last executing test programs: 4.597979359s ago: executing program 0: mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) getdents64(r0, &(0x7f0000000180)=""/105, 0x69) 4.587593191s ago: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) 4.53084678s ago: executing program 0: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$eJzs3M9rI+UbAPAn7XZ/f/dbRNDbDixCC5uw6XYXvVXdxR/Ypfjj4EnTZBqym2RKk6a1Jw8exYP/iSh48ujf4MGzt8WD4k1QMjPRrSgITRu7/Xxg8sz75s0zz5tD4ZkpCeDMWkx++akS1+JSRMxHxNWI/LxSHrm1IjwfEdcjYu6Jo1LO/zFxPiIuR8S1cfIiZ6V86/Oboxt3fnzz52++u3Duyhdffz+7XQOz9kJE9LaL871eEbN2ER+W841RJ4+91VEZizd6j8pxVsS9dDPPsNeYrGvk8Xa7WJ9t7w7GcavbaI5ju7OVz2/3iwsORu1JnvwDDxs7+biVbuaxM8jy2D4o6to/KP62HQyGRZ5Wme+jPH0Mh5NYzKf7abGf7Ud5bPaH5XyRN2ul++M4KmN5uWhm3VZex+ZRvun/trc6/d39ZJTuDDpZP7lTq79Yq9+t1neyVjpMV6uNXuvuarLU7o6XVYdpo7fWzrJ2N601s95ystRuNqv1erJ0L93sNPpJvV67XbtVvbNcnt1MXnvwXtJtJUvj+EqnvzvsdAfJVraTFJ9YTlZqt19aTm7Uk3fWN5KNt+/fX99494N77z94ef2NV8tFh8t6nK4mSyu3Vlaq9VvVlfryGdr/J2XRU9w/HEll1gUAnD76f2AWTnv/H/r/qThV/e+krLPa/x/D/uFI9P8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGfWDwtfvp6fLBbjK+X8/8qpZ8pxJSLmIuK3vzEf5w/lnC/zLPzD+oW/1PBtJfIM42tcKI/LEbFWHr/+/7i/BQAAAHh6ffXx9c+Kbr14WZx1QZyk4qbN3NUPp5SvEhELi4+nlG1u/PLslJLFcxFxLvanlC2/gXVxSsmKW27nppXtX5k/FC4+ESpFmDvRcgAAgBNxuBM42S4EAACAk/TprAtgNioxeZQ5eRac/+f9nw8ELx0aAQAAAKdQZdYFAAAAAMcu7//9/h8AAAA83Yrf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5n535yUoeiOACfFvoe74+RGOduxRkswyU4dGhYgJtgCbgFN8AacOYSDBjaEq3BxKS3bSTfl7SX25Afp4TJuZcUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuvRcrOaP91cPbXO2u3bS3A0AAABwzKZYzcsX02r+r75+Vl+6qOdZROQRcax3H8WvRuaozim+eH/xqYaniDJh/xm/6+NvRFzXx+t5198CAAAAnK71YjmruvXqNB26IPpULdrk/28S5WURUUxfEqXl+9NlorDy9z2Ou0Rp5QLWJFFYteQ2TpX2LaPGMPkwZNWQ91oOAADQi2Yn0G8XAgAAQJ9uhy6AYWRx2Mo87AWX/7x/3xD805gBAAAAP1A2dAEAAABA58r+3/P/AAAA4LRVz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS5tiNV8vlrO2OdtdO2nuBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4Y3/eUSAEwiAM9q7vTOb+h5UGTU1NqkD4+BuDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODN7/7yf2JqnEnmXhtLzyPJ2qmxdWrsnRtHfxhfvwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICL/XlJgRAIgiiYM/530vc/rCToGUSIgIZHFbVoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+KLf/fJ/YmqcSeZOG0vHI8naVWPrqrH3oHH0YLz9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLnft5jaOKAwD+ZmZna6viGmUPEVHwoBe73dbWXj0owYN/ghDSbY1u/dHmYEsRcvEmOfciehQRlHjr/9BzC73UWw57iCAeI/MrmfwAt4TMbJLPB9687w6bed83CSHfeS8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCZfLATJ9mhV8Rxee7R5r2lrH+8p888WHsyn7UsjppM+nh4vf4i6reXCAAAAKdHUtX3IYSn6fpC1se9vP5Pq/dkNf9PLxZxVc/vrfurvqr9s/bnHxuvbg/UK8bJLnp9eTy6sD+VztHNckb8u1XYc/ql//3CTn7n82cvSf4NiT9efWWS5vcz+uHhww+7eXjmqBIHAA7rfNWXQfX3UNYP20wMgFOjUyu8q/o/6bWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEATJqvh+SqOQgjznZ0483jz3tJB/YO1J/NVu3L//lr9mtkl0hDC9eXx6EKDc5l1t+/c/WJxPB7daj54I4TQ3uhl8OkU7wmhzQwFhw3i8md9VvI5HkHLv5gAADhx0rJldf3TdH0hOxfNhbD18+76/+1aHKas/zc+u/KoPla9/h82NsPZN1i5+fXg9p277y7fXLwxujH68r2Lw/eHl65evnx1kD8rGXhiAgAAwOF0y1av/+O5/ev/52pxmLL+/+bH4Xf1sRL1/4F2Fv3azgQAAOB0e/nNf/6ODjgfdbvh28WVlVvD4rj9+mJxbCHVZ3ambPX6P5lrOysAAACgCZPVaNf6/7VaHKZc/3/hl9d+q18zCSGcLdf/zy99Nb7W3HRmWhP/Ttz2HAEAAGjX2bLV1//TfP9/vL3lIQ4hvPNWEZcfAzhV/Z989P2v9bHq+/8vNTfFmRT3i/uR9/0QOv22MwIAAOAke65sWbH/V7q+8Pnv5z7p2v8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LT/AgAA//8Yl0ni") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000140)='./file0/file0\x00', r1, &(0x7f00000002c0)='./file1\x00', 0x4) 4.248906163s ago: executing program 0: r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000001340), 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f00000013c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 4.111883404s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='svcrdma_send_err\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x5, {0x5, 0x0, "0c99db"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r4, 0x0, 0x25, 0x0, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_delneigh={0x30, 0x1c, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, r5}, [@NDA_LLADDR={0xa, 0x2, @dev}, @NDA_VLAN={0x6}]}, 0x30}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018170000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='ext4_es_remove_extent\x00', r7}, 0x10) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x2200c851, &(0x7f0000001380)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) recvmsg(r8, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x20010121) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r9, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 2.126757231s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.121036922s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.054490882s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setfsuid(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1c5002, 0x0) ftruncate(r1, 0x5d801) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x107042, 0x0) write(r3, &(0x7f0000000400)="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", 0x353c00) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x3920e, r0}) 2.030054706s ago: executing program 1: r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/149, 0x95) lseek(r0, 0x7ff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) getdents64(r0, 0x0, 0x0) 1.99932795s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff0007"], 0x58}}, 0x0) 1.951208208s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") setfsuid(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1c5002, 0x0) ftruncate(r1, 0x5d801) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x107042, 0x0) write(r3, &(0x7f0000000400)="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", 0x353c00) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000240)={0x3920e, r0}) 1.928044262s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) pipe2(&(0x7f0000000280), 0x80800) 1.815759559s ago: executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x0, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@rand_addr, 0x800}, {@broadcast, 0x52b1}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 917.072847ms ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000800)="0f017179c744240066000000c744240200500000c7442406000000000f01142466baf80cb8388c608cef66bafc0c66edc401f9fc0ec461d9f1a2000000000f01cbb922030000b851850000ba000000000f30420f7984563d0a00000f20992e650f01c3", 0x63}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 892.909151ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000007850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = eventfd(0x800a6) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) r3 = dup(r2) read$eventfd(r3, &(0x7f0000000040), 0x8) 818.703903ms ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 813.496034ms ago: executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0xb, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 807.708035ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0xa53}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x40086607, 0x20001412) 804.076056ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ext4_ext_handle_unwritten_extents\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x0, 0xc2, 0x5}}) 781.221649ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x8, 0x10001, 0x9}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000880)='./file0\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 763.478671ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) pipe2(&(0x7f0000000280), 0x80800) 662.317267ms ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000004c0)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ff010000697f000000000000000000010000000032000000ff02040000000000000000000000000100000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000060001200726663343534332867636d28616573292900"/234], 0x150}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x64000600) 401.911137ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x8, 0x10001, 0x9}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000600), &(0x7f0000000640)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000880)='./file0\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 386.58355ms ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b800000850000006d000000040000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='ext4_free_blocks\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_free_blocks\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x12) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 372.366882ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@polexpire={0xcc, 0x1b, 0x319516ae726afe1b, 0x0, 0x0, {{{@in6=@private1}}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x2}}]}, 0xcc}}, 0x0) 353.197875ms ago: executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x40000000004) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000075c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x33) 314.759931ms ago: executing program 2: fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 294.470264ms ago: executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x360, 0x11, 0x148, 0x360, 0x10, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510) 5.984698ms ago: executing program 3: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000300)=ANY=[], 0x0) 0s ago: executing program 0: ioperm(0x0, 0x0, 0x8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000310400"/20, @ANYRES32=r3, @ANYBLOB="019800000000000020001280080001006772650014000280060003003d000000080007007f"], 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @local}}}], 0x20}}], 0x1, 0x0) kernel console output (not intermixed with test programs): loop1): Directory bread(block 71) failed [ 121.216727][ T5146] FAT-fs (loop1): Directory bread(block 72) failed [ 121.222980][ T5146] FAT-fs (loop1): Directory bread(block 73) failed [ 121.556300][ T39] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 121.565168][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.573500][ T39] usb 5-1: config 0 descriptor?? [ 121.706363][ T5151] bpf_get_probe_write_proto: 2 callbacks suppressed [ 121.706383][ T5151] syz-executor.3[5151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.712941][ T5151] syz-executor.3[5151] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.726197][ T1124] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 121.745889][ T5153] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.755516][ T5153] device gretap0 entered promiscuous mode [ 121.764596][ T5153] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.773787][ T5153] 0ªX¹¦D: renamed from gretap0 [ 121.779229][ T5153] device 40ªX¹¦D left promiscuous mode [ 121.785111][ T5153] A link change request failed with some changes committed already. Interface 40ªX¹¦D may have been left with an inconsistent configuration, please check. [ 122.106221][ T1124] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 122.117030][ T1124] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 122.126689][ T1124] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 122.135575][ T1124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.136150][ T311] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 122.309909][ T5176] fuse: Bad value for 'fd' [ 122.373715][ T5182] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.384021][ T5182] device 40ªX¹¦D entered promiscuous mode [ 122.398354][ T5182] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.407715][ T5182] 1ªX¹¦D: renamed from 40ªX¹¦D [ 122.413185][ T5182] device 41ªX¹¦D left promiscuous mode [ 122.416262][ T1124] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 122.419316][ T5182] A link change request failed with some changes committed already. Interface 41ªX¹¦D may have been left with an inconsistent configuration, please check. [ 122.425897][ T1124] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input22 [ 122.451355][ T1124] input: failed to attach handler kbd to device input22, error: -5 [ 122.465142][ T1124] usb 3-1: USB disconnect, device number 21 [ 122.516219][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.526965][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.539617][ T311] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.548447][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.557323][ T311] usb 1-1: config 0 descriptor?? [ 122.721821][ T39] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 122.731801][ T39] asix: probe of 5-1:0.0 failed with error -71 [ 122.739153][ T39] usb 5-1: USB disconnect, device number 17 [ 122.849753][ T5209] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.029848][ T5215] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.045490][ T5215] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.054906][ T5215] 0ªX¹¦D: renamed from gretap0 [ 123.060511][ T5215] device 40ªX¹¦D left promiscuous mode [ 123.066811][ T5215] A link change request failed with some changes committed already. Interface 40ªX¹¦D may have been left with an inconsistent configuration, please check. [ 123.076354][ T5220] input: syz1 as /devices/virtual/input/input23 [ 123.166776][ T311] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 123.174121][ T311] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 123.182468][ T311] plantronics 0003:047F:FFFF.001E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 123.596172][ T1124] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 123.691447][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.698712][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.705858][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.713289][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.720536][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.727967][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.735634][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.742864][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.750074][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.757297][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.764447][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.771690][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.778880][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.786057][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.793269][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.800494][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.807687][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.814965][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.822277][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.829576][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.836957][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.844149][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.851360][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.856177][ T1124] usb 5-1: Using ep0 maxpacket: 32 [ 123.858570][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.870729][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.877989][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.885121][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.892362][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.899532][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.906740][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.913927][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.921167][ T311] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 123.928888][ T311] hid-generic 0000:0000:0000.001F: hidraw1: HID v0.00 Device [syz0] on syz0 [ 123.956222][ T39] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 123.966979][ T534] usb 1-1: USB disconnect, device number 17 [ 123.988249][ T1124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 124.001509][ T1124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 124.012658][ T1124] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 124.021521][ T1124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.029788][ T1124] usb 5-1: config 0 descriptor?? [ 124.046285][ T5246] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 124.052623][ T5277] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 124.066580][ T1124] hub 5-1:0.0: USB hub found [ 124.079306][ T5281] fuse: Bad value for 'fd' [ 124.286301][ T1124] hub 5-1:0.0: 2 ports detected [ 124.300342][ T5288] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.406498][ T534] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 124.456226][ T39] usb 2-1: config 0 has no interfaces? [ 124.461597][ T39] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 124.470482][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.478808][ T39] usb 2-1: config 0 descriptor?? [ 124.728696][ T6] usb 2-1: USB disconnect, device number 13 [ 124.786204][ T534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.796997][ T534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.806581][ T534] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 124.815388][ T534] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.823642][ T534] usb 1-1: config 0 descriptor?? [ 124.879367][ T5294] loop2: detected capacity change from 0 to 128 [ 124.886171][ T5294] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 124.916268][ T1124] hub 5-1:0.0: set hub depth failed [ 124.956855][ T1124] usb 5-1: USB disconnect, device number 18 [ 125.168691][ T5306] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 125.386394][ T534] usbhid 1-1:0.0: can't add hid device: -71 [ 125.393388][ T534] usbhid: probe of 1-1:0.0 failed with error -71 [ 125.407321][ T534] usb 1-1: USB disconnect, device number 18 [ 125.514689][ T5311] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 125.837703][ T5314] input: syz0 as /devices/virtual/input/input24 [ 126.076165][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 126.158519][ T5325] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.584567][ T5330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.002894][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.013461][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.036339][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.043560][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.066151][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.073380][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.096431][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.103676][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.111413][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.118779][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.125984][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.126171][ T311] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 127.133230][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.133253][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.155081][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.162292][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.169485][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.176706][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.183875][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.191117][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.198323][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.205486][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.212759][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.219938][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.227132][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.234301][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.249049][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.297230][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.304518][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.326151][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.326219][ T5336] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 127.333885][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.333910][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.366138][ T534] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 127.386222][ T534] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz0 [ 127.516216][ T311] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 127.528028][ T311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.549285][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.666157][ T534] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 127.726229][ T311] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.739459][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.760323][ T311] usb 1-1: Product: syz [ 127.768706][ T311] usb 1-1: Manufacturer: syz [ 127.777462][ T311] usb 1-1: SerialNumber: syz [ 128.036210][ T534] usb 3-1: config 0 has no interfaces? [ 128.041520][ T534] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 128.077243][ T534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.106249][ T311] usb 1-1: 0:2 : does not exist [ 128.106281][ T534] usb 3-1: config 0 descriptor?? [ 128.120829][ T311] usb 1-1: USB disconnect, device number 19 [ 128.368726][ T534] usb 3-1: USB disconnect, device number 22 [ 128.746358][ T5342] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.076750][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 129.076766][ T28] audit: type=1326 audit(1717248486.673:22150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fa67cee9 code=0x7ffc0000 [ 129.132591][ T28] audit: type=1326 audit(1717248486.673:22151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93fa67cee9 code=0x7ffc0000 [ 129.181379][ T28] audit: type=1326 audit(1717248486.673:22152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fa67cee9 code=0x7ffc0000 [ 129.231387][ T28] audit: type=1326 audit(1717248486.703:22153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fa67cee9 code=0x7ffc0000 [ 129.281494][ T28] audit: type=1326 audit(1717248486.713:22154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93fa67cee9 code=0x7ffc0000 [ 129.330301][ T28] audit: type=1326 audit(1717248486.713:22155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fa67cee9 code=0x7ffc0000 [ 129.380240][ T28] audit: type=1326 audit(1717248486.713:22156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93fa67a667 code=0x7ffc0000 [ 129.465467][ T28] audit: type=1326 audit(1717248486.713:22157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93fa640329 code=0x7ffc0000 [ 129.511789][ T5351] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 129.520572][ T28] audit: type=1326 audit(1717248486.713:22158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fa67cee9 code=0x7ffc0000 [ 129.573265][ T28] audit: type=1326 audit(1717248486.713:22159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5343 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93fa67a667 code=0x7ffc0000 [ 130.084165][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 130.442997][ T5364] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 130.525131][ T5368] loop0: detected capacity change from 0 to 2048 [ 130.541299][ T5368] EXT4-fs warning (device loop0): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 130.783911][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 130.798358][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 130.820949][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 130.843448][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 130.850800][ T1124] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 130.874445][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 130.889331][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 130.904274][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 130.919104][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 130.933954][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 130.949904][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 130.964944][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 130.979764][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 130.994590][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.009467][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.025395][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.040259][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.055092][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.069904][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.084796][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.096147][ T1124] usb 1-1: Using ep0 maxpacket: 8 [ 131.104327][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.120221][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.135043][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.149878][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.164785][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.179791][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.195744][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.210944][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.218378][ T1124] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 131.229879][ T1124] usb 1-1: config 135 has an invalid descriptor of length 246, skipping remainder of the config [ 131.245583][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.258210][ T1124] usb 1-1: config 135 has no interface number 0 [ 131.266515][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.278069][ T1124] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.294663][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.309542][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.324396][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 131.332387][ T24] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz0 [ 131.486247][ T1124] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 131.500527][ T1124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.516001][ T1124] usb 1-1: Product: syz [ 131.524374][ T1124] usb 1-1: Manufacturer: syz [ 131.533200][ T1124] usb 1-1: SerialNumber: syz [ 131.606123][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 131.806225][ T1124] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 131.812408][ T1124] usb 1-1: No valid video chain found. [ 131.827376][ T1124] usb 1-1: USB disconnect, device number 20 [ 131.986231][ T24] usb 3-1: config 0 has no interfaces? [ 131.991542][ T24] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 132.026112][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.046435][ T24] usb 3-1: config 0 descriptor?? [ 132.290227][ T24] usb 3-1: USB disconnect, device number 23 [ 132.305393][ T5372] loop0: detected capacity change from 0 to 16 [ 132.326858][ T5372] erofs: (device loop0): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 132.346575][ T5372] erofs: (device loop0): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 132.367708][ T5372] erofs: (device loop0): mounted with root inode @ nid 36. [ 132.386471][ T5372] syz-executor.0: attempt to access beyond end of device [ 132.386471][ T5372] loop0: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 133.901876][ T5386] syz-executor.0[5386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.901945][ T5386] syz-executor.0[5386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.982281][ T5391] loop2: detected capacity change from 0 to 512 [ 134.028879][ T5389] xt_TCPMSS: Only works on TCP SYN packets [ 134.076815][ T5391] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 134.085562][ T5391] ext4 filesystem being mounted at /root/syzkaller-testdir1824272836/syzkaller.IEXz0F/89/file1 supports timestamps until 2038 (0x7fffffff) [ 134.126927][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 134.786676][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 134.798037][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 134.812457][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 134.827967][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 134.842383][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 134.857897][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 134.872335][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 134.887977][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 134.902384][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 134.917886][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 134.932338][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 134.947834][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 134.962468][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 134.976894][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 134.991309][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.006810][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.022235][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.046154][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.053372][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.076134][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.085762][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.106160][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.113388][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.136133][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.143360][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.166163][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.173392][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.196131][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.203352][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.226149][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.233385][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.256133][ T331] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 135.264018][ T331] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz0 [ 135.336552][ T28] kauditd_printk_skb: 3238 callbacks suppressed [ 135.336567][ T28] audit: type=1326 audit(1717248492.943:25398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fa67cee9 code=0x7ffc0000 [ 135.426186][ T28] audit: type=1326 audit(1717248492.943:25399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93fa67cee9 code=0x7ffc0000 [ 135.476136][ T28] audit: type=1326 audit(1717248492.943:25400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fa67cee9 code=0x7ffc0000 [ 135.523406][ T28] audit: type=1326 audit(1717248492.943:25401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93fa67cee9 code=0x7ffc0000 [ 135.526150][ T311] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 135.572277][ T28] audit: type=1326 audit(1717248493.003:25402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93fa67cee9 code=0x7ffc0000 [ 135.622209][ T28] audit: type=1326 audit(1717248493.013:25403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93fa67a667 code=0x7ffc0000 [ 135.672581][ T28] audit: type=1326 audit(1717248493.013:25404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93fa640329 code=0x7ffc0000 [ 135.723518][ T28] audit: type=1326 audit(1717248493.013:25405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93fa67a667 code=0x7ffc0000 [ 135.771172][ T28] audit: type=1326 audit(1717248493.013:25406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93fa640329 code=0x7ffc0000 [ 135.822855][ T28] audit: type=1326 audit(1717248493.013:25407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93fa67a667 code=0x7ffc0000 [ 135.947032][ T311] usb 1-1: config 0 has no interfaces? [ 135.952339][ T311] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 135.986444][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.016631][ T311] usb 1-1: config 0 descriptor?? [ 136.277309][ T311] usb 1-1: USB disconnect, device number 21 [ 136.847587][ T5421] loop0: detected capacity change from 0 to 512 [ 136.913296][ T5421] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 136.926274][ T5421] ext4 filesystem being mounted at /root/syzkaller-testdir1216788706/syzkaller.oqZVyB/81/file1 supports timestamps until 2038 (0x7fffffff) [ 137.026994][ T4514] EXT4-fs (loop0): unmounting filesystem. [ 137.083712][ T5426] loop0: detected capacity change from 0 to 512 [ 137.127373][ T5426] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 137.166216][ T5426] ext4 filesystem being mounted at /root/syzkaller-testdir1216788706/syzkaller.oqZVyB/82/file1 supports timestamps until 2038 (0x7fffffff) [ 137.271437][ T4514] EXT4-fs (loop0): unmounting filesystem. [ 137.335936][ T5430] loop0: detected capacity change from 0 to 512 [ 137.387387][ T5430] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 137.401706][ T5430] ext4 filesystem being mounted at /root/syzkaller-testdir1216788706/syzkaller.oqZVyB/83/file1 supports timestamps until 2038 (0x7fffffff) [ 137.520544][ T4514] EXT4-fs (loop0): unmounting filesystem. [ 137.614420][ T5436] input: syz1 as /devices/virtual/input/input25 [ 138.064502][ T5449] x_tables: duplicate underflow at hook 2 [ 138.276812][ T5451] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.806161][ T311] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 138.979668][ T5459] loop2: detected capacity change from 0 to 512 [ 139.014601][ T5459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 139.036228][ T5459] ext4 filesystem being mounted at /root/syzkaller-testdir1824272836/syzkaller.IEXz0F/104/file1 supports timestamps until 2038 (0x7fffffff) [ 139.056195][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 139.094771][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 139.157625][ T5463] loop2: detected capacity change from 0 to 512 [ 139.176309][ T311] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 139.191670][ T311] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 139.205105][ T5463] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 139.222150][ T311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.226769][ T5463] ext4 filesystem being mounted at /root/syzkaller-testdir1824272836/syzkaller.IEXz0F/105/file1 supports timestamps until 2038 (0x7fffffff) [ 139.325386][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 139.377759][ T5467] loop2: detected capacity change from 0 to 512 [ 139.406278][ T311] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.418421][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.432227][ T5467] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 139.446870][ T311] usb 1-1: Product: syz [ 139.454216][ T5467] ext4 filesystem being mounted at /root/syzkaller-testdir1824272836/syzkaller.IEXz0F/106/file1 supports timestamps until 2038 (0x7fffffff) [ 139.469506][ T311] usb 1-1: Manufacturer: syz [ 139.478279][ T311] usb 1-1: SerialNumber: syz [ 139.558195][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 139.816256][ T311] usb 1-1: 0:2 : does not exist [ 139.828939][ T311] usb 1-1: USB disconnect, device number 22 [ 139.906135][ T534] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 140.276249][ T534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.296729][ T534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.318362][ T534] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 140.335924][ T534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.353727][ T534] usb 3-1: config 0 descriptor?? [ 140.838658][ T534] isku 0003:1E7D:319C.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 141.250824][ T1124] usb 3-1: USB disconnect, device number 24 [ 141.874782][ T5487] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 142.039542][ T5494] loop2: detected capacity change from 0 to 512 [ 142.071629][ T5494] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 142.084680][ T5494] ext4 filesystem being mounted at /root/syzkaller-testdir1824272836/syzkaller.IEXz0F/112/file1 supports timestamps until 2038 (0x7fffffff) [ 142.120489][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 142.150899][ T5499] loop2: detected capacity change from 0 to 512 [ 142.196058][ T5499] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 142.213508][ T5499] ext4 filesystem being mounted at /root/syzkaller-testdir1824272836/syzkaller.IEXz0F/113/file1 supports timestamps until 2038 (0x7fffffff) [ 142.247683][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 142.344617][ T5503] loop2: detected capacity change from 0 to 512 [ 142.387637][ T5503] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 142.405096][ T5503] ext4 filesystem being mounted at /root/syzkaller-testdir1824272836/syzkaller.IEXz0F/114/file1 supports timestamps until 2038 (0x7fffffff) [ 142.487029][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 142.916161][ T1124] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 143.277163][ T1124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.296483][ T1124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.316141][ T1124] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 143.325008][ T1124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.346999][ T1124] usb 3-1: config 0 descriptor?? [ 143.887636][ T1124] isku 0003:1E7D:319C.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 144.328395][ T24] usb 3-1: USB disconnect, device number 25 [ 145.070239][ T5564] tipc: Started in network mode [ 145.076010][ T5564] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 145.098131][ T5564] tipc: Enabling of bearer rejected, failed to enable media [ 145.816122][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 146.186170][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.208279][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.238456][ T24] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 146.265727][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.291696][ T24] usb 1-1: config 0 descriptor?? [ 146.484325][ T5578] loop2: detected capacity change from 0 to 40427 [ 146.506873][ T5578] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 146.514433][ T5578] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 146.567112][ T5578] F2FS-fs (loop2): Found nat_bits in checkpoint [ 146.626427][ T5578] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 146.659535][ T5578] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 146.676145][ T5578] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 146.777560][ T24] isku 0003:1E7D:319C.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 146.986998][ T5588] x_tables: duplicate underflow at hook 2 [ 147.177806][ T5590] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.369089][ T24] usb 1-1: USB disconnect, device number 23 [ 147.963540][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 147.976247][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 147.999842][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.026316][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.049743][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.073290][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.091445][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.106383][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.122292][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.136242][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.151074][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.186124][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.193374][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.206156][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.213382][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.246133][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.253355][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.268680][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.296129][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.303353][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.346149][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.353374][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.386150][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.393376][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.426149][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.433372][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.447992][ T5602] loop0: detected capacity change from 0 to 40427 [ 148.456467][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.463685][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.471700][ T5602] F2FS-fs (loop0): invalid crc value [ 148.486207][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.496387][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.503616][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.526155][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.533379][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.541938][ T5602] F2FS-fs (loop0): Found nat_bits in checkpoint [ 148.566127][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.573379][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.586295][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.593511][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.616438][ T331] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 148.628935][ T331] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz0] on syz0 [ 148.647553][ T5602] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 148.893080][ T4514] syz-executor.0: attempt to access beyond end of device [ 148.893080][ T4514] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 149.789699][ T5641] loop2: detected capacity change from 0 to 512 [ 149.883185][ T5641] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 149.920542][ T5641] ext4 filesystem being mounted at /root/syzkaller-testdir1824272836/syzkaller.IEXz0F/139/file0 supports timestamps until 2038 (0x7fffffff) [ 149.933262][ T5637] loop0: detected capacity change from 0 to 40427 [ 149.950533][ T5637] F2FS-fs (loop0): invalid crc value [ 149.973710][ T5637] F2FS-fs (loop0): Found nat_bits in checkpoint [ 150.030958][ T4250] EXT4-fs (loop2): unmounting filesystem. [ 150.074310][ T5637] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 150.336979][ T28] kauditd_printk_skb: 1002 callbacks suppressed [ 150.336993][ T28] audit: type=1400 audit(1717248507.943:26410): avc: denied { mounton } for pid=5655 comm="syz-executor.3" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 150.391108][ T4514] syz-executor.0: attempt to access beyond end of device [ 150.391108][ T4514] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 150.486429][ T5655] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.493288][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.536789][ T5655] device bridge_slave_0 entered promiscuous mode [ 150.560009][ T5655] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.583954][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.607855][ T5655] device bridge_slave_1 entered promiscuous mode [ 150.637829][ T43] device bridge_slave_1 left promiscuous mode [ 150.657274][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.671153][ T43] device bridge_slave_0 left promiscuous mode [ 150.681048][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.705412][ T43] device veth1_macvtap left promiscuous mode [ 150.719497][ T43] device veth0_vlan left promiscuous mode [ 151.078651][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.085507][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.093741][ T5664] device bridge_slave_0 entered promiscuous mode [ 151.109313][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.116723][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.136949][ T5664] device bridge_slave_1 entered promiscuous mode [ 151.228292][ T5682] loop0: detected capacity change from 0 to 256 [ 151.270154][ T5682] FAT-fs (loop0): Directory bread(block 64) failed [ 151.272457][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.284190][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.286159][ T5682] FAT-fs (loop0): Directory bread(block 65) failed [ 151.316227][ T5682] FAT-fs (loop0): Directory bread(block 66) failed [ 151.326232][ T5682] FAT-fs (loop0): Directory bread(block 67) failed [ 151.332848][ T5682] FAT-fs (loop0): Directory bread(block 68) failed [ 151.340077][ T5682] FAT-fs (loop0): Directory bread(block 69) failed [ 151.346533][ T5682] FAT-fs (loop0): Directory bread(block 70) failed [ 151.347145][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.352908][ T5682] FAT-fs (loop0): Directory bread(block 71) failed [ 151.376488][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.384492][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.386242][ T5682] FAT-fs (loop0): Directory bread(block 72) failed [ 151.391338][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.407147][ T5682] FAT-fs (loop0): Directory bread(block 73) failed [ 151.434969][ T331] kernel write not supported for file bpf-prog (pid: 331 comm: kworker/0:3) [ 151.436196][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.466429][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.477713][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.484561][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.506249][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.509324][ T5686] loop0: detected capacity change from 0 to 1024 [ 151.514190][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.537765][ T5686] EXT4-fs: Ignoring removed orlov option [ 151.556402][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.564441][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.582490][ T5686] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 151.591268][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.627836][ T5686] incfs: ino conflict with backing FS 2 [ 151.647230][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.655377][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.683006][ T5655] device veth0_vlan entered promiscuous mode [ 151.710700][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 151.726409][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 151.741967][ T5655] device veth1_macvtap entered promiscuous mode [ 151.766512][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 151.773804][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 151.783345][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 151.791419][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 151.799595][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.807403][ T28] audit: type=1400 audit(1717248509.413:26411): avc: denied { rmdir } for pid=4514 comm="syz-executor.0" name=".index" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 151.808498][ T4514] EXT4-fs (loop0): unmounting filesystem. [ 151.835319][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.842662][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.850992][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.876499][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.883353][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.896308][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 151.904478][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.919435][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.926308][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.966655][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.974156][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 151.996528][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.004725][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.026507][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.075502][ T5664] device veth0_vlan entered promiscuous mode [ 152.100886][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.109473][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.126855][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.134166][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.156666][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.173156][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.214854][ T5664] device veth1_macvtap entered promiscuous mode [ 152.237167][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.245185][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.266450][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.287665][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.295756][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 152.329102][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 152.347574][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 152.397628][ T43] device bridge_slave_1 left promiscuous mode [ 152.403585][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.426561][ T43] device bridge_slave_0 left promiscuous mode [ 152.432561][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.446199][ T43] device veth1_macvtap left promiscuous mode [ 152.452114][ T43] device veth0_vlan left promiscuous mode [ 152.653599][ T5693] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.670168][ T5693] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.689214][ T5693] device bridge_slave_0 entered promiscuous mode [ 152.707293][ T5693] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.715233][ T5693] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.724838][ T5693] device bridge_slave_1 entered promiscuous mode [ 152.896929][ T5693] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.903794][ T5693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.910892][ T5693] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.917694][ T5693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.016160][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.023588][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.047367][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.088063][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.096467][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.104267][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.122058][ T5693] device veth0_vlan entered promiscuous mode [ 153.136782][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.144671][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.152384][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.165938][ T5693] device veth1_macvtap entered promiscuous mode [ 153.197955][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.226598][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.234700][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.270052][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.296452][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.317607][ T5718] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.336170][ T5718] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.360007][ T5718] device bridge_slave_0 entered promiscuous mode [ 153.390660][ T5718] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.408060][ T5718] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.415362][ T5718] device bridge_slave_1 entered promiscuous mode [ 153.588020][ T5718] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.594900][ T5718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.601994][ T5718] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.608788][ T5718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.712380][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.726534][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.747467][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.754962][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.780550][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.797338][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.804211][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.829957][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.847882][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.854767][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.887785][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.897953][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.923738][ T5718] device veth0_vlan entered promiscuous mode [ 153.944747][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.955299][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.972041][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.991383][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.012680][ T5718] device veth1_macvtap entered promiscuous mode [ 154.031449][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.049257][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.092055][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 154.096171][ T5727] loop4: detected capacity change from 0 to 512 [ 154.165655][ T5727] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 154.218199][ T5727] ext4 filesystem being mounted at /root/syzkaller-testdir3298877828/syzkaller.1FxrRF/0/file0 supports timestamps until 2038 (0x7fffffff) [ 154.294950][ T5718] EXT4-fs (loop4): unmounting filesystem. [ 154.767194][ T28] audit: type=1400 audit(1717248512.373:26412): avc: denied { bind } for pid=5748 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.882695][ T5755] loop4: detected capacity change from 0 to 512 [ 154.917767][ T5755] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 154.931002][ T5755] ext4 filesystem being mounted at /root/syzkaller-testdir3298877828/syzkaller.1FxrRF/9/file0 supports timestamps until 2038 (0x7fffffff) [ 155.011620][ T5718] EXT4-fs (loop4): unmounting filesystem. [ 155.183021][ T5761] loop4: detected capacity change from 0 to 512 [ 155.207265][ T5761] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.287412][ T5761] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #17: comm syz-executor.4: iget: bad i_size value: -6917529027641081756 [ 155.317037][ T5761] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 17 (err -117) [ 155.339050][ T5761] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 155.414418][ T5718] EXT4-fs (loop4): unmounting filesystem. [ 155.820142][ T28] audit: type=1400 audit(1717248513.423:26413): avc: denied { bind } for pid=5789 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 156.016168][ T1124] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 156.166113][ T6] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 156.376199][ T1124] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 156.385066][ T1124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.406115][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 156.416810][ T1124] usb 5-1: config 0 descriptor?? [ 156.526196][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 156.547598][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 156.570680][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 156.588289][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.607200][ T6] usb 1-1: config 0 descriptor?? [ 156.636381][ T5794] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 156.656624][ T6] hub 1-1:0.0: USB hub found [ 156.766159][ T1124] usb 5-1: Cannot read MAC address [ 156.771154][ T1124] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 156.786807][ T1124] usb 5-1: USB disconnect, device number 19 [ 156.956382][ T6] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 157.056157][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 157.061985][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 157.116514][ T6] usb 1-1: USB disconnect, device number 24 [ 157.523546][ T5811] loop0: detected capacity change from 0 to 512 [ 157.578940][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.585795][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.586807][ T5811] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 157.615538][ T5804] device bridge_slave_0 entered promiscuous mode [ 157.623071][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.630002][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.636707][ T5811] ext4 filesystem being mounted at /root/syzkaller-testdir1673971061/syzkaller.zAR93x/10/file0 supports timestamps until 2038 (0x7fffffff) [ 157.637371][ T5804] device bridge_slave_1 entered promiscuous mode [ 157.752279][ T408] device bridge_slave_1 left promiscuous mode [ 157.758468][ T5811] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #20: comm syz-executor.0: corrupted inode contents [ 157.759527][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.786725][ T5811] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #20: comm syz-executor.0: mark_inode_dirty error [ 157.806785][ T408] device bridge_slave_0 left promiscuous mode [ 157.812839][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.831981][ T408] device veth1_macvtap left promiscuous mode [ 157.845497][ T408] device veth0_vlan left promiscuous mode [ 157.846289][ T5811] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #20: comm syz-executor.0: corrupted inode contents [ 157.876289][ T5811] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2955: inode #20: comm syz-executor.0: mark_inode_dirty error [ 157.904250][ T5811] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2958: inode #20: comm syz-executor.0: mark inode dirty (error -117) [ 157.926681][ T5811] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 158.012974][ T5693] EXT4-fs (loop0): unmounting filesystem. [ 158.160520][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.167405][ T5804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.174487][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.181293][ T5804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.217398][ T5827] EXT4-fs warning (device sda1): ext4_group_extend:1869: can't shrink FS - resize aborted [ 158.266426][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.273854][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.281034][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.291278][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.299225][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.306047][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.325677][ T5804] device veth0_vlan entered promiscuous mode [ 158.333258][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.341467][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.349316][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.356621][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.363791][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.372478][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.379351][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.386565][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.394414][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.428547][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.446423][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.455659][ T5804] device veth1_macvtap entered promiscuous mode [ 158.500555][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.509058][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.526452][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.534709][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.566416][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.866223][ T331] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 158.887200][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.894051][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.923721][ T5833] device bridge_slave_0 entered promiscuous mode [ 158.946887][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.970206][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.991639][ T5833] device bridge_slave_1 entered promiscuous mode [ 159.067891][ T408] device bridge_slave_1 left promiscuous mode [ 159.086154][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.106214][ T331] usb 5-1: Using ep0 maxpacket: 32 [ 159.106954][ T408] device bridge_slave_0 left promiscuous mode [ 159.136157][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.152732][ T408] device veth1_macvtap left promiscuous mode [ 159.164098][ T408] device veth0_vlan left promiscuous mode [ 159.226215][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 159.250805][ T331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 159.285475][ T331] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 159.309630][ T331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.331277][ T331] usb 5-1: config 0 descriptor?? [ 159.356480][ T5831] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 159.376572][ T331] hub 5-1:0.0: USB hub found [ 159.482133][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.490623][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.516649][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.524755][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.557014][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.563869][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.581893][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.596497][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.604508][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.611372][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.646211][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.654038][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.661713][ T331] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 159.686624][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.720085][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.728639][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.746578][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.753879][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.776169][ T331] usbhid 5-1:0.0: can't add hid device: -71 [ 159.781936][ T331] usbhid: probe of 5-1:0.0 failed with error -71 [ 159.789725][ T5833] device veth0_vlan entered promiscuous mode [ 159.815900][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.831657][ T5833] device veth1_macvtap entered promiscuous mode [ 159.845344][ T331] usb 5-1: USB disconnect, device number 20 [ 159.853255][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.864731][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.899271][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 159.917520][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.263588][ T5851] fuse: Unknown parameter 'user_i00000000000000000000' [ 160.949608][ T28] audit: type=1400 audit(1717248518.552:26414): avc: denied { setopt } for pid=5852 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 160.981693][ T5853] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=109 sclass=netlink_xfrm_socket pid=5853 comm=syz-executor.0 [ 161.136962][ T28] audit: type=1400 audit(1717248518.730:26415): avc: denied { read } for pid=5865 comm="syz-executor.4" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 161.169329][ T28] audit: type=1400 audit(1717248518.740:26416): avc: denied { open } for pid=5865 comm="syz-executor.4" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 161.579885][ T5867] loop0: detected capacity change from 0 to 40427 [ 161.607158][ T5867] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 161.617285][ T5867] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 161.649726][ T5867] F2FS-fs (loop0): Found nat_bits in checkpoint [ 161.724833][ T5867] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 161.767241][ T5867] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 161.887941][ T5880] fuse: Unknown parameter 'user_i00000000000000000000' [ 162.112568][ T5864] SELinux: Context system_u:object_r:udev_helper_exec_t:s0 is not valid (left unmapped). [ 162.126370][ T28] audit: type=1400 audit(1717248519.730:26417): avc: denied { relabelto } for pid=5863 comm="syz-executor.0" name="bus" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:udev_helper_exec_t:s0" [ 162.204265][ T5833] syz-executor.0: attempt to access beyond end of device [ 162.204265][ T5833] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 162.602538][ T5884] fuse: Unknown parameter 'user_i00000000000000000000' [ 162.929712][ T5886] loop4: detected capacity change from 0 to 2048 [ 162.987253][ T5886] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 163.024860][ T5804] EXT4-fs (loop4): unmounting filesystem. [ 163.734317][ T5892] fuse: Unknown parameter 'user_i00000000000000000000' [ 164.420751][ T5897] fuse: Unknown parameter 'user_i00000000000000000000' [ 164.978295][ T28] audit: type=1400 audit(1717248522.580:26418): avc: denied { ioctl } for pid=5909 comm="syz-executor.0" path="/dev/snapshot" dev="devtmpfs" ino=91 ioctlcmd=0x6612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 165.546111][ T311] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 165.743303][ T5921] loop0: detected capacity change from 0 to 40427 [ 165.757952][ T5921] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 165.771981][ T5921] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 165.786099][ T311] usb 5-1: Using ep0 maxpacket: 32 [ 165.807811][ T5921] F2FS-fs (loop0): Found nat_bits in checkpoint [ 165.880504][ T5921] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 165.893909][ T5921] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 165.906172][ T311] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 165.914335][ T311] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 165.946121][ T311] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 165.954913][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 165.975319][ T5833] syz-executor.0: attempt to access beyond end of device [ 165.975319][ T5833] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 166.006114][ T311] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 166.015583][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 166.046170][ T311] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 166.055907][ T311] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 166.116230][ T311] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 166.125096][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.159591][ T311] usb 5-1: config 0 descriptor?? [ 166.185669][ T5925] loop0: detected capacity change from 0 to 2048 [ 166.219637][ T5925] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 166.234063][ T28] audit: type=1400 audit(1717248523.840:26419): avc: denied { rename } for pid=5924 comm="syz-executor.0" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 166.259448][ T5833] EXT4-fs (loop0): unmounting filesystem. [ 166.317344][ T28] audit: type=1326 audit(1717248523.890:26420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5929 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c4307cee9 code=0x0 [ 166.426737][ T311] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 167.171919][ T311] usb 5-1: USB disconnect, device number 21 [ 167.179872][ T311] usblp0: removed [ 168.064530][ T5936] fuse: Unknown parameter 'user_i00000000000000000000' [ 168.077803][ T5941] fuse: Unknown parameter 'user_i00000000000000000000' [ 168.593942][ T5948] fuse: Unknown parameter 'user_i00000000000000000000' [ 169.407404][ T5964] loop4: detected capacity change from 0 to 16 [ 169.426847][ T5964] erofs: (device loop4): mounted with root inode @ nid 36. [ 169.447990][ T5964] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 169.466171][ T5964] syz-executor.4: attempt to access beyond end of device [ 169.466171][ T5964] loop4: rw=0, sector=296, nr_sectors = 8 limit=16 [ 169.486159][ T5964] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 169.697805][ T5975] loop4: detected capacity change from 0 to 256 [ 169.982737][ T5989] loop4: detected capacity change from 0 to 2048 [ 170.421678][ T5997] fuse: Unknown parameter 'user_i00000000000000000000' [ 171.094232][ T6014] loop4: detected capacity change from 0 to 2048 [ 171.096314][ T6015] tipc: Started in network mode [ 171.105167][ T6015] tipc: Node identity ac1414aa, cluster identity 4711 [ 171.117017][ T6015] tipc: New replicast peer: 172.20.20.0 [ 171.129226][ T6015] tipc: Enabled bearer , priority 10 [ 171.283260][ T6014] loop4: unable to read partition table [ 171.297490][ T6014] loop4: partition table beyond EOD, truncated [ 171.316347][ T6014] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 171.522879][ T6026] incfs_lookup_dentry err:-5 [ 171.547087][ T6026] incfs: Can't find or create .index dir in ./file0 [ 171.560930][ T6026] incfs: mount failed -5 [ 171.676328][ T6032] netlink: 45 bytes leftover after parsing attributes in process `syz-executor.0'. [ 171.754899][ T28] audit: type=1400 audit(1717248529.350:26421): avc: denied { getopt } for pid=6033 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 171.844630][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.876091][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.883384][ T6035] device bridge_slave_0 entered promiscuous mode [ 171.918864][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.925720][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.957546][ T6035] device bridge_slave_1 entered promiscuous mode [ 172.046190][ T6] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 172.058859][ T43] device bridge_slave_1 left promiscuous mode [ 172.064799][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.096631][ T43] device bridge_slave_0 left promiscuous mode [ 172.102593][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.127240][ T43] device veth1_macvtap left promiscuous mode [ 172.138527][ T43] device veth0_vlan left promiscuous mode [ 172.256111][ T534] tipc: Node number set to 2886997162 [ 172.296099][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 172.362998][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.369889][ T6035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.376978][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.383747][ T6035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.416162][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.437793][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.458798][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.466566][ T534] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.469124][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 172.496232][ T534] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.503405][ T6] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 172.517325][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.522165][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.525674][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.547645][ T6] usb 1-1: config 0 descriptor?? [ 172.586646][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.593513][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.616312][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.624517][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.646326][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.653394][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.695202][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.707697][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.725017][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.741730][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.769627][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.780055][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.798046][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.813454][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.830238][ T6035] device veth0_vlan entered promiscuous mode [ 172.839489][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.849064][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.868996][ T6035] device veth1_macvtap entered promiscuous mode [ 172.876832][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.884845][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 172.916436][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.958349][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.966521][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.974712][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.017081][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.040414][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0027/input/input26 [ 173.079877][ T6] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 173.239942][ T6] usb 1-1: USB disconnect, device number 25 [ 173.265515][ T6047] netlink: 1320 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.761254][ T6049] loop0: detected capacity change from 0 to 128 [ 173.969746][ T6053] loop0: detected capacity change from 0 to 8192 [ 174.000880][ T6053] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.267850][ T6076] loop4: detected capacity change from 0 to 1024 [ 174.288221][ T6076] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 174.303822][ T6078] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.316223][ T6076] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 174.337309][ T6076] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz-executor.4: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 174.376926][ T6076] EXT4-fs (loop4): no journal found [ 174.403149][ T6082] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) [ 174.572997][ T6086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6086 comm=syz-executor.4 [ 174.711634][ T6099] loop4: detected capacity change from 0 to 256 [ 174.716137][ T6096] device wireguard0 entered promiscuous mode [ 174.743611][ T6099] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 174.847461][ T6102] loop4: detected capacity change from 0 to 128 [ 174.896562][ T6102] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 174.952551][ T6102] ext4 filesystem being mounted at /root/syzkaller-testdir3422677671/syzkaller.EaIQbS/12/mnt supports timestamps until 2038 (0x7fffffff) [ 175.048948][ T6102] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.4: No space for directory leaf checksum. Please run e2fsck -D. [ 175.096107][ T6102] EXT4-fs error (device loop4): __ext4_find_entry:1695: inode #2: comm syz-executor.4: checksumming directory block 0 [ 175.120613][ T6102] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.4: No space for directory leaf checksum. Please run e2fsck -D. [ 175.166289][ T6102] EXT4-fs error (device loop4): __ext4_find_entry:1695: inode #2: comm syz-executor.4: checksumming directory block 0 [ 175.206349][ T6105] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.4: No space for directory leaf checksum. Please run e2fsck -D. [ 175.314393][ T6105] EXT4-fs error (device loop4): __ext4_find_entry:1695: inode #2: comm syz-executor.4: checksumming directory block 0 [ 175.336863][ T6102] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.4: No space for directory leaf checksum. Please run e2fsck -D. [ 175.376263][ T6102] EXT4-fs error (device loop4): __ext4_find_entry:1695: inode #2: comm syz-executor.4: checksumming directory block 0 [ 175.427357][ T6106] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.4: No space for directory leaf checksum. Please run e2fsck -D. [ 175.476205][ T6106] EXT4-fs error (device loop4): __ext4_find_entry:1695: inode #2: comm syz-executor.4: checksumming directory block 0 [ 175.521956][ T6035] EXT4-fs (loop4): unmounting filesystem. [ 175.697540][ T6115] device wireguard0 entered promiscuous mode [ 176.190095][ T406] tipc: Left network mode [ 176.457985][ T6120] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.464837][ T6120] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.486767][ T6120] device bridge_slave_0 entered promiscuous mode [ 176.512338][ T6120] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.546900][ T6127] syz-executor.0[6127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.546976][ T6127] syz-executor.0[6127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.551889][ T6120] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.578735][ T6120] device bridge_slave_1 entered promiscuous mode [ 176.593833][ T6129] loop4: detected capacity change from 0 to 1024 [ 176.622852][ T6129] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 176.658016][ T6129] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 176.681600][ T6133] loop0: detected capacity change from 0 to 1024 [ 176.693787][ T6129] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz-executor.4: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 176.717806][ T406] device bridge_slave_1 left promiscuous mode [ 176.718171][ T6133] EXT4-fs: Ignoring removed orlov option [ 176.725971][ T406] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.746449][ T6133] EXT4-fs (loop0): Test dummy encryption mode enabled [ 176.747173][ T406] device bridge_slave_0 left promiscuous mode [ 176.770978][ T406] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.771356][ T6133] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 176.788063][ T406] device veth1_macvtap left promiscuous mode [ 176.793909][ T406] device veth0_vlan left promiscuous mode [ 176.800433][ T6129] EXT4-fs (loop4): no journal found [ 176.872232][ T6133] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 176.926726][ T5833] EXT4-fs (loop0): unmounting filesystem. [ 176.973020][ T6137] loop0: detected capacity change from 0 to 1024 [ 176.979842][ T6137] EXT4-fs: Ignoring removed orlov option [ 176.998362][ T6137] EXT4-fs (loop0): Test dummy encryption mode enabled [ 177.017748][ T6137] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 177.060753][ T5833] EXT4-fs (loop0): unmounting filesystem. [ 177.072035][ T6120] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.078927][ T6120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.085994][ T6120] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.092804][ T6120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.130778][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.146454][ T2647] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.154828][ T2647] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.186161][ T6120] device veth0_vlan entered promiscuous mode [ 177.228260][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.244477][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.268871][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.295230][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.315151][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.332977][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.339871][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.362213][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.382324][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.389199][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.412212][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.426383][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.460411][ T6147] device wireguard0 entered promiscuous mode [ 177.475526][ T6120] device veth1_macvtap entered promiscuous mode [ 177.494384][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.502535][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.510943][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.518526][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.526706][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.552005][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.565155][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.573401][ T6153] syz-executor.2[6153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.573477][ T6153] syz-executor.2[6153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.615476][ T6156] loop2: detected capacity change from 0 to 1024 [ 177.656953][ T6156] EXT4-fs: Ignoring removed orlov option [ 177.672313][ T6156] EXT4-fs (loop2): Test dummy encryption mode enabled [ 177.707351][ T6156] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 177.770228][ T6120] EXT4-fs (loop2): unmounting filesystem. [ 177.831454][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.838497][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.845657][ T6159] device bridge_slave_0 entered promiscuous mode [ 177.853852][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.860975][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.870793][ T6159] device bridge_slave_1 entered promiscuous mode [ 177.960343][ T6167] device wireguard0 entered promiscuous mode [ 178.015102][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.022066][ T6159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.029167][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.035948][ T6159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.061332][ T6178] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 178.107646][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.115565][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.124398][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.136890][ T6182] loop0: detected capacity change from 0 to 128 [ 178.152604][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.161095][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.167971][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.175341][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.175520][ T6182] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 178.184046][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.198244][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.209511][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.217639][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.221601][ T6182] ext4 filesystem being mounted at /root/syzkaller-testdir1719829735/syzkaller.GNroHE/63/mnt supports timestamps until 2038 (0x7fffffff) [ 178.233240][ T6159] device veth0_vlan entered promiscuous mode [ 178.253496][ T6159] device veth1_macvtap entered promiscuous mode [ 178.265138][ T6182] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 178.286317][ T6182] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz-executor.0: checksumming directory block 0 [ 178.305551][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.314771][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.323220][ T6192] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 178.336469][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.338934][ T6192] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz-executor.0: checksumming directory block 0 [ 178.346799][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.368589][ T6182] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 178.372437][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.384133][ T6182] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz-executor.0: checksumming directory block 0 [ 178.406631][ T534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 178.412769][ T6182] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 178.431721][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.438626][ T6182] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz-executor.0: checksumming directory block 0 [ 178.439064][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.453322][ T6182] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D. [ 178.458330][ T6172] device bridge_slave_0 entered promiscuous mode [ 178.476687][ T6182] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz-executor.0: checksumming directory block 0 [ 178.496163][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.506509][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.520183][ T5833] EXT4-fs (loop0): unmounting filesystem. [ 178.526418][ T406] device bridge_slave_1 left promiscuous mode [ 178.532359][ T406] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.543274][ T406] device bridge_slave_0 left promiscuous mode [ 178.553656][ T406] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.570563][ T406] device veth1_macvtap left promiscuous mode [ 178.576617][ T406] device veth0_vlan left promiscuous mode [ 178.691564][ T6172] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.698808][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.706734][ T6172] device bridge_slave_1 entered promiscuous mode [ 178.759536][ T6219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.987213][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.995134][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.020047][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.029059][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.038003][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.044859][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.052950][ T6231] syz-executor.2[6231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.053023][ T6231] syz-executor.2[6231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.054026][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.085109][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.093479][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.100349][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.110009][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.132848][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.142945][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.164444][ T2647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.186743][ T6172] device veth0_vlan entered promiscuous mode [ 179.193920][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.202117][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.211123][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.232554][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.255609][ T6172] device veth1_macvtap entered promiscuous mode [ 179.280372][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.314804][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.325934][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.421956][ T6264] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.550131][ T406] device bridge_slave_1 left promiscuous mode [ 179.561740][ T406] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.583642][ T28] audit: type=1326 audit(1717248537.180:26422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f67cee9 code=0x7ffc0000 [ 179.613682][ T406] device bridge_slave_0 left promiscuous mode [ 179.628611][ T406] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.646855][ T28] audit: type=1326 audit(1717248537.210:26423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f67cee9 code=0x7ffc0000 [ 179.673757][ T6282] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 179.681416][ T406] device veth1_macvtap left promiscuous mode [ 179.691693][ T406] device veth0_vlan left promiscuous mode [ 179.735323][ T28] audit: type=1326 audit(1717248537.210:26424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f6d2f67cee9 code=0x7ffc0000 [ 179.765440][ T28] audit: type=1326 audit(1717248537.210:26425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f67cee9 code=0x7ffc0000 [ 179.808860][ T28] audit: type=1326 audit(1717248537.210:26426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6276 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f67cee9 code=0x7ffc0000 [ 179.988536][ T6285] loop1: detected capacity change from 0 to 40427 [ 179.995609][ T6285] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 180.003996][ T331] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 180.014867][ T6285] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 180.040888][ T6285] F2FS-fs (loop1): Found nat_bits in checkpoint [ 180.081458][ T6285] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 180.094114][ T6285] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 180.101065][ T6285] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 180.114113][ T6285] syz-executor.1: attempt to access beyond end of device [ 180.114113][ T6285] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 180.316678][ T2647] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 180.366225][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.377681][ T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.388967][ T331] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 180.397972][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.410638][ T331] usb 3-1: config 0 descriptor?? [ 180.596707][ T6342] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 180.599822][ T28] audit: type=1400 audit(1717248538.200:26427): avc: denied { relabelfrom } for pid=6341 comm="syz-executor.0" name="" dev="pipefs" ino=42826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 180.629173][ T28] audit: type=1400 audit(1717248538.210:26428): avc: denied { relabelto } for pid=6341 comm="syz-executor.0" name="" dev="pipefs" ino=42826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 180.676296][ T2647] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.687637][ T2647] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.700625][ T2647] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.713653][ T2647] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 180.723030][ T2647] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.736153][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 180.737721][ T2647] usb 4-1: config 0 descriptor?? [ 180.821561][ T6361] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.003738][ T28] audit: type=1400 audit(1717248538.600:26429): avc: denied { unmount } for pid=5833 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 181.040004][ T6383] syz-executor.4[6383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.040052][ T6383] syz-executor.4[6383] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.126826][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.149153][ T24] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 181.158844][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.167309][ T24] usb 2-1: config 0 descriptor?? [ 181.208241][ T6400] loop4: detected capacity change from 0 to 512 [ 181.215193][ T6400] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 181.225445][ T6400] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz-executor.4: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 181.244114][ T6400] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 181.257116][ T6400] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 181.265453][ T6400] ext2 filesystem being mounted at /root/syzkaller-testdir3422677671/syzkaller.EaIQbS/59/file0 supports timestamps until 2038 (0x7fffffff) [ 181.283589][ T6400] overlayfs: upper fs needs to support d_type. [ 181.290257][ T28] audit: type=1400 audit(1717248538.890:26430): avc: denied { unlink } for pid=6399 comm="syz-executor.4" name="#7a" dev="loop4" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 181.290614][ T6400] overlayfs: failed to resolve './file0': -2 [ 181.329477][ T6035] EXT4-fs (loop4): unmounting filesystem. [ 181.474848][ T6418] loop4: detected capacity change from 0 to 40427 [ 181.482122][ T6418] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 181.489836][ T6418] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 181.505424][ T6418] F2FS-fs (loop4): Found nat_bits in checkpoint [ 181.545343][ T6418] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 181.558198][ T6418] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 181.565116][ T6418] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 181.585984][ T6418] syz-executor.4: attempt to access beyond end of device [ 181.585984][ T6418] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 181.646959][ T24] keytouch 0003:0926:3333.0029: fixing up Keytouch IEC report descriptor [ 181.656651][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0029/input/input27 [ 181.738165][ T24] keytouch 0003:0926:3333.0029: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 181.796174][ T2647] usbhid 4-1:0.0: can't add hid device: -71 [ 181.802023][ T2647] usbhid: probe of 4-1:0.0 failed with error -71 [ 181.809181][ T2647] usb 4-1: USB disconnect, device number 5 [ 181.821000][ T6442] loop3: detected capacity change from 0 to 512 [ 181.827801][ T6442] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 181.836151][ T331] uclogic 0003:256C:006D.0028: v1 frame probing failed: -71 [ 181.837718][ T6442] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz-executor.3: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 181.843317][ T331] uclogic 0003:256C:006D.0028: failed probing parameters: -71 [ 181.867125][ T6442] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 181.868577][ T311] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 181.881214][ T6442] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 181.888127][ T331] uclogic: probe of 0003:256C:006D.0028 failed with error -71 [ 181.896218][ T6442] ext2 filesystem being mounted at /root/syzkaller-testdir3619082094/syzkaller.NBwzUH/14/file0 supports timestamps until 2038 (0x7fffffff) [ 181.904666][ T331] usb 3-1: USB disconnect, device number 26 [ 181.933229][ T6442] overlayfs: upper fs needs to support d_type. [ 181.940063][ T6442] overlayfs: failed to resolve './file0': -2 [ 181.952611][ T6159] EXT4-fs (loop3): unmounting filesystem. [ 181.958434][ T534] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 182.068346][ T39] usb 2-1: USB disconnect, device number 14 [ 182.136149][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 182.194759][ T28] audit: type=1326 audit(1717248539.790:26431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f67cee9 code=0x7ffc0000 [ 182.266143][ T534] usb 5-1: Using ep0 maxpacket: 32 [ 182.276236][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 182.287301][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 182.298251][ T311] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 182.307099][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.315291][ T311] usb 1-1: config 0 descriptor?? [ 182.336199][ T6433] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 182.356591][ T311] hub 1-1:0.0: USB hub found [ 182.386205][ T534] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 182.394471][ T534] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 182.404779][ T534] usb 5-1: config 0 has no interface number 0 [ 182.410707][ T534] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 182.422190][ T534] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 182.435565][ T534] usb 5-1: config 0 interface 255 has no altsetting 0 [ 182.442239][ T534] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 182.451180][ T534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.460056][ T534] usb 5-1: config 0 descriptor?? [ 182.516177][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 182.576186][ T311] hub 1-1:0.0: 2 ports detected [ 182.639303][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.646346][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.653534][ T6477] device bridge_slave_0 entered promiscuous mode [ 182.662014][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.668900][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.676343][ T6477] device bridge_slave_1 entered promiscuous mode [ 182.720930][ T6477] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.727810][ T6477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.734858][ T6477] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.741673][ T6477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.770668][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.778400][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.785498][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.794871][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.805326][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.812191][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.827339][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.835569][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.842545][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.857322][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 182.865027][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.882981][ T6477] device veth0_vlan entered promiscuous mode [ 182.891675][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.899812][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.907565][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.914741][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.926148][ T6477] device veth1_macvtap entered promiscuous mode [ 182.932776][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.944701][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.952765][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.963458][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.974824][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.995223][ T6496] loop2: detected capacity change from 0 to 256 [ 183.001591][ T10] device bridge_slave_1 left promiscuous mode [ 183.007991][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.016728][ T10] device bridge_slave_0 left promiscuous mode [ 183.022784][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.030467][ T10] device veth1_macvtap left promiscuous mode [ 183.036802][ T10] device veth0_vlan left promiscuous mode [ 183.056176][ T534] usb 5-1: string descriptor 0 read error: -71 [ 183.062198][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 183.071344][ T534] hub 5-1:0.255: bad descriptor, ignoring hub [ 183.079640][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 183.087729][ T534] hub: probe of 5-1:0.255 failed with error -5 [ 183.093734][ T24] usb 4-1: SerialNumber: syz [ 183.125508][ T6503] loop2: detected capacity change from 0 to 256 [ 183.136499][ T486] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 183.139007][ T6503] FAT-fs (loop2): Directory bread(block 64) failed [ 183.144796][ T534] usb 5-1: USB disconnect, device number 22 [ 183.150399][ T6503] FAT-fs (loop2): Directory bread(block 65) failed [ 183.162433][ T6503] FAT-fs (loop2): Directory bread(block 66) failed [ 183.168850][ T6503] FAT-fs (loop2): Directory bread(block 67) failed [ 183.175278][ T6503] FAT-fs (loop2): Directory bread(block 68) failed [ 183.181750][ T6503] FAT-fs (loop2): Directory bread(block 69) failed [ 183.188347][ T6503] FAT-fs (loop2): Directory bread(block 70) failed [ 183.194802][ T6503] FAT-fs (loop2): Directory bread(block 71) failed [ 183.201366][ T6503] FAT-fs (loop2): Directory bread(block 72) failed [ 183.207984][ T6503] FAT-fs (loop2): Directory bread(block 73) failed [ 183.376622][ T24] usb 4-1: skipping empty audio interface (v1) [ 183.383476][ T24] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 183.390703][ T24] usb 4-1: USB disconnect, device number 6 [ 183.506122][ T2647] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 183.516604][ T486] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.527362][ T486] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.536867][ T486] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 183.545689][ T486] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.554595][ T486] usb 2-1: config 0 descriptor?? [ 183.866183][ T2647] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.877007][ T2647] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 183.885843][ T2647] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.894664][ T2647] usb 3-1: config 0 descriptor?? [ 184.076138][ T311] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 184.317130][ T311] usb 5-1: Using ep0 maxpacket: 32 [ 184.356159][ T331] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 184.376615][ T2647] keytouch 0003:0926:3333.002B: fixing up Keytouch IEC report descriptor [ 184.385826][ T2647] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.002B/input/input28 [ 184.436188][ T311] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 184.444175][ T311] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 184.454261][ T311] usb 5-1: config 0 has no interface number 0 [ 184.460155][ T311] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 184.471997][ T311] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 184.485815][ T2647] keytouch 0003:0926:3333.002B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 184.498467][ T311] usb 5-1: config 0 interface 255 has no altsetting 0 [ 184.505044][ T311] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 184.513942][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.522523][ T311] usb 5-1: config 0 descriptor?? [ 184.716444][ T331] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.726461][ T331] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.780950][ T534] usb 3-1: USB disconnect, device number 27 [ 184.806223][ T331] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 184.815150][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 184.822964][ T331] usb 4-1: SerialNumber: syz [ 184.886893][ T19] usb 1-1: USB disconnect, device number 26 [ 184.906169][ T6] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 184.976184][ T486] uclogic 0003:256C:006D.002A: v1 frame probing failed: -71 [ 184.983359][ T486] uclogic 0003:256C:006D.002A: failed probing parameters: -71 [ 184.990638][ T486] uclogic: probe of 0003:256C:006D.002A failed with error -71 [ 184.998681][ T486] usb 2-1: USB disconnect, device number 15 [ 185.086148][ T311] usb 5-1: string descriptor 0 read error: -71 [ 185.092300][ T311] hub 5-1:0.255: bad descriptor, ignoring hub [ 185.098238][ T311] hub: probe of 5-1:0.255 failed with error -5 [ 185.106675][ T331] usb 4-1: skipping empty audio interface (v1) [ 185.113759][ T331] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 185.121196][ T331] usb 4-1: USB disconnect, device number 7 [ 185.127306][ T311] usb 5-1: USB disconnect, device number 23 [ 185.442027][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 185.442043][ T28] audit: type=1326 audit(1717248543.040:26451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fbc67cee9 code=0x7ffc0000 [ 185.471869][ T28] audit: type=1326 audit(1717248543.060:26452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fbc67cee9 code=0x7ffc0000 [ 185.496327][ T28] audit: type=1326 audit(1717248543.060:26453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f8fbc67cee9 code=0x7ffc0000 [ 185.520696][ T28] audit: type=1326 audit(1717248543.060:26454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fbc67cee9 code=0x7ffc0000 [ 185.544783][ T28] audit: type=1326 audit(1717248543.060:26455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fbc67cee9 code=0x7ffc0000 [ 185.581840][ T28] audit: type=1326 audit(1717248543.060:26456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8fbc67ec67 code=0x7ffc0000 [ 185.610769][ T28] audit: type=1326 audit(1717248543.060:26457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fbc67cee9 code=0x7ffc0000 [ 185.634776][ T28] audit: type=1326 audit(1717248543.060:26458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fbc67cee9 code=0x7ffc0000 [ 185.660221][ T28] audit: type=1326 audit(1717248543.060:26459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8fbc67cee9 code=0x7ffc0000 [ 185.687419][ T28] audit: type=1326 audit(1717248543.060:26460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6571 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fbc67cee9 code=0x7ffc0000 [ 185.876213][ T534] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 185.876246][ T486] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 186.206129][ T6] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 186.306125][ T534] usb 3-1: Using ep0 maxpacket: 32 [ 186.396229][ T486] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.407063][ T486] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 186.416022][ T486] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.424609][ T486] usb 4-1: config 0 descriptor?? [ 186.436142][ T534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.446104][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 186.449177][ T534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.468064][ T534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 186.479392][ T534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 186.488934][ T534] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 186.501599][ T534] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 186.510399][ T534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.519112][ T534] usb 3-1: config 0 descriptor?? [ 186.568064][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 186.579173][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 186.590079][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 186.598945][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.622341][ T6] usb 2-1: config 0 descriptor?? [ 186.646170][ T6593] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 186.666510][ T6] hub 2-1:0.0: USB hub found [ 186.886186][ T6] hub 2-1:0.0: 2 ports detected [ 186.916186][ T1124] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 186.923987][ T486] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 186.933077][ T486] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.002C/input/input29 [ 186.997141][ T534] ntrig 0003:1B96:000A.002D: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 187.009265][ T486] keytouch 0003:0926:3333.002C: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 187.026131][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 187.166126][ T1124] usb 5-1: Using ep0 maxpacket: 16 [ 187.321380][ T331] usb 4-1: USB disconnect, device number 8 [ 187.396223][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.406181][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 187.456194][ T1124] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 187.465228][ T1124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.473263][ T1124] usb 5-1: Product: syz [ 187.477277][ T1124] usb 5-1: Manufacturer: syz [ 187.481641][ T1124] usb 5-1: SerialNumber: syz [ 187.486589][ T1124] usb 5-1: config 0 descriptor?? [ 187.496152][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 187.505007][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 187.512853][ T24] usb 1-1: SerialNumber: syz [ 187.526502][ T1124] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 187.534038][ T1124] usb 5-1: Detected FT232H [ 187.538403][ T534] ntrig 0003:1B96:000A.002D: Firmware version: 1.10.24.46.2 (2b53 ca15) [ 187.736158][ T1124] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 187.756350][ T1124] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 187.786243][ T1124] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 187.793039][ T1124] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 187.801321][ T1124] usb 5-1: USB disconnect, device number 24 [ 187.807457][ T24] usb 1-1: skipping empty audio interface (v1) [ 187.814365][ T1124] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 187.823840][ T1124] ftdi_sio 5-1:0.0: device disconnected [ 187.829688][ T24] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 187.838625][ T24] usb 1-1: USB disconnect, device number 27 [ 188.164549][ T6627] loop3: detected capacity change from 0 to 40427 [ 188.170882][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 188.182379][ T6627] F2FS-fs (loop3): Found nat_bits in checkpoint [ 188.208203][ T6627] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 188.223995][ T6627] syz-executor.3: attempt to access beyond end of device [ 188.223995][ T6627] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.244507][ T6159] syz-executor.3: attempt to access beyond end of device [ 188.244507][ T6159] loop3: rw=2049, sector=45104, nr_sectors = 24 limit=40427 [ 188.468760][ T6645] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 188.486217][ T1124] usb 3-1: reset high-speed USB device number 28 using dummy_hcd [ 188.536198][ T311] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 188.690207][ T6649] loop0: detected capacity change from 0 to 40427 [ 188.699898][ T6649] F2FS-fs (loop0): Found nat_bits in checkpoint [ 188.706103][ T1124] usb 3-1: device descriptor read/64, error -32 [ 188.744682][ T6649] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 188.764931][ T6649] syz-executor.0: attempt to access beyond end of device [ 188.764931][ T6649] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.786074][ T5833] syz-executor.0: attempt to access beyond end of device [ 188.786074][ T5833] loop0: rw=2049, sector=45104, nr_sectors = 24 limit=40427 [ 188.896209][ T311] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.910647][ T311] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.996186][ T311] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 189.012614][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 189.026943][ T311] usb 5-1: SerialNumber: syz [ 189.056117][ T1124] usb 3-1: device descriptor read/64, error -32 [ 189.156904][ T534] usb 2-1: USB disconnect, device number 16 [ 189.176151][ T19] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 189.191618][ T6661] loop0: detected capacity change from 0 to 40427 [ 189.213328][ T6661] F2FS-fs (loop0): Found nat_bits in checkpoint [ 189.240525][ T6661] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 189.255743][ T6661] syz-executor.0: attempt to access beyond end of device [ 189.255743][ T6661] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 189.276533][ T5833] syz-executor.0: attempt to access beyond end of device [ 189.276533][ T5833] loop0: rw=2049, sector=45104, nr_sectors = 24 limit=40427 [ 189.306717][ T311] usb 5-1: skipping empty audio interface (v1) [ 189.307825][ T6667] syz-executor.3[6667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.312818][ T6667] syz-executor.3[6667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.322740][ T311] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 189.346151][ T1124] usb 3-1: reset high-speed USB device number 28 using dummy_hcd [ 189.357578][ T6667] serio: Serial port pts0 [ 189.365518][ T311] usb 5-1: USB disconnect, device number 25 [ 189.536639][ T6680] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.686326][ T534] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 189.792266][ T6700] loop4: detected capacity change from 0 to 512 [ 189.806162][ T1124] usb 3-1: device descriptor read/64, error -71 [ 190.032852][ T6700] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 190.058293][ T6700] ext4 filesystem being mounted at /root/syzkaller-testdir3422677671/syzkaller.EaIQbS/78/bus supports timestamps until 2038 (0x7fffffff) [ 190.089539][ T6035] EXT4-fs (loop4): unmounting filesystem. [ 190.096195][ T534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.106977][ T534] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.116549][ T534] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 190.125361][ T534] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.134068][ T534] usb 1-1: config 0 descriptor?? [ 190.146530][ T6711] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 190.255131][ T1124] usb 3-1: device descriptor read/64, error -71 [ 191.478341][ T6734] loop4: detected capacity change from 0 to 512 [ 191.478632][ T6735] loop3: detected capacity change from 0 to 512 [ 191.497744][ T6735] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 191.507115][ T6735] ext4 filesystem being mounted at /root/syzkaller-testdir3619082094/syzkaller.NBwzUH/55/bus supports timestamps until 2038 (0x7fffffff) [ 191.524732][ T6734] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 191.536387][ T6743] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.541651][ T6734] ext4 filesystem being mounted at /root/syzkaller-testdir3422677671/syzkaller.EaIQbS/83/bus supports timestamps until 2038 (0x7fffffff) [ 191.559601][ T1124] usb 3-1: reset high-speed USB device number 28 using dummy_hcd [ 191.563572][ T6159] EXT4-fs (loop3): unmounting filesystem. [ 191.585788][ T6745] loop1: detected capacity change from 0 to 512 [ 191.597801][ T6035] EXT4-fs (loop4): unmounting filesystem. [ 191.600215][ T534] hid-thrustmaster 0003:044F:B65D.002E: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 191.616720][ T534] hid-thrustmaster 0003:044F:B65D.002E: Wrong number of endpoints? [ 191.617138][ T6747] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 191.626948][ T6745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 191.648567][ T6745] ext4 filesystem being mounted at /root/syzkaller-testdir1746313676/syzkaller.JErvG7/37/bus supports timestamps until 2038 (0x7fffffff) [ 191.692270][ T6172] EXT4-fs (loop1): unmounting filesystem. [ 191.756155][ T1124] usb 3-1: device descriptor read/8, error -71 [ 191.816103][ C1] hid-thrustmaster 0003:044F:B65D.002E: Unknown packet type 0x0, unable to proceed further with wheel init [ 192.416209][ T1124] usb 3-1: device descriptor read/8, error -71 [ 192.688209][ T6782] loop3: detected capacity change from 0 to 16 [ 192.695059][ T6782] erofs: (device loop3): mounted with root inode @ nid 36. [ 192.756721][ T6791] EXT4-fs warning (device sda1): ext4_group_extend:1869: can't shrink FS - resize aborted [ 193.181617][ T6808] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 193.191068][ T45] Bluetooth: hci0: sending frame failed (-49) [ 193.197130][ T5488] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 193.498746][ T24] usb 3-1: USB disconnect, device number 28 [ 193.536637][ T1124] usb 1-1: USB disconnect, device number 28 [ 193.546146][ T6819] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 193.557690][ T6819] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 193.565937][ T6819] CPU: 1 PID: 6819 Comm: syz-executor.3 Not tainted 6.1.78-syzkaller-00133-g74c507aab139 #0 [ 193.575830][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 193.585724][ T6819] RIP: 0010:dev_map_generic_redirect+0x90/0x7d0 [ 193.591799][ T6819] Code: f1 f1 00 f2 f2 f2 4b 89 04 26 43 c7 44 26 0f f3 f3 f3 f3 43 c6 44 26 13 f3 e8 ac 07 de ff 48 89 d8 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 20 00 74 08 48 89 df e8 21 06 25 00 48 89 5c 24 18 4c 8b [ 193.611240][ T6819] RSP: 0018:ffffc90000bdf6c0 EFLAGS: 00010246 [ 193.617140][ T6819] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 193.625044][ T6819] RDX: ffffc90007ee4000 RSI: 000000000000041e RDI: 000000000000041f [ 193.632857][ T6819] RBP: ffffc90000bdf818 R08: 0000000000000005 R09: ffffffff8411de43 [ 193.640667][ T6819] R10: 0000000000000004 R11: ffff88812dfa8000 R12: dffffc0000000000 [ 193.648478][ T6819] R13: ffff8881112d4dc0 R14: 1ffff9200017bee4 R15: 0000000000000000 [ 193.656289][ T6819] FS: 00007f6d303866c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 193.665054][ T6819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.671478][ T6819] CR2: 0000000020010000 CR3: 000000011dc0c000 CR4: 00000000003506a0 [ 193.679293][ T6819] DR0: 0000000000000000 DR1: 00000000000000a6 DR2: 0000000000000000 [ 193.687111][ T6819] DR3: 000000000000c08b DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 193.694913][ T6819] Call Trace: [ 193.698038][ T6819] [ 193.700820][ T6819] ? __die_body+0x62/0xb0 [ 193.705100][ T6819] ? die_addr+0x9f/0xd0 [ 193.709082][ T6819] ? exc_general_protection+0x317/0x4c0 [ 193.714471][ T6819] ? asm_exc_general_protection+0x27/0x30 [ 193.720020][ T6819] ? xdp_do_generic_redirect+0x303/0xad0 [ 193.725486][ T6819] ? dev_map_generic_redirect+0x90/0x7d0 [ 193.730955][ T6819] ? __free_pages_core+0x180/0x180 [ 193.736072][ T6819] ? __this_cpu_preempt_check+0x13/0x20 [ 193.741455][ T6819] ? bq_enqueue+0x3e0/0x3e0 [ 193.745794][ T6819] ? bpf_prog_run_generic_xdp+0x9aa/0x1110 [ 193.751438][ T6819] xdp_do_generic_redirect+0x411/0xad0 [ 193.756793][ T6819] do_xdp_generic+0x53e/0x800 [ 193.761250][ T6819] ? generic_xdp_tx+0x560/0x560 [ 193.765937][ T6819] ? __schedule+0xcaf/0x1550 [ 193.770361][ T6819] ? tun_get_user+0x2340/0x3a90 [ 193.775045][ T6819] tun_get_user+0x238a/0x3a90 [ 193.779559][ T6819] ? futex_q_unlock+0x30/0x30 [ 193.784072][ T6819] ? tun_do_read+0x1ee0/0x1ee0 [ 193.788669][ T6819] ? ref_tracker_alloc+0x31d/0x450 [ 193.793618][ T6819] ? ref_tracker_dir_print+0x160/0x160 [ 193.798910][ T6819] ? futex_wait+0x4b7/0x7e0 [ 193.803255][ T6819] ? avc_policy_seqno+0x1b/0x70 [ 193.807939][ T6819] ? tun_get+0xe9/0x120 [ 193.811929][ T6819] tun_chr_write_iter+0x129/0x210 [ 193.816794][ T6819] vfs_write+0x902/0xeb0 [ 193.820959][ T6819] ? file_end_write+0x1c0/0x1c0 [ 193.825643][ T6819] ? __fget_files+0x2cb/0x330 [ 193.830162][ T6819] ? __fdget_pos+0x204/0x390 [ 193.834584][ T6819] ? ksys_write+0x77/0x2c0 [ 193.838860][ T6819] ksys_write+0x199/0x2c0 [ 193.843003][ T6819] ? bpf_trace_run1+0x240/0x240 [ 193.847690][ T6819] ? __ia32_sys_read+0x90/0x90 [ 193.852290][ T6819] ? __bpf_trace_sys_enter+0x62/0x70 [ 193.857411][ T6819] __x64_sys_write+0x7b/0x90 [ 193.861836][ T6819] do_syscall_64+0x3d/0xb0 [ 193.866091][ T6819] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 193.871820][ T6819] RIP: 0033:0x7f6d2f67bc2f [ 193.876071][ T6819] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 193.895513][ T6819] RSP: 002b:00007f6d30386090 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 193.903760][ T6819] RAX: ffffffffffffffda RBX: 00007f6d2f7b3fa0 RCX: 00007f6d2f67bc2f [ 193.911568][ T6819] RDX: 000000000000fdef RSI: 0000000020000300 RDI: 00000000000000c8 [ 193.919382][ T6819] RBP: 00007f6d2f6c947f R08: 0000000000000000 R09: 0000000000000000 [ 193.927192][ T6819] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 193.935001][ T6819] R13: 000000000000000b R14: 00007f6d2f7b3fa0 R15: 00007ffc50429448 [ 193.942819][ T6819] [ 193.945678][ T6819] Modules linked in: [ 193.949504][ T6819] ---[ end trace 0000000000000000 ]--- [ 193.954712][ T6819] RIP: 0010:dev_map_generic_redirect+0x90/0x7d0 [ 193.960813][ T6819] Code: f1 f1 00 f2 f2 f2 4b 89 04 26 43 c7 44 26 0f f3 f3 f3 f3 43 c6 44 26 13 f3 e8 ac 07 de ff 48 89 d8 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 20 00 74 08 48 89 df e8 21 06 25 00 48 89 5c 24 18 4c 8b [ 193.980269][ T6819] RSP: 0018:ffffc90000bdf6c0 EFLAGS: 00010246 [ 193.986166][ T6819] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 193.993958][ T6819] RDX: ffffc90007ee4000 RSI: 000000000000041e RDI: 000000000000041f [ 194.001769][ T6819] RBP: ffffc90000bdf818 R08: 0000000000000005 R09: ffffffff8411de43 [ 194.009603][ T6819] R10: 0000000000000004 R11: ffff88812dfa8000 R12: dffffc0000000000 [ 194.017395][ T6819] R13: ffff8881112d4dc0 R14: 1ffff9200017bee4 R15: 0000000000000000 [ 194.025188][ T6819] FS: 00007f6d303866c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 194.034000][ T6819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.040398][ T6819] CR2: 0000000020010000 CR3: 000000011dc0c000 CR4: 00000000003506a0 [ 194.048230][ T6819] DR0: 0000000000000000 DR1: 00000000000000a6 DR2: 0000000000000000 [ 194.056004][ T6819] DR3: 000000000000c08b DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.063816][ T6819] Kernel panic - not syncing: Fatal exception in interrupt [ 194.071058][ T6819] Kernel Offset: disabled [ 194.075187][ T6819] Rebooting in 86400 seconds..