [ 53.067419][ T1597] EXT4-fs (loop6): 1 truncate cleaned up [ 53.073100][ T1597] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 53.128096][ T1245] EXT4-fs (loop6): unmounting filesystem. [ 53.217035][ T287] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 53.250622][ T1602] loop2: detected capacity change from 0 to 40427 [ 53.260543][ T1595] loop1: detected capacity change from 0 to 40427 [ 53.267707][ T1602] F2FS-fs (loop2): heap/no_heap options were deprecated [ 53.274778][ T1602] F2FS-fs (loop2): fault_injection options not supported [ 53.298913][ T1602] F2FS-fs (loop2): fault_type options not supported [ 53.306372][ T1602] F2FS-fs (loop2): invalid crc value [ 53.316399][ T1595] F2FS-fs (loop1): Found nat_bits in checkpoint [ 53.322977][ T37] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 53.357833][ T1602] F2FS-fs (loop2): Found nat_bits in checkpoint [ 53.395913][ T1595] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 53.397138][ T1602] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 53.427108][ T287] usb 1-1: Using ep0 maxpacket: 8 [ 53.434528][ T1595] syz.1.525: attempt to access beyond end of device [ 53.434528][ T1595] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 53.444052][ T287] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 125 [ 53.466025][ T1604] loop6: detected capacity change from 0 to 40427 [ 53.475238][ T1602] syz.2.521: attempt to access beyond end of device [ 53.475238][ T1602] loop2: rw=2049, sector=45096, nr_sectors = 88 limit=40427 [ 53.475879][ T287] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 53.498821][ T1602] syz.2.521: attempt to access beyond end of device [ 53.498821][ T1602] loop2: rw=2049, sector=45184, nr_sectors = 8 limit=40427 [ 53.499042][ T287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.521013][ T284] syz-executor: attempt to access beyond end of device [ 53.521013][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 53.522911][ T287] usb 1-1: Product: syz [ 53.539560][ T37] usb 6-1: Using ep0 maxpacket: 32 [ 53.545402][ T285] syz-executor: attempt to access beyond end of device [ 53.545402][ T285] loop2: rw=2049, sector=45192, nr_sectors = 8 limit=40427 [ 53.546021][ T287] usb 1-1: Manufacturer: syz [ 53.564371][ T1604] F2FS-fs (loop6): invalid crc value [ 53.575382][ T37] usb 6-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.586197][ T1604] F2FS-fs (loop6): Found nat_bits in checkpoint [ 53.593055][ T287] usb 1-1: SerialNumber: syz [ 53.598321][ T37] usb 6-1: config 0 interface 0 has no altsetting 0 [ 53.605329][ T37] usb 6-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 53.621931][ T1591] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 53.642929][ T37] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.654860][ T37] usb 6-1: config 0 descriptor?? [ 53.673861][ T1604] F2FS-fs (loop6): Start checkpoint disabled! [ 53.680845][ T1604] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 53.738901][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 53.738917][ T28] audit: type=1400 audit(1757978725.762:284): avc: denied { link } for pid=1603 comm="syz.6.527" name="file1" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.807434][ T731] kworker/u4:5: attempt to access beyond end of device [ 53.807434][ T731] loop6: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 53.841057][ T287] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 53.958286][ T1621] loop6: detected capacity change from 0 to 512 [ 53.975025][ T1621] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.998788][ T1621] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 54.008677][ T1621] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 54.018215][ T1621] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 54.026292][ T1621] System zones: 0-2, 18-18, 34-35 [ 54.032423][ T1621] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 54.032493][ T1614] loop1: detected capacity change from 0 to 40427 [ 54.047527][ T1621] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.530: bg 0: block 353: padding at end of block bitmap is not set [ 54.073873][ T37] input: HID 28bd:0933 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0933.0006/input/input5 [ 54.075331][ T1614] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 54.094579][ T28] audit: type=1400 audit(1757978726.122:285): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1058 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.117522][ T28] audit: type=1400 audit(1757978726.122:286): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1058 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.141792][ T37] uclogic 0003:28BD:0933.0006: input,hidraw0: USB HID v0.01 Mouse [HID 28bd:0933] on usb-dummy_hcd.5-1/input0 [ 54.142130][ T1245] EXT4-fs (loop6): unmounting filesystem. [ 54.158132][ T1614] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 54.177692][ T28] audit: type=1400 audit(1757978726.192:287): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1058 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.219012][ T28] audit: type=1400 audit(1757978726.242:288): avc: denied { read write } for pid=1590 comm="syz.0.523" name="lp0" dev="devtmpfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 54.219083][ C0] usblp0: nonzero write bulk status received: -71 [ 54.255679][ T6] usb 1-1: USB disconnect, device number 2 [ 54.267661][ T6] usblp0: removed [ 54.273876][ T28] audit: type=1400 audit(1757978726.242:289): avc: denied { open } for pid=1590 comm="syz.0.523" path="/dev/usb/lp0" dev="devtmpfs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 54.283703][ T1343] usb 6-1: USB disconnect, device number 2 [ 54.304646][ T1614] F2FS-fs (loop1): Found nat_bits in checkpoint [ 54.321408][ T28] audit: type=1400 audit(1757978726.342:290): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=1058 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.368635][ T28] audit: type=1400 audit(1757978726.342:291): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1058 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.395196][ T28] audit: type=1400 audit(1757978726.372:292): avc: denied { read write } for pid=285 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.420920][ T28] audit: type=1400 audit(1757978726.372:293): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 54.445286][ T1614] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 54.453581][ T1614] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 54.737803][ T1643] loop6: detected capacity change from 0 to 40427 [ 54.745102][ T1643] F2FS-fs (loop6): fault_injection options not supported [ 54.752403][ T1643] F2FS-fs (loop6): fault_type options not supported [ 54.767582][ T1643] F2FS-fs (loop6): invalid crc value [ 54.785979][ T1643] F2FS-fs (loop6): Found nat_bits in checkpoint [ 54.857098][ T1643] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 55.028712][ T1665] SELinux: failed to load policy [ 55.093623][ T1655] loop5: detected capacity change from 0 to 40427 [ 55.124086][ T1655] F2FS-fs (loop5): Mismatch start address, segment0(0) cp_blkaddr(512) [ 55.140835][ T1655] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 55.160121][ T1655] F2FS-fs (loop5): heap/no_heap options were deprecated [ 55.167745][ T1671] loop6: detected capacity change from 0 to 256 [ 55.183262][ T1655] F2FS-fs (loop5): invalid crc value [ 55.199331][ T1655] F2FS-fs (loop5): Found nat_bits in checkpoint [ 55.230173][ T1671] FAT-fs (loop6): Directory bread(block 64) failed [ 55.242269][ T1671] FAT-fs (loop6): Directory bread(block 65) failed [ 55.250632][ T1671] FAT-fs (loop6): Directory bread(block 66) failed [ 55.258866][ T1671] FAT-fs (loop6): Directory bread(block 67) failed [ 55.265618][ T1671] FAT-fs (loop6): Directory bread(block 68) failed [ 55.278841][ T1655] F2FS-fs (loop5): Start checkpoint disabled! [ 55.285809][ T1671] FAT-fs (loop6): Directory bread(block 69) failed [ 55.293040][ T1671] FAT-fs (loop6): Directory bread(block 70) failed [ 55.301389][ T1655] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 55.310313][ T1655] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 55.317908][ T1671] FAT-fs (loop6): Directory bread(block 71) failed [ 55.337112][ T1671] FAT-fs (loop6): Directory bread(block 72) failed [ 55.347335][ T1671] FAT-fs (loop6): Directory bread(block 73) failed [ 55.388014][ T1655] syz.5.543: attempt to access beyond end of device [ 55.388014][ T1655] loop5: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 55.402933][ T1655] syz.5.543: attempt to access beyond end of device [ 55.402933][ T1655] loop5: rw=2049, sector=77864, nr_sectors = 16 limit=40427 [ 55.445114][ T1655] syz.5.543: attempt to access beyond end of device [ 55.445114][ T1655] loop5: rw=2049, sector=77904, nr_sectors = 24 limit=40427 [ 55.488046][ T1655] syz.5.543: attempt to access beyond end of device [ 55.488046][ T1655] loop5: rw=2049, sector=77960, nr_sectors = 8 limit=40427 [ 55.618608][ T1704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 55.708625][ T1710] loop5: detected capacity change from 0 to 128 [ 55.751203][ T1717] loop6: detected capacity change from 0 to 1024 [ 55.777111][ T1717] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 55.785851][ T1717] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.791209][ T1717] EXT4-fs error (device loop6): ext4_readdir:263: inode #12: block 80: comm syz.6.568: path /: bad entry in directory: rec_len is smaller than minimal - offset=296, inode=0, rec_len=0, size=1024 fake=0 [ 55.819456][ T1717] EXT4-fs (loop6): Remounting filesystem read-only [ 55.831796][ T1245] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /35/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 55.832014][ T1245] EXT4-fs (loop6): Remounting filesystem read-only [ 55.832629][ T1245] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /35/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 55.832812][ T1245] EXT4-fs (loop6): Remounting filesystem read-only [ 55.888175][ T1245] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 55.888620][ T1245] EXT4-fs (loop6): Remounting filesystem read-only [ 55.915783][ T1245] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /35/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 55.936635][ T1245] EXT4-fs (loop6): Remounting filesystem read-only [ 55.936810][ T1245] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 55.937165][ T1245] EXT4-fs (loop6): Remounting filesystem read-only [ 55.968633][ T1245] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /35/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 55.968845][ T1245] EXT4-fs (loop6): Remounting filesystem read-only [ 55.968957][ T1245] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 55.969101][ T1245] EXT4-fs (loop6): Remounting filesystem read-only [ 55.969228][ T1245] EXT4-fs error (device loop6): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /35/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 56.041676][ T1245] EXT4-fs (loop6): Remounting filesystem read-only [ 56.041831][ T1245] EXT4-fs error (device loop6): ext4_empty_dir:3177: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 56.323482][ T1728] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.323502][ T1728] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.324029][ T1728] device bridge_slave_0 entered promiscuous mode [ 56.345580][ T1728] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.345599][ T1728] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.346075][ T1728] device bridge_slave_1 entered promiscuous mode [ 56.432297][ T1728] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.432319][ T1728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.432402][ T1728] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.432418][ T1728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.472019][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.472464][ T731] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.479987][ T731] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.497142][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.497346][ T731] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.497362][ T731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.522618][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.522827][ T731] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.522843][ T731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.538742][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.538996][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.544312][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.572593][ T1728] device veth0_vlan entered promiscuous mode [ 56.617427][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.617799][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.617989][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.623855][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.625276][ T1728] device veth1_macvtap entered promiscuous mode [ 56.658449][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.658771][ T731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.666434][ T1748] Falling back ldisc for ptm0. [ 56.699578][ T43] device bridge_slave_1 left promiscuous mode [ 56.699643][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.700195][ T43] device bridge_slave_0 left promiscuous mode [ 56.700257][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.702694][ T43] device veth1_macvtap left promiscuous mode [ 56.702752][ T43] device veth0_vlan left promiscuous mode [ 56.775092][ T1758] loop1: detected capacity change from 0 to 1024 [ 56.828501][ T1758] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 56.857324][ T284] EXT4-fs (loop1): unmounting filesystem. [ 57.018302][ T1772] IPv6: sit1: Disabled Multicast RS [ 57.337093][ T1343] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.409937][ T1810] loop2: detected capacity change from 0 to 256 [ 57.436701][ T1810] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6438d2e, utbl_chksum : 0xe619d30d) [ 57.529152][ T1343] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.553085][ T1343] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 57.569573][ T1343] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.590191][ T1343] usb 8-1: config 0 descriptor?? [ 57.616319][ T1764] loop1: detected capacity change from 0 to 131072 [ 57.673980][ T1764] F2FS-fs (loop1): Found nat_bits in checkpoint [ 57.690197][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 57.752327][ T1764] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 57.886999][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 57.894987][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.922168][ T1847] loop2: detected capacity change from 0 to 512 [ 57.937005][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.946934][ T24] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 57.966362][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 57.978817][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 57.989084][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.998654][ T24] usb 1-1: config 0 descriptor?? [ 58.002472][ T1343] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 58.014526][ T1847] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 58.037242][ T1847] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.044357][ T1343] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0007/input/input6 [ 58.087473][ T285] EXT4-fs (loop2): unmounting filesystem. [ 58.162749][ T1343] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 58.192854][ T1862] syz.2.626[1862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.192949][ T1862] syz.2.626[1862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.329729][ T1875] loop2: detected capacity change from 0 to 512 [ 58.361358][ T1875] EXT4-fs: Ignoring removed nobh option [ 58.376363][ T1875] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 58.415890][ T285] EXT4-fs (loop2): unmounting filesystem. [ 58.425133][ T24] hid (null): unknown global tag 0xd [ 58.440053][ T1882] netlink: 16 bytes leftover after parsing attributes in process `syz.5.635'. [ 58.440697][ T24] hid (null): global environment stack underflow [ 58.456193][ T24] hid (null): report_id 2130150594 is invalid [ 58.462790][ T24] hid (null): report_id 41551 is invalid [ 58.468967][ T24] hid (null): unknown global tag 0x49 [ 58.477209][ T24] hid (null): unknown global tag 0xe [ 58.482980][ T24] hid (null): invalid report_count -815546257 [ 58.567371][ T6] usb 8-1: USB disconnect, device number 2 [ 58.611946][ T1900] loop2: detected capacity change from 0 to 512 [ 58.619591][ T1900] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 58.628973][ T1900] I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 58.648757][ T1900] EXT4-fs (loop2): couldn't read superblock of external journal [ 58.660581][ T287] usb 1-1: USB disconnect, device number 3 [ 58.682784][ T1903] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 58.692480][ T1903] SELinux: failed to load policy [ 58.735941][ T1908] loop2: detected capacity change from 0 to 512 [ 58.749052][ T1908] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 58.758403][ T1908] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.784017][ T285] EXT4-fs (loop2): unmounting filesystem. [ 58.808567][ T1914] netlink: 204 bytes leftover after parsing attributes in process `syz.2.647'. [ 58.925593][ T1922] incfs: Options parsing error. -22 [ 58.930991][ T1922] incfs: mount failed -22 [ 58.970864][ T1924] loop2: detected capacity change from 0 to 4096 [ 58.982860][ T1924] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 58.989816][ T1916] loop5: detected capacity change from 0 to 40427 [ 59.006883][ T1916] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 59.024997][ T1916] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 59.034660][ T1916] F2FS-fs (loop5): invalid crc value [ 59.054907][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 59.054922][ T28] audit: type=1400 audit(1757978731.072:387): avc: denied { remount } for pid=1923 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 59.054961][ T1924] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 59.065995][ T1916] F2FS-fs (loop5): Found nat_bits in checkpoint [ 59.104493][ T28] audit: type=1400 audit(1757978731.122:388): avc: denied { create } for pid=1929 comm="syz.7.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.126617][ T285] EXT4-fs (loop2): unmounting filesystem. [ 59.133412][ T28] audit: type=1400 audit(1757978731.152:389): avc: denied { setopt } for pid=1929 comm="syz.7.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.167673][ T1916] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 59.175003][ T1916] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 59.216495][ T28] audit: type=1400 audit(1757978731.152:390): avc: denied { listen } for pid=1929 comm="syz.7.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.258750][ T28] audit: type=1400 audit(1757978731.152:391): avc: denied { read } for pid=1929 comm="syz.7.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.303552][ T28] audit: type=1400 audit(1757978731.182:392): avc: denied { setopt } for pid=1931 comm="syz.2.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.356853][ T28] audit: type=1400 audit(1757978731.282:393): avc: denied { create } for pid=1915 comm="syz.5.649" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 59.403987][ T28] audit: type=1400 audit(1757978731.292:394): avc: denied { setattr } for pid=1915 comm="syz.5.649" name="file1" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 59.453052][ T28] audit: type=1400 audit(1757978731.292:395): avc: denied { rmdir } for pid=1915 comm="syz.5.649" name="file1" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 59.505081][ T28] audit: type=1400 audit(1757978731.522:396): avc: denied { map } for pid=1952 comm="syz.5.660" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22478 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.698498][ T1969] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 59.841126][ T1982] loop2: detected capacity change from 0 to 256 [ 59.848564][ T1982] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.859388][ T6] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 60.048121][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.067000][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.067051][ T287] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 60.084492][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.127058][ T6] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.136171][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.145125][ T6] usb 6-1: config 0 descriptor?? [ 60.265105][ T287] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.283918][ T1993] loop2: detected capacity change from 0 to 4096 [ 60.286245][ T287] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.306098][ T1993] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 60.314710][ T287] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.340164][ T1993] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.682: corrupted inode contents [ 60.356692][ T1993] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #15: comm syz.2.682: mark_inode_dirty error [ 60.368115][ T287] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.369847][ T1993] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.682: corrupted inode contents [ 60.387019][ T287] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.393093][ T1993] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.682: mark_inode_dirty error [ 60.407909][ T287] usb 8-1: config 0 descriptor?? [ 60.414860][ T1993] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.682: corrupted inode contents [ 60.427199][ T1993] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #15: comm syz.2.682: mark_inode_dirty error [ 60.438655][ T1993] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.682: corrupted inode contents [ 60.451206][ T1993] EXT4-fs error (device loop2): ext4_truncate:4314: inode #15: comm syz.2.682: mark_inode_dirty error [ 60.462482][ T1993] EXT4-fs error (device loop2) in ext4_setattr:5660: Corrupt filesystem [ 60.471961][ T1995] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.682: corrupted inode contents [ 60.506193][ T285] EXT4-fs (loop2): unmounting filesystem. [ 60.551017][ T2002] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 60.570761][ T6] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 60.579691][ T6] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 60.593808][ T6] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 60.641659][ T2015] SELinux: Context system_u:object_r:checkpolicy_exec_t:s0 is not valid (left unmapped). [ 60.817502][ T287] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 60.838339][ T287] plantronics 0003:047F:FFFF.000A: hiddev97,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 60.840086][ T6] usb 6-1: USB disconnect, device number 3 [ 61.019139][ T287] usb 8-1: USB disconnect, device number 3 [ 61.589806][ T6] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 61.598469][ T6] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 61.617075][ T288] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 61.633559][ T2034] fido_id[2034]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.808260][ T288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.819329][ T288] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 61.828744][ T288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.847220][ T288] usb 6-1: config 0 descriptor?? [ 61.887043][ T287] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 62.067123][ T287] usb 8-1: Using ep0 maxpacket: 32 [ 62.073916][ T287] usb 8-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.084329][ T287] usb 8-1: config 0 interface 0 has no altsetting 0 [ 62.091656][ T287] usb 8-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 62.100934][ T287] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.109984][ T287] usb 8-1: config 0 descriptor?? [ 62.255110][ T288] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 62.278374][ T288] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000C/input/input8 [ 62.379535][ T288] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 81.647004][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.677067][ T287] usbhid 8-1:0.0: can't add hid device: -32 [ 81.686768][ T287] usbhid: probe of 8-1:0.0 failed with error -32 [ 81.797092][ T287] usb 8-1: USB disconnect, device number 4 [ 81.857235][ T37] usb 6-1: USB disconnect, device number 4 [ 82.152648][ T2049] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.159925][ T2049] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.167530][ T2049] device bridge_slave_0 entered promiscuous mode [ 82.174673][ T2049] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.181834][ T2049] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.189619][ T2049] device bridge_slave_1 entered promiscuous mode [ 82.299747][ T2055] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.306905][ T2055] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.314570][ T2055] device bridge_slave_0 entered promiscuous mode [ 82.331414][ T2055] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.338493][ T2055] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.345904][ T2055] device bridge_slave_1 entered promiscuous mode [ 82.379688][ T2050] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.386744][ T2050] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.394264][ T2050] device bridge_slave_0 entered promiscuous mode [ 82.403091][ T2050] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.410271][ T2050] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.417709][ T2050] device bridge_slave_1 entered promiscuous mode [ 82.501944][ T2054] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.509058][ T2054] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.516502][ T2054] device bridge_slave_0 entered promiscuous mode [ 82.538404][ T2054] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.545466][ T2054] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.553039][ T2054] device bridge_slave_1 entered promiscuous mode [ 82.580376][ T2056] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.587515][ T2056] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.595008][ T2056] device bridge_slave_0 entered promiscuous mode [ 82.602069][ T2056] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.609154][ T2056] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.616563][ T2056] device bridge_slave_1 entered promiscuous mode [ 82.647511][ T2049] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.654569][ T2049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.661846][ T2049] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.668887][ T2049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.748881][ T731] device bridge_slave_1 left promiscuous mode [ 82.755034][ T731] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.762696][ T731] device bridge_slave_0 left promiscuous mode [ 82.768993][ T731] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.776811][ T731] device veth1_macvtap left promiscuous mode [ 82.783033][ T731] device veth0_vlan left promiscuous mode [ 82.892177][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.899518][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.960199][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.968094][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.988570][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.996054][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.021397][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.029470][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.036859][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.046155][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.054479][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.061519][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.069191][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.077604][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.085730][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.092783][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.100233][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.108719][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.116868][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.123905][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.131298][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.139707][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.147940][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.154956][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.162478][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.172676][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.181288][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.189512][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.196528][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.213062][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.220764][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.228942][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.236838][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.245162][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.254430][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.263092][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.271330][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.278461][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.298460][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.305979][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.333632][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.342043][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.351070][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.359427][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.367583][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.375603][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.383678][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.391126][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.398666][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.406937][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.415241][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.422284][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.429818][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.454414][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.462783][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.471346][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.480130][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.488368][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.496304][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.505222][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.513544][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.520688][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.528270][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.541517][ T2050] device veth0_vlan entered promiscuous mode [ 83.559577][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.567933][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.575390][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.583497][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.592629][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.600835][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.607888][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.615332][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.623814][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.632030][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.639081][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.646392][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.654396][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.662387][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.670538][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.678662][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.686129][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.705169][ T2056] device veth0_vlan entered promiscuous mode [ 83.711608][ T2049] device veth0_vlan entered promiscuous mode [ 83.719777][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.727787][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.735158][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.742850][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.751397][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.760581][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.768938][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.790391][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.798750][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.808300][ T2056] device veth1_macvtap entered promiscuous mode [ 83.824551][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.833639][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.845076][ T2055] device veth0_vlan entered promiscuous mode [ 83.859371][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.868147][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.876227][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.885201][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.893042][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.912050][ T2054] device veth0_vlan entered promiscuous mode [ 83.919846][ T2050] device veth1_macvtap entered promiscuous mode [ 83.934720][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.943702][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.951545][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.969471][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.977914][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.994367][ T2100] loop6: detected capacity change from 0 to 256 [ 84.004296][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.012958][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.029649][ T2054] device veth1_macvtap entered promiscuous mode [ 84.041428][ T2055] device veth1_macvtap entered promiscuous mode [ 84.049572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.061430][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.072863][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.081745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.087571][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 84.087591][ T28] audit: type=1400 audit(1757978756.112:424): avc: denied { ioctl } for pid=2101 comm="syz.6.707" path="socket:[25272]" dev="sockfs" ino=25272 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.090753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.128861][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.154668][ T2049] device veth1_macvtap entered promiscuous mode [ 84.164587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.172859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.181247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.190708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.199123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.207609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.215847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.224591][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.233247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.242059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.250539][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.305243][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.322712][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.331599][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.343051][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.439689][ T28] audit: type=1400 audit(1757978756.452:425): avc: denied { create } for pid=2114 comm="syz.4.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 84.497691][ T28] audit: type=1400 audit(1757978756.482:426): avc: denied { sys_admin } for pid=2114 comm="syz.4.711" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 84.609530][ T2133] loop3: detected capacity change from 0 to 512 [ 84.633936][ T2133] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.648877][ T2133] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.654332][ T2135] loop8: detected capacity change from 0 to 256 [ 84.682919][ T2133] EXT4-fs (loop3): 1 truncate cleaned up [ 84.697027][ T2133] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 84.729418][ T2135] FAT-fs (loop8): Directory bread(block 64) failed [ 84.760316][ T2135] FAT-fs (loop8): Directory bread(block 65) failed [ 84.768897][ T2054] EXT4-fs (loop3): unmounting filesystem. [ 84.774815][ T2135] FAT-fs (loop8): Directory bread(block 66) failed [ 84.782467][ T731] device bridge_slave_1 left promiscuous mode [ 84.789956][ T731] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.804219][ T2135] FAT-fs (loop8): Directory bread(block 67) failed [ 84.807212][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.811431][ T2135] FAT-fs (loop8): Directory bread(block 68) failed [ 84.827548][ T731] device bridge_slave_0 left promiscuous mode [ 84.832092][ T2141] loop3: detected capacity change from 0 to 512 [ 84.842741][ T731] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.850342][ T2135] FAT-fs (loop8): Directory bread(block 69) failed [ 84.859102][ T731] device bridge_slave_1 left promiscuous mode [ 84.865713][ T2135] FAT-fs (loop8): Directory bread(block 70) failed [ 84.872737][ T731] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.880719][ T2135] FAT-fs (loop8): Directory bread(block 71) failed [ 84.888664][ T2135] FAT-fs (loop8): Directory bread(block 72) failed [ 84.895824][ T2141] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.896005][ T731] device bridge_slave_0 left promiscuous mode [ 84.912348][ T2135] FAT-fs (loop8): Directory bread(block 73) failed [ 84.919138][ T731] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.943750][ T2141] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 84.953940][ T2147] overlayfs: missing 'lowerdir' [ 84.962778][ T731] device bridge_slave_1 left promiscuous mode [ 84.975073][ T731] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.986567][ T731] device bridge_slave_0 left promiscuous mode [ 84.999922][ T28] audit: type=1400 audit(1757978757.022:427): avc: denied { getopt } for pid=2151 comm="syz.9.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.020993][ T2152] tmpfs: Bad value for 'uid' [ 85.027028][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 85.032342][ T2141] EXT4-fs (loop3): 1 truncate cleaned up [ 85.038637][ T2141] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 85.050698][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 85.060561][ T6] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 85.063058][ T731] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.070345][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 36128, setting to 1024 [ 85.088688][ T6] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 85.101935][ T28] audit: type=1400 audit(1757978757.052:428): avc: denied { remount } for pid=2151 comm="syz.9.725" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 85.114132][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.131436][ T2141] EXT4-fs warning (device loop3): ext4_group_extend:1894: will only finish group (8193 blocks, 7937 new) [ 85.146156][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 85.149956][ T2141] EXT4-fs warning (device loop3): ext4_group_extend:1899: can't read last block, resize aborted [ 85.165929][ T731] device bridge_slave_1 left promiscuous mode [ 85.168455][ T6] usb 5-1: SerialNumber: syz [ 85.172680][ T731] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.187982][ T2126] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.195722][ T6] cdc_acm 5-1:1.0: skipping garbage [ 85.201294][ T731] device bridge_slave_0 left promiscuous mode [ 85.201722][ T6] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 85.215814][ T2054] EXT4-fs (loop3): unmounting filesystem. [ 85.216243][ T731] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.246067][ T731] device veth1_macvtap left promiscuous mode [ 85.250475][ T2157] bio_check_eod: 2 callbacks suppressed [ 85.250494][ T2157] syz.8.718: attempt to access beyond end of device [ 85.250494][ T2157] loop8: rw=2051, sector=1224, nr_sectors = 608 limit=256 [ 85.257726][ T731] device veth0_vlan left promiscuous mode [ 85.284108][ T2157] syz.8.718: attempt to access beyond end of device [ 85.284108][ T2157] loop8: rw=2051, sector=1864, nr_sectors = 9376 limit=256 [ 85.298029][ T731] device veth1_macvtap left promiscuous mode [ 85.304123][ T731] device veth0_vlan left promiscuous mode [ 85.310579][ T731] device veth1_macvtap left promiscuous mode [ 85.316624][ T731] device veth0_vlan left promiscuous mode [ 85.322947][ T731] device veth1_macvtap left promiscuous mode [ 85.329167][ T731] device veth0_vlan left promiscuous mode [ 85.387222][ T6] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 85.403428][ T28] audit: type=1400 audit(1757978757.422:429): avc: denied { getopt } for pid=2167 comm="syz.3.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.458453][ T287] usb 5-1: USB disconnect, device number 2 [ 85.598274][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.609875][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.619673][ T6] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.633542][ T6] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.642650][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.653220][ T6] usb 7-1: config 0 descriptor?? [ 85.809707][ T2181] loop3: detected capacity change from 0 to 4096 [ 85.831724][ T2181] EXT4-fs (loop3): Test dummy encryption mode enabled [ 85.855200][ T2181] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 85.865341][ T2181] System zones: 0-5 [ 85.871883][ T2181] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 85.923505][ T2054] EXT4-fs (loop3): unmounting filesystem. [ 85.998757][ T28] audit: type=1400 audit(1757978758.022:430): avc: denied { mount } for pid=2189 comm="syz.8.742" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 86.038938][ T2196] loop3: detected capacity change from 0 to 256 [ 86.046798][ T28] audit: type=1400 audit(1757978758.042:431): avc: denied { sys_module } for pid=2189 comm="syz.8.742" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 86.076342][ T6] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 86.089937][ T2200] syz.8.746 uses obsolete (PF_INET,SOCK_PACKET) [ 86.096555][ T6] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 86.105800][ T28] audit: type=1400 audit(1757978758.112:432): avc: denied { connect } for pid=2195 comm="syz.3.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.125825][ T6] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 86.135166][ T6] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 86.143889][ T10] tipc: Subscription rejected, illegal request [ 86.162428][ T6] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 86.169923][ T28] audit: type=1400 audit(1757978758.132:433): avc: denied { create } for pid=2197 comm="syz.4.745" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.190785][ T6] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 86.198255][ T6] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 86.207155][ T6] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 86.207818][ T2194] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.214580][ T6] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 86.229068][ T6] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 86.236471][ T6] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 86.243913][ T6] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 86.245989][ T2194] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.255662][ T6] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 86.266138][ T6] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 86.274323][ T6] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 86.281964][ T6] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 86.292587][ T6] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 86.294534][ T2194] device bridge_slave_0 entered promiscuous mode [ 86.317149][ T6] usb 7-1: USB disconnect, device number 2 [ 86.318839][ T2194] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.333263][ T2194] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.359652][ T2194] device bridge_slave_1 entered promiscuous mode [ 86.381020][ T2211] fido_id[2211]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 86.438694][ T2222] input: syz0 as /devices/virtual/input/input9 [ 86.518363][ T2194] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.525746][ T2194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.533161][ T2194] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.540316][ T2194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.558517][ T1343] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.569478][ T2229] syz.8.758 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 86.580045][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.588243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.596710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.625184][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.633461][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.652529][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.665709][ T2194] device veth0_vlan entered promiscuous mode [ 86.672686][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.681284][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.689678][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.704420][ T2194] device veth1_macvtap entered promiscuous mode [ 86.712508][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.737564][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.745951][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.766184][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.775127][ T1343] usb 4-1: Using ep0 maxpacket: 16 [ 86.782602][ T1343] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 178, changing to 11 [ 86.795802][ T2240] loop8: detected capacity change from 0 to 40427 [ 86.799994][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.813464][ T1343] usb 4-1: config 0 interface 0 has no altsetting 0 [ 86.820602][ T1343] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 86.833531][ T2242] netlink: 27 bytes leftover after parsing attributes in process `syz.0.749'. [ 86.836517][ T1343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.856115][ T2240] F2FS-fs (loop8): invalid crc value [ 86.862615][ T1343] usb 4-1: config 0 descriptor?? [ 86.864957][ T2240] F2FS-fs (loop8): Found nat_bits in checkpoint [ 86.911728][ T2240] F2FS-fs (loop8): Start checkpoint disabled! [ 86.922047][ T2240] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 86.960785][ T2240] syz.8.760: attempt to access beyond end of device [ 86.960785][ T2240] loop8: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 87.011358][ T43] kworker/u4:2: attempt to access beyond end of device [ 87.011358][ T43] loop8: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 87.032526][ T43] kworker/u4:2: attempt to access beyond end of device [ 87.032526][ T43] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 87.238671][ T731] device bridge_slave_1 left promiscuous mode [ 87.244969][ T731] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.276896][ T1343] hid (null): global environment stack underflow [ 87.286717][ T1343] hid (null): unknown global tag 0xd [ 87.292538][ T1343] hid (null): unknown global tag 0x86 [ 87.298256][ T1343] hid (null): unknown global tag 0x90 [ 87.303875][ T731] device bridge_slave_0 left promiscuous mode [ 87.310143][ T731] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.315046][ T1343] hid (null): report_id 4131346620 is invalid [ 87.330909][ T2274] incfs: Options parsing error. -22 [ 87.336262][ T1343] hid (null): unknown global tag 0xe [ 87.341926][ T731] device veth1_macvtap left promiscuous mode [ 87.342482][ T2274] incfs: mount failed -22 [ 87.352613][ T1343] hid (null): unknown global tag 0xd [ 87.357054][ T731] device veth0_vlan left promiscuous mode [ 87.359175][ T1343] hid (null): global environment stack overflow [ 87.383781][ T1343] hid (null): unknown global tag 0xe [ 87.406214][ T1343] hid (null): unknown global tag 0xd [ 87.501364][ T1790] usb 4-1: USB disconnect, device number 2 [ 87.567109][ T1343] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 87.602535][ T2295] loop6: detected capacity change from 0 to 1024 [ 87.620593][ T2295] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 87.642853][ T2056] EXT4-fs (loop6): unmounting filesystem. [ 87.659261][ T2302] loop6: detected capacity change from 0 to 256 [ 87.665894][ T2302] exfat: Deprecated parameter 'utf8' [ 87.671336][ T2302] exfat: Deprecated parameter 'utf8' [ 87.680887][ T2302] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 87.748123][ T1343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 87.759992][ T1343] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 87.769422][ T1343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.781164][ T1343] usb 1-1: config 0 descriptor?? [ 87.786406][ T2266] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 87.897054][ T287] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.981156][ T2309] loop6: detected capacity change from 0 to 40427 [ 87.991469][ T2309] F2FS-fs (loop6): fault_injection options not supported [ 88.000843][ T2309] F2FS-fs (loop6): fault_type options not supported [ 88.022112][ T2309] F2FS-fs (loop6): invalid crc value [ 88.029648][ T2309] F2FS-fs (loop6): Found nat_bits in checkpoint [ 88.029689][ T2311] loop3: detected capacity change from 0 to 512 [ 88.061157][ T2311] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 88.070455][ T2311] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.077414][ T2309] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 88.085056][ T287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.096629][ T2311] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.789: corrupted inode contents [ 88.100732][ T287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.120900][ T287] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 88.131039][ T2311] EXT4-fs error (device loop3): ext4_dirty_inode:6121: inode #2: comm syz.3.789: mark_inode_dirty error [ 88.140843][ T2311] EXT4-fs error (device loop3): ext4_do_update_inode:5256: inode #2: comm syz.3.789: corrupted inode contents [ 88.151411][ T287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.172232][ T287] usb 5-1: config 0 descriptor?? [ 88.180566][ T2311] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.789: mark_inode_dirty error [ 88.202108][ T1343] ryos 0003:1E7D:3138.000F: item fetching failed at offset 1/5 [ 88.210429][ T2056] syz-executor: attempt to access beyond end of device [ 88.210429][ T2056] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 88.225915][ T1343] ryos 0003:1E7D:3138.000F: parse failed [ 88.231928][ T1343] ryos: probe of 0003:1E7D:3138.000F failed with error -22 [ 88.233288][ T2054] EXT4-fs (loop3): unmounting filesystem. [ 88.416084][ T1343] usb 1-1: USB disconnect, device number 4 [ 88.587203][ T288] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 88.768125][ T288] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.779104][ T288] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.788920][ T288] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 88.802042][ T288] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 88.811201][ T288] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.820158][ T288] usb 9-1: config 0 descriptor?? [ 89.204665][ T1343] usb 5-1: USB disconnect, device number 3 [ 89.228308][ T288] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 89.238179][ T288] plantronics 0003:047F:FFFF.0011: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 89.297016][ T6] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 89.460563][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 89.460579][ T28] audit: type=1400 audit(1757978761.544:457): avc: denied { bind } for pid=2368 comm="syz.6.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.478297][ T6] usb 1-1: config 0 has an invalid interface number: 164 but max is 0 [ 89.494635][ T6] usb 1-1: config 0 has no interface number 0 [ 89.500802][ T6] usb 1-1: config 0 interface 164 altsetting 32 endpoint 0x8 has an invalid bInterval 254, changing to 11 [ 89.514881][ T6] usb 1-1: config 0 interface 164 has no altsetting 0 [ 89.526938][ T6] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=15.06 [ 89.533017][ T28] audit: type=1400 audit(1757978761.614:458): avc: denied { mount } for pid=2372 comm="syz.6.813" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 89.536116][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.566327][ T6] usb 1-1: Product: syz [ 89.567595][ T28] audit: type=1400 audit(1757978761.644:459): avc: denied { remount } for pid=2372 comm="syz.6.813" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 89.570687][ T6] usb 1-1: Manufacturer: syz [ 89.592401][ T28] audit: type=1400 audit(1757978761.684:460): avc: denied { unmount } for pid=2056 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 89.594971][ T6] usb 1-1: SerialNumber: syz [ 89.621163][ T6] usb 1-1: config 0 descriptor?? [ 89.635481][ T6] snd-usb-audio: probe of 1-1:0.164 failed with error -2 [ 89.652645][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.164/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 89.677260][ T37] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.688925][ T28] audit: type=1400 audit(1757978761.774:461): avc: denied { write } for pid=2379 comm="syz.6.816" path="socket:[27095]" dev="sockfs" ino=27095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.794325][ T28] audit: type=1400 audit(1757978761.874:462): avc: denied { bind } for pid=2388 comm="syz.6.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.824765][ T28] audit: type=1400 audit(1757978761.874:463): avc: denied { listen } for pid=2388 comm="syz.6.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.917228][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 89.923761][ T37] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.935117][ T37] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.953683][ T37] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 89.964626][ T37] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 89.973822][ T37] usb 4-1: Product: syz [ 89.990105][ T37] usb 4-1: Manufacturer: syz [ 89.997617][ T2401] loop6: detected capacity change from 0 to 256 [ 90.005626][ T37] hub 4-1:4.0: USB hub found [ 90.015642][ T2401] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.026864][ T2401] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 90.036901][ T2401] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 90.069645][ T28] audit: type=1400 audit(1757978762.154:464): avc: denied { mounton } for pid=2400 comm="syz.6.825" path="/39/bus/file0" dev="loop6" ino=1048673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.093482][ T28] audit: type=1400 audit(1757978762.154:465): avc: denied { write } for pid=2400 comm="syz.6.825" path="/39/bus/file1" dev="loop6" ino=1048676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.122261][ T28] audit: type=1400 audit(1757978762.174:466): avc: denied { remove_name } for pid=2056 comm="syz-executor" name="file1" dev="loop6" ino=1048676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.206835][ T37] hub 4-1:4.0: 5 ports detected [ 90.213429][ T37] hub 4-1:4.0: insufficient power available to use all downstream ports [ 90.413130][ T37] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 90.431662][ T2410] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.439165][ T2410] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.439279][ T37] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 90.446734][ T2410] device bridge_slave_0 entered promiscuous mode [ 90.462514][ T2410] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.469620][ T2410] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.477330][ T2410] device bridge_slave_1 entered promiscuous mode [ 90.500174][ T287] usb 1-1: USB disconnect, device number 5 [ 90.519794][ T2415] netem: change failed [ 90.527645][ T37] usb 4-1: USB disconnect, device number 3 [ 90.595606][ T2420] x_tables: ip6_tables: CT target: only valid in raw table, not ethtool [ 90.616455][ T2423] syz.0.833[2423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.616529][ T2423] syz.0.833[2423] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.776780][ T2410] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.795088][ T2410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.802414][ T2410] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.802856][ T2433] loop4: detected capacity change from 0 to 40427 [ 90.809536][ T2410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.827011][ T2433] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 90.834810][ T2433] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 90.845856][ T2433] F2FS-fs (loop4): invalid crc value [ 90.866019][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.873278][ T2433] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.879787][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.915018][ T731] device bridge_slave_1 left promiscuous mode [ 90.921674][ T2433] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 90.921763][ T731] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.928758][ T2433] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 90.956739][ T731] device bridge_slave_0 left promiscuous mode [ 90.975847][ T731] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.992339][ T731] device veth1_macvtap left promiscuous mode [ 91.004084][ T731] device veth0_vlan left promiscuous mode [ 91.194324][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.202672][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.227193][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.246324][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.257764][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.264820][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.272897][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.281821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.290073][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.297133][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.304542][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.312995][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.321140][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.337959][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.338504][ T669] usb 9-1: USB disconnect, device number 2 [ 91.354495][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.365612][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.379872][ T2410] device veth0_vlan entered promiscuous mode [ 91.386152][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.394714][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.407061][ T287] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.410092][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.422351][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.430610][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.439463][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.448220][ T2410] device veth1_macvtap entered promiscuous mode [ 91.459447][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.467414][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.475760][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.505186][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.513605][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.527859][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 91.618062][ T287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.633921][ T287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.644078][ T287] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.657661][ T287] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.657854][ T2474] loop1: detected capacity change from 0 to 40427 [ 91.667175][ T287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.686587][ T2474] F2FS-fs (loop1): invalid crc value [ 91.700310][ T287] usb 4-1: config 0 descriptor?? [ 91.717965][ T2474] F2FS-fs (loop1): Found nat_bits in checkpoint [ 91.730764][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.741824][ T24] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 91.755602][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.770101][ T24] usb 5-1: config 0 descriptor?? [ 91.770543][ T2474] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 91.807099][ T669] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 91.819408][ T2410] syz-executor: attempt to access beyond end of device [ 91.819408][ T2410] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 91.977507][ T2503] /dev/loop0: Can't open blockdev [ 91.988288][ T669] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.999979][ T669] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.010912][ T669] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 92.020322][ T669] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.033826][ T669] usb 9-1: config 0 descriptor?? [ 92.065356][ T2513] netlink: 'syz.1.869': attribute type 10 has an invalid length. [ 92.073504][ T2513] netlink: 'syz.1.869': attribute type 17 has an invalid length. [ 92.083017][ T2513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.110410][ T287] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 92.128796][ T287] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 92.194738][ T24] nintendo 0003:057E:200E.0013: unbalanced collection at end of report description [ 92.204775][ T24] nintendo 0003:057E:200E.0013: HID parse failed [ 92.211361][ T24] nintendo 0003:057E:200E.0013: probe - fail = -22 [ 92.217994][ T24] nintendo: probe of 0003:057E:200E.0013 failed with error -22 [ 92.280740][ T2527] xt_hashlimit: size too large, truncated to 1048576 [ 92.309810][ T2519] loop1: detected capacity change from 0 to 40427 [ 92.316928][ T2519] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 92.325732][ T2519] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 92.357940][ T2519] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.395047][ T2048] usb 5-1: USB disconnect, device number 4 [ 92.441580][ T2519] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 92.446117][ T669] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 92.448707][ T2519] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 92.460156][ T669] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 92.476658][ T669] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 92.489306][ T669] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 92.501844][ T669] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 92.515935][ T669] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 92.527105][ T669] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 92.539304][ T669] cp2112 0003:10C4:EA90.0014: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 92.628202][ T24] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 92.639761][ T24] hid-generic 0000:0000:0000.0015: hidraw2: HID v0.00 Device [syz1] on syz0 [ 92.649918][ T669] cp2112 0003:10C4:EA90.0014: Part Number: 0x00 Device Version: 0x00 [ 92.779007][ T2552] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2552 comm=syz.1.884 [ 92.791432][ T2552] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2552 comm=syz.1.884 [ 92.818449][ T2554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'. [ 92.944316][ T2571] input: syz1 as /devices/virtual/input/input10 [ 93.061531][ T669] cp2112 0003:10C4:EA90.0014: error setting SMBus config [ 93.077370][ T669] cp2112: probe of 0003:10C4:EA90.0014 failed with error -71 [ 93.141869][ T669] usb 9-1: USB disconnect, device number 3 [ 93.152824][ T2722] fido_id[2722]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 93.166487][ T288] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 93.221633][ T2721] fido_id[2721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 93.347088][ C1] plantronics 0003:047F:FFFF.0012: usb_submit_urb(ctrl) failed: -1 [ 93.361069][ T288] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.376805][ T288] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.399838][ T288] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 93.421290][ T288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 93.444746][ T288] usb 2-1: SerialNumber: syz [ 93.488412][ T2719] loop4: detected capacity change from 0 to 40427 [ 93.515729][ T2719] F2FS-fs (loop4): fault_injection options not supported [ 93.526457][ T2719] F2FS-fs (loop4): invalid crc value [ 93.534244][ T2719] F2FS-fs (loop4): Found nat_bits in checkpoint [ 93.581520][ T2719] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 93.646819][ T2055] syz-executor: attempt to access beyond end of device [ 93.646819][ T2055] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 93.667376][ T288] usb 2-1: 0:2 : does not exist [ 93.695558][ T288] usb 2-1: USB disconnect, device number 5 [ 93.744006][ T2806] I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.767063][ T2806] FAT-fs (loop17): unable to read boot sector [ 94.006564][ T2834] tmpfs: Bad value for 'gid' [ 94.187550][ T1343] usb 4-1: USB disconnect, device number 4 [ 94.273290][ T2874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.934'. [ 94.444151][ T2888] loop1: detected capacity change from 0 to 512 [ 94.470041][ T2888] EXT4-fs (loop1): Test dummy encryption mode enabled [ 94.477153][ T2888] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 94.489234][ T2888] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.940: bad orphan inode 131083 [ 94.499976][ T2888] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 94.518032][ T2888] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 94.528485][ T2888] SELinux: Context system_u:object_r:man_t:s0 is not valid (left unmapped). [ 94.537696][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 94.537709][ T28] audit: type=1400 audit(1757978766.624:492): avc: denied { relabelto } for pid=2887 comm="syz.1.940" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 94.578390][ T2410] EXT4-fs (loop1): unmounting filesystem. [ 94.611694][ T2895] loop1: detected capacity change from 0 to 256 [ 94.632875][ T2895] FAT-fs (loop1): Directory bread(block 64) failed [ 94.639506][ T2895] FAT-fs (loop1): Directory bread(block 65) failed [ 94.646138][ T2895] FAT-fs (loop1): Directory bread(block 66) failed [ 94.653015][ T2895] FAT-fs (loop1): Directory bread(block 67) failed [ 94.659782][ T2895] FAT-fs (loop1): Directory bread(block 68) failed [ 94.666393][ T2895] FAT-fs (loop1): Directory bread(block 69) failed [ 94.673218][ T2895] FAT-fs (loop1): Directory bread(block 70) failed [ 94.679943][ T2895] FAT-fs (loop1): Directory bread(block 71) failed [ 94.686703][ T2895] FAT-fs (loop1): Directory bread(block 72) failed [ 94.693487][ T2895] FAT-fs (loop1): Directory bread(block 73) failed [ 94.890543][ T2913] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.908649][ T2913] FAT-fs (loop1): unable to read boot sector [ 94.934975][ T2919] loop4: detected capacity change from 0 to 256 [ 94.985565][ T28] audit: type=1400 audit(1757978767.064:493): avc: denied { write } for pid=2926 comm="syz.4.954" name="file2" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.027907][ T28] audit: type=1400 audit(1757978767.094:494): avc: denied { ioctl } for pid=2926 comm="syz.4.954" path="/35/file2" dev="tmpfs" ino=199 ioctlcmd=0x1262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.263766][ T2966] loop3: detected capacity change from 0 to 256 [ 95.292205][ T2966] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 95.305884][ T2968] netlink: 96 bytes leftover after parsing attributes in process `syz.8.974'. [ 95.319026][ T2966] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 95.345890][ T2966] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000006) [ 95.371916][ T2966] exFAT-fs (loop3): Filesystem has been set read-only [ 95.419577][ T28] audit: type=1400 audit(1757978767.504:495): avc: denied { write } for pid=2977 comm="syz.4.979" path="socket:[28331]" dev="sockfs" ino=28331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.484467][ T2988] loop1: detected capacity change from 0 to 512 [ 95.508268][ T28] audit: type=1400 audit(1757978767.594:496): avc: denied { accept } for pid=2991 comm="syz.8.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.536579][ T24] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 95.547214][ T2988] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.982: bg 0: block 288: padding at end of block bitmap is not set [ 95.562342][ T2988] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 95.571645][ T24] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 95.587281][ T2988] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.982: attempt to clear invalid blocks 1024 len 1 [ 95.610883][ T2988] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.982: invalid indirect mapped block 1819239214 (level 0) [ 95.657969][ T2988] EXT4-fs (loop1): 1 truncate cleaned up [ 95.671101][ T2988] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 95.888243][ T3019] loop3: detected capacity change from 0 to 512 [ 95.920362][ T3019] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 95.929626][ T3019] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.960217][ T2054] EXT4-fs (loop3): unmounting filesystem. [ 95.967162][ T1790] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.968968][ T287] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 95.998671][ T287] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.077359][ T1343] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 96.157017][ T1790] usb 2-1: Using ep0 maxpacket: 16 [ 96.163260][ T1790] usb 2-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 96.166307][ T28] audit: type=1400 audit(2000000000.330:497): avc: denied { read } for pid=3046 comm="syz.3.1006" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.196493][ T1790] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.214474][ T28] audit: type=1400 audit(2000000000.370:498): avc: denied { open } for pid=3046 comm="syz.3.1006" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.238123][ T28] audit: type=1400 audit(2000000000.370:499): avc: denied { ioctl } for pid=3046 comm="syz.3.1006" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.238392][ T1790] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.272180][ T1790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.280223][ T1790] usb 2-1: Product: syz [ 96.284411][ T1790] usb 2-1: Manufacturer: syz [ 96.293388][ T1790] usb 2-1: SerialNumber: syz [ 96.298099][ T1343] usb 5-1: Using ep0 maxpacket: 16 [ 96.304643][ T1343] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 96.314621][ T1343] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 96.325004][ T1343] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.338494][ T1343] usb 5-1: config 1 interface 0 has no altsetting 0 [ 96.361802][ T1343] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 96.370961][ T1343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.379105][ T1343] usb 5-1: Product: syz [ 96.383332][ T1343] usb 5-1: Manufacturer: syz [ 96.387987][ T1343] usb 5-1: SerialNumber: syz [ 96.413883][ T19] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 96.422456][ T19] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.453882][ T28] audit: type=1400 audit(2000000000.620:500): avc: denied { write } for pid=3053 comm="syz.8.1009" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 96.467987][ T3058] fido_id[3058]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.507060][ T287] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.596212][ T1343] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 96.688157][ T287] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.698337][ T287] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.708052][ T287] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 96.717198][ T287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.725292][ T287] usb 4-1: SerialNumber: syz [ 96.746046][ T1790] usb 2-1: 0:2 : does not exist [ 96.802364][ T28] audit: type=1400 audit(2000000000.970:501): avc: denied { read write } for pid=3009 comm="syz.4.990" name="lp0" dev="devtmpfs" ino=1283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 96.854739][ T3010] usblp0:failed reading printer status (-32) [ 96.863814][ T1343] usb 5-1: USB disconnect, device number 5 [ 96.870582][ T1343] usblp0: removed [ 97.150310][ T1790] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 97.160496][ T287] usb 4-1: 0:2 : does not exist [ 97.162052][ T1790] usb 2-1: USB disconnect, device number 6 [ 97.174742][ T287] usb 4-1: USB disconnect, device number 5 [ 97.377871][ T1452] udevd[1452]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 97.394833][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 97.433075][ T3075] loop8: detected capacity change from 0 to 512 [ 97.468018][ T3075] EXT4-fs (loop8): orphan cleanup on readonly fs [ 97.474921][ T3075] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 97.487226][ T3075] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 97.534444][ T3075] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.1018: attempt to clear invalid blocks 2 len 1 [ 97.552397][ T3075] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1018: invalid indirect mapped block 1819239214 (level 0) [ 97.568287][ T3075] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1018: invalid indirect mapped block 1819239214 (level 1) [ 97.583017][ T3075] EXT4-fs (loop8): 1 truncate cleaned up [ 97.588925][ T3075] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 97.631517][ T2050] EXT4-fs (loop8): unmounting filesystem. [ 97.670707][ T2410] EXT4-fs (loop1): unmounting filesystem. [ 97.680908][ T3091] loop3: detected capacity change from 0 to 256 [ 97.690027][ T3092] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1024'. [ 97.860168][ T3118] loop1: detected capacity change from 0 to 1024 [ 97.867485][ T3118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.887601][ T3118] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.908295][ T3118] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 97.918196][ T1790] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 97.925433][ T3118] System zones: 0-1, 3-36 [ 97.931782][ T3118] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 97.968918][ T2410] EXT4-fs (loop1): unmounting filesystem. [ 98.048906][ T3143] loop8: detected capacity change from 0 to 512 [ 98.063474][ T3143] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.078101][ T3143] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 98.086398][ T3143] System zones: 0-2, 18-18, 34-34 [ 98.092889][ T3143] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 98.102167][ T3143] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.131314][ T1790] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.141692][ T1790] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.158971][ T1790] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 98.173667][ T2050] EXT4-fs (loop8): unmounting filesystem. [ 98.179612][ T1790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 98.188875][ T1790] usb 5-1: SerialNumber: syz [ 98.198713][ T3145] loop3: detected capacity change from 0 to 40427 [ 98.213920][ T3145] F2FS-fs (loop3): invalid crc value [ 98.221706][ T3145] F2FS-fs (loop3): Found nat_bits in checkpoint [ 98.259331][ T3145] F2FS-fs (loop3): Start checkpoint disabled! [ 98.266461][ T3145] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 98.300276][ T3155] loop8: detected capacity change from 0 to 512 [ 98.314563][ T3155] EXT4-fs (loop8): Test dummy encryption mode enabled [ 98.321433][ T3155] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 98.329070][ T2809] kworker/u4:219: attempt to access beyond end of device [ 98.329070][ T2809] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 98.334459][ T3155] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.1051: bad orphan inode 131083 [ 98.356002][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 98.364784][ T3155] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 98.400495][ T1790] usb 5-1: 0:2 : does not exist [ 98.407893][ T2050] EXT4-fs (loop8): unmounting filesystem. [ 98.418262][ T1790] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 98.437344][ T3158] capability: warning: `syz.8.1053' uses 32-bit capabilities (legacy support in use) [ 98.441831][ T1790] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 98.481326][ T1790] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 98.499463][ T1790] usb 5-1: USB disconnect, device number 6 [ 98.539517][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.549836][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 98.564208][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 98.573434][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.573822][ T3172] loop3: detected capacity change from 0 to 2048 [ 98.589360][ T24] usb 2-1: config 0 descriptor?? [ 98.628953][ T3172] Alternate GPT is invalid, using primary GPT. [ 98.635552][ T3172] loop3: p1 p2 p3 [ 98.698629][ T1449] udevd[1449]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 98.715049][ T1452] udevd[1452]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 98.718042][ T3185] loop3: detected capacity change from 0 to 512 [ 98.733499][ T1450] udevd[1450]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 98.768274][ T3193] loop8: detected capacity change from 0 to 512 [ 98.781467][ T3185] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 98.781625][ T3193] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 98.806556][ T3185] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.828279][ T3193] EXT4-fs (loop8): 1 truncate cleaned up [ 98.834210][ T3193] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 98.863215][ T2054] EXT4-fs (loop3): unmounting filesystem. [ 98.914091][ T2050] EXT4-fs (loop8): unmounting filesystem. [ 98.962263][ T3205] loop4: detected capacity change from 0 to 128 [ 98.998182][ T24] kovaplus 0003:1E7D:2D50.0019: unknown main item tag 0x0 [ 99.010754][ T24] kovaplus 0003:1E7D:2D50.0019: unknown main item tag 0x0 [ 99.028691][ T24] kovaplus 0003:1E7D:2D50.0019: unknown main item tag 0x0 [ 99.038522][ T24] kovaplus 0003:1E7D:2D50.0019: unknown main item tag 0x0 [ 99.054653][ T24] kovaplus 0003:1E7D:2D50.0019: unknown main item tag 0x0 [ 99.072500][ T24] kovaplus 0003:1E7D:2D50.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 99.212185][ T3226] loop3: detected capacity change from 0 to 8192 [ 99.370780][ T3249] overlayfs: failed to verify origin (/syz8, ino=254, err=-116) [ 99.378832][ T3249] overlayfs: failed to verify upper root origin [ 99.406413][ T24] kovaplus 0003:1E7D:2D50.0019: couldn't init struct kovaplus_device [ 99.427004][ T2048] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 99.435089][ T24] kovaplus 0003:1E7D:2D50.0019: couldn't install mouse [ 99.447522][ T24] kovaplus: probe of 0003:1E7D:2D50.0019 failed with error -71 [ 99.470358][ T24] usb 2-1: USB disconnect, device number 7 [ 99.491147][ T3266] fido_id[3266]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 99.547587][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 99.547598][ T28] audit: type=1400 audit(2000000003.720:553): avc: denied { create } for pid=3271 comm="syz.3.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.573400][ T28] audit: type=1400 audit(2000000003.720:554): avc: denied { connect } for pid=3271 comm="syz.3.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 99.612497][ T3275] loop3: detected capacity change from 0 to 1024 [ 99.621946][ T2048] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.639059][ T2048] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.662174][ T2048] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 99.676993][ T2048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 99.685282][ T2048] usb 5-1: SerialNumber: syz [ 99.693785][ T3275] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 99.712113][ T28] audit: type=1400 audit(2000000003.880:555): avc: denied { mounton } for pid=3273 comm="syz.3.1104" path="/85/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.736529][ T28] audit: type=1400 audit(2000000003.880:556): avc: denied { write } for pid=3273 comm="syz.3.1104" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.762562][ T28] audit: type=1400 audit(2000000003.880:557): avc: denied { add_name } for pid=3273 comm="syz.3.1104" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.762857][ T2054] EXT4-fs (loop3): unmounting filesystem. [ 99.790054][ T28] audit: type=1400 audit(2000000003.880:558): avc: denied { create } for pid=3273 comm="syz.3.1104" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 99.810389][ T28] audit: type=1400 audit(2000000003.880:559): avc: denied { mount } for pid=3273 comm="syz.3.1104" name="/" dev="incremental-fs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 99.851823][ T28] audit: type=1400 audit(2000000003.880:560): avc: denied { read } for pid=3273 comm="syz.3.1104" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.875802][ T28] audit: type=1400 audit(2000000003.880:561): avc: denied { open } for pid=3273 comm="syz.3.1104" path="/85/file1/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.885832][ T3293] netlink: 'syz.3.1110': attribute type 3 has an invalid length. [ 99.907720][ T2048] usb 5-1: 0:2 : does not exist [ 99.911004][ T3293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 99.919421][ T2048] usb 5-1: USB disconnect, device number 7 [ 99.932523][ T28] audit: type=1400 audit(2000000003.880:562): avc: denied { ioctl } for pid=3273 comm="syz.3.1104" path="/85/file1/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.036880][ T3307] loop3: detected capacity change from 0 to 256 [ 100.074924][ T3307] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 100.088590][ T3307] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 100.127512][ T1452] udevd[1452]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 100.238186][ T3322] device bridge0 entered promiscuous mode [ 100.245445][ T3322] device macsec1 entered promiscuous mode [ 100.251978][ T3322] bridge0: port 3(macsec1) entered blocking state [ 100.258777][ T3322] bridge0: port 3(macsec1) entered disabled state [ 100.266137][ T3322] device bridge0 left promiscuous mode [ 100.368724][ T3329] loop8: detected capacity change from 0 to 1024 [ 100.407121][ T3329] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 100.425890][ T3329] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.475613][ T2050] EXT4-fs (loop8): unmounting filesystem. [ 100.481803][ T1790] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.562411][ T3349] loop4: detected capacity change from 0 to 1024 [ 100.569207][ T3349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.586023][ T3349] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.613745][ T3349] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 100.632079][ T3349] System zones: 0-1, 3-36 [ 100.642634][ T3349] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 100.686997][ T1790] usb 4-1: Using ep0 maxpacket: 32 [ 100.694463][ T1790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.705467][ T2055] EXT4-fs (loop4): unmounting filesystem. [ 100.721347][ T1790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.731623][ T1790] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 100.742233][ T1790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.766040][ T1790] usb 4-1: config 0 descriptor?? [ 100.797031][ T2048] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 100.818031][ T3370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1144'. [ 100.827225][ T3370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1144'. [ 100.890557][ T3379] loop8: detected capacity change from 0 to 1024 [ 100.901804][ T3379] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.926925][ T3379] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 100.941480][ T3379] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 100.949700][ T3379] System zones: 0-1, 3-36 [ 100.955425][ T3379] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 100.978231][ T2048] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 100.990110][ T2048] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 100.996218][ T2050] EXT4-fs (loop8): unmounting filesystem. [ 100.999587][ T2048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.036410][ T3396] loop4: detected capacity change from 0 to 128 [ 101.037754][ T3393] device bridge0 entered promiscuous mode [ 101.048922][ T2048] usb 2-1: config 0 descriptor?? [ 101.055391][ T3393] device macsec1 entered promiscuous mode [ 101.056276][ T3343] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 101.062352][ T3393] bridge0: port 3(macsec1) entered blocking state [ 101.074977][ T3393] bridge0: port 3(macsec1) entered disabled state [ 101.086536][ T3396] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.089368][ T3393] device bridge0 left promiscuous mode [ 101.110653][ T3396] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.141798][ T2055] EXT4-fs (loop4): unmounting filesystem. [ 101.183279][ T1790] savu 0003:1E7D:2D5A.001A: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 101.208711][ T3405] SELinux: Context @ is not valid (left unmapped). [ 101.447694][ T19] usb 4-1: USB disconnect, device number 6 [ 101.486608][ T2048] ryos 0003:1E7D:3138.001B: item fetching failed at offset 1/5 [ 101.494689][ T2048] ryos 0003:1E7D:3138.001B: parse failed [ 101.501225][ T2048] ryos: probe of 0003:1E7D:3138.001B failed with error -22 [ 101.517070][ T1790] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 101.691921][ T2048] usb 2-1: USB disconnect, device number 8 [ 101.708210][ T1790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.719326][ T1790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.729088][ T1790] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.742347][ T1790] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.751597][ T1790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.760716][ T1790] usb 1-1: config 0 descriptor?? [ 101.990118][ T3420] loop3: detected capacity change from 0 to 1024 [ 102.003103][ T3420] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.017354][ T3420] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.050481][ T3425] loop8: detected capacity change from 0 to 1024 [ 102.057077][ T3420] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 102.061080][ T3425] EXT4-fs: Ignoring removed orlov option [ 102.071910][ T3420] System zones: 0-1, 3-36 [ 102.087337][ T3420] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 102.103240][ T3425] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 102.152749][ T2054] EXT4-fs (loop3): unmounting filesystem. [ 102.165268][ T2050] EXT4-fs (loop8): unmounting filesystem. [ 102.185435][ T1790] plantronics 0003:047F:FFFF.001C: unknown main item tag 0xd [ 102.205354][ T1790] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 102.225351][ T1790] plantronics 0003:047F:FFFF.001C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 102.355536][ T3461] loop4: detected capacity change from 0 to 128 [ 102.393124][ T3461] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.411865][ T3461] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.430659][ T1790] usb 1-1: USB disconnect, device number 6 [ 102.484973][ T2055] EXT4-fs (loop4): unmounting filesystem. [ 102.597729][ T3458] loop8: detected capacity change from 0 to 40427 [ 102.615275][ T3458] F2FS-fs (loop8): invalid crc value [ 102.629634][ T3458] F2FS-fs (loop8): Found nat_bits in checkpoint [ 102.670797][ T3458] F2FS-fs (loop8): Start checkpoint disabled! [ 102.689024][ T3458] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 102.778444][ T1178] kworker/u4:6: attempt to access beyond end of device [ 102.778444][ T1178] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 104.683314][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 104.683331][ T28] audit: type=1400 audit(2000000008.850:644): avc: denied { name_bind } for pid=3486 comm="syz.3.1195" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 105.638752][ T28] audit: type=1400 audit(2000000009.810:645): avc: denied { node_bind } for pid=3486 comm="syz.3.1195" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 105.704223][ T28] audit: type=1400 audit(2000000009.870:646): avc: denied { execmem } for pid=3490 comm="syz.0.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 105.766827][ T28] audit: type=1400 audit(2000000009.930:647): avc: denied { create } for pid=3498 comm="syz.3.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.770663][ T3500] device syz_tun entered promiscuous mode [ 105.792521][ T3500] device macsec1 entered promiscuous mode [ 105.799331][ T28] audit: type=1400 audit(2000000009.930:648): avc: denied { read write } for pid=3503 comm="syz.1.1203" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 105.823720][ T3500] device syz_tun left promiscuous mode [ 105.834800][ T28] audit: type=1400 audit(2000000009.930:649): avc: denied { open } for pid=3503 comm="syz.1.1203" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 105.883083][ T28] audit: type=1400 audit(2000000009.930:650): avc: denied { ioctl } for pid=3503 comm="syz.1.1203" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 105.885409][ T3509] loop8: detected capacity change from 0 to 256 [ 105.946052][ T3515] SELinux: failed to load policy [ 105.951182][ T28] audit: type=1400 audit(2000000009.960:651): avc: denied { setopt } for pid=3498 comm="syz.3.1200" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.972002][ T28] audit: type=1400 audit(2000000009.960:652): avc: denied { connect } for pid=3498 comm="syz.3.1200" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.993879][ T28] audit: type=1400 audit(2000000009.960:653): avc: denied { write } for pid=3498 comm="syz.3.1200" path="socket:[31627]" dev="sockfs" ino=31627 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.043456][ T3524] binder: 3523:3524 ioctl c0306201 200000000580 returned -14 [ 106.053685][ T3528] loop8: detected capacity change from 0 to 128 [ 106.072988][ T3531] loop3: detected capacity change from 0 to 2048 [ 106.102417][ T3528] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 106.115889][ T3528] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.117153][ T3531] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 106.167016][ T1790] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 106.177730][ T2050] EXT4-fs (loop8): unmounting filesystem. [ 106.186935][ T2054] EXT4-fs (loop3): unmounting filesystem. [ 106.229958][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.242837][ T2702] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 106.253172][ T2702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.261742][ T2702] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 106.270368][ T2702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.278898][ T2702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.287612][ T2702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.295942][ T2702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.304337][ T2702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.360182][ T1790] usb 5-1: Using ep0 maxpacket: 16 [ 106.369273][ T1790] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 106.386160][ T1790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.398011][ T1790] usb 5-1: Product: syz [ 106.402613][ T1790] usb 5-1: Manufacturer: syz [ 106.410303][ T1790] usb 5-1: SerialNumber: syz [ 106.421523][ T1790] usb 5-1: config 0 descriptor?? [ 106.432338][ T1790] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 106.444757][ T1790] usb 5-1: Detected FT232H [ 106.633358][ T1790] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 106.675580][ T3586] loop3: detected capacity change from 0 to 512 [ 106.839993][ T3596] x_tables: duplicate underflow at hook 4 [ 106.867774][ T3602] device bridge0 entered promiscuous mode [ 106.873657][ T3602] device macsec1 entered promiscuous mode [ 106.880769][ T3602] bridge0: port 3(macsec1) entered blocking state [ 106.887540][ T3602] bridge0: port 3(macsec1) entered disabled state [ 106.895006][ T3602] device bridge0 left promiscuous mode [ 107.057991][ T1790] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 107.285069][ T2048] usb 5-1: USB disconnect, device number 8 [ 107.304278][ T2048] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 107.330157][ T2048] ftdi_sio 5-1:0.0: device disconnected [ 107.616997][ T287] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 107.666992][ T669] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 107.798373][ T287] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.832581][ T287] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 107.857054][ T669] usb 1-1: Using ep0 maxpacket: 32 [ 107.868757][ T287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.877748][ T669] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.891913][ T287] usb 4-1: config 0 descriptor?? [ 107.897008][ T669] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.908715][ T669] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 107.937022][ T669] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.960526][ T669] usb 1-1: config 0 descriptor?? [ 108.314497][ T287] sony 0003:054C:024B.001D: hiddev96,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.3-1/input0 [ 108.337024][ T287] sony 0003:054C:024B.001D: failed to claim input [ 108.372051][ T669] savu 0003:1E7D:2D5A.001E: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 108.457034][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 108.517390][ T19] usb 4-1: USB disconnect, device number 7 [ 108.638170][ T1790] usb 1-1: USB disconnect, device number 7 [ 108.648077][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.667009][ T24] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 108.676174][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.697712][ T24] usb 2-1: config 0 descriptor?? [ 108.946417][ T3661] kvm: MONITOR instruction emulated as NOP! [ 109.105852][ T24] itetech 0003:258A:6A88.001F: item fetching failed at offset 5/7 [ 109.125295][ T24] itetech: probe of 0003:258A:6A88.001F failed with error -22 [ 109.307737][ T3674] loop4: detected capacity change from 0 to 40427 [ 109.319797][ T3674] F2FS-fs (loop4): invalid crc value [ 109.327170][ T1343] usb 2-1: USB disconnect, device number 9 [ 109.346397][ T3674] F2FS-fs (loop4): Found nat_bits in checkpoint [ 109.401631][ T3674] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 109.517021][ T1790] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 109.706985][ T1790] usb 4-1: Using ep0 maxpacket: 16 [ 109.713400][ T1790] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 109.728691][ T1790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.757046][ T1790] usb 4-1: config 0 has no interface number 0 [ 109.768837][ T1790] usb 4-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 109.793835][ T1790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.814049][ T1790] usb 4-1: config 0 descriptor?? [ 109.829633][ T1790] usb 4-1: Found UVC 0.00 device (0bd3:05f4) [ 109.836549][ T1790] usb 4-1: No valid video chain found. [ 110.012866][ T3697] loop4: detected capacity change from 0 to 40427 [ 110.037281][ T3697] F2FS-fs (loop4): fault_injection options not supported [ 110.042419][ T1343] usb 4-1: USB disconnect, device number 8 [ 110.054482][ T3697] F2FS-fs (loop4): Image doesn't support compression [ 110.062436][ T3697] F2FS-fs (loop4): Image doesn't support compression [ 110.087547][ T3697] F2FS-fs (loop4): invalid crc value [ 110.109898][ T3697] F2FS-fs (loop4): Found nat_bits in checkpoint [ 110.147039][ T1790] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 110.194615][ T3697] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 110.217943][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 110.217959][ T28] audit: type=1400 audit(2000000014.390:759): avc: denied { sqpoll } for pid=3708 comm="syz.8.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 110.261306][ T3697] syz.4.1282: attempt to access beyond end of device [ 110.261306][ T3697] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 110.292850][ T2055] syz-executor: attempt to access beyond end of device [ 110.292850][ T2055] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 110.348393][ T1790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.359828][ T1790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.369763][ T1790] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.384885][ T1790] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.394064][ T1790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.416682][ T28] audit: type=1400 audit(2000000014.580:760): avc: denied { unlink } for pid=3715 comm="syz.0.1290" name="#9" dev="tmpfs" ino=675 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 110.439051][ T1790] usb 2-1: config 0 descriptor?? [ 110.606977][ T28] audit: type=1400 audit(2000000014.770:761): avc: denied { create } for pid=3728 comm="syz.0.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.627187][ T28] audit: type=1400 audit(2000000014.780:762): avc: denied { remount } for pid=3729 comm="syz.3.1295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 110.653927][ T28] audit: type=1400 audit(2000000014.780:763): avc: denied { write } for pid=3728 comm="syz.0.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.675000][ T28] audit: type=1400 audit(2000000014.780:764): avc: denied { nlmsg_write } for pid=3728 comm="syz.0.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.716268][ T3738] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.773658][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 110.781938][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.792324][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 110.800663][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.809282][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.819271][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.839119][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.848245][ T2758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.858197][ T1790] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 110.868794][ T1790] plantronics 0003:047F:FFFF.0020: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 110.961446][ T28] audit: type=1400 audit(2000000015.130:765): avc: denied { create } for pid=3748 comm="syz.4.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.029414][ T3753] loop4: detected capacity change from 0 to 256 [ 111.036296][ T3753] exfat: Deprecated parameter 'utf8' [ 111.041697][ T3753] exfat: Unexpected value for 'utf8' [ 111.067155][ T28] audit: type=1400 audit(2000000015.150:766): avc: denied { connect } for pid=3748 comm="syz.4.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.107030][ T28] audit: type=1400 audit(2000000015.150:767): avc: denied { write } for pid=3748 comm="syz.4.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 111.154041][ T19] usb 2-1: USB disconnect, device number 10 [ 111.197578][ T3761] device vlan2 entered promiscuous mode [ 111.203338][ T3761] device veth0 entered promiscuous mode [ 111.249264][ T28] audit: type=1400 audit(2000000015.420:768): avc: denied { mount } for pid=3765 comm="syz.8.1310" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 111.266484][ T3768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'. [ 111.356521][ T3779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1316'. [ 111.377043][ T1790] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 111.567000][ T1790] usb 4-1: Using ep0 maxpacket: 32 [ 111.573218][ T1790] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 111.577035][ T669] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 111.581489][ T1790] usb 4-1: config 0 has no interface number 0 [ 111.595088][ T1790] usb 4-1: config 0 interface 184 has no altsetting 0 [ 111.603986][ T1790] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 111.613056][ T1790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.621082][ T1790] usb 4-1: Product: syz [ 111.625230][ T1790] usb 4-1: Manufacturer: syz [ 111.629846][ T1790] usb 4-1: SerialNumber: syz [ 111.635358][ T1790] usb 4-1: config 0 descriptor?? [ 111.641112][ T1790] smsc75xx v1.0.0 [ 111.770536][ T669] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.791170][ T669] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.801587][ T669] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.815182][ T669] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.825482][ T669] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.836746][ T669] usb 9-1: config 0 descriptor?? [ 112.019948][ T3927] futex_wake_op: syz.0.1336 tries to shift op by 36; fix this program [ 112.246116][ T1790] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 112.262141][ T669] plantronics 0003:047F:FFFF.0021: unknown main item tag 0xe [ 112.267921][ T1790] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 112.278272][ T669] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 112.292150][ T669] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 112.316891][ T669] plantronics 0003:047F:FFFF.0021: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 112.503708][ T1790] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 112.537004][ T1790] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 112.577117][ T1790] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 112.604004][ T1790] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 112.632636][ T1790] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 112.672664][ T1790] usb 4-1: USB disconnect, device number 9 [ 112.707301][ T1343] usb 9-1: USB disconnect, device number 4 [ 112.873386][ T3958] loop4: detected capacity change from 0 to 131072 [ 112.883587][ T3958] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 112.891908][ T3958] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 112.901697][ T3958] F2FS-fs (loop4): invalid crc value [ 112.909553][ T3958] F2FS-fs (loop4): Found nat_bits in checkpoint [ 112.944955][ T3958] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 112.952065][ T3958] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 112.993119][ T3974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1346'. [ 113.129842][ T3984] loop8: detected capacity change from 0 to 4096 [ 113.174481][ T3984] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 113.223881][ T2050] EXT4-fs (loop8): unmounting filesystem. [ 113.689423][ T4046] syz.1.1375 (4046) used obsolete PPPIOCDETACH ioctl [ 113.820207][ T4064] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.835240][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 113.849340][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.868216][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 113.887862][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.896645][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.915322][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.924819][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.933254][ T2789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.949259][ T4047] loop3: detected capacity change from 0 to 40427 [ 113.975124][ T4047] F2FS-fs (loop3): invalid crc value [ 114.025283][ T4047] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.073027][ T4047] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 114.133609][ T2054] syz-executor: attempt to access beyond end of device [ 114.133609][ T2054] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 114.299169][ T4107] device batadv_slave_0 entered promiscuous mode [ 114.320689][ T4106] device batadv_slave_0 left promiscuous mode [ 114.327105][ T287] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 114.357626][ T3824] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.508039][ T287] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.525904][ T287] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 114.547483][ T287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.568193][ T287] usb 2-1: Product: syz [ 114.578619][ T287] usb 2-1: Manufacturer: syz [ 114.587822][ T4115] loop3: detected capacity change from 0 to 40427 [ 114.590522][ T287] usb 2-1: SerialNumber: syz [ 114.616113][ T287] usb 2-1: config 0 descriptor?? [ 114.623167][ T4115] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.666385][ T4115] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 114.702055][ T4115] syz.3.1406: attempt to access beyond end of device [ 114.702055][ T4115] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 114.728252][ T2054] syz-executor: attempt to access beyond end of device [ 114.728252][ T2054] loop3: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 114.825189][ T287] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 114.850604][ T1452] udevd[1452]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.006665][ T4131] loop3: detected capacity change from 0 to 512 [ 115.029267][ T287] usb 2-1: USB disconnect, device number 11 [ 115.055688][ T4131] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 115.065958][ T4131] ext4 filesystem being mounted at /143/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.100191][ T2054] EXT4-fs (loop3): unmounting filesystem. [ 115.146218][ T4124] loop4: detected capacity change from 0 to 40427 [ 115.158945][ T4124] F2FS-fs (loop4): invalid crc value [ 115.185202][ T4124] F2FS-fs (loop4): Found nat_bits in checkpoint [ 115.236210][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 115.236225][ T28] audit: type=1400 audit(2000000019.400:859): avc: denied { mounton } for pid=4149 comm="syz.8.1419" path="/proc/288/cgroup" dev="proc" ino=33465 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 115.278360][ T4124] F2FS-fs (loop4): Start checkpoint disabled! [ 115.297062][ T28] audit: type=1400 audit(2000000019.440:860): avc: denied { remount } for pid=4149 comm="syz.8.1419" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 115.332602][ T28] audit: type=1400 audit(2000000019.460:861): avc: denied { getopt } for pid=4153 comm="syz.3.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.336729][ T4124] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 115.352426][ T28] audit: type=1400 audit(2000000019.500:862): avc: denied { execute } for pid=4155 comm="syz.3.1422" path=2F6D656D66643A1A6A7E97C1202864656C6574656429 dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 115.352460][ T28] audit: type=1400 audit(2000000019.500:863): avc: denied { create } for pid=4155 comm="syz.3.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.352484][ T28] audit: type=1400 audit(2000000019.500:864): avc: denied { getopt } for pid=4155 comm="syz.3.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.505816][ T28] audit: type=1400 audit(2000000019.670:865): avc: denied { append } for pid=4162 comm="syz.8.1426" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 115.580458][ T28] audit: type=1400 audit(2000000019.740:866): avc: denied { bind } for pid=4165 comm="syz.1.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.611956][ T28] audit: type=1400 audit(2000000019.740:867): avc: denied { name_bind } for pid=4165 comm="syz.1.1427" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 115.633489][ T28] audit: type=1400 audit(2000000019.740:868): avc: denied { node_bind } for pid=4165 comm="syz.1.1427" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 115.642667][ T4172] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1425'. [ 115.729989][ T4176] loop8: detected capacity change from 0 to 128 [ 115.736819][ T4176] EXT4-fs: Ignoring removed nobh option [ 115.753073][ T4176] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 115.762541][ T4176] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.851157][ T1790] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 115.859868][ T2050] EXT4-fs (loop8): unmounting filesystem. [ 116.058147][ T1790] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 116.076392][ T1790] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 116.078520][ T4191] loop8: detected capacity change from 0 to 40427 [ 116.101979][ T1790] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 116.114556][ T4191] F2FS-fs (loop8): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 116.124352][ T4191] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 116.131448][ T1790] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64 [ 116.143650][ T4191] F2FS-fs (loop8): invalid crc value [ 116.164667][ T4191] F2FS-fs (loop8): Found nat_bits in checkpoint [ 116.169085][ T1790] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 116.197065][ T1790] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 116.206803][ T1790] usb 4-1: Product: syz [ 116.211300][ T1790] usb 4-1: Manufacturer: syz [ 116.226288][ T4168] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 116.239118][ T1790] cdc_wdm 4-1:1.0: skipping garbage [ 116.244382][ T1790] cdc_wdm 4-1:1.0: skipping garbage [ 116.250198][ T4191] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 116.257473][ T4191] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 116.278798][ T1790] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 116.304152][ T2050] syz-executor: attempt to access beyond end of device [ 116.304152][ T2050] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 116.369834][ T4215] syz.4.1449[4215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.369904][ T4215] syz.4.1449[4215] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.397063][ T2004] Bluetooth: hci0: command 0x1003 tx timeout [ 116.397257][ T4215] loop4: detected capacity change from 0 to 4096 [ 116.408677][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 116.466430][ T4215] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 116.482373][ T1790] usb 4-1: USB disconnect, device number 10 [ 116.497112][ T287] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 116.521704][ T4215] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.1449: corrupted inode contents [ 116.537089][ T4225] loop8: detected capacity change from 0 to 256 [ 116.545185][ T4215] EXT4-fs error (device loop4): ext4_dirty_inode:6121: inode #15: comm syz.4.1449: mark_inode_dirty error [ 116.559514][ T4215] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.1449: corrupted inode contents [ 116.573906][ T4215] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.1449: mark_inode_dirty error [ 116.599757][ T4215] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.1449: corrupted inode contents [ 116.616423][ T4215] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.1449: mark_inode_dirty error [ 116.628453][ T4215] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.1449: corrupted inode contents [ 116.638440][ T4233] input: syz0 as /devices/virtual/input/input13 [ 116.641331][ T4215] EXT4-fs error (device loop4): ext4_truncate:4314: inode #15: comm syz.4.1449: mark_inode_dirty error [ 116.658649][ T4215] EXT4-fs error (device loop4) in ext4_setattr:5660: Corrupt filesystem [ 116.668065][ T4228] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.1449: corrupted inode contents [ 116.715390][ T2055] EXT4-fs (loop4): unmounting filesystem. [ 116.728869][ T287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.751709][ T4237] loop8: detected capacity change from 0 to 256 [ 116.756161][ T287] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 116.767446][ T287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.768847][ T4237] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 116.775681][ T287] usb 2-1: Product: syz [ 116.796533][ T287] usb 2-1: Manufacturer: syz [ 116.801632][ T287] usb 2-1: SerialNumber: syz [ 116.809225][ T287] usb 2-1: config 0 descriptor?? [ 116.817788][ T287] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 116.824186][ T287] usb 2-1: No valid video chain found. [ 116.982960][ T4264] loop8: detected capacity change from 0 to 1024 [ 116.991188][ T4264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.031574][ T287] usb 2-1: USB disconnect, device number 12 [ 117.055843][ T4264] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 117.091677][ T2050] EXT4-fs error (device loop8): ext4_lookup:1858: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256) [ 117.105279][ T2050] EXT4-fs error (device loop8): ext4_lookup:1858: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256) [ 117.137381][ T3993] EXT4-fs (loop8): unmounting filesystem. [ 117.207031][ T1790] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 117.349124][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.356247][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.363828][ T4289] device bridge_slave_0 entered promiscuous mode [ 117.371097][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.378197][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.385683][ T4289] device bridge_slave_1 entered promiscuous mode [ 117.398154][ T1790] usb 5-1: config 0 has no interfaces? [ 117.404463][ T1790] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 117.413712][ T1790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 117.421793][ T1790] usb 5-1: SerialNumber: syz [ 117.432738][ T1790] usb 5-1: config 0 descriptor?? [ 117.471465][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.478545][ T4289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.485821][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.492865][ T4289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.515521][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.522802][ T287] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 117.530548][ T3824] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.537889][ T3824] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.550621][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.558866][ T3824] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.565933][ T3824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.573451][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.581981][ T3824] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.589070][ T3824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.606565][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.617101][ T1343] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 117.628462][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.637262][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.651035][ T4260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.660196][ T4260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.668031][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.671712][ T1790] usb 5-1: USB disconnect, device number 9 [ 117.676852][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.689871][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.699726][ T4289] device veth0_vlan entered promiscuous mode [ 117.710080][ T4313] block device autoloading is deprecated and will be removed. [ 117.719285][ T287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.728342][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.738326][ T287] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.740575][ T4289] device veth1_macvtap entered promiscuous mode [ 117.759905][ T2789] device bridge_slave_1 left promiscuous mode [ 117.766130][ T2789] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.774039][ T287] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.783978][ T287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.797082][ T287] usb 4-1: config 0 descriptor?? [ 117.798104][ T1343] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.803237][ T2789] device bridge_slave_0 left promiscuous mode [ 117.814889][ T1343] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.822473][ T2789] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.835983][ T1343] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.837250][ T2789] device veth1_macvtap left promiscuous mode [ 117.845262][ T1343] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.851314][ T2789] device veth0_vlan left promiscuous mode [ 117.860111][ T1343] usb 1-1: Product: syz [ 117.869190][ T1343] usb 1-1: Manufacturer: syz [ 117.874046][ T1343] usb 1-1: SerialNumber: syz [ 117.964957][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.975607][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.016474][ T4327] 9pnet: p9_errstr2errno: server reported unknown error @ [ 118.218478][ T4346] IPv6: sit1: Disabled Multicast RS [ 118.224974][ T287] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 118.245826][ T287] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 118.256505][ T287] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 118.264154][ T287] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 118.271929][ T287] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 118.279608][ T287] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 118.288365][ T287] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 118.298612][ T1343] usb 1-1: 0:2 : does not exist [ 118.303831][ T287] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 118.312088][ T287] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 118.319992][ T287] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 118.327768][ T287] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 118.337122][ T287] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 118.344608][ T287] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 118.352221][ T287] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 118.359907][ T287] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 118.367558][ T287] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 118.376464][ T287] plantronics 0003:047F:FFFF.0022: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 118.520911][ T1452] printk: udevd: 222 output lines suppressed due to ratelimiting [ 118.753590][ T19] usb 1-1: USB disconnect, device number 8 [ 118.760169][ T287] usb 4-1: USB disconnect, device number 11 [ 119.347771][ T2789] device bridge_slave_1 left promiscuous mode [ 119.354386][ T2789] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.362043][ T2789] device bridge_slave_0 left promiscuous mode [ 119.368198][ T2789] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.376161][ T2789] device veth1_macvtap left promiscuous mode [ 119.382234][ T2789] device veth0_vlan left promiscuous mode [ 120.258367][ T2789] device bridge_slave_1 left promiscuous mode [ 120.264515][ T2789] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.272142][ T2789] device bridge_slave_0 left promiscuous mode [ 120.278342][ T2789] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.286336][ T2789] device bridge_slave_1 left promiscuous mode [ 120.292537][ T2789] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.300043][ T2789] device bridge_slave_0 left promiscuous mode [ 120.306157][ T2789] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.314176][ T2789] device bridge_slave_1 left promiscuous mode [ 120.320847][ T2789] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.328355][ T2789] device bridge_slave_0 left promiscuous mode [ 120.334458][ T2789] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.342709][ T2789] device bridge_slave_1 left promiscuous mode [ 120.348877][ T2789] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.356353][ T2789] device bridge_slave_0 left promiscuous mode [ 120.362730][ T2789] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.371339][ T2789] device veth1_macvtap left promiscuous mode [ 120.377468][ T2789] device veth0_vlan left promiscuous mode [ 120.383553][ T2789] device veth1_macvtap left promiscuous mode [ 120.389668][ T2789] device veth0_vlan left promiscuous mode [ 120.395761][ T2789] device veth1_macvtap left promiscuous mode [ 120.401876][ T2789] device veth0_vlan left promiscuous mode [ 120.408098][ T2789] device veth1_macvtap left promiscuous mode [ 120.414105][ T2789] device veth0_vlan left promiscuous mode