last executing test programs: 1m49.154181563s ago: executing program 4 (id=144): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') syz_ublk_setup_io_uring(0x7ded, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f00000000c0)="4701", 0x1c, 0x81, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0xe, 0x6, @multicast}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000140)=[{0x40, 0x0, 0x0, 0x2}, {0x28, 0x1, 0x4f, 0xfffff038}, {0x6, 0x1, 0x0, 0x57c}]}, 0x10) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 1m48.236366369s ago: executing program 4 (id=150): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0xff80) (fail_nth: 1) 1m47.84003616s ago: executing program 4 (id=152): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) syz_emit_ethernet(0xaf, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000100000000000000000ff0200000000000000000000000000010004c9"], 0x0) 1m47.82377527s ago: executing program 4 (id=153): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x1000010, &(0x7f0000000180)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c6a71666d743d76667376302c70726a6a71756f74613d66326673002c6d6f64653d61616170746976652c680400000000000000636f766572792c6673796e635f6d6f64653d706f7369782cf97365725f78617474722c64697361626c655f726f6c6c5f663272776172642c000000"], 0x1, 0x105f8, &(0x7f000001a2c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) syz_mount_image$fuse(&(0x7f0000002040), 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m47.419745951s ago: executing program 4 (id=155): r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000100)=0x3) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)={0x0}) r5 = socket$nl_audit(0x10, 0x3, 0x9) pselect6(0x32, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x10000000000, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000001c0)={r4, 0x3, r5, 0x3, 0x80000}) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) fsopen(&(0x7f00000000c0)='gfs2\x00', 0x0) syz_emit_ethernet(0x42, &(0x7f0000001a80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b080045000034006900000206907864190101ac1414aa00004e22", @ANYRES64=0x0, @ANYRES32=r2, @ANYBLOB="8cc2000090780000080a00000014ffffff870000", @ANYBLOB], 0x0) syz_emit_ethernet(0x36, &(0x7f0000001b40)=ANY=[@ANYRES32=r2, @ANYRESDEC=r3, @ANYRES16=0x0], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x180) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f0000001e40)={[{@uuid_on}], [{@obj_role={'obj_role', 0x3d, '/dev/input/event#\x00'}}, {@fowner_gt}]}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="50471e1d353506d4aba9a876cbf5f427797caf9e385c07785db3b17c74f4826151ecbeb688fa5375e17d0aa05cf3e5ef745906437f728a4a08097a0eea906ec30c4b183a01332314d34654bd52fe17b135ffe50202959dd96b2246b3de477bc15430503f05f97501adf0f9e473480143552ef79e1ac8b4b6507a606903b6353258cc5bb840169d171f6ca13a718dda727b2eee9ebffd76d4050000001eece3696fe364926bc826b262d5023e48eb4c83c2bf734d2fb6e7427a36f60584de4f5625d7963a5754adfdfc10d4cfd19a3e0ee80707e6d3439793672425437fb2ffff559bc318ee1338d6e3f1973387dbc2fb9fb1a023fa3c52aee6151e6c7d618b8884cef006461f6efcfb4a4d29b06a58a61e331accd4789a0d2018680db1b0f2065d10ddb577d2c9c74d5ca282f9374a95ac4283a60135a448"]}) read$FUSE(0xffffffffffffffff, &(0x7f0000001f80)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@noquota}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x5, 0x45a, &(0x7f00000005c0)="$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") truncate(0x0, 0x2fffffd) openat(0xffffffffffffff9c, 0x0, 0x42, 0x2) r6 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x1a4) unlink(&(0x7f0000000180)='./file1\x00') r7 = syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=cp864,errors=continue,time_offset=-x00yn\x00\x00\x00\x00\x00'], 0x1, 0x1533, &(0x7f00000001c0)="$eJzs3AucjdX6OPDnWWu9DEm7SS7DWut52cllmSTJJUkuSZIkSW4JSZMcSUgMuSUNSUguQ3IZQnKZkMb9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v57M/s55Z+1nvs+aZvfe739l803lIjUY1qzYgIvhD8OKXRACIAYABAHANAAQAUDa2bGzGfA6JiX/sIOzP9VDKla6AXUnc/6yN+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/4zlpVtnlbgWr5l3Rtf/8/K+PX/v0h6qTFfrC11fReAbP9qCvf//3/4B3K5//+1gn/lTtz/rI37n1XFXOkC2P8C/PjPCrL/wxnuf9bG/WcsK/vlteAYuPLXo//qG0T+k38D8T0v/pSv/D7/4f4ZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLG/wBl/mQKAzPGVrosxxhhjjDHGGGN/Hp/9SlfAGGOMMcYYY4yx/zwEARIUBJANskMM5ICcIACyZc5fC7FwHeSB6yEv5IP8UADioCAUAg0GLBCEUBiKQBRugKJwIxSD4lACSoKDUhAPN0FpuBnKwC1QFm6FcnAblIcKUBEqwe1QGe6AKnAnVIW7oBpUhxpQE+6GWnAP1IZ7oQ7cB3XhfqgHD0B9eBAawEPQEB6GRvAINIZHoQk0hWbQHFr8j/JfgO7wIvSAnpAIvaA3vAR9oC/0g/4wAF6GgfAKDIJXIQkGwxB4DYbC6zAM3oDhMAJGwpswCt6C0TAGxsI4SIbxMAHehonwDkyCyTAFpkIKTIPp8C7MgJkwC96D2fA+zIG5MA/mQyp8AAtgISyCD2ExfARpsASWwjJYDitgJayC1bAG1sI6WA8bYCNsgs2wBbbCNtgOO2AnfAy74BPYDXtgL3wK++CzfzP/9N/ld0FAQIECFSrMhtkwBmMwJ+bEXJgLc2NujGAEYzEW82AezIt5MT/mxziMw0JYCA0aJCQsjIUxilEsikWxGBbDElgCHTqMx3gsjTdjGSyDZbEslsNyWB4rYAWshJWwMlbGKlgFq2JVrIbVsAbWwLvxbuyFtbE21sE6WBfrZl6ewgbYABtiQ2yEjbAxNsYm2ASbYTNsgS2wJbbEVtgK22AbbIttsR22wwRMwPbYHjtgB+yIHbETdsLO2Bm7YFfsmv5CdsAX8UXsidVEL+yNvbEPJmXvh/2xP76MA/EVfAVfxSQcjEPwNXwNX8dheAqHXxiBI3EkVhZv4WgcgyTGYTIm4wScgBNxIk7CyTgZp2IKTsPpOB1n4Eycie/hbHwf38e5OBfnYyqm4gJciItwES7G05iGS3ApLsPluAKX4ypcjatwLa7DtbgBN+Am3IRbcAtuw224A3fgx6gA8BPcg3swCffhPtyP+/EAHsCDeBDTMR0P4SE8jIfxCB7Bo3gUj+FxPIHH8SSexFN4Gs/gGTyH5/A8Phf3VcOPi69JApFBCSWyiWwiRsSInCKnyCVyidwit4iIiIgVsSKPyCPyirwiv8gv4kScKCQKCSOMIBFmPFOIqIiKoqKoKCaKiRKihHDCiXgRL0qL0qKMKCPKiltFOXGbKC8qiNaukqgkKos2roq4U1QVVUU1UV3UEDVFTVFL1BK1h2asWEfUFXVFPfGAqC96YT98SGR0ppEYjI3FEGwimgp56RmqpRiGrURr0UY8IUbgcGwnWroE8bRoL0ZjB/E3MQafFZ3EOOwsnhddRFfRTbwguotWrofoKSZhL9FbTMU+oq/oJ/qLGVhdvIezc9QQr4okMVgMEa+J+fi6GCauEsPFCDFSvClGibfEaDFGjBXjRLIYLyaIt8VE8Y6YJCaLKWKqSBHTxHTxrpghZopZ4j0xW7wv5oi5Yp6YL1LFB2KBWCgWiQ/FYvGRSBNLxFKxTCwXK8RKsUqsFmvEWrFOrBcbxEaxSWwWW8RWsU1sFzvETvGx2CU+EbvFHrFXfCr2ic/EfvG5OCC+EAfFlyJdfCUOia/FYfGNOCK+FUfFd+KYOC5OiO/FSfGDOCVOizPirDgnfhTnxU/igvACJEohpVQykNlkdhkjc8ic8iqZSwaZz/8yVl4n88jrZV6ZT+aXBWScLCgLSS2NtJJkKAvLIjIqb5BF5Y2ymCwuS8iS0slSMl7eJEvLm2UZeYssK2+V5eRtsrysICvKSvJ2WVneISFy8RjVZHVZQ9aUd8tEuEfWlvfKOvI+WVfeL+vJB2R9+aBsIB+SDeXDspF8RDaWj8omsqlsJpvLFvIx2VI+LlvJ1rKNfEK2lU/KdvIpmSCflu2lv/Qr8qzsJJ+TneXzsovsKrvJn+QF6WUP2VNCL5C95Uuyj+wr+8n+coB8WQ6Ur8hB8lWZJAfLIfI1OVS+LofJN+RwOUKOlG/KUfItOVqOkWPlOJksx8sJ8m05Ub4jJ8nJcoqcKlPkNNnv0kqzpPyn+W//Tv6gn4++SW6WW+RWuU1ulzvkTvmx3CV3yd1yt9wr98p9cp/cL/fLA/KAPCgPynSZLg/JQ/KwPCyPyCPyqDwqj8nj8qz8Xp6UP8hT8rQ8Lc/Kc/KcPH/pZwAKlVBSKRWobCq7ilE5VE51lcqlrla51TUqoq5Vseo6lUddr/KqfCq/KqDiVEFVSGlllFWkQlVYFVFRdQNe+oVRJVRJ5VQpFa9u+nfyVVF1oyqmiv8qP7O+xH9QXwvVQrVULVUr1Uq1UW1UW9VWtVPtVIJKUO1Ve9VBdVAdVUfVSXVSnVVn1UV1Ud1UN9VddVc9VA+VqBJVb/WS6qP6qn6qvxqgXhYZexikBqkklaSGqCFqqBqqhqlhargarkaqkWqUGqVGq9FqrBqrklWymqAmqIlqopqkJqkpaopKUSlqupquZqgZapaapWar2WqOmqPmqXkqVaWqBWqBWqQWqcVqsUpTS9QStUwtUyvUCrVKrVJr1Bq1Tq1TG9QGlaY2q81qq9qqtqvtaqfaqXapXWq32q32qr1qn9qn9qv96oA6oA6qgypdpatD6pA6rA6rI+qIOqqOqmPqmDqhTqiT6qQ6pU6pM+qMOqfOqfPqvLqgLmSc9gUiEIEKVJAtyBbEBDFBziBnkCvIFeQOcgeRIBLEBrFBnuD6IG+QL8gfFAjigoJBoUAHJrCBuNT0aHBDUDS4MSgWFA9KBCUDF5QK4oObgtLBzUGZ4JagbHBrUC64LSgfVAgqBpWC24PKwR1BleDOoGpwV1AtqB7UCGoGdwe1gnuC2sG9QZ3gvqBucH9QL3ggqB88GDQIHgoaBg8HjYJHgsbBo0GToGnQLGgetPhT1/f+VL7HXQ/dUyfqXrq3fkn30X11P91fD9Av64H6FT1Iv6qT9GA9RL+mh+rX9TD9hh6uR+iR+k09Sr+lR+sxeqwep5P1eD1Bv60n9nxHT9KT9RQ9VafoaXq6flfP0DP1LP2enq3f13P0XD1Pz9ep+gO9QC/Ui/SHerH+SKfpJXqpXqaX6xV6pV6lV+s1eq1ep9frDXqj3qQ36y16q96mt+sdeqf+WO/Sn+jdeo/eqz/V+/Rner/+XB/QX+iD+kudrr/Sh/TX+rD+Rh/R3+qj+jt9TB/XZfT3+qT+QZ/Sp/UZfVaf0z/q8/onfUH7jJP7jJd3o4wy2Uw2E2NiTE6T0+QyuUxuk9tETMTEmliTx+QxeU1ek9/kN3EmzhQyhUwGMmQKm8ImaqKmqClqiplipoQpYZxxJt7Em9KmtCljypiypqwpZ8qZ8qa8qWgqmtvN7eYOc4e509xp7jJ3meqmuqlpappappapbWqbOqaOqWvqmnqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlmmpkWpoVpaVqaVqaVaWPamLamrWln2pkEk2Dam/amg+lgOpqOppPpZDqbzqaL6WK6mW6mu+luepgeJtEkmt6mt+lj+ph+pp8ZYAaYgWagGWQGmSSTZIaYIWaoGWqGmWFmuBlhRmacqJq3zGgzxow140yySTYTzAQz0Uw0k8wkM8VMMSkmxUw3080MM8PMMrPMbDPbzDFzzDwzz6SaVLPALDCLzCKz2Cw2aSbNLDVLzXKz3Kw0K81qs9qsNWvNelhvNpqNZrPZbLaarWa72W52mp1ml9lldpvdZq/Za/aZfWa/2W8OmAPmoDlo0k26OWQOmcPmsDlijpij5qg5Zo6ZE+aEOWlOmlPmlDljzphzJt+l10tvYmwOm9NeZXPZq21ue439+zi/LWDjbEFbyGqb1+b7VWystcVscVvClrTOlrLx9qbfxOVtBVvRVrK328r2DlvlN3Ete4+tbe+1dex9tqa9+1dxXXu/rWcfsfURAWxT29A2t43sI7axfdQ2sU1tM9vctrVP2nb2KZtgn7bt7TO/iRfYhXa1XWPX2nV2t91jz9iz9rD9xp6zP9oetqcdYF+2A+0rdpB91SbZwb+JR9o37Sj7lh1tx9ixdtxv4il2qk2x0+x0+66dYWf+Jk61H9jZAHaOnWvn2fk/xxk1LbIf2sX2I5tmA1hql9nldoVdaVf931qX2Q12o91kd9lP7Fa7zW63O+zOzBNhu8futZ/affYze8h+bQ/YL+xBe8Sm269+jjP2d8R+a4/a7+wxe9yesN/bk/YHlZmdsffv7U/2gvUWCAlIkqKAslF2iqEclJOuolx0NeWmayhC11IsXUd56HrKS/koPxWgOCpIhUiTIUtEIRWmIhSlGyizvBJUkhyVoni6iUrTzVSGbqGydCuVo9uoPFWgilSJbqfKdAdVoTupKt1F1ag61aCadDfVonuoNt1Ldeg+qkv3Uz16gOrTg9SAHqKG9DA1okeoMT1KTagpNaPm1IIeo5b0OLWi1tSGnqC29CS1o6cogZ6m9vQMdaC/UUd6ljrRc9SZnqcu1JW60QvUnV6kHtSTEqkX9aaXqA/1pX7UnwbQyzSQXqFB9Col0WAaQq/RUHqdhtEbNJxG0Eh6k0bRWzSaxtBYGkfJNJ4m0Ns0kd6hSTSZptBUSqFpNJ3epRk0k2bRezSb3qc5NJfm0XxKpQ9oAS2kRfQhLaaPKI2W0FJaRstpBa2kVbSa1tBaWkfraQNtpE20mbbQVtpG22kH7aSPaRd9QrtpD+2lT2kffUb76XM6QF/QQfqS0ukrOkRf02H6ho7Qt74nfUfH6DidoO/pJP1Ap+g0naGzdI5+pPP0E10gTxBiKEIZqjAIs4XZw5gwR5gzvCrMFV4d5g6vCSPhtWFseF2YJ7w+zBvmC/OHBcK4sGBYKNShCW1IYRgWDouE0fCGsGh4Y1gsLB6WCEuGLiwVxoc3haXDm8My4S1h2fDWsFx4W1g+rBA+cl+l8PawcnhHWCW8M6wa3hVWC6uHNcKa4d1hrfCesHZ4b1gnvC8sE94f1gsfCOuHD4YNwofChuHDYaPwkbBx+GjYJGwaNgubhy3Cx8KW4eNhq7B12Ca8KmwbPhm2C58KE8Knw/bhMz/P378wc/6J38wnhr3C3uFL4Uuh9/fKedH50dToB9EF0YXRRdEPo4ujH0XTokuiS6PLosujK6Iro6uiq6Nromuj66LroxuiG6Obot7XzA4OnXDSKRdkPAhcjMvhcrqrXC53tcvtrnERd62Ldde5PO56l9flc/ldARfnCrpCTjvjrCMXusKuiIu6G1xRd6Mr5oq7Eq6kc66Ui3fNXQvXwrV0j7tWrrVr455wT7gn3ZPuKfeUe9q1d8+4Du5vrqN71nVyz7nn3POui+vqurkXXHc3PvfFx2Si6+16uz6uj+vn+rkBboAb6Aa6QW6QS3JJbogb4oa6oW6YG+aGu+FupBvpRrlRbrQb7ca6sS7ZJbsJboKb6Ca6SW6Sm+KmuBSX4qa76W6Gm+Eqz7x4lDlujpvn5rlUl+oWuIxzxkVusVvs0lyaW+qWuuVuuVvpVrrVbrVb69a69W692+g2us1us9vqtrrtbrvb6Xa6XW6X2+2vubio2+f2u/3ugDvgDrovXbr7yh1yX7vD7ht3xH3rjrrv3DF33J1w37uT7gd3yp12Z9xZd8796M67n9wF511yZHxkQuTtyMTIO5FJkcmRKZGpkZTItMj0yLuRGZGZkVmR9yKzI+9H5kTmRuZF5kdSIx9EFkQWRhZFPowsjnwUSYssiSyNLIssj6yIeF9wa+gL+yI+6m/wRf2Nvpgv7kv4kt75Uj7e3+RLX6w7zftbfTl/my/vK/iK/lHfxDf1zXxz38I/5lv6x30r39q38U/4tv5J384/5RP80769f8Z38H/zHf2zvpN/znf2z/suvqvv5l/w3f2Lvofv6RN9L9/bv+T7+L6+n+/vB/iX/UD/ih/kX/VJfrAf4l/zQ/3rfph/ww/3I/zIbG/6UZlvkWGcT/bj/QT/tp/o3/GT/GQ/xU/1KX6an+7f9TP8TD/Lv+dn+/f9HD/Xz/Pzfar/wC/wC/0i/6Ff7D/yaX5J5kVjv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dr/Tf+x3+U/8br/H7/Wf+n3+M7/ff+4P+C/8Qf+lT/df+UP+a3/Yf+OP+G/9Uf+dP+aP+xP+e3/S/+BP+dP+jD/rz/kf/Xn/k7/A/2aNMcYYY+xfMv7yUPx65uLl/F6/kyN+cefeAHD1tgLpv5zPOKNcn/fiuK+Ii8n4+nTPzg9l3qpVS0xMvHTfNAlBkbkAmX8JyvDzRw8uxUugDTwJCdAaSv9u/X1F13P0T9aP3gqQ8xc5GQVlxpfX/xwAE3+z377isSdGLigXnon9f6w/F6BYkcs5OeByvATa/Hx9pTWU+Qf152v5T+rP8UUyQKtf5OSCy/Hl+uPhcXgGEn51T8YYY4wxxhhj7KK+omLHzPefmZ/4/L3353Hqck52uBz/s/fnjDHGGGOMMcYYu/Ke7drtqccSElp3/PcHVf5HWf/yoDH8p1bmwe8OvAfI/I4CgD+4IEDGQP6Vu9jylxwr6dJD5++nlp/1AfzvaOWfMbjCT0yMMcYYY4yxP93lk/5ff19dqYIYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLEs6K/478Su9B4ZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxK+3/BAAA///DXfoc") r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004040)={0x11, 0x9, &(0x7f0000003fc0)=ANY=[@ANYRESHEX=r7, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000050000009500000000000000314641c67d42ec0fb0be4f6c4c89ed3c84"], &(0x7f0000001c00)='GPL\x00', 0x5, 0xed, &(0x7f0000001c40)=""/237, 0x41000, 0x10, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000001d40)={0x400000, 0x4}, 0x8, 0x10, &(0x7f0000001d80)={0x5, 0x7, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001dc0), &(0x7f0000001e00), 0x10, 0xfffffffe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r8, 0x139, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[0x0], &(0x7f0000001740), 0x0, 0xce, &(0x7f0000001dc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x10, &(0x7f0000001900), &(0x7f0000001700), 0x8, 0xb1, 0x8, 0x8, &(0x7f00000017c0)}}, 0x10) 1m47.264985816s ago: executing program 4 (id=156): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x11, &(0x7f0000000080)={[{@errors_continue}, {@grpjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x0, 0x639, &(0x7f0000000380)="$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") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4e0c4}, 0x20004090) r6 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) io_submit(0x0, 0x4, &(0x7f00000024c0)=[&(0x7f00000021c0)={0x0, 0x0, 0x0, 0x7, 0x100, r6, &(0x7f0000002140)="9ff350423c85e150a3f6ce8a3d1526f44fb969204a7dd8ded9552d8f22e35f398c6a4e4424b4a1b8ad40efba692b47e0ee2e162f45ab9ad4ce6c20458108ee8478516ba2928f1193c07813fca0adb5085e517f12e23718ba02fb235d95288a622503818403db7ead32b1e14929d4b5135a", 0x71, 0x8f, 0x0, 0x2}, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000002200)="03380bef53851856d3cca43f59ec21ad0fe3292815d49b9bba57bf01f58415579cdbc2ca7038a7271f2d83d885f6a329540af5002364a6cab2ddbb612badbeda1c51e1e6b749a9b217f4c87f4b5d3dd0e442730b66e9297c7c8770f9e5b64fec32e06dfa18b61c0d1e", 0x69, 0x80}, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x4, 0x3, r4, &(0x7f0000002300)="e59144cd0f4fc3d8b9eb4cf5d91e40db143e879ba77b9f41dcb21fd0560206209bce0aaabe83a2a40473b6aea9388fa63b", 0x31, 0x30b, 0x0, 0x2}, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x2, 0x3, r5, &(0x7f0000002380)="1bd25491126939b71aaf67dfdde3cb5a1203991c8fefbd2a5423498316085f0cf3c05325ad0148146c36f0ebbc8f76815603b48c60d9198578237a214e852fb6d8a8c1add9ed7a4859173817238569b1d85899f4b5019f8ddf792034661eaf7dfa97a30a498e170ad2ee3a20dea01ecb245a74ec5ba905dac9c4bb6c0ba595343b9644d852849a85f95c9d10415f00e64a39b8ab262c0bda1fddef741060aab69a95a0bdee6a1e277fae2423d61531234ba00f4b620c7f7da2d1777e783aedc657182709e81960256a0f7e91a83f0fc2a151d103109d3223926f3c", 0xdb, 0x8}]) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') read$FUSE(r7, &(0x7f0000000080)={0x2020}, 0x2020) socket(0x2b, 0x6, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) 1m47.250906526s ago: executing program 32 (id=156): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x11, &(0x7f0000000080)={[{@errors_continue}, {@grpjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}]}, 0x0, 0x639, &(0x7f0000000380)="$eJzs3c9vG1UeAPDvTJwfTXabtFrtbi/bSKtVK+02adJ2VSEkWnGtqvLjxik0aVWaNlUSBCmVSKVyASEuHJA4caD8F1CJKweuHLhwQKhShFAPFBVqNPY4sfPTcWI7jT8faeI3M86876T9+j0/vxkH0LGGsx9pxJGIuJVEDFbtK0S+c7j8vEe/3LmcLUkUi6/8nMSdd5PF6mMl+eNA/st/DEbybRpxuGv9utOIqdm8PDp/49bo3MLtE9duTFxNYurm+P/Hz545febs2MkdnV+hqnzh3htvDb5/8bXPP32SjH3x/cUkzsXTPLbsvMqlnuXn9+6o5uxvNhxDUcw8Xtmaln6e3eGx94pfB2v/xplk9Qb2rCsR0Z0v/4jB6Kr61xyM915qa3BAUxWTKLdQQAdKts7/7rWb+poTDNBClX5A5b39yvvgzaRN7pUArbB0vjxIVs797oio5H+hPDYYfaWxgf5HSc04TxIROxuZK8vq+Obri/eyJWrG4YBmW7xbGeVe3f4npdwcir7SWv+jtCb/06ol2/5yg/UP54+VKOQ/tM7i3Yj4Z97+90TD+f96g/UPr1qX/wAAAAAAANC4B+cj4n/rzf9Ll+f/9Kwz/2cgIs7tQv1bf/6XPswLyS5UB1RZOh/x/Jr5v79Xzw4e6so/5/9raT5Ad3rl2vTUyYg4GBHHo7s3Wx+rPWzNBOETHx7+ZKP6q+f/ZUtWf2UuYH6oh4VVF+JOTsxP7M7ZQ2dbuhvxuDT/92i+pXb+T9b+J2va/w9ezBL8Vp11HP7P/Us1G35ceXnYOv+BZil+FnFs3et/Vrrbyer7c0xdrb4/x2ipPzBa6RWs9a93Pvpyo/rlP7RP1v73b57/vVlpbuH29Ynp6anZue0dvyciTi0Uihvtb7T/35O82hVVd+t5e2J+fnYsoie5ULU9LW8f317MsF9V8qGSL1n+H//35uN/y/3/qjw8EBGLddb596cDP2y0b/P879vBmQJbyfJ/cvP2f6i2/d9uoS/G7w99ld9ibI1LdbX/p0tt+vF8i/E/qLb2fhz1JmhbwgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZ1waEX+JJB1ZLqfpyEjEQET8LfrT6Zm5+f9emXnz5mS2r/b7/wfL60nl+/+HqtbHV62fiohDEfFx14HS+sjlmenJdp88AAAAAAAAAAAAAAAAAAAA7BEDpWv+i72rr//P/NTV7uiApivkj/IdOk+h4d8s9u5qIEDLNZ7/wLOuEPU2491NjgRotY3b/8dPiiUtDQdoIf1/6FwN5r+PC2Af0P5Dp6pzTK+v2XEA7VB3+7/U3DgAAAAAAIBdcejog++SiFh87kBpyfTk+0z2h/0tbXcAQNuYwwudqzDT7giAdvEeH0iWS7+te7H/xrP/k+YEBAAAAAAAAAAAAACsceyI6/+hU6Wx2Xd/mtsP+9km1/+vl/xuFwD7yMZf/VFP25/oIcAzzHt8YKt23PX/AAAAAAAAAAAAALAH9N2+PjE9PTU7t9DqQm/s9DgvtDzmXSgsTuyJMHa18HSr5xzM/7dt78jdEbE3TrDVhcotONoYRhtfkwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBp/BgAA///adyde") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4e0c4}, 0x20004090) r6 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) io_submit(0x0, 0x4, &(0x7f00000024c0)=[&(0x7f00000021c0)={0x0, 0x0, 0x0, 0x7, 0x100, r6, &(0x7f0000002140)="9ff350423c85e150a3f6ce8a3d1526f44fb969204a7dd8ded9552d8f22e35f398c6a4e4424b4a1b8ad40efba692b47e0ee2e162f45ab9ad4ce6c20458108ee8478516ba2928f1193c07813fca0adb5085e517f12e23718ba02fb235d95288a622503818403db7ead32b1e14929d4b5135a", 0x71, 0x8f, 0x0, 0x2}, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000002200)="03380bef53851856d3cca43f59ec21ad0fe3292815d49b9bba57bf01f58415579cdbc2ca7038a7271f2d83d885f6a329540af5002364a6cab2ddbb612badbeda1c51e1e6b749a9b217f4c87f4b5d3dd0e442730b66e9297c7c8770f9e5b64fec32e06dfa18b61c0d1e", 0x69, 0x80}, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x4, 0x3, r4, &(0x7f0000002300)="e59144cd0f4fc3d8b9eb4cf5d91e40db143e879ba77b9f41dcb21fd0560206209bce0aaabe83a2a40473b6aea9388fa63b", 0x31, 0x30b, 0x0, 0x2}, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x2, 0x3, r5, &(0x7f0000002380)="1bd25491126939b71aaf67dfdde3cb5a1203991c8fefbd2a5423498316085f0cf3c05325ad0148146c36f0ebbc8f76815603b48c60d9198578237a214e852fb6d8a8c1add9ed7a4859173817238569b1d85899f4b5019f8ddf792034661eaf7dfa97a30a498e170ad2ee3a20dea01ecb245a74ec5ba905dac9c4bb6c0ba595343b9644d852849a85f95c9d10415f00e64a39b8ab262c0bda1fddef741060aab69a95a0bdee6a1e277fae2423d61531234ba00f4b620c7f7da2d1777e783aedc657182709e81960256a0f7e91a83f0fc2a151d103109d3223926f3c", 0xdb, 0x8}]) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') read$FUSE(r7, &(0x7f0000000080)={0x2020}, 0x2020) socket(0x2b, 0x6, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2fb, &(0x7f0000000180)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) 29.293563601s ago: executing program 3 (id=741): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x80, 0x4) bind$can_raw(r0, &(0x7f0000000200), 0x10) 29.239451132s ago: executing program 3 (id=742): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711243000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/86, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000004c0)={0x1, 0x0, [{0x25000, 0x9, &(0x7f0000000440)=""/9}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x4008af04, &(0x7f0000000040)) 29.238431162s ago: executing program 3 (id=743): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000280)='.\x00', 0x880, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 29.238094212s ago: executing program 3 (id=744): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$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") ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) 28.549084861s ago: executing program 3 (id=747): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x69}, 0x94) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) 26.916922096s ago: executing program 3 (id=756): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000040)={0x0}) 26.892985737s ago: executing program 33 (id=756): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000040)={0x0}) 6.903719509s ago: executing program 1 (id=923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000080)='?', 0x1}], 0x1) 5.954868335s ago: executing program 1 (id=942): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000180)=0x2aa56f1de6ff5890, 0x4) 4.984023952s ago: executing program 1 (id=953): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r3, 0x0, 0x0, 0x80800) 4.059037318s ago: executing program 1 (id=970): r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x153a, 0x0, 0x2, 0x17a}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003700)=""/4100, 0x1004}], 0x0, 0x1}, 0x20) 4.022424469s ago: executing program 1 (id=971): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x1c9, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x193, 0x3a, 0xff, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf8, 0xfffffffc, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0xb, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0de"}]}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400005}, 0x94) 3.109019054s ago: executing program 1 (id=989): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffffa9, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c015}, 0x8000) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000640)={0x40, 0x13, 0x2, "5ece"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040)) 2.675920946s ago: executing program 6 (id=995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK, @TCA_EM_IPT_NFPROTO={0x4, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 2.675613626s ago: executing program 2 (id=996): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x141341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000019080)={0x8, 0x2008b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000000040)=[{0x0}], 0x1) 2.674197626s ago: executing program 6 (id=997): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) 2.664311846s ago: executing program 6 (id=998): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000d00)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x7, 0x6, "acdaea", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', {[], {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x2, 0x0, 0x2}}}}}}}, 0x0) 2.639594087s ago: executing program 6 (id=999): r0 = epoll_create1(0x0) close_range(r0, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000380)={0x20179e01}) 2.571487189s ago: executing program 6 (id=1000): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) epoll_create(0x8) mprotect(&(0x7f0000155000/0x7000)=nil, 0x7000, 0x2000001) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(r0, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) 2.015380124s ago: executing program 5 (id=1005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x15) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x3, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x2, 0xfd, 0x1}}, 0x1c}}, 0x0) 1.693142593s ago: executing program 2 (id=1006): unshare(0x8040480) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, &(0x7f00000002c0)=0xfff, 0x6, 0x0) 1.690360963s ago: executing program 6 (id=1007): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40015b19, &(0x7f0000000000)={0x402, 0xfffffffe, 0x7, 0xff, 0x1}) write$char_usb(r1, &(0x7f0000000100)='l', 0x1) 1.635994994s ago: executing program 2 (id=1008): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x8000000000000001, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 1.606400886s ago: executing program 2 (id=1009): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) 1.591539466s ago: executing program 2 (id=1010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, 0x0) io_submit(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x662, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) r5 = socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r5, r4, 0x0, 0x8010002b) 1.08154762s ago: executing program 5 (id=1013): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x370, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x0, 0x1}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x344, 0x2, [@TCA_BPF_ACT={0x340, 0x1, [@m_xt={0xdc, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xb1, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa22015"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x1c0, 0x0, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xe27, 0x10000000, 0x4bc5, 0x1}, 0xf}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf3}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0xf9, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49cbfa5ba9725d35fc7540b4a32031dc5"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x50, 0x8, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x101, 0xfffffff7, 0xffffffffcffffffd, 0x1, 0x2}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x50, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x25, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x370}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.07003407s ago: executing program 5 (id=1014): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setresuid(0x0, r1, 0xee00) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') lsetxattr$security_ima(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), &(0x7f00000002c0)=ANY=[], 0x9, 0x3) 1.015947212s ago: executing program 5 (id=1015): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000680), 0x0}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/unix\x00') read(r5, &(0x7f0000000640)=""/4096, 0x1000) 807.224858ms ago: executing program 0 (id=1021): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x800c4, 0xf7) 673.931091ms ago: executing program 0 (id=1022): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000003c0)="a3aadf27d4097562d3e93c7e20a8dd978df98287d4a172e11f49093373c5b28c6487649b74a293dbe4be1f54f28afdf351893ce556a63f078aaa9b3723fc14ff02fe4c6f8875b962e747d545b50d69d4d8382d38b7952c5d522d40de406130bfc632259fc97f4fb6d4c4533e6ffa23257c7fd920f1", 0x75}, {0x0}], 0x2}}], 0x1, 0x42054) 662.852332ms ago: executing program 0 (id=1023): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r0, 0xffffffffffffffff, 0x43) 612.078073ms ago: executing program 0 (id=1024): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000003c0)='wg0\x00', 0x4) 611.772043ms ago: executing program 0 (id=1025): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="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", 0x131, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 611.564513ms ago: executing program 0 (id=1026): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000002fc0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) signalfd4(r3, &(0x7f0000000140), 0x8, 0x0) 570.780674ms ago: executing program 2 (id=1027): r0 = socket$inet_udp(0x2, 0x2, 0x0) lseek(0xffffffffffffffff, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00008c7000/0x2000)=nil, 0x2000, 0x2000007, 0x10, r2, 0x5ee36000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x18d6, &(0x7f00000000c0)={0x0, 0x5355, 0x1, 0x2001, 0x99}, &(0x7f0000000400), &(0x7f0000000080), &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblcr\x00', 0x28, 0xc, 0x31}, 0x2c) r6 = socket(0x10, 0x803, 0xfffffffc) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) syz_genetlink_get_family_id$nl80211(0x0, r6) 106.000267ms ago: executing program 5 (id=1028): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x2400c800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003dc0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4620}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 0s ago: executing program 5 (id=1029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0xffffffffffffffff, 0xfffffffc, 0xa}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) kernel console output (not intermixed with test programs): 9.164401][ T1478] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 79.358540][ T290] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 79.372826][ T290] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 79.392448][ T290] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.417676][ T1504] netlink: 44 bytes leftover after parsing attributes in process `syz.1.331'. [ 79.426823][ T1504] netlink: 'syz.1.331': attribute type 6 has an invalid length. [ 79.434768][ T1504] netlink: 'syz.1.331': attribute type 5 has an invalid length. [ 79.442806][ T1504] netlink: 'syz.1.331': attribute type 4 has an invalid length. [ 79.495235][ T1506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.323'. [ 79.511842][ T1493] loop2: detected capacity change from 0 to 131072 [ 79.524488][ T1478] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1478 comm=syz.3.323 [ 79.533360][ T1506] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1506 comm=syz.3.323 [ 79.554733][ T1508] loop5: detected capacity change from 0 to 16 [ 79.558658][ T290] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 79.565521][ T1493] F2FS-fs (loop2): Test dummy encryption mode enabled [ 79.570457][ T290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 79.577937][ T1493] F2FS-fs (loop2): invalid crc value [ 79.586397][ T290] usb 1-1: Product: syz [ 79.594549][ T290] usb 1-1: Manufacturer: syz [ 79.598671][ T1508] erofs: Unknown parameter 'ÿÿÿÿ' [ 79.599642][ T290] usb 1-1: SerialNumber: syz [ 79.611032][ T1493] F2FS-fs (loop2): Found nat_bits in checkpoint [ 79.709970][ T1493] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 79.831933][ T1514] loop5: detected capacity change from 0 to 128 [ 79.979490][ T1493] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 80.006661][ T1514] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.017612][ T1514] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.054610][ T1516] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 80.069383][ T290] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 80.182449][ T1526] loop1: detected capacity change from 0 to 1024 [ 80.321871][ T337] usb 1-1: USB disconnect, device number 16 [ 80.328792][ T337] usblp0: removed [ 80.356412][ T1526] overlayfs: './file0' not a directory [ 80.398410][ T1517] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 80.462328][ T1538] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 80.466990][ T1539] loop1: detected capacity change from 0 to 512 [ 80.577115][ T63] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 80.908569][ T1517] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.919694][ T1517] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 81.088666][ T63] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 81.097081][ T63] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.107649][ T1517] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.116867][ T1517] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.129131][ T63] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 81.138092][ T63] usb 3-1: config 1 has no interface number 0 [ 81.144395][ T63] usb 3-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.154464][ T1517] usb 4-1: Product: syz [ 81.158931][ T1517] usb 4-1: Manufacturer: syz [ 81.164991][ T1517] usb 4-1: SerialNumber: syz [ 81.249312][ T1517] cdc_mbim 4-1:1.0: skipping garbage [ 81.328525][ T63] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.395663][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.413989][ T63] usb 3-1: Product: syz [ 81.424083][ T63] usb 3-1: Manufacturer: syz [ 81.434179][ T63] usb 3-1: SerialNumber: syz [ 81.449773][ T1524] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 81.489011][ T63] cdc_wdm 3-1:1.128: skipping garbage [ 81.501763][ T63] cdc_wdm: probe of 3-1:1.128 failed with error -22 [ 81.697858][ T1528] UDC core: couldn't find an available UDC or it's busy: -16 [ 81.705585][ T1528] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 81.714600][ T290] usb 3-1: USB disconnect, device number 20 [ 81.878421][ T42] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 81.886194][ T63] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 82.094048][ T1524] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 82.108992][ T1517] cdc_mbim 4-1:1.0: setting rx_max = 16384 [ 82.248514][ T42] usb 6-1: config index 0 descriptor too short (expected 1051, got 27) [ 82.256970][ T42] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.267376][ T42] usb 6-1: config 0 has no interfaces? [ 82.318565][ T1517] cdc_mbim 4-1:1.0: setting tx_max = 48 [ 82.325968][ T1517] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 82.334027][ T1517] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, b6:91:5c:7a:09:72 [ 82.349009][ T1517] usb 4-1: USB disconnect, device number 12 [ 82.360279][ T1517] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 82.418532][ T63] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 82.427860][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.436379][ T63] usb 2-1: Product: syz [ 82.440668][ T63] usb 2-1: Manufacturer: syz [ 82.445285][ T63] usb 2-1: SerialNumber: syz [ 82.458468][ T42] usb 6-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 82.467649][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.476216][ T63] usb 2-1: config 0 descriptor?? [ 82.481305][ T42] usb 6-1: Product: syz [ 82.485485][ T42] usb 6-1: Manufacturer: syz [ 82.490210][ T42] usb 6-1: SerialNumber: syz [ 82.508724][ T42] usb 6-1: config 0 descriptor?? [ 82.750961][ T1561] binder: 1560:1561 ioctl c0306201 0 returned -14 [ 82.757920][ T290] usb 6-1: USB disconnect, device number 6 [ 82.839483][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 82.839498][ T30] audit: type=1400 audit(1780958957.464:357): avc: denied { append } for pid=1586 comm="syz.3.357" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 82.907317][ T30] audit: type=1400 audit(1780958957.524:358): avc: denied { create } for pid=1590 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 82.933454][ T1597] overlayfs: filesystem on './file0' not supported as upperdir [ 85.251455][ T1632] netlink: 44 bytes leftover after parsing attributes in process `syz.2.375'. [ 85.266863][ T42] usb 2-1: USB disconnect, device number 12 [ 85.323955][ T1636] tipc: Can't bind to reserved service type 2 [ 85.719006][ T42] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 85.906312][ T30] audit: type=1400 audit(1780958960.524:359): avc: denied { write } for pid=1648 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 85.938498][ T336] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 85.963803][ T1657] loop3: detected capacity change from 0 to 512 [ 85.999194][ T1657] EXT4-fs (loop3): Ignoring removed nobh option [ 86.005567][ T1657] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.020239][ T1657] EXT4-fs (loop3): 1 truncate cleaned up [ 86.025990][ T1657] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,nobh,nodiscard,,errors=continue. Quota mode: none. [ 87.568481][ T42] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 87.583249][ T336] usb 3-1: Using ep0 maxpacket: 8 [ 87.588505][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.597569][ T42] usb 2-1: config 0 descriptor?? [ 87.606611][ T1678] netlink: 'syz.0.392': attribute type 5 has an invalid length. [ 87.681520][ T1680] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 87.946805][ T1634] input: syz1 as /devices/virtual/input/input11 [ 87.989275][ T42] usb 2-1: USB disconnect, device number 13 [ 88.095260][ T336] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 88.104559][ T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.115266][ T336] usb 3-1: Product: syz [ 88.120033][ T336] usb 3-1: Manufacturer: syz [ 88.121643][ T1698] netlink: 16 bytes leftover after parsing attributes in process `syz.5.400'. [ 88.134624][ T336] usb 3-1: SerialNumber: syz [ 88.143261][ T336] usb 3-1: config 0 descriptor?? [ 88.738260][ T336] usb 3-1: USB disconnect, device number 21 [ 88.809973][ T30] audit: type=1400 audit(1780958963.378:360): avc: denied { create } for pid=1707 comm="syz.3.404" name="#13" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 88.830590][ T30] audit: type=1400 audit(1780958963.378:361): avc: denied { link } for pid=1707 comm="syz.3.404" name="#13" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 88.852659][ T30] audit: type=1400 audit(1780958963.378:362): avc: denied { rename } for pid=1707 comm="syz.3.404" name="#14" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 88.879815][ T30] audit: type=1400 audit(1780958963.451:363): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 88.980385][ T1718] loop1: detected capacity change from 0 to 4096 [ 89.767702][ T1722] loop5: detected capacity change from 0 to 1024 [ 89.814719][ T1727] loop1: detected capacity change from 0 to 256 [ 89.929546][ T336] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 89.942110][ T1722] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000006,norecovery,auto_da_alloc=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 90.597197][ T30] audit: type=1400 audit(1780958965.212:364): avc: denied { setattr } for pid=1721 comm="syz.5.411" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.196845][ T1734] loop1: detected capacity change from 0 to 512 [ 91.270655][ T1741] loop3: detected capacity change from 0 to 512 [ 91.276925][ T1743] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 91.285155][ T336] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 91.294040][ T336] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 91.309531][ T336] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 91.323755][ T336] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 91.335930][ T1741] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.363538][ T1741] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.409901][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 91.420276][ T336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 91.447287][ T1741] EXT4-fs (loop3): 1 truncate cleaned up [ 91.453012][ T1741] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 91.500004][ T30] audit: type=1400 audit(1780958966.114:365): avc: denied { mount } for pid=1752 comm="syz.0.421" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 91.535866][ T30] audit: type=1400 audit(1780958966.134:366): avc: denied { search } for pid=1752 comm="syz.0.421" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 91.581800][ T30] audit: type=1400 audit(1780958966.134:367): avc: denied { read } for pid=1752 comm="syz.0.421" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 91.603622][ T30] audit: type=1400 audit(1780958966.134:368): avc: denied { open } for pid=1752 comm="syz.0.421" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 91.627095][ T30] audit: type=1400 audit(1780958966.173:369): avc: denied { connect } for pid=1744 comm="syz.5.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.775014][ T336] usb 3-1: string descriptor 0 read error: -71 [ 91.781499][ T336] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 91.795250][ T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.825443][ T336] usb 3-1: config 0 descriptor?? [ 91.893421][ T336] usb 3-1: can't set config #0, error -71 [ 91.908035][ T336] usb 3-1: USB disconnect, device number 22 [ 91.939171][ T1394] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 92.042831][ T1775] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 93.304691][ T1809] tipc: Started in network mode [ 93.309654][ T1809] tipc: Node identity 4, cluster identity 4711 [ 93.315890][ T1809] tipc: Node number set to 4 [ 93.408014][ T1394] usb 4-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0 [ 93.417895][ T306] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 93.426408][ T1394] usb 4-1: config 1 interface 0 has no altsetting 0 [ 93.713383][ T306] usb 2-1: Using ep0 maxpacket: 16 [ 93.776799][ T1824] loop5: detected capacity change from 0 to 128 [ 93.780441][ T1823] loop2: detected capacity change from 0 to 1024 [ 93.795402][ T1394] usb 4-1: string descriptor 0 read error: -22 [ 93.802233][ T1394] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 93.804014][ T1824] EXT4-fs (loop5): dax option not supported [ 93.811451][ T1394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.837358][ T306] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 93.845688][ T306] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.856414][ T306] usb 2-1: config 0 has no interface number 0 [ 93.866845][ T1823] EXT4-fs (loop2): Ignoring removed orlov option [ 93.878222][ T306] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 93.880516][ T1823] EXT4-fs (loop2): Ignoring removed orlov option [ 93.888254][ T306] usb 2-1: config 0 interface 49 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.932207][ T1823] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,resgid=0x0000000000000000,orlov,acl,debug_want_extra_isize=0x0000000000000080,inode_readahead_blks=0x0000000000100000,errors=remount-ro,noinit_itable,orlov,. Quota mode: none. [ 93.971571][ T1823] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 93.982622][ T1823] EXT4-fs (loop2): Remounting file system with no journal so ignoring journalled data option [ 93.995013][ T1823] EXT4-fs (loop2): re-mounted. Opts: noquota,noblock_validity,nogrpid,data=journal,. Quota mode: none. [ 94.089509][ T306] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 94.107286][ T306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.115926][ T306] usb 2-1: Product: syz [ 94.120230][ T306] usb 2-1: Manufacturer: syz [ 94.125012][ T306] usb 2-1: SerialNumber: syz [ 94.133183][ T306] usb 2-1: config 0 descriptor?? [ 94.152416][ T1786] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.393442][ T336] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 94.429027][ T306] usb 2-1: USB disconnect, device number 14 [ 94.437497][ T1394] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 94.458603][ T1394] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:0926:3333.0009/input/input12 [ 94.530156][ T42] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 94.550260][ T1394] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 94.658364][ T26] usb 4-1: USB disconnect, device number 13 [ 94.667624][ C0] keytouch 0003:0926:3333.0009: usb_submit_urb(ctrl) failed: -19 [ 94.675533][ T336] usb 3-1: Using ep0 maxpacket: 16 [ 94.815735][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 94.826539][ T336] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.837720][ T336] usb 3-1: config 0 interface 0 has no altsetting 0 [ 94.844346][ T336] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 94.853788][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.866007][ T336] usb 3-1: config 0 descriptor?? [ 94.953309][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 94.964902][ T42] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 94.973980][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.987739][ T1843] loop1: detected capacity change from 0 to 512 [ 94.990912][ T42] usb 1-1: config 0 descriptor?? [ 95.080676][ T1845] loop5: detected capacity change from 0 to 256 [ 95.119529][ T1838] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 95.131837][ T1845] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 95.176697][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 95.176722][ T30] audit: type=1400 audit(1780958969.647:377): avc: denied { write } for pid=1840 comm="syz.5.456" name="file2" dev="loop5" ino=1048715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.214294][ T30] audit: type=1400 audit(1780958969.647:378): avc: denied { open } for pid=1840 comm="syz.5.456" name="file2" dev="loop5" ino=1048715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.372403][ T30] audit: type=1400 audit(1780958969.827:379): avc: denied { getopt } for pid=1851 comm="syz.3.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.462659][ T336] hid-generic 0003:1E71:2009.000A: unknown main item tag 0x0 [ 95.475004][ T336] hid-generic 0003:1E71:2009.000A: unknown main item tag 0x0 [ 95.483931][ T336] hid-generic 0003:1E71:2009.000A: unknown main item tag 0x0 [ 95.491622][ T336] hid-generic 0003:1E71:2009.000A: unknown main item tag 0x0 [ 95.513949][ T336] hid-generic 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 95.674156][ T1860] loop2: detected capacity change from 0 to 7 [ 95.689676][ T1394] usb 3-1: USB disconnect, device number 23 [ 95.735185][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 95.743451][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 95.754276][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 95.763167][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 95.849646][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.289383][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.321160][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.330470][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.338678][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.346833][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.355281][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.363663][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.373486][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.381666][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.389881][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.398045][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.406183][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.414316][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.422469][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.441448][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.471139][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.481923][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.511623][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.528031][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.536538][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.544627][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.553406][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.582023][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.600884][ T1869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'. [ 96.636945][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.648563][ T1872] loop2: detected capacity change from 0 to 256 [ 96.659499][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.716253][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.729793][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.738259][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.746529][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.755712][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.767168][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.775545][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.808727][ T1864] loop5: detected capacity change from 0 to 131072 [ 96.829651][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.905053][ T1864] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 96.913233][ T1864] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 96.923381][ T1882] loop2: detected capacity change from 0 to 512 [ 96.933084][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 96.941493][ T1864] F2FS-fs (loop5): invalid crc value [ 98.023861][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.033603][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.042099][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.050842][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.059290][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.067773][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.078258][ T30] audit: type=1400 audit(1780958972.368:380): avc: denied { create } for pid=1881 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.109738][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.180523][ T1882] EXT4-fs (loop2): Test dummy encryption mode enabled [ 98.231403][ T1864] F2FS-fs (loop5): Found nat_bits in checkpoint [ 98.269474][ T1882] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.473: inode has both inline data and extents flags [ 98.294162][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.309604][ T1864] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 98.316766][ T1864] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 98.332334][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.341799][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.343067][ T1882] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.473: couldn't read orphan inode 15 (err -117) [ 98.350310][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.376313][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.384612][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.396859][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.412095][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.420792][ T1882] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 98.457158][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.496038][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.515349][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.523540][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.532031][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.540196][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.548379][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.556537][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.571247][ T1907] loop2: detected capacity change from 0 to 512 [ 98.578509][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.592185][ T1905] loop1: detected capacity change from 0 to 8192 [ 98.600314][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.614359][ T1907] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.632694][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.658667][ T1907] EXT4-fs (loop2): 1 truncate cleaned up [ 98.664385][ T1907] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 98.685167][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.694566][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.702828][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.724707][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.757165][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.758618][ T30] audit: type=1400 audit(1780958972.993:381): avc: denied { setopt } for pid=1906 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.765344][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.786469][ T30] audit: type=1400 audit(1780958973.030:382): avc: denied { setattr } for pid=1906 comm="syz.2.482" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.799774][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.825614][ T1918] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 98.896541][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.899395][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 98.914639][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.923012][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.931487][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.939743][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.948083][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.965681][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.973972][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.982337][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 98.991506][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.000035][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.274231][ T306] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 99.278146][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.436323][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.641852][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.650761][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.659262][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.668344][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.679174][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.694764][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.703236][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.711522][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.719885][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.727982][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.739974][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.748219][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.756565][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.787244][ T1928] loop1: detected capacity change from 0 to 512 [ 99.819721][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.829784][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.838075][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.846194][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.854547][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.862939][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.871103][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.879263][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.887374][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.895680][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.905498][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.913962][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.922451][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.930566][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.956822][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.965469][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.973584][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.982100][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.990432][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 99.999206][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.007795][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.016263][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.025197][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.033861][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.042172][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.050412][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.058768][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.067358][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.075846][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.098910][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.114502][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.136321][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.158469][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.169830][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.210859][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.219974][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.229220][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.230594][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 100.237848][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.252271][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.284421][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.285953][ T30] audit: type=1400 audit(1780958974.415:383): avc: denied { write } for pid=1948 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.293571][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.293629][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.293669][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.326089][ T30] audit: type=1400 audit(1780958974.443:384): avc: denied { nlmsg_write } for pid=1948 comm="syz.1.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.339146][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.367713][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.375941][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.384125][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.392335][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.392394][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.392434][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.392475][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.392529][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.392569][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.392612][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.392653][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.392694][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.392733][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.392794][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.392847][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.392888][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.392930][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.392982][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393024][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393077][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393117][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393159][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393200][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393250][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393280][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393321][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393362][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393403][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393444][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393488][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393538][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393578][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393608][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393651][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393703][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393743][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393791][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393833][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393873][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393913][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.393978][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394019][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394059][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394113][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394154][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394196][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394250][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394280][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394322][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394399][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394441][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394482][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394523][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394566][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394606][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394647][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394689][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394729][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394778][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394819][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394859][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394901][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394942][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.394984][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395036][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395088][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395130][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395173][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395224][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395266][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395306][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395347][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395401][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395453][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395495][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395547][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395600][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395641][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395682][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395723][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395799][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395839][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395883][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395925][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395955][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.395996][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396071][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396113][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396155][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396186][ T306] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 100.396196][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396229][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396235][ T306] usb 4-1: config 0 has no interface number 0 [ 100.396271][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396316][ T306] usb 4-1: config 0 interface 12 has no altsetting 0 [ 100.396323][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396354][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396394][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396434][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396474][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396515][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396567][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396620][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396662][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396704][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396745][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396805][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396847][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396899][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396940][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.396982][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397023][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397064][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397106][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397148][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397190][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397231][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397273][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397326][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397378][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397420][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397473][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397525][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397566][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397607][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397658][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397700][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397741][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397791][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397831][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397871][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397924][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.397965][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398019][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398060][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398111][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398153][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398193][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398234][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398276][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398328][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398370][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398422][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398474][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398537][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398578][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398630][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398671][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398713][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398755][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398805][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398847][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398899][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398940][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.398991][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.399033][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.399073][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.399114][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.399155][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.399196][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.399251][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.399282][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.399323][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.399365][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.399416][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.399457][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.399510][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.399551][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.399598][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.399640][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.399682][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.399735][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.399805][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x2 [ 100.399919][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0xd [ 100.399960][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400012][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400075][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400116][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400168][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400209][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400251][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400281][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400321][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400350][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400391][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400420][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400461][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400502][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400543][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400585][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400627][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400668][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400709][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400751][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400809][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400850][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400891][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400942][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.400995][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401036][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401078][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401131][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401194][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401236][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401278][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401319][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401361][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401404][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401445][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401486][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401537][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401578][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401619][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401671][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401712][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401754][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401846][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401901][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401953][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.401995][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402036][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402077][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402118][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402159][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402200][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402242][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402290][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402332][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402374][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402415][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402478][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402520][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402561][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402601][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402643][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402684][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402726][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402767][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402806][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402848][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402891][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402941][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.402982][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403023][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403064][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403103][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403145][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403186][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403233][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403275][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403315][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403356][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403397][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403438][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403479][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403532][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403585][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403637][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403679][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403718][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403760][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403809][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403860][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403924][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.403976][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404028][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404080][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404121][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404174][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404216][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404257][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404298][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404338][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404380][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404421][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404462][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404502][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404544][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404585][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404627][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404667][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404720][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404783][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404825][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404867][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404908][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.404949][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405002][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405043][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405085][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405128][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405169][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405211][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405253][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405283][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405337][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405378][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405420][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405462][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405503][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405554][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405595][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405637][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405678][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405730][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405789][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405831][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405872][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405903][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405944][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.405988][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406043][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406084][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406125][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406166][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406208][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406250][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406280][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406322][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406363][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406405][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406446][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406487][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406539][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406581][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406621][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406674][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406726][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406826][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406869][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406910][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.406952][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.407004][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.407044][ T42] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 100.409728][ T42] usb 1-1: USB disconnect, device number 17 [ 100.589997][ T306] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 103.224297][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.232531][ T306] usb 4-1: Product: syz [ 103.237343][ T306] usb 4-1: Manufacturer: syz [ 103.241967][ T306] usb 4-1: SerialNumber: syz [ 103.247323][ T1394] Bluetooth: hci0: command 0x1003 tx timeout [ 103.253758][ T1921] Bluetooth: hci0: sending frame failed (-49) [ 103.253791][ T306] usb 4-1: config 0 descriptor?? [ 103.281224][ T306] usb 4-1: can't set config #0, error -71 [ 103.315638][ T306] usb 4-1: USB disconnect, device number 14 [ 103.367221][ T1966] loop1: detected capacity change from 0 to 256 [ 103.530739][ T30] audit: type=1400 audit(1780958977.427:385): avc: denied { ioctl } for pid=1979 comm="syz.2.508" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 104.579679][ T1997] tipc: Started in network mode [ 104.584787][ T1997] tipc: Node identity ac14140f, cluster identity 4711 [ 104.591650][ T1997] tipc: New replicast peer: 255.255.255.255 [ 104.598093][ T1997] tipc: Enabled bearer , priority 10 [ 104.606078][ T306] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 104.681470][ T30] audit: type=1400 audit(1780958978.473:386): avc: denied { shutdown } for pid=1984 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.683722][ T2005] hub 8-0:1.0: USB hub found [ 104.706385][ T2005] hub 8-0:1.0: 1 port detected [ 104.735924][ T30] audit: type=1400 audit(1780958978.473:387): avc: denied { read } for pid=1984 comm="syz.2.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.155002][ T306] usb 4-1: not running at top speed; connect to a high speed hub [ 106.622285][ T2013] loop1: detected capacity change from 0 to 256 [ 106.629009][ T1394] tipc: Node number set to 2886997007 [ 106.691804][ T336] Bluetooth: hci0: command 0x1001 tx timeout [ 106.704514][ T306] usb 4-1: unable to read config index 0 descriptor/all [ 106.706589][ T2017] loop2: detected capacity change from 0 to 512 [ 106.718116][ T1921] Bluetooth: hci0: sending frame failed (-49) [ 106.721402][ T306] usb 4-1: can't read configurations, error -71 [ 106.737191][ T2013] /dev/loop1: Can't open blockdev [ 106.847625][ T2017] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 106.868849][ T30] audit: type=1400 audit(1780958980.516:388): avc: denied { bind } for pid=2029 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.873412][ T2017] EXT4-fs (loop2): orphan cleanup on readonly fs [ 107.771197][ T30] audit: type=1400 audit(1780958980.636:389): avc: denied { mounton } for pid=2019 comm="syz.0.525" path="/127/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 107.894432][ T30] audit: type=1400 audit(1780958981.329:390): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 107.915450][ T2017] EXT4-fs warning (device loop2): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 107.930426][ T2017] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 107.937598][ T2017] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.522: bad orphan inode 768 [ 108.063726][ T2017] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,noauto_da_alloc,delalloc,,errors=continue. Quota mode: writeback. [ 108.176287][ T2017] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 108.209637][ T2017] EXT4-fs warning (device loop2): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 108.227907][ T2017] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 108.241949][ T2017] EXT4-fs warning (device loop2): ext4_enable_quotas:6479: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 108.347425][ T30] audit: type=1400 audit(1780958981.874:391): avc: denied { ioctl } for pid=2052 comm="syz.0.539" path="socket:[23529]" dev="sockfs" ino=23529 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.934337][ T26] Bluetooth: hci0: command 0x1009 tx timeout [ 108.940524][ T336] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 109.204710][ T336] usb 3-1: Using ep0 maxpacket: 16 [ 109.334811][ T336] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 109.351314][ T336] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 109.405484][ T336] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.419129][ T336] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 109.428872][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.452397][ T336] usb 3-1: config 0 descriptor?? [ 109.475632][ T2059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 109.506694][ T336] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 109.850738][ T336] usb 3-1: USB disconnect, device number 24 [ 110.944871][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 110.952438][ T2076] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 110.967002][ T2076] device veth1_macvtap entered promiscuous mode [ 110.973393][ T2076] device macsec0 left promiscuous mode [ 111.002575][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 111.014186][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.041146][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 111.051705][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.061704][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.072020][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.083743][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.095104][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.105555][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.455411][ T30] audit: type=1400 audit(1780958984.747:392): avc: denied { bind } for pid=2105 comm="syz.5.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 112.596884][ T63] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 112.630345][ T2114] binder: 2112:2114 ioctl c0306201 0 returned -14 [ 112.932518][ T63] usb 2-1: Using ep0 maxpacket: 8 [ 113.088319][ T2128] device veth0 entered promiscuous mode [ 113.094279][ T2128] device vlan2 entered promiscuous mode [ 113.276118][ T63] usb 2-1: unable to get BOS descriptor or descriptor too short [ 113.373729][ T63] usb 2-1: config 9 has an invalid interface number: 5 but max is 1 [ 113.381896][ T63] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 113.408145][ T2148] loop3: detected capacity change from 0 to 512 [ 113.482299][ T63] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 113.491263][ T63] usb 2-1: config 9 has no interface number 0 [ 113.497391][ T63] usb 2-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x81, skipping [ 113.508125][ T63] usb 2-1: config 9 interface 5 has no altsetting 0 [ 113.516464][ T2148] EXT4-fs (loop3): Test dummy encryption mode enabled [ 113.525275][ T2148] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.571: inode has both inline data and extents flags [ 113.539157][ T2148] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.571: couldn't read orphan inode 15 (err -117) [ 113.551211][ T2148] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 113.698571][ T63] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 113.709698][ T2161] tipc: Started in network mode [ 113.713264][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.714653][ T2161] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 113.722986][ T63] usb 2-1: Product: syz [ 113.731984][ T2161] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 113.736341][ T63] usb 2-1: Manufacturer: syz [ 113.743978][ T2161] tipc: Enabled bearer , priority 10 [ 113.748882][ T63] usb 2-1: SerialNumber: syz [ 113.784845][ T2163] loop3: detected capacity change from 0 to 1024 [ 113.829671][ T2163] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,data_err=ignore,,errors=continue. Quota mode: none. [ 113.845570][ T30] audit: type=1400 audit(1780958986.954:393): avc: denied { rename } for pid=2162 comm="syz.3.577" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.869070][ T30] audit: type=1400 audit(1780958986.954:394): avc: denied { reparent } for pid=2162 comm="syz.3.577" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.858982][ T2177] tipc: Cannot configure node identity twice [ 115.865489][ T306] tipc: Node number set to 1 [ 115.917163][ T2190] loop5: detected capacity change from 0 to 256 [ 115.922284][ T63] usb 2-1: USB disconnect, device number 15 [ 115.956666][ T2190] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 115.967948][ T2194] cgroup: Unknown subsys name 'nofavordynmods' [ 116.618332][ T30] audit: type=1400 audit(1780958989.511:395): avc: denied { execute } for pid=2208 comm="syz.5.595" name="file0" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 116.643422][ T2209] Invalid argument reading file caps for ./file0 [ 116.689308][ T2211] loop1: detected capacity change from 0 to 256 [ 116.788081][ T30] audit: type=1400 audit(1780958989.539:396): avc: denied { execute_no_trans } for pid=2208 comm="syz.5.595" path="/76/file0" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.297356][ T290] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 117.305345][ T306] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 117.366208][ T2234] loop2: detected capacity change from 0 to 128 [ 117.396707][ T2234] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.407968][ T2234] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.424589][ T30] audit: type=1400 audit(1780958990.259:397): avc: denied { lock } for pid=2233 comm="syz.2.606" path="/93/file1/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.451721][ T2242] loop1: detected capacity change from 0 to 512 [ 117.452597][ T30] audit: type=1400 audit(1780958990.287:398): avc: denied { link } for pid=2233 comm="syz.2.606" name="file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 117.662816][ T2261] loop2: detected capacity change from 0 to 512 [ 117.705866][ T306] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 117.714277][ T290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.723975][ T2265] loop1: detected capacity change from 0 to 512 [ 117.731497][ T306] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 117.740141][ T290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.741674][ T2261] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 117.750124][ T306] usb 1-1: config 0 has no interface number 0 [ 117.760854][ T2261] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,min_batch_time=0x0000000000000000,nombcache,,errors=continue. Quota mode: writeback. [ 117.764997][ T290] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 117.780910][ T2261] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.789632][ T306] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.810222][ T290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.818298][ T30] audit: type=1400 audit(1780958990.619:399): avc: denied { mounton } for pid=2260 comm="syz.2.616" path="/100/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.846256][ T306] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 117.855884][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.864007][ T30] audit: type=1400 audit(1780958990.619:400): avc: denied { setattr } for pid=2260 comm="syz.2.616" name="file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.887265][ T290] usb 4-1: config 0 descriptor?? [ 117.894793][ T30] audit: type=1400 audit(1780958990.628:401): avc: denied { rmdir } for pid=288 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.900412][ T306] usb 1-1: config 0 descriptor?? [ 117.927733][ T30] audit: type=1400 audit(1780958990.721:402): avc: denied { unlink } for pid=288 comm="syz-executor" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.951495][ T30] audit: type=1400 audit(1780958990.721:403): avc: denied { unlink } for pid=288 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 118.247498][ T290] usbhid 4-1:0.0: can't add hid device: -71 [ 118.258011][ T290] usbhid: probe of 4-1:0.0 failed with error -71 [ 118.260530][ T337] usb 1-1: USB disconnect, device number 18 [ 118.319764][ T290] usb 4-1: USB disconnect, device number 17 [ 118.344914][ T306] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 118.788978][ T306] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.799786][ T290] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 118.832350][ T306] usb 3-1: not running at top speed; connect to a high speed hub [ 118.929817][ T306] usb 3-1: config 4 has an invalid interface number: 167 but max is 1 [ 118.941738][ T306] usb 3-1: config 4 has an invalid interface number: 5 but max is 1 [ 118.950340][ T30] audit: type=1400 audit(1780958991.662:404): avc: denied { create } for pid=2280 comm="syz.0.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 118.971785][ T306] usb 3-1: config 4 has no interface number 0 [ 118.978229][ T306] usb 3-1: config 4 has no interface number 1 [ 118.984806][ T306] usb 3-1: config 4 interface 167 has no altsetting 0 [ 118.991805][ T306] usb 3-1: config 4 interface 5 has no altsetting 0 [ 119.020910][ T2284] loop1: detected capacity change from 0 to 1024 [ 119.059788][ T290] usb 4-1: Using ep0 maxpacket: 32 [ 119.065085][ T2284] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 119.075570][ T2284] EXT4-fs (loop1): barriers disabled [ 119.080902][ T2284] JBD2: no valid journal superblock found [ 119.086805][ T2284] EXT4-fs (loop1): error loading journal [ 119.168162][ T306] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=17.91 [ 119.177302][ T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.189750][ T290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.208587][ T290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.218703][ T306] usb 3-1: Product: syz [ 119.223094][ T306] usb 3-1: Manufacturer: syz [ 119.227778][ T290] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 119.237382][ T306] usb 3-1: SerialNumber: syz [ 119.299197][ T290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.308284][ T290] usb 4-1: config 0 descriptor?? [ 119.317926][ T2288] loop5: detected capacity change from 0 to 1024 [ 119.410698][ T2290] loop1: detected capacity change from 0 to 128 [ 119.592900][ T2288] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,max_dir_size_kb=0x0000000000000001,dioread_lock,norecovery,discard,lazytime,journal_dev=0x0000000000000001,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 119.882051][ T30] audit: type=1400 audit(1780958992.502:405): avc: denied { create } for pid=2287 comm="syz.5.626" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 120.168221][ T290] usb 4-1: USB disconnect, device number 18 [ 121.012193][ T2327] loop5: detected capacity change from 0 to 1024 [ 121.045763][ T306] usb 3-1: USB disconnect, device number 25 [ 121.083256][ T2330] Invalid argument reading file caps for ./file0 [ 121.238686][ T2327] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.250778][ T2327] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 16: comm syz.5.639: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=0 [ 121.681068][ T336] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 121.832725][ T30] audit: type=1400 audit(1780958994.330:406): avc: denied { connect } for pid=2332 comm="syz.3.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.973437][ T336] usb 2-1: Using ep0 maxpacket: 32 [ 122.103477][ T336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.114583][ T336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.124516][ T336] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.134386][ T336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.233874][ T336] usb 2-1: config 0 descriptor?? [ 122.277357][ T336] hub 2-1:0.0: USB hub found [ 122.484007][ T2363] capability: warning: `syz.5.654' uses 32-bit capabilities (legacy support in use) [ 122.526536][ T336] hub 2-1:0.0: 1 port detected [ 122.612519][ T290] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 122.797368][ T2349] UDC core: couldn't find an available UDC or it's busy: -16 [ 122.807875][ T2349] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 122.885398][ T2382] loop2: detected capacity change from 0 to 256 [ 122.905032][ T290] usb 1-1: Using ep0 maxpacket: 32 [ 122.926984][ T2382] exfat: Deprecated parameter 'namecase' [ 122.932670][ T2382] exfat: Unknown parameter 'keep_last_dots' [ 123.034959][ T290] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 123.045802][ T290] usb 1-1: config 0 has no interface number 0 [ 123.045819][ T336] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 123.045837][ T336] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 123.154131][ T306] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 123.186614][ T336] usbhid 2-1:0.0: can't add hid device: -71 [ 123.192748][ T336] usbhid: probe of 2-1:0.0 failed with error -71 [ 123.230562][ T336] usb 2-1: USB disconnect, device number 16 [ 123.626469][ T2396] loop9: detected capacity change from 0 to 7 [ 123.703013][ T290] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 123.712475][ T290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.720603][ T290] usb 1-1: Product: syz [ 123.724856][ T290] usb 1-1: Manufacturer: syz [ 123.729518][ T290] usb 1-1: SerialNumber: syz [ 123.736004][ T290] usb 1-1: config 0 descriptor?? [ 123.891708][ T2401] syz.1.670 uses obsolete (PF_INET,SOCK_PACKET) [ 124.993803][ T290] usb 1-1: USB disconnect, device number 19 [ 125.017160][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 125.667127][ T306] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 125.681358][ T306] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 125.702142][ T306] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.855467][ T2453] loop5: detected capacity change from 0 to 128 [ 126.869528][ T306] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 126.890549][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.898824][ T306] usb 4-1: Product: syz [ 126.903195][ T306] usb 4-1: Manufacturer: syz [ 127.150812][ T2453] EXT4-fs (loop5): Test dummy encryption mode enabled [ 127.152770][ T2453] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,inlinecrypt,,errors=continue. Quota mode: none. [ 127.152860][ T2453] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.156644][ T306] usb 4-1: config 0 descriptor?? [ 127.172747][ T306] usb 4-1: can't set config #0, error -71 [ 127.342212][ T2467] loop1: detected capacity change from 0 to 4096 [ 127.350180][ T306] usb 4-1: USB disconnect, device number 19 [ 127.420832][ T2473] tipc: Started in network mode [ 127.425947][ T2473] tipc: Node identity fe4efe1ab55c, cluster identity 4711 [ 127.433720][ T2473] tipc: Enabled bearer , priority 0 [ 127.444918][ T2473] device syzkaller0 entered promiscuous mode [ 127.453449][ T2473] tipc: Resetting bearer [ 127.460347][ T2472] tipc: Resetting bearer [ 127.466891][ T2472] tipc: Disabling bearer [ 127.877891][ T2484] loop1: detected capacity change from 0 to 1024 [ 127.906740][ T2486] loop3: detected capacity change from 0 to 512 [ 127.945331][ T2486] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 127.945546][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 127.945559][ T30] audit: type=1326 audit(1780958999.971:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2491 comm="syz.5.706" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f996e59 code=0x7ffc0000 [ 128.093405][ T30] audit: type=1326 audit(1780959000.027:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2491 comm="syz.5.706" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f996e59 code=0x7ffc0000 [ 128.158389][ T30] audit: type=1326 audit(1780959000.027:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2491 comm="syz.5.706" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f996e59 code=0x7ffc0000 [ 128.205066][ T30] audit: type=1326 audit(1780959000.027:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2491 comm="syz.5.706" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f556f996e59 code=0x7ffc0000 [ 128.230008][ T1094] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 128.283366][ T2500] loop5: detected capacity change from 0 to 2048 [ 128.290228][ T30] audit: type=1326 audit(1780959000.027:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2491 comm="syz.5.706" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f996e59 code=0x7ffc0000 [ 128.327100][ T30] audit: type=1326 audit(1780959000.027:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2491 comm="syz.5.706" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f996e59 code=0x7ffc0000 [ 128.352343][ T30] audit: type=1326 audit(1780959000.027:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2491 comm="syz.5.706" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f996e59 code=0x7ffc0000 [ 128.377468][ T30] audit: type=1326 audit(1780959000.027:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2491 comm="syz.5.706" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f996e59 code=0x7ffc0000 [ 128.409907][ T30] audit: type=1326 audit(1780959000.027:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2491 comm="syz.5.706" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f556f996e59 code=0x7ffc0000 [ 128.435459][ T2500] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #2: comm syz.5.708: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 128.454854][ T2500] EXT4-fs (loop5): get root inode failed [ 128.460527][ T2500] EXT4-fs (loop5): mount failed [ 128.465807][ T30] audit: type=1326 audit(1780959000.073:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2491 comm="syz.5.706" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f556f996e59 code=0x7ffc0000 [ 128.830000][ T1094] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 128.839213][ T1094] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.847611][ T1094] usb 1-1: Product: syz [ 128.852017][ T1094] usb 1-1: Manufacturer: syz [ 128.856819][ T1094] usb 1-1: SerialNumber: syz [ 128.970786][ T337] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 129.122763][ T2527] loop1: detected capacity change from 0 to 512 [ 129.371584][ T337] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.381292][ T337] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.391398][ T337] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.577414][ T337] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 129.586586][ T337] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.594813][ T337] usb 6-1: Product: syz [ 129.599153][ T337] usb 6-1: Manufacturer: syz [ 129.603756][ T337] usb 6-1: SerialNumber: syz [ 129.643025][ T337] hub 6-1:1.0: bad descriptor, ignoring hub [ 129.649049][ T337] hub: probe of 6-1:1.0 failed with error -5 [ 129.675653][ T2527] loop1: detected capacity change from 0 to 1024 [ 129.715814][ T496] Trying to write to read-only block-device loop1 [ 129.892392][ T337] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 130.043269][ T319] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 130.263573][ T2552] binder: 2551:2552 ioctl 8080583a 0 returned -22 [ 130.270924][ T42] usb 6-1: USB disconnect, device number 7 [ 130.280051][ T42] usblp0: removed [ 130.297871][ T337] usb 1-1: USB disconnect, device number 20 [ 130.324848][ T319] usb 2-1: Using ep0 maxpacket: 8 [ 130.454788][ T319] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 130.628118][ T319] usb 2-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 130.640818][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.648956][ T319] usb 2-1: Product: syz [ 130.653288][ T319] usb 2-1: Manufacturer: syz [ 130.657913][ T319] usb 2-1: SerialNumber: syz [ 130.682294][ T2536] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 130.833533][ T2571] loop5: detected capacity change from 0 to 256 [ 130.861665][ T2571] FAT-fs (loop5): Directory bread(block 64) failed [ 130.868912][ T2571] FAT-fs (loop5): Directory bread(block 65) failed [ 130.875573][ T2571] FAT-fs (loop5): Directory bread(block 66) failed [ 130.882401][ T2571] FAT-fs (loop5): Directory bread(block 67) failed [ 130.889602][ T2571] FAT-fs (loop5): Directory bread(block 68) failed [ 130.896192][ T2571] FAT-fs (loop5): Directory bread(block 69) failed [ 130.902958][ T2571] FAT-fs (loop5): Directory bread(block 70) failed [ 130.910015][ T2571] FAT-fs (loop5): Directory bread(block 71) failed [ 130.916615][ T2571] FAT-fs (loop5): Directory bread(block 72) failed [ 130.923398][ T2571] FAT-fs (loop5): Directory bread(block 73) failed [ 131.249700][ T2567] hub 8-0:1.0: USB hub found [ 131.254461][ T2567] hub 8-0:1.0: 1 port detected [ 132.010019][ T2577] loop2: detected capacity change from 0 to 131072 [ 132.305164][ T2597] loop3: detected capacity change from 0 to 512 [ 132.493790][ T2577] F2FS-fs (loop2): invalid crc value [ 132.503631][ T2577] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.609664][ T2577] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 132.801175][ T2597] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.840014][ T2597] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.870622][ T319] usb 2-1: MIDIStreaming interface descriptor not found [ 132.894633][ T319] usb 2-1: USB disconnect, device number 17 [ 132.949244][ T2597] fs-verity (loop3, inode 15): Unrecognized descriptor size: 0 bytes [ 133.032020][ T286] VFS: Lookup of 'ÿÿ' in ext4 loop3 would have caused loop [ 133.061863][ T286] VFS: Lookup of 'ÿÿ' in ext4 loop3 would have caused loop [ 133.152936][ T352] udevd[352]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 134.249546][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 134.249564][ T30] audit: type=1400 audit(1780959005.797:452): avc: denied { create } for pid=2621 comm="syz.5.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 134.412796][ T2628] loop5: detected capacity change from 0 to 512 [ 134.454218][ T2628] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 134.465824][ T2628] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 134.476588][ T2628] EXT4-fs error (device loop5): ext4_acquire_dquot:6227: comm syz.5.753: Failed to acquire dquot type 1 [ 134.488583][ T2628] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 134.499595][ T2628] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 134.509868][ T2628] EXT4-fs error (device loop5): ext4_acquire_dquot:6227: comm syz.5.753: Failed to acquire dquot type 1 [ 134.521684][ T2628] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.753: bg 0: block 248: padding at end of block bitmap is not set [ 134.536342][ T2628] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 134.545594][ T2628] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 134.555869][ T2628] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 134.565971][ T2628] EXT4-fs error (device loop5): ext4_acquire_dquot:6227: comm syz.5.753: Failed to acquire dquot type 1 [ 134.577568][ T2628] EXT4-fs (loop5): 1 orphan inode deleted [ 134.584035][ T2628] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,grpid,quota,,errors=continue. Quota mode: writeback. [ 134.597476][ T2628] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.744684][ T337] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 134.820935][ T2640] device syzkaller0 entered promiscuous mode [ 134.938447][ T2641] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.946333][ T2641] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.047635][ T30] audit: type=1400 audit(1780959006.443:453): avc: denied { write } for pid=2637 comm="syz.5.758" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 135.072348][ T2641] device bridge_slave_0 entered promiscuous mode [ 135.082593][ T2641] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.089900][ T2641] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.100334][ T2641] device bridge_slave_1 entered promiscuous mode [ 135.106841][ T337] usb 1-1: Using ep0 maxpacket: 16 [ 135.187248][ T2641] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.194374][ T2641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.201747][ T2641] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.208803][ T2641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.235445][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.253462][ T337] usb 1-1: config 0 interface 0 has no altsetting 0 [ 135.260242][ T337] usb 1-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 135.269515][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.281698][ T337] usb 1-1: config 0 descriptor?? [ 135.656495][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.664184][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.725632][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.736523][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.745288][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.752367][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.757499][ T319] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 135.769643][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.773633][ T319] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.778321][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.796778][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.803841][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.811609][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.822950][ T337] wacom 0003:056A:0023.000D: unknown main item tag 0x2 [ 135.830207][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.838619][ T337] wacom 0003:056A:0023.000D: unknown main item tag 0x6 [ 135.845545][ T337] wacom 0003:056A:0023.000D: ignoring exceeding usage max [ 135.853369][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.861822][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.871117][ T337] wacom 0003:056A:0023.000D: Unknown device_type for 'HID 056a:0023'. Assuming pen. [ 135.892136][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.900819][ T337] wacom 0003:056A:0023.000D: hidraw0: USB HID v0.81 Device [HID 056a:0023] on usb-dummy_hcd.0-1/input0 [ 135.912640][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.921536][ T337] input: Wacom Intuos 12x12 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0023.000D/input/input13 [ 135.935033][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.943083][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.953378][ T2641] device veth0_vlan entered promiscuous mode [ 135.959791][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.967621][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.985606][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.994044][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.014641][ T2641] device veth1_macvtap entered promiscuous mode [ 136.026146][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.033947][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.048410][ T42] usb 1-1: USB disconnect, device number 21 [ 136.055102][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 136.143153][ T290] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 136.150375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.159263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.187469][ T30] audit: type=1400 audit(1780959007.588:454): avc: denied { mount } for pid=2641 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 136.231021][ T2681] loop1: detected capacity change from 0 to 512 [ 136.596400][ T290] usb 3-1: Using ep0 maxpacket: 32 [ 136.623852][ T2690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 136.641642][ T2692] binder: 2691:2692 ioctl c0306201 200000000480 returned -14 [ 136.726455][ T290] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 136.736029][ T290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.744876][ T290] usb 3-1: config 0 descriptor?? [ 137.517149][ T290] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 137.592989][ T461] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 137.787905][ T290] usb 2-1: Using ep0 maxpacket: 16 [ 137.874646][ T461] usb 1-1: Using ep0 maxpacket: 8 [ 137.918021][ T290] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 137.926570][ T290] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 137.937185][ T290] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.950429][ T290] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 137.959611][ T290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.968826][ T290] usb 2-1: config 0 descriptor?? [ 137.993801][ T2710] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 138.016047][ T290] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 138.199689][ T461] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 138.208874][ T461] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.217227][ T461] usb 1-1: Product: syz [ 138.451793][ T461] usb 1-1: Manufacturer: syz [ 138.456582][ T461] usb 1-1: SerialNumber: syz [ 138.463254][ T319] usb 2-1: USB disconnect, device number 18 [ 138.470634][ T461] usb 1-1: config 0 descriptor?? [ 138.992588][ T319] usb 3-1: USB disconnect, device number 26 [ 139.391008][ T42] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 139.650978][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 139.897715][ T1094] usb 1-1: USB disconnect, device number 22 [ 139.926865][ T2737] loop1: detected capacity change from 0 to 256 [ 139.954408][ T42] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 139.963509][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.981424][ T42] usb 7-1: Product: syz [ 139.985817][ T42] usb 7-1: Manufacturer: syz [ 139.997636][ T2737] /dev/loop1: Can't open blockdev [ 140.001243][ T42] usb 7-1: SerialNumber: syz [ 140.009579][ T2753] loop5: detected capacity change from 0 to 256 [ 140.012272][ T42] usb 7-1: config 0 descriptor?? [ 140.030601][ T2753] exfat: Deprecated parameter 'namecase' [ 140.036326][ T2753] exfat: Deprecated parameter 'namecase' [ 140.043571][ T2753] exfat: Deprecated parameter 'namecase' [ 140.049272][ T2753] exfat: Unknown parameter 'subj_ty' [ 140.138925][ T2762] loop5: detected capacity change from 0 to 7 [ 140.983391][ T290] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 140.991000][ T319] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 141.184251][ T2784] binder: 2783:2784 ioctl c0306201 0 returned -14 [ 141.212830][ T2786] loop1: detected capacity change from 0 to 256 [ 141.243631][ T2786] exfat: Deprecated parameter 'namecase' [ 141.249383][ T2786] exfat: Deprecated parameter 'namecase' [ 141.255119][ T290] usb 6-1: Using ep0 maxpacket: 32 [ 141.260297][ T319] usb 3-1: Using ep0 maxpacket: 16 [ 141.330077][ T2786] /dev/loop1: Can't open blockdev [ 141.393685][ T2790] 9pnet: Insufficient options for proto=fd [ 141.399743][ T290] usb 6-1: config 0 has no interfaces? [ 141.629558][ T30] audit: type=1400 audit(1780959012.601:455): avc: denied { ioctl } for pid=2797 comm="syz.1.812" path="socket:[27683]" dev="sockfs" ino=27683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.629792][ T290] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 141.665798][ T319] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 141.675187][ T319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.683330][ T319] usb 3-1: Product: syz [ 141.687661][ T319] usb 3-1: Manufacturer: syz [ 141.692391][ T319] usb 3-1: SerialNumber: syz [ 141.697366][ T290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.705887][ T290] usb 6-1: Product: syz [ 141.710277][ T290] usb 6-1: Manufacturer: syz [ 141.714935][ T290] usb 6-1: SerialNumber: syz [ 141.720420][ T290] usb 6-1: config 0 descriptor?? [ 141.986208][ T290] usb 6-1: USB disconnect, device number 8 [ 142.089323][ T30] audit: type=1400 audit(1780959013.035:456): avc: denied { bind } for pid=2802 comm="syz.0.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.443059][ T42] usb 7-1: USB disconnect, device number 2 [ 142.641538][ T30] audit: type=1400 audit(1780959013.542:457): avc: denied { mounton } for pid=2832 comm="syz.5.824" path="/proc/344/task" dev="proc" ino=26911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 142.673709][ T2835] loop6: detected capacity change from 0 to 1024 [ 142.702323][ T30] audit: type=1400 audit(1780959013.598:458): avc: denied { mount } for pid=2819 comm="syz.0.820" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 142.746016][ T30] audit: type=1400 audit(1780959013.625:459): avc: denied { write } for pid=2825 comm="syz.6.822" name="/" dev="configfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.769196][ T2820] VFS: Mount too revealing [ 142.790095][ T30] audit: type=1400 audit(1780959013.625:460): avc: denied { sys_admin } for pid=2819 comm="syz.0.820" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 142.813941][ T319] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 142.823375][ T319] usb 3-1: USB disconnect, device number 27 [ 142.880731][ T30] audit: type=1400 audit(1780959013.745:461): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 142.985097][ T2843] loop5: detected capacity change from 0 to 256 [ 143.030806][ T2843] exfat: Deprecated parameter 'namecase' [ 143.041296][ T2843] exfat: Deprecated parameter 'utf8' [ 143.078796][ T2843] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 143.247252][ T2849] loop5: detected capacity change from 0 to 1024 [ 143.287174][ T2849] EXT4-fs (loop5): Ignoring removed bh option [ 143.319462][ T2849] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,jqfmt=vfsv0,bh,init_itable,. Quota mode: none. [ 145.012434][ T30] audit: type=1400 audit(1780959015.435:462): avc: denied { mounton } for pid=2880 comm="syz.0.842" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 145.695606][ T2890] loop6: detected capacity change from 0 to 512 [ 145.771800][ T2890] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 145.794682][ T2890] EXT4-fs (loop6): 1 truncate cleaned up [ 145.800510][ T2890] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 146.273666][ T2898] loop5: detected capacity change from 0 to 7 [ 147.516886][ T2912] loop6: detected capacity change from 0 to 512 [ 147.660543][ T2912] EXT4-fs (loop6): Test dummy encryption mode enabled [ 147.729639][ T2912] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.853: inode has both inline data and extents flags [ 147.790014][ T2912] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.853: couldn't read orphan inode 15 (err -117) [ 147.808131][ T2920] netlink: 36 bytes leftover after parsing attributes in process `syz.5.854'. [ 147.817135][ T2912] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 147.855741][ T30] audit: type=1400 audit(1780959018.352:463): avc: denied { rename } for pid=2911 comm="syz.6.853" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 147.898338][ T319] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 147.899878][ T30] audit: type=1400 audit(1780959018.352:464): avc: denied { create } for pid=2911 comm="syz.6.853" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 148.165308][ T319] usb 3-1: Using ep0 maxpacket: 32 [ 148.239543][ T2930] loop6: detected capacity change from 0 to 256 [ 148.270898][ T2930] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 148.294967][ T319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.313197][ T319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.329390][ T319] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 148.367834][ T30] audit: type=1400 audit(1780959018.823:465): avc: denied { read } for pid=2927 comm="syz.6.857" name="file1" dev="loop6" ino=1048720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.377733][ T319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.408988][ T319] usb 3-1: config 0 descriptor?? [ 148.426149][ T30] audit: type=1400 audit(1780959018.823:466): avc: denied { map } for pid=2927 comm="syz.6.857" path="/17/file0/file1" dev="loop6" ino=1048720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.504588][ T319] hub 3-1:0.0: USB hub found [ 148.906259][ T2938] loop5: detected capacity change from 0 to 512 [ 148.966497][ T319] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 148.967002][ T2938] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.001216][ T2938] Quota error (device loop5): find_tree_dqentry: Getting block too big (196613 >= 6) [ 149.011076][ T2938] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 149.020683][ T2938] EXT4-fs error (device loop5): ext4_acquire_dquot:6227: comm syz.5.860: Failed to acquire dquot type 1 [ 149.033169][ T2938] EXT4-fs (loop5): 1 truncate cleaned up [ 149.038830][ T2938] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.248975][ T319] hid-generic 0003:046D:C31C.000E: item fetching failed at offset 0/1 [ 149.263006][ T319] hid-generic: probe of 0003:046D:C31C.000E failed with error -22 [ 149.379404][ T290] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 149.604143][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.612337][ T2962] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 149.778974][ T2781] usb 3-1: USB disconnect, device number 28 [ 149.887252][ T290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.900090][ T290] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.911010][ T290] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.924183][ T290] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.933367][ T290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.942810][ T290] usb 6-1: config 0 descriptor?? [ 150.252197][ T2972] loop2: detected capacity change from 0 to 256 [ 150.328951][ T2972] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d) [ 150.348527][ T30] audit: type=1400 audit(1780959020.651:467): avc: denied { append } for pid=2971 comm="syz.2.872" path="/131/file1/file1" dev="loop2" ino=1048721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.884855][ T290] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 150.894730][ T2938] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.860: deleted inode referenced: 12 [ 150.917479][ T290] plantronics 0003:047F:FFFF.000F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 150.959672][ T290] usb 6-1: USB disconnect, device number 9 [ 150.989383][ T2986] fido_id[2986]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 151.011159][ T2990] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 151.035530][ T2990] tipc: Enabled bearer , priority 10 [ 151.164717][ T2996] loop3: detected capacity change from 0 to 7 [ 152.042579][ T3027] device gretap0 entered promiscuous mode [ 152.048705][ T3027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.892'. [ 152.067694][ T3027] device gretap0 left promiscuous mode [ 152.392404][ T3043] loop6: detected capacity change from 0 to 128 [ 152.421627][ T3043] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.432420][ T3043] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.674548][ T3055] hub 8-0:1.0: USB hub found [ 152.680356][ T3055] hub 8-0:1.0: 1 port detected [ 152.996355][ T3057] loop6: detected capacity change from 0 to 256 [ 153.076211][ T3057] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 153.597417][ T3079] loop5: detected capacity change from 0 to 512 [ 153.905682][ T3079] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 154.353551][ T3079] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: block 1803188595: comm syz.5.912: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 154.387434][ T3079] EXT4-fs (loop5): mount failed [ 154.549514][ T3094] loop2: detected capacity change from 0 to 8192 [ 154.896238][ T3117] loop5: detected capacity change from 0 to 512 [ 154.981412][ T3117] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 154.999933][ T3117] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 155.008156][ T3117] System zones: 0-1, 15-15, 18-18, 34-34 [ 155.014536][ T3117] EXT4-fs (loop5): orphan cleanup on readonly fs [ 155.021019][ T3117] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 155.030487][ T3117] EXT4-fs warning (device loop5): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 155.045219][ T3117] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 155.050800][ T3129] binder: BINDER_SET_CONTEXT_MGR already set [ 155.052081][ T3117] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.925: bad orphan inode 16 [ 155.058673][ T3129] binder: 3128:3129 ioctl 4018620d 200000004a80 returned -16 [ 155.077560][ T3117] ext4_test_bit(bit=15, block=18) = 1 [ 155.079525][ T3129] binder: 3128:3129 unknown command 0 [ 155.082971][ T3117] is_bad_inode(inode)=0 [ 155.082981][ T3117] NEXT_ORPHAN(inode)=0 [ 155.082987][ T3117] max_ino=32 [ 155.082993][ T3117] i_nlink=2 [ 155.083031][ T3117] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 155.088490][ T3129] binder: 3128:3129 ioctl c0306201 200000000100 returned -22 [ 155.158370][ T3117] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring [ 155.169400][ T3117] EXT4-fs (loop5): can't enable nombcache during remount [ 155.590267][ T30] audit: type=1400 audit(1780959025.498:468): avc: denied { write } for pid=3148 comm="syz.2.937" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 155.705447][ T3142] loop5: detected capacity change from 0 to 131072 [ 155.718221][ T30] audit: type=1400 audit(1780959025.498:469): avc: denied { open } for pid=3148 comm="syz.2.937" path="/143/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 155.741446][ T30] audit: type=1400 audit(1780959025.572:470): avc: denied { getopt } for pid=3155 comm="syz.6.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.863397][ T3142] F2FS-fs (loop5): Found nat_bits in checkpoint [ 155.952477][ T3142] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 155.993885][ T3142] F2FS-fs (loop5): sanity_check_inode: corrupted inode footer i_ino=7, ino,nid: [117440519, 7] run fsck to fix. [ 156.269324][ T3186] loop5: detected capacity change from 0 to 512 [ 156.324140][ T3186] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 156.339825][ T3186] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: block 1803188595: comm syz.5.951: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 156.356537][ T3186] EXT4-fs (loop5): mount failed [ 157.023709][ T3220] tipc: Enabling of bearer rejected, failed to enable media [ 157.178065][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 157.231155][ T2781] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 157.454734][ T3227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'. [ 157.686120][ T2781] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.696397][ T2781] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 157.710322][ T2781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.719506][ T2781] usb 1-1: config 0 descriptor?? [ 157.786818][ T3254] kvm: vcpu 0: requested 131088 ns lapic timer period limited to 200000 ns [ 158.488699][ T3283] loop2: detected capacity change from 0 to 1024 [ 158.515975][ T3283] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 2: comm syz.2.991: lblock 2 mapped to illegal pblock 2 (length 1) [ 158.530105][ T3283] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 158.538265][ T3283] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 48: comm syz.2.991: lblock 0 mapped to illegal pblock 48 (length 1) [ 158.553551][ T3283] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 158.562405][ T3283] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.991: Failed to acquire dquot type 0 [ 158.574183][ T3283] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 158.583884][ T3283] EXT4-fs error (device loop2): ext4_evict_inode:285: inode #11: comm syz.2.991: mark_inode_dirty error [ 158.595286][ T3283] EXT4-fs warning (device loop2): ext4_evict_inode:288: couldn't mark inode dirty (err -117) [ 158.606106][ T3283] EXT4-fs (loop2): 1 orphan inode deleted [ 158.611938][ T3283] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 158.633880][ T1154] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 158.670045][ T1154] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 158.686180][ T1154] EXT4-fs error (device loop2): ext4_release_dquot:6263: comm kworker/u4:5: Failed to release dquot type 0 [ 158.699038][ T310] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 158.713745][ T310] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 158.722413][ T310] EXT4-fs error (device loop2): ext4_release_dquot:6263: comm kworker/u4:3: Failed to release dquot type 0 [ 158.734161][ T288] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 158.753568][ T288] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 158.763081][ T290] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 158.771412][ T288] EXT4-fs error (device loop2): ext4_quota_off:6533: inode #3: comm syz-executor: mark_inode_dirty error [ 158.820735][ T3294] loop2: detected capacity change from 0 to 256 [ 158.873669][ T30] audit: type=1400 audit(1780959028.526:471): avc: denied { remount } for pid=3293 comm="syz.2.993" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 159.159531][ T290] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.177210][ T290] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.211140][ T290] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.221303][ T290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.231032][ T30] audit: type=1400 audit(1780959028.858:472): avc: denied { read } for pid=3311 comm="syz.0.1001" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.232419][ T2781] usb 1-1: USB disconnect, device number 23 [ 160.147618][ T3341] usb usb9: usbfs: process 3341 (syz.0.1012) did not claim interface 0 before use [ 160.307404][ T1094] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 160.599861][ T1094] usb 7-1: Using ep0 maxpacket: 8 [ 160.773295][ T1094] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 160.781523][ T1094] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 160.793047][ T1094] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 160.803199][ T1094] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 160.814791][ T1094] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 160.825051][ T1094] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.838360][ T1094] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.847457][ T1094] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.057608][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 161.057628][ T30] audit: type=1400 audit(1780959030.548:474): avc: denied { map } for pid=3373 comm="syz.2.1027" path="socket:[29872]" dev="sockfs" ino=29872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 161.087701][ T30] audit: type=1400 audit(1780959030.548:475): avc: denied { accept } for pid=3373 comm="syz.2.1027" path="socket:[29872]" dev="sockfs" ino=29872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 161.578059][ T3383] ================================================================== [ 161.586174][ T3383] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 161.594335][ T3383] Read of size 8 at addr ffff88811e5429c0 by task syz.5.1029/3383 [ 161.602164][ T3383] [ 161.604535][ T3383] CPU: 1 PID: 3383 Comm: syz.5.1029 Not tainted syzkaller #0 [ 161.611905][ T3383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.621985][ T3383] Call Trace: [ 161.625284][ T3383] [ 161.628222][ T3383] __dump_stack+0x21/0x30 [ 161.632550][ T3383] dump_stack_lvl+0x110/0x170 [ 161.637238][ T3383] ? show_regs_print_info+0x20/0x20 [ 161.642438][ T3383] ? load_image+0x3e0/0x3e0 [ 161.646973][ T3383] print_address_description+0x7f/0x2c0 [ 161.652529][ T3383] ? tc_setup_flow_action+0x870/0x3240 [ 161.657989][ T3383] kasan_report+0xf1/0x140 [ 161.662514][ T3383] ? tc_setup_flow_action+0x870/0x3240 [ 161.667996][ T3383] __asan_report_load8_noabort+0x14/0x20 [ 161.673632][ T3383] tc_setup_flow_action+0x870/0x3240 [ 161.678918][ T3383] mall_replace_hw_filter+0x2cc/0x8b0 [ 161.684285][ T3383] ? pcpu_block_update_hint_alloc+0x8c4/0xc50 [ 161.690356][ T3383] ? mall_set_parms+0x520/0x520 [ 161.695200][ T3383] ? tcf_exts_destroy+0xb0/0xb0 [ 161.700061][ T3383] ? pcpu_alloc+0x1170/0x16e0 [ 161.704732][ T3383] ? mall_set_parms+0x1e8/0x520 [ 161.709580][ T3383] mall_change+0x544/0x760 [ 161.714000][ T3383] ? __kasan_check_write+0x14/0x20 [ 161.719119][ T3383] ? mall_get+0xa0/0xa0 [ 161.720621][ T461] usb 2-1: USB disconnect, device number 19 [ 161.723293][ T3383] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 161.735188][ T3383] ? mall_get+0xa0/0xa0 [ 161.739369][ T3383] tc_new_tfilter+0x142f/0x19b0 [ 161.744265][ T3383] ? tcf_gate_entry_destructor+0x20/0x20 [ 161.749927][ T3383] ? security_capable+0x87/0xb0 [ 161.754813][ T3383] ? ns_capable+0x8c/0xf0 [ 161.759165][ T3383] ? netlink_net_capable+0x125/0x160 [ 161.764478][ T3383] ? tcf_gate_entry_destructor+0x20/0x20 [ 161.770133][ T3383] rtnetlink_rcv_msg+0x871/0xce0 [ 161.775098][ T3383] ? rtnetlink_bind+0x80/0x80 [ 161.779797][ T3383] ? avc_has_perm_noaudit+0x391/0x490 [ 161.785195][ T3383] ? memcpy+0x56/0x70 [ 161.789224][ T3383] ? avc_has_perm_noaudit+0x30b/0x490 [ 161.794621][ T3383] ? arch_stack_walk+0xee/0x140 [ 161.799491][ T3383] ? avc_denied+0x1b0/0x1b0 [ 161.804018][ T3383] ? stack_trace_save+0xa6/0xf0 [ 161.808904][ T3383] ? avc_has_perm+0x163/0x250 [ 161.813606][ T3383] ? avc_has_perm_noaudit+0x490/0x490 [ 161.818972][ T3383] ? x64_sys_call+0x4b/0x9a0 [ 161.823573][ T3383] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 161.828937][ T3383] netlink_rcv_skb+0x1f5/0x440 [ 161.833696][ T3383] ? rtnetlink_bind+0x80/0x80 [ 161.838368][ T3383] ? netlink_ack+0xb50/0xb50 [ 161.842959][ T3383] ? __netlink_lookup+0x387/0x3b0 [ 161.847976][ T3383] rtnetlink_rcv+0x1c/0x20 [ 161.852392][ T3383] netlink_unicast+0x876/0xa40 [ 161.857180][ T3383] netlink_sendmsg+0x879/0xb80 [ 161.861966][ T3383] ? netlink_getsockopt+0x530/0x530 [ 161.867184][ T3383] ? do_futex+0xde8/0x2800 [ 161.871624][ T3383] ? security_socket_sendmsg+0x82/0xa0 [ 161.877103][ T3383] ? netlink_getsockopt+0x530/0x530 [ 161.882318][ T3383] ____sys_sendmsg+0x5b7/0x8f0 [ 161.887105][ T3383] ? __sys_sendmsg_sock+0x40/0x40 [ 161.892140][ T3383] ? import_iovec+0x7c/0xb0 [ 161.896677][ T3383] ___sys_sendmsg+0x236/0x2e0 [ 161.901456][ T3383] ? __sys_sendmsg+0x280/0x280 [ 161.906231][ T3383] ? __switch_to+0x515/0xe50 [ 161.910842][ T3383] ? __fdget+0x1a1/0x230 [ 161.915100][ T3383] __x64_sys_sendmsg+0x206/0x2f0 [ 161.920059][ T3383] ? ___sys_sendmsg+0x2e0/0x2e0 [ 161.924927][ T3383] ? __kasan_check_write+0x14/0x20 [ 161.930052][ T3383] ? switch_fpu_return+0x15d/0x2c0 [ 161.935182][ T3383] x64_sys_call+0x4b/0x9a0 [ 161.939618][ T3383] do_syscall_64+0x4c/0xa0 [ 161.944060][ T3383] ? clear_bhb_loop+0x50/0xa0 [ 161.948754][ T3383] ? clear_bhb_loop+0x50/0xa0 [ 161.953443][ T3383] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.959352][ T3383] RIP: 0033:0x7f556f996e59 [ 161.963773][ T3383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.983382][ T3383] RSP: 002b:00007f556e3f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.991794][ T3383] RAX: ffffffffffffffda RBX: 00007f556fc0ffa0 RCX: 00007f556f996e59 [ 161.999780][ T3383] RDX: 0000000020000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 162.007763][ T3383] RBP: 00007f556fa2cd6f R08: 0000000000000000 R09: 0000000000000000 [ 162.015736][ T3383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.023729][ T3383] R13: 00007f556fc10038 R14: 00007f556fc0ffa0 R15: 00007fff22630978 [ 162.031727][ T3383] [ 162.034755][ T3383] [ 162.037085][ T3383] Allocated by task 3383: [ 162.041412][ T3383] __kasan_kmalloc+0xda/0x110 [ 162.046098][ T3383] __kmalloc+0x13d/0x2c0 [ 162.050338][ T3383] tcf_idr_create+0x5f/0x790 [ 162.054926][ T3383] tcf_idr_create_from_flags+0x61/0x70 [ 162.060382][ T3383] tcf_gact_init+0x342/0x570 [ 162.064970][ T3383] tcf_action_init_1+0x3ff/0x6b0 [ 162.069903][ T3383] tcf_action_init+0x233/0x7a0 [ 162.074668][ T3383] tcf_exts_validate+0x24a/0x580 [ 162.079608][ T3383] mall_set_parms+0x48/0x520 [ 162.084192][ T3383] mall_change+0x478/0x760 [ 162.088603][ T3383] tc_new_tfilter+0x142f/0x19b0 [ 162.093453][ T3383] rtnetlink_rcv_msg+0x871/0xce0 [ 162.098389][ T3383] netlink_rcv_skb+0x1f5/0x440 [ 162.103158][ T3383] rtnetlink_rcv+0x1c/0x20 [ 162.107574][ T3383] netlink_unicast+0x876/0xa40 [ 162.112335][ T3383] netlink_sendmsg+0x879/0xb80 [ 162.117097][ T3383] ____sys_sendmsg+0x5b7/0x8f0 [ 162.121859][ T3383] ___sys_sendmsg+0x236/0x2e0 [ 162.126554][ T3383] __x64_sys_sendmsg+0x206/0x2f0 [ 162.131488][ T3383] x64_sys_call+0x4b/0x9a0 [ 162.135910][ T3383] do_syscall_64+0x4c/0xa0 [ 162.140325][ T3383] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.146217][ T3383] [ 162.148538][ T3383] The buggy address belongs to the object at ffff88811e542900 [ 162.148538][ T3383] which belongs to the cache kmalloc-192 of size 192 [ 162.162585][ T3383] The buggy address is located 0 bytes to the right of [ 162.162585][ T3383] 192-byte region [ffff88811e542900, ffff88811e5429c0) [ 162.176227][ T3383] The buggy address belongs to the page: [ 162.181851][ T3383] page:ffffea0004795080 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811e542a00 pfn:0x11e542 [ 162.193386][ T3383] flags: 0x4000000000000200(slab|zone=1) [ 162.199024][ T3383] raw: 4000000000000200 ffffea00045efb00 0000000200000002 ffff888100042c00 [ 162.207610][ T3383] raw: ffff88811e542a00 0000000080100009 00000001ffffffff 0000000000000000 [ 162.216202][ T3383] page dumped because: kasan: bad access detected [ 162.222608][ T3383] page_owner tracks the page as allocated [ 162.228334][ T3383] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 101, ts 45013277204, free_ts 45010595950 [ 162.244322][ T3383] post_alloc_hook+0x192/0x1b0 [ 162.249095][ T3383] prep_new_page+0x1c/0x110 [ 162.253598][ T3383] get_page_from_freelist+0x2d3a/0x2dc0 [ 162.259142][ T3383] __alloc_pages+0x1a2/0x460 [ 162.263732][ T3383] new_slab+0xa1/0x4d0 [ 162.267800][ T3383] ___slab_alloc+0x381/0x810 [ 162.272386][ T3383] __slab_alloc+0x49/0x90 [ 162.276715][ T3383] kmem_cache_alloc_trace+0x146/0x270 [ 162.282083][ T3383] kernfs_fop_open+0x343/0xb30 [ 162.286841][ T3383] do_dentry_open+0x834/0x1010 [ 162.291603][ T3383] vfs_open+0x73/0x80 [ 162.295587][ T3383] path_openat+0x26a6/0x2f20 [ 162.300279][ T3383] do_filp_open+0x1e2/0x410 [ 162.304802][ T3383] do_sys_openat2+0x15e/0x7f0 [ 162.309582][ T3383] __x64_sys_openat+0x136/0x160 [ 162.314437][ T3383] x64_sys_call+0x219/0x9a0 [ 162.318959][ T3383] page last free stack trace: [ 162.323624][ T3383] free_unref_page_prepare+0x542/0x550 [ 162.329081][ T3383] free_unref_page+0xae/0x540 [ 162.333759][ T3383] __free_pages+0x6c/0x100 [ 162.338180][ T3383] free_pages+0x82/0x90 [ 162.342333][ T3383] selinux_genfs_get_sid+0x20b/0x250 [ 162.347624][ T3383] inode_doinit_with_dentry+0x87a/0xd80 [ 162.353168][ T3383] selinux_d_instantiate+0x27/0x40 [ 162.358277][ T3383] security_d_instantiate+0x9e/0xf0 [ 162.363476][ T3383] d_splice_alias+0x6d/0x390 [ 162.368070][ T3383] kernfs_iop_lookup+0x2c2/0x310 [ 162.373004][ T3383] __lookup_slow+0x2b8/0x410 [ 162.377587][ T3383] lookup_slow+0x57/0x70 [ 162.381825][ T3383] walk_component+0x325/0x460 [ 162.386500][ T3383] path_lookupat+0x180/0x490 [ 162.391083][ T3383] filename_lookup+0x214/0x540 [ 162.395842][ T3383] user_path_at_empty+0x47/0x1c0 [ 162.400775][ T3383] [ 162.403094][ T3383] Memory state around the buggy address: [ 162.408713][ T3383] ffff88811e542880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 162.416785][ T3383] ffff88811e542900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 162.424852][ T3383] >ffff88811e542980: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 162.432996][ T3383] ^ [ 162.439143][ T3383] ffff88811e542a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 162.447203][ T3383] ffff88811e542a80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 162.455255][ T3383] ================================================================== [ 162.463314][ T3383] Disabling lock debugging due to kernel taint [ 162.576411][ T30] audit: type=1400 audit(1780959031.942:476): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 162.600797][ T30] audit: type=1400 audit(1780959031.942:477): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.625132][ T30] audit: type=1400 audit(1780959031.942:478): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.646574][ T30] audit: type=1400 audit(1780959031.942:479): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.676421][ T30] audit: type=1400 audit(1780959031.960:480): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.697282][ T30] audit: type=1400 audit(1780959031.960:481): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 162.720211][ T30] audit: type=1400 audit(1780959031.960:482): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 164.052581][ T336] usb 7-1: USB disconnect, device number 3