last executing test programs: 1m24.8331402s ago: executing program 32 (id=372): setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r2) sendmmsg$unix(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r1, r2}}}], 0x20}}], 0x1, 0x0) 59.372014234s ago: executing program 33 (id=1029): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 59.039687419s ago: executing program 34 (id=1037): syz_usb_connect(0x0, 0x36, &(0x7f00000011c0)={{0x12, 0x1, 0x0, 0x8e, 0x77, 0xe3, 0x40, 0x1b5c, 0x105, 0x1f1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xa4, 0xd3, 0x6f, 0x0, [], [{{0x9, 0x5, 0x4}}, {{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="05000000000000000000000000080000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}, 0x300}, 0x0) 55.401494854s ago: executing program 35 (id=1112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 44.590439611s ago: executing program 36 (id=1450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8000000}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x16b5, 0x41) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000180)={0x80, 0x6, 0x102, 0x0, 0x4b, 0x6, 0x0}) 37.367898103s ago: executing program 37 (id=1238): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xcf38, 0x0, 0x1000, 0xfffffbfd}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 36.729892662s ago: executing program 9 (id=1653): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 36.675792373s ago: executing program 9 (id=1655): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 36.595882314s ago: executing program 9 (id=1656): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 36.567029995s ago: executing program 9 (id=1657): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000340)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@discard_unit_section}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noextent_cache}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0x3}}]}, 0x3, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1d1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) 36.25013341s ago: executing program 9 (id=1665): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="00000900000019002a53fb8991f8e0"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001c40)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000001580), 0xffffffffffffff74, 0x8c441) 35.847892156s ago: executing program 9 (id=1667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) fchdir(r1) 35.837088596s ago: executing program 38 (id=1667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) fchdir(r1) 34.914194011s ago: executing program 6 (id=1685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000280)=""/145, 0x91}], 0x1, 0xa3, 0x3) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 34.610432905s ago: executing program 6 (id=1693): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 34.466175218s ago: executing program 6 (id=1698): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 34.452357048s ago: executing program 6 (id=1699): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000340)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@discard_unit_section}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noextent_cache}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0x3}}]}, 0x3, 0x5505, &(0x7f0000002480)="$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") mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1d1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) 34.145585382s ago: executing program 6 (id=1706): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) 33.955981065s ago: executing program 6 (id=1707): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 33.912553036s ago: executing program 39 (id=1707): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 33.895798796s ago: executing program 0 (id=1710): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) 33.866606167s ago: executing program 0 (id=1711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) faccessat2(r2, &(0x7f0000000000)='\x00', 0x2, 0x1100) 33.850417097s ago: executing program 0 (id=1712): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) 33.834310397s ago: executing program 0 (id=1713): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) rt_sigpending(0x0, 0x0) 33.816487967s ago: executing program 0 (id=1714): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800700, &(0x7f0000000c00)={[{@usrjquota}, {@block_validity}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}, {@bsdgroups}, {@resgid}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)) 33.796137548s ago: executing program 0 (id=1715): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x0, [{@dev}, {@multicast2}, {@local}]}]}}, @timestamp}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0x7, 0x4) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) 25.062879403s ago: executing program 3 (id=1952): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x30, r0, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x77}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) 24.959473934s ago: executing program 3 (id=1954): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e80)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000d80)={0x20, 0x1, 0x10, "12292083d584a74b1617cfacd7aec84f"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x31, "a3a8df52fa54a13f11465837a8c595d9067614c3199ec7080c125c5e8fb48f35042de965b5cf3438136f7de97f7c7add57"}, 0x0}) 21.944387931s ago: executing program 3 (id=2012): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r1 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r1], 0x20}}, 0x40816) 21.913388091s ago: executing program 3 (id=2014): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8f1018, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102) 21.886369941s ago: executing program 3 (id=2016): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000000)=""/19, 0x13}, {0x0}], &(0x7f0000000200)=[0xba], 0x11a}, 0x20) 21.769711384s ago: executing program 3 (id=2022): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r2}, 0xc) 21.721202104s ago: executing program 40 (id=2022): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r2}, 0xc) 21.715555165s ago: executing program 5 (id=2025): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 21.439192569s ago: executing program 5 (id=2032): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004fff7ffff000000000300000000000000000000000300000000000000000000000000000200000000000000000000000602"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 21.381958909s ago: executing program 5 (id=2034): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r1) 21.35602051s ago: executing program 5 (id=2036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) statx(0xffffffffffffffff, 0x0, 0x6000, 0x40, 0x0) 21.31428288s ago: executing program 5 (id=2038): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000300), 0x5, 0x4a7, &(0x7f0000001140)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) 20.439788044s ago: executing program 5 (id=2048): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x423}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0, 0x0}, 0x0) 18.483205114s ago: executing program 41 (id=1715): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x0, [{@dev}, {@multicast2}, {@local}]}]}}, @timestamp}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0x7, 0x4) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) 5.347854937s ago: executing program 42 (id=2048): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x423}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0, 0x0}, 0x0) 1.90970924s ago: executing program 8 (id=2539): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.87501874s ago: executing program 8 (id=2544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) statx(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) 1.838106721s ago: executing program 8 (id=2546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x1, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x5000, 0x0, 0x8, 0x0, 0x0, 0x3, 0xff, 0x2, 0x0, 0x0, 0x4}, {0x2000, 0x3000, 0x9, 0xfe, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c, 0x2, 0x6}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x6, 0x80}, {0x8080000, 0x8080000, 0xa, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x5000, 0x80a0000, 0x0, 0x0, 0x6, 0x3, 0x7f, 0xa, 0x26}, {0x80a0000, 0xfffd}, {0xffff1000}, 0xfdfcffcb, 0x0, 0x80a0000, 0x28, 0xb, 0xf801, 0x0, [0x40000000000, 0x0, 0x5, 0x7]}) 1.744677432s ago: executing program 8 (id=2549): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pselect6(0x2a, 0x0, 0x0, 0x0, 0x0, 0x0) 1.303047009s ago: executing program 2 (id=2572): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) 1.27906296s ago: executing program 2 (id=2574): socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x400000000080803, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000002c0)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x8}}) 1.25266603s ago: executing program 2 (id=2575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) 1.25215984s ago: executing program 2 (id=2576): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0xc000, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file5\x00', 0x240882, 0x0) sync_file_range(r0, 0x0, 0x0, 0x5) 1.24532052s ago: executing program 7 (id=2577): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=0x0]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)) 1.195921241s ago: executing program 2 (id=2578): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x20) getrusage(0x1, &(0x7f00000004c0)) 1.195416111s ago: executing program 2 (id=2580): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$printer(r0, 0x0, 0x0) 883.968296ms ago: executing program 8 (id=2592): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x6b, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0xfffffffe, 0x4e, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfe2e) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) 844.256207ms ago: executing program 8 (id=2594): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000200)={0x70005, 0x200}) 375.795753ms ago: executing program 7 (id=2621): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 340.120364ms ago: executing program 4 (id=2624): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000c40)={{0x3, 0x0, 0x80, {0x10000, 0x4000}}, "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", "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"}) 283.893245ms ago: executing program 7 (id=2625): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8000) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNDETACHFILTER(r1, 0x541b, 0x20000000) 283.677095ms ago: executing program 7 (id=2626): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 162.629307ms ago: executing program 4 (id=2627): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc0008"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 151.637187ms ago: executing program 7 (id=2628): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) unshare(0x6020400) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x3}) 108.147538ms ago: executing program 4 (id=2629): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 107.689278ms ago: executing program 1 (id=2630): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) unshare(0x2c020400) r2 = dup3(r1, r0, 0x0) ioctl$RTC_PIE_ON(r2, 0xc00c6211) 97.839188ms ago: executing program 4 (id=2631): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) 63.293018ms ago: executing program 1 (id=2632): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4ed, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r0, 0x1) flock(r0, 0x2) 62.745388ms ago: executing program 4 (id=2633): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x6, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)={0x14, 0x22, 0x601, 0x0, 0x0, "", [@nested={0x4, 0x13f}]}, 0x14}], 0x1}, 0x0) 42.361878ms ago: executing program 1 (id=2634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 41.919559ms ago: executing program 4 (id=2635): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/39, 0x27}, 0x3ff}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 8.398699ms ago: executing program 1 (id=2636): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc0386723, 0x0) 8.260309ms ago: executing program 1 (id=2637): sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0) sigaltstack(&(0x7f0000000280)={0x0, 0x80000001}, &(0x7f0000000340)={0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x5dd6, &(0x7f0000000180)={0x0, 0xa0bc, 0x8, 0x2, 0x4b}) 8.113039ms ago: executing program 1 (id=2638): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8}}, 0x30) syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[], 0x0) 0s ago: executing program 7 (id=2639): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): acity change from 0 to 512 [ 73.349206][ T3293] device ip6tnl1 entered promiscuous mode [ 73.355593][ T3289] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 73.364409][ T3289] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.388133][ T3254] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 73.403050][ T3022] EXT4-fs error (device loop8): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /22/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 73.499090][ T1218] usb 8-1: USB disconnect, device number 4 [ 73.849259][ T3321] device batadv_slave_0 entered promiscuous mode [ 73.856124][ T3320] device batadv_slave_0 left promiscuous mode [ 73.995857][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 73.995874][ T28] audit: type=1326 audit(2000000005.790:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3328 comm="syz.0.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2b18d169 code=0x7ffc0000 [ 74.074763][ T28] audit: type=1326 audit(2000000005.830:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3328 comm="syz.0.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a2b129359 code=0x7ffc0000 [ 74.135572][ T28] audit: type=1326 audit(2000000005.830:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3328 comm="syz.0.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a2b129359 code=0x7ffc0000 [ 74.212925][ T28] audit: type=1326 audit(2000000005.830:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3328 comm="syz.0.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2b18d169 code=0x7ffc0000 [ 74.284877][ T28] audit: type=1326 audit(2000000005.830:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3328 comm="syz.0.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a2b129359 code=0x7ffc0000 [ 74.344741][ T28] audit: type=1326 audit(2000000005.830:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3328 comm="syz.0.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a2b129359 code=0x7ffc0000 [ 74.372556][ T3343] loop7: detected capacity change from 0 to 1024 [ 74.388720][ T3343] EXT4-fs: Ignoring removed nobh option [ 74.404185][ T3343] EXT4-fs: Ignoring removed bh option [ 74.417904][ T28] audit: type=1326 audit(2000000005.830:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3328 comm="syz.0.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a2b129359 code=0x7ffc0000 [ 74.441212][ T3343] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.452854][ T28] audit: type=1326 audit(2000000005.830:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3328 comm="syz.0.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9a2b129359 code=0x7ffc0000 [ 74.482894][ T28] audit: type=1326 audit(2000000005.830:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3328 comm="syz.0.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2b18d169 code=0x7ffc0000 [ 74.507500][ T3343] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 74.546136][ T28] audit: type=1326 audit(2000000005.830:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3328 comm="syz.0.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a2b18d169 code=0x7ffc0000 [ 74.585289][ T3343] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3841: comm syz.7.1258: Allocating blocks 497-513 which overlap fs metadata [ 74.616945][ T3343] EXT4-fs (loop7): pa ffff8881006182a0: logic 256, phys. 385, len 8 [ 74.624807][ T3343] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 74.639831][ T3350] EXT4-fs error (device loop7): mb_free_blocks:1815: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 74.688970][ T2817] EXT4-fs (loop7): unmounting filesystem. [ 74.807751][ T3372] binder: 3365:3372 ioctl c0306201 0 returned -14 [ 74.903165][ T3377] loop6: detected capacity change from 0 to 128 [ 74.911064][ T3377] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 74.919631][ T3377] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.970263][ T2808] EXT4-fs (loop6): unmounting filesystem. [ 74.996195][ T3380] loop6: detected capacity change from 0 to 1024 [ 75.004082][ T3380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.011350][ T3380] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.022581][ T3380] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.032881][ T3380] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 75.051787][ T2808] EXT4-fs (loop6): unmounting filesystem. [ 75.081147][ T3386] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1275'. [ 75.194833][ T3395] loop6: detected capacity change from 0 to 256 [ 75.471956][ T3408] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 75.600848][ T3419] incfs: Options parsing error. -22 [ 75.605933][ T3419] incfs: mount failed -22 [ 75.660847][ T3430] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1293'. [ 75.747790][ T3442] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1296'. [ 75.758582][ T3442] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1296'. [ 75.853321][ T3451] binder: 3450:3451 ioctl c0306201 200000000080 returned -14 [ 75.918442][ T3455] loop5: detected capacity change from 0 to 2048 [ 75.927856][ T3455] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 75.951327][ T1241] EXT4-fs (loop5): unmounting filesystem. [ 75.978681][ T3464] loop5: detected capacity change from 0 to 16 [ 75.985188][ T3464] erofs: (device loop5): mounted with root inode @ nid 36. [ 75.997417][ T3464] syz.5.1306: attempt to access beyond end of device [ 75.997417][ T3464] loop5: rw=524288, sector=7864328, nr_sectors = 8 limit=16 [ 76.011715][ T3464] syz.5.1306: attempt to access beyond end of device [ 76.011715][ T3464] loop5: rw=0, sector=7864328, nr_sectors = 8 limit=16 [ 76.164129][ T3481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3481 comm=syz.5.1313 [ 76.252500][ T3488] loop7: detected capacity change from 0 to 512 [ 76.260671][ T3488] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 76.297726][ T3488] EXT4-fs (loop7): 1 truncate cleaned up [ 76.303252][ T3488] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 76.324867][ T3488] EXT4-fs error (device loop7): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.7.1316: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 76.358397][ T3488] EXT4-fs error (device loop7) in ext4_delete_entry:2800: Corrupt filesystem [ 76.379474][ T2817] EXT4-fs (loop7): unmounting filesystem. [ 76.721384][ T3513] loop7: detected capacity change from 0 to 40427 [ 76.728290][ T3513] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 76.735880][ T3513] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 76.744706][ T3513] F2FS-fs (loop7): invalid crc value [ 76.752508][ T3513] F2FS-fs (loop7): Found nat_bits in checkpoint [ 76.786402][ T19] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 76.810526][ T3513] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 76.817488][ T3513] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 76.987405][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.002399][ T19] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 77.011396][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.020546][ T19] usb 7-1: config 0 descriptor?? [ 77.435146][ T19] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 77.448075][ T19] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0018/input/input16 [ 77.530389][ T19] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 77.634979][ T3569] IPv6: syztnl0: Disabled Multicast RS [ 77.752225][ T892] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.964083][ T60] usb 7-1: USB disconnect, device number 3 [ 78.527686][ T3661] device veth1_macvtap left promiscuous mode [ 78.624874][ T3665] loop6: detected capacity change from 0 to 1024 [ 78.638031][ T3665] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 78.646400][ T3665] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.665708][ T892] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 78.680759][ T892] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 78.693311][ T892] EXT4-fs (loop6): This should not happen!! Data will be lost [ 78.693311][ T892] [ 78.703010][ T892] EXT4-fs (loop6): Total free blocks count 0 [ 78.709033][ T892] EXT4-fs (loop6): Free/Dirty block details [ 78.714951][ T892] EXT4-fs (loop6): free_blocks=4293918720 [ 78.720840][ T892] EXT4-fs (loop6): dirty_blocks=16 [ 78.725815][ T892] EXT4-fs (loop6): Block reservation details [ 78.731765][ T892] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 78.738336][ T2808] EXT4-fs (loop6): unmounting filesystem. [ 79.290717][ T3704] loop5: detected capacity change from 0 to 128 [ 79.314027][ T3706] loop0: detected capacity change from 0 to 1024 [ 79.320544][ T3706] EXT4-fs: Ignoring removed nobh option [ 79.325919][ T3706] EXT4-fs: Ignoring removed bh option [ 79.344484][ T3706] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.378853][ T3706] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 79.390985][ T3713] netem: change failed [ 79.405391][ T3706] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 79.428660][ T300] EXT4-fs (loop0): unmounting filesystem. [ 79.472978][ T3722] loop6: detected capacity change from 0 to 1024 [ 79.480244][ T3722] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 79.571350][ T3730] loop6: detected capacity change from 0 to 1024 [ 79.577987][ T3730] EXT4-fs: Ignoring removed nobh option [ 79.583434][ T3730] EXT4-fs: Ignoring removed bh option [ 79.588903][ T3730] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.608227][ T3730] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 79.631407][ T3730] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3841: comm syz.6.1413: Allocating blocks 497-513 which overlap fs metadata [ 79.645427][ T3730] EXT4-fs (loop6): pa ffff888100618dc8: logic 256, phys. 385, len 8 [ 79.653263][ T3730] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 79.674739][ T3730] EXT4-fs error (device loop6): mb_free_blocks:1815: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 79.711029][ T2808] EXT4-fs (loop6): unmounting filesystem. [ 79.806512][ T2686] Bluetooth: hci0: command 0x1003 tx timeout [ 79.812404][ T2481] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.306368][ T19] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 80.348548][ T28] kauditd_printk_skb: 296 callbacks suppressed [ 80.348566][ T28] audit: type=1400 audit(2000000012.206:1490): avc: denied { set_context_mgr } for pid=3768 comm="syz.0.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 80.349474][ T3769] binder: 3768:3769 ioctl c0306201 200000000480 returned -14 [ 80.487434][ T19] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.506685][ T19] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.527195][ T19] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 80.536199][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 80.542080][ T3785] loop5: detected capacity change from 0 to 1024 [ 80.550639][ T3785] EXT4-fs: Ignoring removed nobh option [ 80.556115][ T19] usb 7-1: SerialNumber: syz [ 80.556591][ T3785] EXT4-fs: Ignoring removed bh option [ 80.578303][ T3785] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.613756][ T3785] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 80.639199][ T3785] EXT4-fs error (device loop5): mb_free_blocks:1815: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 80.668679][ T1241] EXT4-fs (loop5): unmounting filesystem. [ 80.777238][ T19] usb 7-1: 0:2 : does not exist [ 80.783574][ T19] usb 7-1: USB disconnect, device number 4 [ 80.874388][ T3804] loop7: detected capacity change from 0 to 1024 [ 80.883332][ T3804] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 80.893031][ T3804] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 80.909234][ T3804] EXT4-fs error (device loop7): ext4_get_journal_inode:5710: inode #5: comm syz.7.1445: unexpected bad inode w/o EXT4_IGET_BAD [ 80.942782][ T3804] EXT4-fs (loop7): no journal found [ 80.947860][ T3804] EXT4-fs (loop7): can't get journal size [ 80.975144][ T3804] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 81.008440][ T2817] EXT4-fs error (device loop7): __ext4_iget:5057: inode #15: block 1803188595: comm syz-executor: invalid block [ 81.030605][ T2817] EXT4-fs error (device loop7): __ext4_iget:5057: inode #15: block 1803188595: comm syz-executor: invalid block [ 81.128846][ T2817] EXT4-fs (loop7): unmounting filesystem. [ 81.149004][ T3812] loop5: detected capacity change from 0 to 256 [ 81.171741][ T3812] FAT-fs (loop5): Directory bread(block 64) failed [ 81.188022][ T3812] FAT-fs (loop5): Directory bread(block 65) failed [ 81.194611][ T3812] FAT-fs (loop5): Directory bread(block 66) failed [ 81.214436][ T3812] FAT-fs (loop5): Directory bread(block 67) failed [ 81.227338][ T3812] FAT-fs (loop5): Directory bread(block 68) failed [ 81.247226][ T3812] FAT-fs (loop5): Directory bread(block 69) failed [ 81.253610][ T3812] FAT-fs (loop5): Directory bread(block 70) failed [ 81.286347][ T3812] FAT-fs (loop5): Directory bread(block 71) failed [ 81.326349][ T3812] FAT-fs (loop5): Directory bread(block 72) failed [ 81.332708][ T3812] FAT-fs (loop5): Directory bread(block 73) failed [ 81.369838][ T28] audit: type=1400 audit(2000000013.226:1491): avc: denied { watch } for pid=3811 comm="syz.5.1449" path="/208/bus" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 81.469207][ T3817] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.473202][ T3824] loop5: detected capacity change from 0 to 2048 [ 81.476070][ T3817] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.496172][ T3817] device bridge_slave_0 entered promiscuous mode [ 81.503227][ T3817] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.510142][ T3817] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.519153][ T3817] device bridge_slave_1 entered promiscuous mode [ 81.526826][ T3824] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802e02c, mo2=0002] [ 81.536187][ T28] audit: type=1400 audit(2000000013.386:1492): avc: denied { relabelfrom } for pid=3827 comm="syz.6.1455" name="UDPv6" dev="sockfs" ino=31268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 81.545488][ T3824] System zones: [ 81.582007][ T28] audit: type=1400 audit(2000000013.416:1493): avc: denied { relabelto } for pid=3827 comm="syz.6.1455" name="UDPv6" dev="sockfs" ino=31268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 81.582314][ T3824] 0-7 [ 81.649630][ T3824] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 81.727157][ T904] device bridge_slave_1 left promiscuous mode [ 81.733254][ T904] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.756740][ T904] device bridge_slave_0 left promiscuous mode [ 81.762709][ T904] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.794601][ T904] device veth1_macvtap left promiscuous mode [ 81.805950][ T904] device veth0_vlan left promiscuous mode [ 82.000290][ T3824] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1454: bg 0: block 234: padding at end of block bitmap is not set [ 82.001650][ T3817] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.021250][ T3817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.028365][ T3817] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.035118][ T3817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.042415][ T3824] EXT4-fs (loop5): Remounting filesystem read-only [ 82.123937][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.135358][ T892] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.146551][ T892] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.196557][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.204795][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.226645][ T892] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.233519][ T892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.256549][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.264778][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.286597][ T892] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.293457][ T892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.301295][ T1241] EXT4-fs (loop5): unmounting filesystem. [ 82.307838][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.323491][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.339971][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.347984][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.356134][ T3842] device veth1_macvtap left promiscuous mode [ 82.391501][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.405354][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.442450][ T3817] device veth0_vlan entered promiscuous mode [ 82.453312][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.477209][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.487519][ T3846] loop6: detected capacity change from 0 to 1024 [ 82.498269][ T3846] EXT4-fs: Ignoring removed i_version option [ 82.504515][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.515031][ T3846] EXT4-fs (loop6): Test dummy encryption mode enabled [ 82.516827][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.548045][ T3846] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 82.557332][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.577771][ T2808] EXT4-fs (loop6): unmounting filesystem. [ 82.583698][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.608235][ T3817] device veth1_macvtap entered promiscuous mode [ 82.633153][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.641229][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.661004][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.682451][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.697005][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.726131][ T3857] loop5: detected capacity change from 0 to 1024 [ 82.744288][ T3857] EXT4-fs: Ignoring removed nobh option [ 82.753995][ T3857] EXT4-fs: Ignoring removed bh option [ 82.769954][ T3857] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.807626][ T3857] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 82.870537][ T3857] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3841: comm syz.5.1465: Allocating blocks 497-513 which overlap fs metadata [ 82.904859][ T3857] EXT4-fs (loop5): pa ffff88813233b1f8: logic 256, phys. 385, len 8 [ 82.912739][ T3857] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 82.951112][ T3870] EXT4-fs error (device loop5): mb_free_blocks:1815: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 83.027339][ T422] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 83.038553][ T1241] EXT4-fs (loop5): unmounting filesystem. [ 83.066674][ T3883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1476'. [ 83.093408][ T3888] loop0: detected capacity change from 0 to 512 [ 83.101240][ T3886] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 83.101388][ T3888] EXT4-fs: Ignoring removed oldalloc option [ 83.116873][ T3888] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.127072][ T28] audit: type=1400 audit(2000000014.986:1494): avc: denied { relabelto } for pid=3884 comm="syz.9.1477" name="7" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 83.154322][ T3888] EXT4-fs (loop0): 1 truncate cleaned up [ 83.159864][ T3888] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.184667][ T3892] loop9: detected capacity change from 0 to 128 [ 83.193537][ T28] audit: type=1400 audit(2000000014.986:1495): avc: denied { associate } for pid=3884 comm="syz.9.1477" name="7" dev="tmpfs" ino=48 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 83.220654][ T28] audit: type=1400 audit(2000000015.026:1496): avc: denied { write } for pid=3817 comm="syz-executor" name="7" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 83.248033][ T3892] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 83.256473][ T28] audit: type=1400 audit(2000000015.026:1497): avc: denied { remove_name } for pid=3817 comm="syz-executor" name="binderfs" dev="tmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 83.283821][ T422] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.295774][ T300] EXT4-fs (loop0): unmounting filesystem. [ 83.301636][ T3892] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.316376][ T422] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.325938][ T422] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 83.336485][ T28] audit: type=1400 audit(2000000015.026:1498): avc: denied { rmdir } for pid=3817 comm="syz-executor" name="7" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 83.351159][ T3892] fscrypt (loop9, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 83.374537][ T422] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.385024][ T422] usb 7-1: config 0 descriptor?? [ 83.415503][ T3817] EXT4-fs (loop9): unmounting filesystem. [ 83.444789][ T28] audit: type=1400 audit(2000000015.296:1499): avc: denied { create } for pid=3901 comm="syz.9.1483" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.793963][ T422] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 83.803083][ T3923] netlink: 'syz.5.1493': attribute type 1 has an invalid length. [ 83.811492][ T422] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 83.816697][ T3923] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1493'. [ 83.829318][ T3926] loop9: detected capacity change from 0 to 4096 [ 83.837996][ T3926] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 83.848092][ T422] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 83.864396][ T3817] EXT4-fs (loop9): unmounting filesystem. [ 83.875966][ T422] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 83.898209][ T422] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 83.916466][ T422] playstation 0003:054C:0DF2.0019: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 83.931496][ T3932] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 83.941318][ T3932] overlayfs: missing 'lowerdir' [ 84.282891][ T3956] SELinux: Context Ž is not valid (left unmapped). [ 84.401416][ T422] playstation 0003:054C:0DF2.0019: Failed to retrieve feature with reportID 5: -71 [ 84.416162][ T422] playstation 0003:054C:0DF2.0019: Failed to retrieve DualSense calibration info: -71 [ 84.442887][ T422] playstation 0003:054C:0DF2.0019: Failed to get calibration data from DualSense [ 84.467553][ T422] playstation 0003:054C:0DF2.0019: Failed to create dualsense. [ 84.490520][ T422] playstation: probe of 0003:054C:0DF2.0019 failed with error -71 [ 84.517584][ T422] usb 7-1: USB disconnect, device number 5 [ 84.817427][ T3984] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1520'. [ 84.873580][ T3988] loop5: detected capacity change from 0 to 512 [ 84.901151][ T3988] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1522: bg 0: block 7: invalid block bitmap [ 84.922326][ T3988] EXT4-fs (loop5): Remounting filesystem read-only [ 84.939143][ T3988] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 84.942254][ T3991] loop6: detected capacity change from 0 to 512 [ 84.947869][ T3988] EXT4-fs (loop5): Remounting filesystem read-only [ 84.960361][ T3988] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2925: inode #11: comm syz.5.1522: corrupted xattr block 95 [ 84.976352][ T3988] EXT4-fs (loop5): Remounting filesystem read-only [ 84.989162][ T3988] EXT4-fs warning (device loop5): ext4_evict_inode:299: xattr delete (err -117) [ 84.990994][ T3961] loop0: detected capacity change from 0 to 131072 [ 85.004925][ T3961] F2FS-fs (loop0): Invalid log_blocksize (32), supports only 12 [ 85.006148][ T3991] EXT4-fs warning (device loop6): ext4_enable_quotas:7017: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 85.012662][ T3961] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 85.027875][ T3988] EXT4-fs (loop5): 1 orphan inode deleted [ 85.035612][ T3991] EXT4-fs (loop6): mount failed [ 85.046449][ T3988] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 85.061208][ T3961] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.116099][ T3998] loop6: detected capacity change from 0 to 512 [ 85.123800][ T3961] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 85.130857][ T3961] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 85.147609][ T3998] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.599913][ T4033] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 85.633518][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 85.633534][ T28] audit: type=1400 audit(2000000017.486:1501): avc: denied { shutdown } for pid=4035 comm="syz.6.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.906830][ T28] audit: type=1326 audit(2000000017.766:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.9.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed17d8d169 code=0x7ffc0000 [ 85.966478][ T28] audit: type=1326 audit(2000000017.766:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.9.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed17d8d169 code=0x7ffc0000 [ 85.996101][ T4042] loop6: detected capacity change from 0 to 40427 [ 86.013107][ T4042] F2FS-fs (loop6): Image doesn't support compression [ 86.020776][ T28] audit: type=1326 audit(2000000017.786:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.9.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed17d8d169 code=0x7ffc0000 [ 86.046450][ T4042] F2FS-fs (loop6): invalid crc value [ 86.063529][ T4042] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 86.081688][ T28] audit: type=1326 audit(2000000017.786:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.9.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed17d8d169 code=0x7ffc0000 [ 86.110194][ T4042] F2FS-fs (loop6): Found nat_bits in checkpoint [ 86.184888][ T28] audit: type=1326 audit(2000000017.786:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.9.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed17d8d169 code=0x7ffc0000 [ 86.210397][ T28] audit: type=1326 audit(2000000017.786:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.9.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fed17d8d169 code=0x7ffc0000 [ 86.234864][ T4042] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 86.301273][ T28] audit: type=1326 audit(2000000017.786:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.9.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed17d8d169 code=0x7ffc0000 [ 86.325940][ T28] audit: type=1326 audit(2000000017.786:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.9.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed17d8d169 code=0x7ffc0000 [ 86.359560][ T2808] syz-executor: attempt to access beyond end of device [ 86.359560][ T2808] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.359596][ T28] audit: type=1326 audit(2000000017.786:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.9.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed17d8d169 code=0x7ffc0000 [ 86.470622][ T4098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1568'. [ 86.605687][ T4108] loop5: detected capacity change from 0 to 8192 [ 86.677379][ T4119] bridge0: port 3(gretap0) entered blocking state [ 86.685219][ T4119] bridge0: port 3(gretap0) entered disabled state [ 86.705460][ T4119] device gretap0 entered promiscuous mode [ 86.712820][ T4119] bridge0: port 3(gretap0) entered blocking state [ 86.719101][ T4119] bridge0: port 3(gretap0) entered forwarding state [ 86.728568][ T4119] device gretap0 left promiscuous mode [ 86.735458][ T4119] bridge0: port 3(gretap0) entered disabled state [ 86.884658][ T4138] loop6: detected capacity change from 0 to 256 [ 86.901255][ T4138] exfat: Deprecated parameter 'utf8' [ 86.916664][ T4138] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 86.977682][ T4141] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1587'. [ 86.994798][ T4117] loop0: detected capacity change from 0 to 40427 [ 87.017555][ T4117] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 87.031292][ T4143] loop6: detected capacity change from 0 to 512 [ 87.055518][ T4117] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 87.087312][ T4143] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.107129][ T4117] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.128473][ T4143] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 87.240455][ T4117] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 87.257098][ T4153] tmpfs: Unknown parameter 'nolazytimeÙþ' [ 87.281295][ T4117] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 87.297575][ T4117] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 87.312352][ T4161] loop9: detected capacity change from 0 to 128 [ 87.357002][ T4161] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.387698][ T4161] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.387807][ T4117] syz.0.1576: attempt to access beyond end of device [ 87.387807][ T4117] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 87.420352][ T904] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.481878][ T4168] syz.0.1576: attempt to access beyond end of device [ 87.481878][ T4168] loop0: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 87.522233][ T4117] syz.0.1576: attempt to access beyond end of device [ 87.522233][ T4117] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 87.562069][ T4176] x_tables: unsorted entry at hook 2 [ 87.628826][ T4181] loop9: detected capacity change from 0 to 2048 [ 87.663908][ T4181] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802e02c, mo2=0002] [ 87.707014][ T4181] System zones: 0-7 [ 87.806846][ T4191] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1606'. [ 87.857029][ T4193] loop5: detected capacity change from 0 to 1024 [ 87.984163][ T4207] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1605'. [ 87.994535][ T4205] binder: 4204:4205 ioctl c0306201 2000000001c0 returned -14 [ 88.273151][ T4190] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1602: bg 0: block 234: padding at end of block bitmap is not set [ 88.302712][ T4190] EXT4-fs (loop9): Remounting filesystem read-only [ 88.663284][ T4269] loop9: detected capacity change from 0 to 1024 [ 88.669986][ T4269] EXT4-fs: Ignoring removed oldalloc option [ 88.675774][ T4269] EXT4-fs: Ignoring removed bh option [ 88.681557][ T4269] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.704007][ T4269] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3841: comm syz.9.1640: Allocating blocks 481-513 which overlap fs metadata [ 88.719262][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.727239][ T4269] EXT4-fs (loop9): pa ffff8881438fbf18: logic 0, phys. 465, len 3 [ 88.735177][ T4269] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 88.745228][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.753053][ T4265] device bridge_slave_0 entered promiscuous mode [ 88.761079][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.768065][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.776159][ T4265] device bridge_slave_1 entered promiscuous mode [ 88.864414][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.871427][ T4265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.878528][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.885372][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.924705][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.933840][ T4294] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 88.943318][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.956083][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.972271][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.997736][ T504] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.004620][ T504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.012939][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.021536][ T504] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.028427][ T504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.054289][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.077357][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.095911][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.107365][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.121801][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.129581][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.138111][ T4265] device veth0_vlan entered promiscuous mode [ 89.159134][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.172341][ T4265] device veth1_macvtap entered promiscuous mode [ 89.184840][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.206676][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.261196][ T4318] loop3: detected capacity change from 0 to 256 [ 89.270255][ T4318] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 89.276422][ T19] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 89.356366][ T422] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 89.400825][ T4313] loop9: detected capacity change from 0 to 40427 [ 89.408017][ T4313] F2FS-fs (loop9): fault_injection options not supported [ 89.414914][ T4313] F2FS-fs (loop9): Image doesn't support compression [ 89.425432][ T4313] F2FS-fs (loop9): Image doesn't support compression [ 89.432027][ T4313] F2FS-fs (loop9): fault_type options not supported [ 89.439759][ T4313] F2FS-fs (loop9): invalid crc value [ 89.445779][ T4313] F2FS-fs (loop9): Found nat_bits in checkpoint [ 89.482790][ T4313] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 89.490258][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 89.496391][ T19] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.507211][ T19] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.516840][ T19] usb 1-1: config 0 interface 0 has no altsetting 0 [ 89.523302][ T19] usb 1-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 89.532227][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.534303][ T3817] syz-executor: attempt to access beyond end of device [ 89.534303][ T3817] loop9: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 89.541468][ T19] usb 1-1: config 0 descriptor?? [ 89.555861][ T3817] syz-executor: attempt to access beyond end of device [ 89.555861][ T3817] loop9: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 89.573312][ T422] usb 7-1: not running at top speed; connect to a high speed hub [ 89.585279][ T422] usb 7-1: config 95 has an invalid interface number: 1 but max is 0 [ 89.593251][ T422] usb 7-1: config 95 has no interface number 0 [ 89.599225][ T422] usb 7-1: config 95 interface 1 has no altsetting 0 [ 89.604520][ T892] kworker/u4:16: attempt to access beyond end of device [ 89.604520][ T892] loop9: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 89.607483][ T422] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 89.628473][ T422] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.636249][ T422] usb 7-1: Product: syz [ 89.641866][ T422] usb 7-1: Manufacturer: syz [ 89.646342][ T422] usb 7-1: SerialNumber: syz [ 89.713682][ T319] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 89.721866][ T1218] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.730064][ T319] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 89.737399][ T319] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 89.744734][ T319] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 89.751895][ T319] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x2 [ 89.759110][ T319] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 89.766376][ T319] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 89.773729][ T319] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 89.781016][ T319] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 89.788152][ T319] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 89.795351][ T319] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 89.802560][ T319] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 89.809775][ T319] hid-generic 00A0:0006:0003.001A: unknown main item tag 0x0 [ 89.817597][ T319] hid-generic 00A0:0006:0003.001A: hidraw0: HID v0.05 Device [syz1] on syz0 [ 89.837257][ T324] device bridge_slave_1 left promiscuous mode [ 89.843275][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.850778][ T324] device bridge_slave_0 left promiscuous mode [ 89.856891][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.865048][ T324] device veth1_macvtap left promiscuous mode [ 89.871189][ T324] device veth0_vlan left promiscuous mode [ 89.878053][ T422] usb 7-1: USB disconnect, device number 6 [ 89.927230][ T1218] usb 4-1: Using ep0 maxpacket: 16 [ 89.940366][ T1218] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.961617][ T1218] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.977150][ T19] hid (null): global environment stack underflow [ 89.987088][ T19] hid (null): invalid report_count 32706 [ 89.992594][ T19] hid (null): global environment stack underflow [ 89.998833][ T1218] usb 4-1: config 0 interface 0 has no altsetting 0 [ 90.005264][ T1218] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 90.015725][ T19] hid (null): unknown global tag 0xc [ 90.022627][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.030636][ T19] hid (null): bogus close delimiter [ 90.035705][ T19] hid (null): report_id 66874574 is invalid [ 90.042126][ T1218] usb 4-1: config 0 descriptor?? [ 90.047071][ T19] hid (null): unknown global tag 0xd [ 90.052285][ T19] hid (null): unknown global tag 0x7e [ 90.060372][ T19] hid (null): invalid report_size 28216 [ 90.071667][ T19] hid-generic 0003:060B:430A.001B: unexpected long global item [ 90.079528][ T19] hid-generic: probe of 0003:060B:430A.001B failed with error -22 [ 90.103523][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.111109][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.118564][ T4334] device bridge_slave_0 entered promiscuous mode [ 90.126066][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.133378][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.140792][ T4334] device bridge_slave_1 entered promiscuous mode [ 90.191414][ T422] usb 1-1: USB disconnect, device number 11 [ 90.218619][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.225512][ T4334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.232605][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.239382][ T4334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.246549][ T19] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 90.268990][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.277492][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.284658][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.294586][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.302679][ T504] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.309554][ T504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.319426][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.327532][ T504] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.334465][ T504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.348373][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.357590][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.380229][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.403905][ T4334] device veth0_vlan entered promiscuous mode [ 90.410362][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.418775][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.426102][ T504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.438077][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.448309][ T4342] bridge0: port 3(vlan2) entered blocking state [ 90.454368][ T4342] bridge0: port 3(vlan2) entered disabled state [ 90.456318][ T19] usb 6-1: Using ep0 maxpacket: 16 [ 90.461278][ T4342] device vlan2 entered promiscuous mode [ 90.471013][ T4342] bridge0: mtu less than device minimum [ 90.471931][ T1218] hid (null): global environment stack underflow [ 90.485444][ T19] usb 6-1: config 0 has no interfaces? [ 90.493204][ T19] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 90.494559][ T4334] device veth1_macvtap entered promiscuous mode [ 90.509845][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.517793][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.526221][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.535006][ T19] usb 6-1: Product: syz [ 90.539025][ T19] usb 6-1: Manufacturer: syz [ 90.543422][ T19] usb 6-1: SerialNumber: syz [ 90.544598][ T4346] loop6: detected capacity change from 0 to 256 [ 90.549195][ T19] usb 6-1: config 0 descriptor?? [ 90.560994][ T4346] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 90.573070][ T4346] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 90.681887][ T1218] usb 4-1: USB disconnect, device number 3 [ 90.767796][ T225] usb 6-1: USB disconnect, device number 9 [ 90.804844][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 90.804861][ T28] audit: type=1400 audit(2000000022.656:1523): avc: denied { ioctl } for pid=4370 comm="syz.0.1683" path="socket:[33464]" dev="sockfs" ino=33464 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.811946][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1683'. [ 90.904988][ T4379] tipc: Started in network mode [ 90.909751][ T4379] tipc: Node identity ac14140f, cluster identity 4711 [ 90.916560][ T4379] tipc: Enabled bearer , priority 10 [ 90.966884][ T324] device bridge_slave_1 left promiscuous mode [ 90.972924][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.981127][ T324] device bridge_slave_0 left promiscuous mode [ 90.982998][ T28] audit: type=1326 audit(2000000022.836:1524): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.1692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a2b18d169 code=0x0 [ 90.988784][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.018056][ T324] device veth1_macvtap left promiscuous mode [ 91.023988][ T324] device veth0_vlan left promiscuous mode [ 91.046351][ T422] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 91.227618][ T422] usb 5-1: config 8 has an invalid interface number: 9 but max is 0 [ 91.235489][ T422] usb 5-1: config 8 has no interface number 0 [ 91.241508][ T422] usb 5-1: config 8 interface 9 has no altsetting 0 [ 91.250458][ T422] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=71.2b [ 91.260238][ T422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.268243][ T422] usb 5-1: Product: syz [ 91.272272][ T422] usb 5-1: Manufacturer: syz [ 91.276837][ T422] usb 5-1: SerialNumber: syz [ 91.405231][ T4410] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=4410 comm=syz.5.1700 [ 91.479068][ T4408] loop6: detected capacity change from 0 to 40427 [ 91.486966][ T4408] F2FS-fs (loop6): fault_injection options not supported [ 91.489602][ T422] usb_ehset_test: probe of 5-1:8.9 failed with error -32 [ 91.493852][ T4408] F2FS-fs (loop6): Image doesn't support compression [ 91.507294][ T4408] F2FS-fs (loop6): Image doesn't support compression [ 91.508190][ T422] usb 5-1: USB disconnect, device number 10 [ 91.514140][ T4408] F2FS-fs (loop6): fault_type options not supported [ 91.527943][ T4408] F2FS-fs (loop6): invalid crc value [ 91.534282][ T4408] F2FS-fs (loop6): Found nat_bits in checkpoint [ 91.557762][ T28] audit: type=1400 audit(2000000023.416:1525): avc: denied { listen } for pid=4417 comm="syz.5.1703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.586573][ T4408] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 91.587068][ T1218] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 91.631726][ T2808] syz-executor: attempt to access beyond end of device [ 91.631726][ T2808] loop6: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 91.645967][ T2808] syz-executor: attempt to access beyond end of device [ 91.645967][ T2808] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 91.679927][ T904] kworker/u4:26: attempt to access beyond end of device [ 91.679927][ T904] loop6: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 91.797482][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.808325][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.818025][ T1218] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.832039][ T1218] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.841008][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.857013][ T1218] usb 4-1: config 0 descriptor?? [ 91.896391][ T39] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 92.045649][ T4435] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.052707][ T319] tipc: Node number set to 2886997007 [ 92.076346][ T39] usb 6-1: Using ep0 maxpacket: 32 [ 92.078308][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.082469][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.098956][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.106558][ T4435] device bridge_slave_0 entered promiscuous mode [ 92.109358][ T39] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 92.123705][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.133148][ T39] usb 6-1: config 0 descriptor?? [ 92.140551][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.149776][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.157659][ T4435] device bridge_slave_1 entered promiscuous mode [ 92.247554][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.254441][ T4435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.261553][ T4435] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.268333][ T4435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.277924][ T1218] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 92.287799][ T1218] plantronics 0003:047F:FFFF.001D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 92.324588][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.333699][ T904] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.341292][ T904] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.355848][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.363953][ T904] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.370818][ T904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.380298][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.388468][ T904] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.395334][ T904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.414041][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.424438][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.446956][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.461941][ T4435] device veth0_vlan entered promiscuous mode [ 92.468706][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.478383][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.485724][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.501395][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.510975][ T4435] device veth1_macvtap entered promiscuous mode [ 92.522080][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.546491][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.547967][ T320] usb 4-1: USB disconnect, device number 4 [ 92.560776][ T39] savu 0003:1E7D:2D5A.001E: hiddev97,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 92.587676][ T4450] x_tables: duplicate underflow at hook 4 [ 92.617125][ T324] device vlan2 left promiscuous mode [ 92.622383][ T324] bridge0: port 3(vlan2) entered disabled state [ 92.629394][ T324] device bridge_slave_1 left promiscuous mode [ 92.635413][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.643961][ T324] device bridge_slave_0 left promiscuous mode [ 92.650103][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.659028][ T324] device veth0_vlan left promiscuous mode [ 92.754022][ T60] usb 6-1: USB disconnect, device number 10 [ 92.822781][ T4460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 92.959100][ T4473] input: syz0 as /devices/virtual/input/input18 [ 93.027922][ T4480] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 93.037286][ T4480] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x1 [ 93.095968][ T4483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1734'. [ 93.140288][ T4490] loop1: detected capacity change from 0 to 256 [ 93.400093][ T28] audit: type=1400 audit(2000000025.256:1526): avc: denied { bind } for pid=4516 comm="syz.5.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.475628][ T28] audit: type=1400 audit(2000000025.256:1527): avc: denied { name_bind } for pid=4516 comm="syz.5.1749" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 93.518205][ T28] audit: type=1400 audit(2000000025.256:1528): avc: denied { node_bind } for pid=4516 comm="syz.5.1749" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 93.566056][ T4546] loop4: detected capacity change from 0 to 16 [ 93.573697][ T4546] erofs: (device loop4): mounted with root inode @ nid 36. [ 93.584439][ T4548] loop1: detected capacity change from 0 to 512 [ 93.649290][ T28] audit: type=1400 audit(2000000025.506:1529): avc: denied { watch } for pid=4553 comm="syz.5.1764" path="/269/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 93.713434][ T4562] device ip6tnl1 entered promiscuous mode [ 94.041811][ T4584] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1777'. [ 94.056392][ T319] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 94.179919][ T28] audit: type=1326 audit(2000000026.036:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.1.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3c98d169 code=0x7ffc0000 [ 94.217001][ T28] audit: type=1326 audit(2000000026.056:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.1.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f9d3c98d169 code=0x7ffc0000 [ 94.240583][ T28] audit: type=1326 audit(2000000026.056:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4589 comm="syz.1.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d3c98d169 code=0x7ffc0000 [ 94.256485][ T39] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 94.264248][ T319] usb 6-1: Using ep0 maxpacket: 16 [ 94.277877][ T319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.296343][ T319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.306034][ T319] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 94.346350][ T319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.354930][ T319] usb 6-1: config 0 descriptor?? [ 94.467449][ T39] usb 4-1: config 8 has an invalid interface number: 9 but max is 0 [ 94.477467][ T39] usb 4-1: config 8 has no interface number 0 [ 94.489901][ T39] usb 4-1: config 8 interface 9 has no altsetting 0 [ 94.528400][ T39] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=71.2b [ 94.556371][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.575773][ T39] usb 4-1: Product: syz [ 94.585848][ T39] usb 4-1: Manufacturer: syz [ 94.591268][ T39] usb 4-1: SerialNumber: syz [ 94.759735][ T4623] loop4: detected capacity change from 0 to 2048 [ 94.767561][ T319] appleir 0003:05AC:8241.001F: unknown main item tag 0x0 [ 94.774440][ T319] appleir 0003:05AC:8241.001F: unknown main item tag 0x0 [ 94.781725][ T4623] EXT4-fs: Ignoring removed mblk_io_submit option [ 94.789218][ T319] appleir 0003:05AC:8241.001F: unknown main item tag 0x0 [ 94.796178][ T319] appleir 0003:05AC:8241.001F: unknown main item tag 0x0 [ 94.803219][ T319] appleir 0003:05AC:8241.001F: unknown main item tag 0x0 [ 94.808162][ T39] usb_ehset_test: probe of 4-1:8.9 failed with error -32 [ 94.811370][ T319] appleir 0003:05AC:8241.001F: No inputs registered, leaving [ 94.825186][ T4623] EXT4-fs mount: 14 callbacks suppressed [ 94.825206][ T4623] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 94.828517][ T39] usb 4-1: USB disconnect, device number 5 [ 94.831948][ T319] appleir 0003:05AC:8241.001F: hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 94.861129][ T4623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1795'. [ 94.878371][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 94.900892][ T4627] loop4: detected capacity change from 0 to 1024 [ 94.925043][ T4627] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 94.936879][ T4627] EXT4-fs error (device loop4): __ext4_remount:6598: comm syz.4.1796: Abort forced by user [ 94.947018][ T4627] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 94.961930][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 95.006339][ T225] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 95.062394][ T320] usb 6-1: USB disconnect, device number 11 [ 95.110669][ T4640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1801'. [ 95.186317][ T225] usb 2-1: Using ep0 maxpacket: 16 [ 95.192464][ T225] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.213356][ T225] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.224313][ T225] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.230768][ T225] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 95.247124][ T225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.257821][ T225] usb 2-1: config 0 descriptor?? [ 95.668581][ T225] hid (null): unknown global tag 0xc [ 95.870899][ T225] usb 2-1: USB disconnect, device number 12 [ 95.896340][ T1218] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 96.076410][ T1218] usb 6-1: Using ep0 maxpacket: 32 [ 96.083623][ T1218] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 96.091931][ T1218] usb 6-1: config 0 has no interface number 0 [ 96.098819][ T1218] usb 6-1: config 0 interface 184 has no altsetting 0 [ 96.107006][ T1218] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 96.115955][ T1218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.130366][ T1218] usb 6-1: Product: syz [ 96.138691][ T1218] usb 6-1: Manufacturer: syz [ 96.149129][ T1218] usb 6-1: SerialNumber: syz [ 96.154301][ T1218] usb 6-1: config 0 descriptor?? [ 96.163156][ T1218] smsc75xx v1.0.0 [ 97.166132][ T1218] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 97.177095][ T1218] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 97.186375][ T1218] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 97.212495][ T1218] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 97.222138][ T1218] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 97.232539][ T1218] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 97.243088][ T1218] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 97.250766][ T1218] usb 6-1: USB disconnect, device number 12 [ 97.340080][ T4732] loop3: detected capacity change from 0 to 256 [ 97.348604][ T4732] exfat: Deprecated parameter 'namecase' [ 97.370657][ T4736] loop4: detected capacity change from 0 to 128 [ 97.378860][ T4732] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 97.393439][ T4736] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 97.406195][ T4736] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.446890][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 97.534866][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 97.534882][ T28] audit: type=1400 audit(2000000029.386:1537): avc: denied { bind } for pid=4749 comm="syz.3.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.797614][ T4772] loop5: detected capacity change from 0 to 1024 [ 97.804147][ T4772] EXT4-fs: Ignoring removed orlov option [ 97.817251][ T4772] EXT4-fs (loop5): Test dummy encryption mode enabled [ 97.837535][ T4772] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 97.856984][ T1241] EXT4-fs (loop5): unmounting filesystem. [ 97.866374][ T225] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.919046][ T19] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 97.958009][ T19] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz0 [ 98.057558][ T225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.068379][ T225] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 98.077284][ T225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.106529][ T225] usb 4-1: config 0 descriptor?? [ 98.154653][ T4797] loop1: detected capacity change from 0 to 512 [ 98.162861][ T4797] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1871: casefold flag without casefold feature [ 98.175615][ T4797] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1871: couldn't read orphan inode 15 (err -117) [ 98.187775][ T4797] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 98.210804][ T4800] loop4: detected capacity change from 0 to 512 [ 98.211161][ T4435] EXT4-fs (loop1): unmounting filesystem. [ 98.248783][ T4800] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 98.262616][ T4806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1874'. [ 98.271599][ T4800] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.293256][ T28] audit: type=1400 audit(2000000030.146:1538): avc: denied { link } for pid=4799 comm="syz.4.1872" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.320560][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 98.517194][ T225] keytouch 0003:0926:3333.0022: fixing up Keytouch IEC report descriptor [ 98.527865][ T225] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0022/input/input19 [ 98.618570][ T225] keytouch 0003:0926:3333.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 98.846617][ T4856] loop1: detected capacity change from 0 to 128 [ 99.017847][ T320] usb 4-1: USB disconnect, device number 6 [ 99.076347][ T225] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 99.256340][ T225] usb 6-1: Using ep0 maxpacket: 8 [ 99.262418][ T225] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.272496][ T225] usb 6-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12 [ 99.293216][ T225] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.301940][ T225] usb 6-1: config 0 descriptor?? [ 99.307699][ T225] usb 6-1: Found UVC 0.00 device (05a9:2630) [ 99.314491][ T225] usb 6-1: No valid video chain found. [ 99.333230][ T4877] loop4: detected capacity change from 0 to 1024 [ 99.510633][ T225] usb 6-1: USB disconnect, device number 13 [ 99.539607][ T4886] netlink: 'syz.3.1908': attribute type 12 has an invalid length. [ 99.547396][ T4886] netlink: 'syz.3.1908': attribute type 29 has an invalid length. [ 99.555069][ T4886] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1908'. [ 99.902987][ T4927] loop3: detected capacity change from 0 to 1024 [ 99.911064][ T4927] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 99.944000][ T4927] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 99.952376][ T4927] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.965926][ T4934] loop4: detected capacity change from 0 to 16 [ 99.970633][ T4927] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 99.975488][ T4934] erofs: (device loop4): mounted with root inode @ nid 36. [ 100.006656][ T4927] EXT4-fs (loop3): Remounting filesystem read-only [ 100.037184][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 100.065929][ T4940] device pim6reg1 entered promiscuous mode [ 100.111156][ T4943] loop3: detected capacity change from 0 to 4096 [ 100.118097][ T4943] EXT4-fs (loop3): Test dummy encryption mode enabled [ 100.126503][ T4943] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 100.144589][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 100.207691][ T28] audit: type=1400 audit(2000000032.066:1539): avc: denied { read } for pid=4952 comm="syz.4.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 100.394098][ T4967] xt_hashlimit: max too large, truncated to 1048576 [ 100.438031][ T19] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 100.454854][ T4972] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1946'. [ 100.463945][ T4972] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 100.638793][ T19] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.656321][ T19] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.681337][ T19] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 100.706583][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.714613][ T19] usb 6-1: Product: syz [ 100.726312][ T19] usb 6-1: Manufacturer: syz [ 100.730738][ T19] usb 6-1: SerialNumber: syz [ 100.754733][ T4983] syz.3.1952[4983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.754811][ T4983] syz.3.1952[4983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.767919][ T4977] loop4: detected capacity change from 0 to 40427 [ 100.786720][ T4977] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 100.794293][ T4977] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 100.837333][ T4977] F2FS-fs (loop4): Found nat_bits in checkpoint [ 100.837372][ T4988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1953'. [ 100.904070][ T4977] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 100.911270][ T4977] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 100.950554][ T19] usb 6-1: 0:2 : does not exist [ 100.968092][ T19] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 100.972347][ T892] kworker/u4:16: attempt to access beyond end of device [ 100.972347][ T892] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 100.992271][ T19] usb 6-1: USB disconnect, device number 14 [ 101.116423][ T1218] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 101.158720][ T5005] loop4: detected capacity change from 0 to 256 [ 101.175562][ T5005] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.196538][ T5005] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 101.207862][ T5005] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 101.306400][ T1218] usb 4-1: Using ep0 maxpacket: 16 [ 101.312891][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.347879][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.379764][ T1218] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 101.395764][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.419367][ T1218] usb 4-1: config 0 descriptor?? [ 101.828000][ T1218] sony 0003:054C:05C4.0023: hidraw0: USB HID v80.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 101.844918][ T1218] sony 0003:054C:05C4.0023: failed to claim input [ 101.999948][ T28] audit: type=1400 audit(2000000033.856:1540): avc: denied { write } for pid=320 comm="kworker/1:3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38031 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.177108][ T5057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1984'. [ 102.186468][ T5057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1984'. [ 102.416332][ T319] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 102.617761][ T319] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.636730][ T319] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 102.645255][ T319] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 102.685244][ T319] usb 5-1: config 1 has no interface number 1 [ 102.698285][ T5073] netlink: 'syz.5.1988': attribute type 1 has an invalid length. [ 102.707285][ T319] usb 5-1: config 1 interface 2 has no altsetting 0 [ 102.717566][ T319] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.736325][ T319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.754271][ T319] usb 5-1: Product: syz [ 102.764347][ T319] usb 5-1: Manufacturer: syz [ 102.767395][ T5077] loop5: detected capacity change from 0 to 128 [ 102.769761][ T319] usb 5-1: SerialNumber: syz [ 102.845693][ T5085] incfs: Options parsing error. -22 [ 102.857145][ T5085] incfs: mount failed -22 [ 102.859686][ T5087] loop5: detected capacity change from 0 to 256 [ 102.880895][ T5087] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.891524][ T5087] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 102.902772][ T5087] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 102.923517][ T28] audit: type=1400 audit(2000000034.776:1541): avc: denied { rename } for pid=5086 comm="syz.5.1995" name="file0" dev="loop5" ino=1048688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.955514][ T28] audit: type=1400 audit(2000000034.776:1542): avc: denied { rmdir } for pid=5086 comm="syz.5.1995" name="control" dev="loop5" ino=1048687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.001386][ T319] usb 5-1: 2:1 : sample bitwidth 128 in over sample bytes 6 [ 103.011192][ T319] usb 5-1: 2:1 : unsupported sample bitwidth 128 in 6 bytes [ 103.018632][ T319] usb 5-1: selecting invalid altsetting 0 [ 103.027643][ T319] usb 5-1: USB disconnect, device number 11 [ 103.209987][ T28] audit: type=1400 audit(2000000035.066:1543): avc: denied { read } for pid=5104 comm="syz.1.2005" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.235962][ T28] audit: type=1400 audit(2000000035.096:1544): avc: denied { open } for pid=5104 comm="syz.1.2005" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.259486][ T28] audit: type=1400 audit(2000000035.096:1545): avc: denied { ioctl } for pid=5104 comm="syz.1.2005" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.675673][ T5112] loop5: detected capacity change from 0 to 256 [ 103.692892][ T5112] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 103.852166][ T319] usb 4-1: USB disconnect, device number 7 [ 103.975213][ T5137] netlink: 'syz.5.2021': attribute type 1 has an invalid length. [ 103.984759][ T5137] netlink: 'syz.5.2021': attribute type 2 has an invalid length. [ 104.005723][ T5137] netlink: 'syz.5.2021': attribute type 1 has an invalid length. [ 104.013325][ T5137] netlink: 'syz.5.2021': attribute type 2 has an invalid length. [ 104.154736][ T5148] loop4: detected capacity change from 0 to 128 [ 104.208081][ T5148] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 104.229700][ T5148] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.323827][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.332244][ T4334] EXT4-fs (loop4): unmounting filesystem. [ 104.336405][ T5155] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.345290][ T5155] device bridge_slave_0 entered promiscuous mode [ 104.371858][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.386108][ T5155] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.411909][ T5155] device bridge_slave_1 entered promiscuous mode [ 104.470493][ T904] device bridge_slave_1 left promiscuous mode [ 104.476883][ T904] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.485602][ T904] device bridge_slave_0 left promiscuous mode [ 104.492822][ T904] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.497000][ T5179] loop5: detected capacity change from 0 to 512 [ 104.506906][ T904] device veth1_macvtap left promiscuous mode [ 104.512754][ T904] device veth0_vlan left promiscuous mode [ 104.519910][ T5179] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.2038: bad orphan inode 13 [ 104.542713][ T5179] ext4_test_bit(bit=12, block=4) = 1 [ 104.548044][ T5179] is_bad_inode(inode)=0 [ 104.556457][ T5179] NEXT_ORPHAN(inode)=0 [ 104.565115][ T5179] max_ino=32 [ 104.573956][ T5179] i_nlink=1 [ 104.580260][ T5179] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 104.602058][ T5179] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz.5.2038: Unrecognised inode hash code 20 [ 104.627794][ T5179] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.2038: Corrupt directory, running e2fsck is recommended [ 104.655803][ T28] audit: type=1400 audit(2000000036.506:1546): avc: denied { read } for pid=5177 comm="syz.5.2038" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 104.682200][ T28] audit: type=1400 audit(2000000036.536:1547): avc: denied { open } for pid=5177 comm="syz.5.2038" path="/313/file0/file0/file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 104.796197][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.803110][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.810196][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.816981][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.855053][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.881003][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.889754][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.911634][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.927262][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.934138][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.956961][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.977702][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.984730][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.001634][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.016811][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.036745][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.055204][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.083130][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.085021][ T28] audit: type=1400 audit(2000000036.936:1548): avc: denied { module_request } for pid=5155 comm="syz-executor" kmod="netdev-virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 105.101644][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.122179][ T28] audit: type=1400 audit(2000000036.946:1549): avc: denied { setattr } for pid=300 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.158503][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.166974][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.174898][ T28] audit: type=1400 audit(2000000037.026:1550): avc: denied { bpf } for pid=5192 comm="syz.4.2043" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 105.202667][ T5155] device veth0_vlan entered promiscuous mode [ 105.210129][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.219687][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.234086][ T5155] device veth1_macvtap entered promiscuous mode [ 105.241698][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.267328][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.286831][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.305095][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.330035][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.330431][ T1241] EXT4-fs warning (device loop5): dx_probe:833: inode #2: comm syz-executor: Unrecognised inode hash code 20 [ 105.346709][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.378186][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.379724][ T1241] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 105.449077][ T1241] EXT4-fs error (device loop5): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /313/file0: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 105.492976][ T1241] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 105.620666][ T5221] sit: non-ECT from 0.0.0.0 with TOS=0x3 [ 105.807130][ T5153] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 105.845072][ T5238] incfs: Options parsing error. -22 [ 105.851427][ T5238] incfs: mount failed -22 [ 106.066380][ T39] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 106.257415][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.276309][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.306082][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.332096][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.351172][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.370285][ T39] usb 3-1: config 0 descriptor?? [ 106.783919][ T39] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 106.796877][ T39] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 106.815665][ T39] plantronics 0003:047F:FFFF.0024: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 106.906328][ T225] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 107.057177][ T320] usb 3-1: USB disconnect, device number 9 [ 107.097578][ T225] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.112981][ T225] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 107.130484][ T225] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 107.153128][ T225] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 107.170717][ T225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.190065][ T5267] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 107.198601][ T225] hub 2-1:1.0: bad descriptor, ignoring hub [ 107.208690][ T225] hub: probe of 2-1:1.0 failed with error -5 [ 107.220069][ T225] cdc_wdm 2-1:1.0: skipping garbage [ 107.230509][ T225] cdc_wdm 2-1:1.0: skipping garbage [ 107.242072][ T225] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 107.443849][ T904] tipc: Disabling bearer [ 107.449199][ T904] tipc: Left network mode [ 107.597501][ T5280] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.604434][ T5280] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.612535][ T5280] device bridge_slave_0 entered promiscuous mode [ 107.619904][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.628794][ T5280] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.636922][ T5280] device bridge_slave_1 entered promiscuous mode [ 107.787495][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.794385][ T5280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.801503][ T5280] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.808276][ T5280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.847220][ T320] usb 2-1: USB disconnect, device number 13 [ 107.876537][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.890374][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.899320][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.924665][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.934478][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 107.934494][ T28] audit: type=1400 audit(2000000039.786:1637): avc: denied { read } for pid=5312 comm="syz.2.2096" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.967361][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.974246][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.988507][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.007003][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.013861][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.021598][ T28] audit: type=1400 audit(2000000039.876:1638): avc: denied { create } for pid=5314 comm="syz.2.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.057470][ T904] device bridge_slave_1 left promiscuous mode [ 108.063437][ T904] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.070425][ T28] audit: type=1400 audit(2000000039.896:1639): avc: denied { write } for pid=5314 comm="syz.2.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.106792][ T904] device bridge_slave_0 left promiscuous mode [ 108.112761][ T904] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.138091][ T904] device veth1_macvtap left promiscuous mode [ 108.143964][ T904] device veth0_vlan left promiscuous mode [ 108.196380][ T320] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 108.356414][ T39] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 108.373416][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.387562][ T320] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.407348][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.415536][ T320] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 108.431005][ T5280] device veth0_vlan entered promiscuous mode [ 108.439082][ T320] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 108.450577][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.460203][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.468129][ T320] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 108.477767][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.487089][ T320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.496523][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.504487][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.524355][ T5267] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 108.527594][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.532071][ T320] hub 2-1:1.0: bad descriptor, ignoring hub [ 108.545923][ T320] hub: probe of 2-1:1.0 failed with error -5 [ 108.551886][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 108.557306][ T320] cdc_wdm 2-1:1.0: skipping garbage [ 108.562472][ T320] cdc_wdm 2-1:1.0: skipping garbage [ 108.564596][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.568520][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.576668][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.594714][ T320] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 108.610686][ T5280] device veth1_macvtap entered promiscuous mode [ 108.610683][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.610712][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.621694][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.640048][ T39] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 108.655589][ T28] audit: type=1400 audit(2000000040.516:1640): avc: denied { mounton } for pid=5325 comm="syz.4.2102" path="/135/bus" dev="tmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.670867][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.687032][ T39] usb 3-1: config 0 descriptor?? [ 108.687353][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.700050][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.719887][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.728297][ T28] audit: type=1400 audit(2000000040.586:1641): avc: denied { mounton } for pid=5280 comm="syz-executor" path="/root/syzkaller.kzXusi/syz-tmp" dev="sda1" ino=1968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 108.731741][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.770561][ T28] audit: type=1400 audit(2000000040.586:1642): avc: denied { mount } for pid=5280 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 108.811577][ T28] audit: type=1400 audit(2000000040.586:1643): avc: denied { mount } for pid=5280 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 108.833528][ T28] audit: type=1400 audit(2000000040.586:1644): avc: denied { mounton } for pid=5280 comm="syz-executor" path="/root/syzkaller.kzXusi/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 108.865455][ T28] audit: type=1400 audit(2000000040.586:1645): avc: denied { mounton } for pid=5280 comm="syz-executor" path="/root/syzkaller.kzXusi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=37724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 108.886480][ T422] usb 2-1: USB disconnect, device number 14 [ 108.893742][ T28] audit: type=1400 audit(2000000040.616:1646): avc: denied { mounton } for pid=5280 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 108.971304][ T60] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 108.997258][ T5339] loop7: detected capacity change from 0 to 256 [ 109.009117][ T5339] FAT-fs (loop7): Directory bread(block 64) failed [ 109.015474][ T5339] FAT-fs (loop7): Directory bread(block 65) failed [ 109.022928][ T5339] FAT-fs (loop7): Directory bread(block 66) failed [ 109.029307][ T5339] FAT-fs (loop7): Directory bread(block 67) failed [ 109.035619][ T5339] FAT-fs (loop7): Directory bread(block 68) failed [ 109.042684][ T5339] FAT-fs (loop7): Directory bread(block 69) failed [ 109.049098][ T5339] FAT-fs (loop7): Directory bread(block 70) failed [ 109.055358][ T5339] FAT-fs (loop7): Directory bread(block 71) failed [ 109.061810][ T5339] FAT-fs (loop7): Directory bread(block 72) failed [ 109.068201][ T5339] FAT-fs (loop7): Directory bread(block 73) failed [ 109.102684][ T39] koneplus 0003:1E7D:2E22.0025: item fetching failed at offset 0/2 [ 109.116527][ T39] koneplus 0003:1E7D:2E22.0025: parse failed [ 109.132519][ T39] koneplus: probe of 0003:1E7D:2E22.0025 failed with error -22 [ 109.167850][ T5339] syz.7.2107: attempt to access beyond end of device [ 109.167850][ T5339] loop7: rw=2049, sector=1224, nr_sectors = 608 limit=256 [ 109.171631][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.195157][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.203948][ T5339] syz.7.2107: attempt to access beyond end of device [ 109.203948][ T5339] loop7: rw=2049, sector=1864, nr_sectors = 2064 limit=256 [ 109.204860][ T60] usb 5-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.00 [ 109.227224][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.235916][ T60] usb 5-1: config 0 descriptor?? [ 109.238125][ T5339] syz.7.2107: attempt to access beyond end of device [ 109.238125][ T5339] loop7: rw=2049, sector=3928, nr_sectors = 3256 limit=256 [ 109.260684][ T5339] syz.7.2107: attempt to access beyond end of device [ 109.260684][ T5339] loop7: rw=2049, sector=7184, nr_sectors = 4096 limit=256 [ 109.276770][ T5339] syz.7.2107: attempt to access beyond end of device [ 109.276770][ T5339] loop7: rw=2049, sector=11280, nr_sectors = 1048 limit=256 [ 109.336755][ T320] usb 3-1: USB disconnect, device number 10 [ 109.368670][ T5338] syz.7.2107: attempt to access beyond end of device [ 109.368670][ T5338] loop7: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 109.454515][ T60] usbhid 5-1:0.0: can't add hid device: -71 [ 109.460397][ T60] usbhid: probe of 5-1:0.0 failed with error -71 [ 109.468036][ T60] usb 5-1: USB disconnect, device number 12 [ 110.133745][ T5393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2132'. [ 110.419185][ T5406] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.442966][ T5406] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.469544][ T5406] device bridge_slave_0 entered promiscuous mode [ 110.497656][ T5406] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.506508][ T5406] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.514508][ T5406] device bridge_slave_1 entered promiscuous mode [ 110.710120][ T5406] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.717019][ T5406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.724104][ T5406] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.730900][ T5406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.830520][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.841839][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.865628][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.898936][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.911432][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.918330][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.941953][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.972703][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.979608][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.020456][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.045602][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.055245][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.082389][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.095117][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.143381][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.161128][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.172194][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.179866][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.189800][ T5406] device veth0_vlan entered promiscuous mode [ 111.198413][ T5437] netem: change failed [ 111.212175][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 111.224611][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.234167][ T5406] device veth1_macvtap entered promiscuous mode [ 111.254949][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.265560][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.285895][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.309965][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.318938][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.478300][ T904] device bridge_slave_1 left promiscuous mode [ 111.487527][ T904] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.502858][ T904] device bridge_slave_0 left promiscuous mode [ 111.508970][ T904] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.517264][ T904] device veth1_macvtap left promiscuous mode [ 111.526142][ T904] device veth0_vlan left promiscuous mode [ 111.716322][ T60] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 111.895396][ T5473] loop7: detected capacity change from 0 to 512 [ 111.907522][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.928474][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.954617][ T5473] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #13: comm syz.7.2164: attempt to clear invalid blocks 1 len 1 [ 111.978534][ T5473] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2164: bg 0: block 343: padding at end of block bitmap is not set [ 111.993281][ T5473] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 112.003055][ T60] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 112.004434][ T5473] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2164: invalid indirect mapped block 1819239214 (level 0) [ 112.025995][ T5473] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.2164: invalid indirect mapped block 1819239214 (level 1) [ 112.040072][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.040493][ T5473] EXT4-fs (loop7): 1 truncate cleaned up [ 112.054243][ T5473] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 112.063187][ T60] usb 5-1: config 0 descriptor?? [ 112.081210][ T5280] EXT4-fs (loop7): unmounting filesystem. [ 112.199191][ T5495] netlink: 'syz.1.2173': attribute type 3 has an invalid length. [ 112.376441][ T39] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 112.511174][ T60] hid-led 0003:1D34:000A.0026: item fetching failed at offset 0/3 [ 112.521949][ T60] hid-led: probe of 0003:1D34:000A.0026 failed with error -22 [ 112.533779][ T5524] binder: 5523:5524 ioctl c0306201 200000000300 returned -22 [ 112.566490][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 112.607604][ T39] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.626807][ T39] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.645796][ T39] usb 8-1: config 0 interface 0 has no altsetting 0 [ 112.663972][ T39] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 112.673138][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.681669][ T5530] input: syz1 as /devices/virtual/input/input22 [ 112.688477][ T39] usb 8-1: config 0 descriptor?? [ 112.723896][ T60] usb 5-1: USB disconnect, device number 13 [ 112.757838][ T225] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 112.776838][ T225] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 112.969365][ T5562] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2203'. [ 113.107012][ T39] hid (null): global environment stack underflow [ 113.215559][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 113.215576][ T28] audit: type=1400 audit(2000000046.070:1698): avc: denied { create } for pid=5583 comm="syz.1.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.268214][ T5587] tipc: Started in network mode [ 113.272924][ T5587] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 113.281706][ T28] audit: type=1400 audit(2000000046.130:1699): avc: denied { write } for pid=5585 comm="syz.4.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.302153][ T5587] tipc: Enabled bearer , priority 10 [ 113.336468][ T39] usb 8-1: USB disconnect, device number 5 [ 113.351016][ T28] audit: type=1400 audit(2000000046.130:1700): avc: denied { nlmsg_write } for pid=5585 comm="syz.4.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.453784][ T28] audit: type=1400 audit(2000000046.310:1701): avc: denied { getopt } for pid=5597 comm="syz.1.2219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.937172][ T28] audit: type=1400 audit(2000000046.800:1702): avc: denied { mount } for pid=5624 comm="syz.1.2230" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 113.991479][ T28] audit: type=1400 audit(2000000046.820:1703): avc: denied { remount } for pid=5624 comm="syz.1.2230" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 114.042866][ T28] audit: type=1400 audit(2000000046.830:1704): avc: denied { unmount } for pid=4435 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 114.088376][ T5637] loop7: detected capacity change from 0 to 1024 [ 114.107207][ T28] audit: type=1400 audit(2000000046.900:1705): avc: denied { execstack } for pid=5632 comm="syz.7.2234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 114.163491][ T5637] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 114.176557][ T28] audit: type=1400 audit(2000000047.040:1706): avc: denied { add_name } for pid=5636 comm="syz.7.2236" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.225443][ T5280] EXT4-fs (loop7): unmounting filesystem. [ 114.261515][ T28] audit: type=1400 audit(2000000047.060:1707): avc: denied { create } for pid=5636 comm="syz.7.2236" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 114.426406][ T4338] tipc: Node number set to 4269801491 [ 114.566416][ T60] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 114.747514][ T60] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 114.758640][ T60] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.780646][ T60] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 114.789767][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.797651][ T60] usb 8-1: Product: syz [ 114.801883][ T60] usb 8-1: Manufacturer: syz [ 114.806342][ T60] usb 8-1: SerialNumber: syz [ 114.811694][ T5655] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 115.027810][ T60] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 115.046364][ T19] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 115.066467][ T60] usb 8-1: USB disconnect, device number 6 [ 115.076087][ T60] usblp0: removed [ 115.227883][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.239900][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.250700][ T19] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 115.260158][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.272187][ T19] usb 5-1: config 0 descriptor?? [ 115.648181][ T5738] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2281'. [ 115.658873][ T5740] tipc: Started in network mode [ 115.663581][ T5740] tipc: Node identity fff5, cluster identity 4711 [ 115.666408][ T39] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 115.677377][ T5740] tipc: Enabling of bearer rejected, failed to enable media [ 115.685661][ T19] pyra 0003:1E7D:2CF6.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 115.724939][ T5744] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 115.867606][ T39] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.878118][ T39] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.888937][ T39] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 115.898820][ T39] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.913092][ T39] usb 2-1: New USB device found, idVendor=0525, idProduct=e4a1, bcdDevice= 0.40 [ 115.927595][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.939052][ T39] usb 2-1: Product: syz [ 115.943077][ T39] usb 2-1: Manufacturer: syz [ 115.947564][ T39] usb 2-1: SerialNumber: syz [ 116.154703][ T5720] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.280616][ T19] pyra 0003:1E7D:2CF6.0029: couldn't init struct pyra_device [ 116.287959][ T19] pyra 0003:1E7D:2CF6.0029: couldn't install mouse [ 116.294894][ T19] pyra: probe of 0003:1E7D:2CF6.0029 failed with error -71 [ 116.302844][ T19] usb 5-1: USB disconnect, device number 14 [ 116.750502][ T5769] netem: change failed [ 116.763040][ T5720] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.973504][ T39] cdc_ncm 2-1:1.0: bind() failure [ 116.981493][ T39] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 116.999233][ T39] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 117.008716][ T39] usb 2-1: USB disconnect, device number 15 [ 117.311112][ T5827] syz.4.2322[5827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.311194][ T5827] syz.4.2322[5827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.326860][ T60] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 117.526344][ T60] usb 8-1: Using ep0 maxpacket: 16 [ 117.532579][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.557537][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.570391][ T60] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.581613][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.596984][ T60] usb 8-1: config 0 descriptor?? [ 118.010790][ T60] HID 045e:07da: Invalid code 65791 type 1 [ 118.020932][ T60] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.002A/input/input23 [ 118.033347][ T60] microsoft 0003:045E:07DA.002A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 118.223496][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 118.223513][ T28] audit: type=1400 audit(2000000051.080:1742): avc: denied { map } for pid=5904 comm="syz.4.2358" path="socket:[42434]" dev="sockfs" ino=42434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.254761][ T28] audit: type=1400 audit(2000000051.080:1743): avc: denied { read } for pid=5904 comm="syz.4.2358" path="socket:[42434]" dev="sockfs" ino=42434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.278103][ T225] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 118.444944][ T28] audit: type=1400 audit(2000000051.300:1744): avc: denied { write } for pid=5922 comm="syz.4.2367" name="001" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 118.468074][ T225] usb 3-1: Using ep0 maxpacket: 16 [ 118.488325][ T225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.500396][ T225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.510974][ T225] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.523664][ T225] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.542507][ T225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.563221][ T225] usb 3-1: config 0 descriptor?? [ 118.678373][ T19] usb 8-1: USB disconnect, device number 7 [ 118.888893][ T28] audit: type=1400 audit(2000000051.750:1745): avc: denied { read write } for pid=5950 comm="syz.1.2379" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 118.928697][ T28] audit: type=1400 audit(2000000051.770:1746): avc: denied { open } for pid=5950 comm="syz.1.2379" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 118.955323][ T28] audit: type=1400 audit(2000000051.770:1747): avc: denied { ioctl } for pid=5950 comm="syz.1.2379" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 118.987496][ T225] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 118.998121][ T225] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002B/input/input24 [ 119.020875][ T5955] device sit0 entered promiscuous mode [ 119.035640][ T5955] netlink: 'syz.1.2381': attribute type 1 has an invalid length. [ 119.053368][ T5955] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2381'. [ 119.078982][ T225] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 119.108243][ T5957] tipc: Started in network mode [ 119.112991][ T5957] tipc: Node identity ac1414bb, cluster identity 4711 [ 119.121187][ T5957] tipc: New replicast peer: 172.30.1.2 [ 119.126722][ T5957] tipc: Enabled bearer , priority 10 [ 119.210035][ T28] audit: type=1400 audit(2000000052.050:1748): avc: denied { mounton } for pid=5966 comm="syz.1.2387" path="/203/file0" dev="incremental-fs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.242090][ T225] usb 3-1: USB disconnect, device number 11 [ 119.248840][ T28] audit: type=1400 audit(2000000052.090:1749): avc: denied { write } for pid=5966 comm="syz.1.2387" path="/203/file0/file0" dev="incremental-fs" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.369297][ T5981] loop7: detected capacity change from 0 to 512 [ 119.375687][ T5981] ext4: Unknown parameter 'uid' [ 119.617934][ T6001] input: syz1 as /devices/virtual/input/input25 [ 119.667192][ T28] audit: type=1400 audit(2000000052.530:1750): avc: denied { bind } for pid=6005 comm="syz.1.2405" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 119.709810][ T28] audit: type=1400 audit(2000000052.550:1751): avc: denied { node_bind } for pid=6005 comm="syz.1.2405" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 119.913737][ T6036] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 119.936382][ T39] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 120.128787][ T39] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.151156][ T39] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.171313][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.187807][ T39] usb 8-1: Product: syz [ 120.196142][ T39] usb 8-1: Manufacturer: syz [ 120.204973][ T39] usb 8-1: SerialNumber: syz [ 120.246308][ T225] tipc: Node number set to 2886997179 [ 120.471836][ T6075] netlink: 'syz.1.2434': attribute type 280 has an invalid length. [ 120.618542][ T324] tipc: Left network mode [ 120.619475][ T1241] EXT4-fs (loop5): unmounting filesystem. [ 120.718580][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.734105][ T6079] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.749178][ T6079] device bridge_slave_0 entered promiscuous mode [ 120.771681][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.792295][ T6079] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.813440][ T6079] device bridge_slave_1 entered promiscuous mode [ 121.016998][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.023895][ T6079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.030998][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.037770][ T6079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.069302][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 121.076983][ T904] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.084294][ T904] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.097032][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 121.105314][ T904] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.112179][ T904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.127285][ T324] device bridge_slave_1 left promiscuous mode [ 121.133372][ T324] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.140887][ T324] device bridge_slave_0 left promiscuous mode [ 121.146931][ T324] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.155196][ T324] device veth0_vlan left promiscuous mode [ 121.245816][ T39] cdc_ncm 8-1:1.0: failed to get mac address [ 121.252995][ T39] cdc_ncm 8-1:1.0: bind() failure [ 121.261210][ T39] cdc_ncm: probe of 8-1:1.1 failed with error -71 [ 121.271493][ T39] cdc_mbim: probe of 8-1:1.1 failed with error -71 [ 121.281043][ T39] usb 8-1: USB disconnect, device number 8 [ 121.289757][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.297848][ T904] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.304692][ T904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.312255][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 121.320451][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 121.339245][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.355149][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.363707][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.371057][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.379821][ T6079] device veth0_vlan entered promiscuous mode [ 121.428185][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 121.445783][ T6079] device veth1_macvtap entered promiscuous mode [ 121.475510][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 121.486665][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.499919][ T6093] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 121.817122][ T1218] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 121.976738][ T319] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 122.008724][ T1218] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.019907][ T1218] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.030015][ T1218] usb 9-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 122.038957][ T1218] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.048885][ T1218] usb 9-1: config 0 descriptor?? [ 122.114550][ T6164] SELinux: failed to load policy [ 122.177405][ T319] usb 2-1: config 0 interface 0 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.187489][ T319] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.193964][ T319] usb 2-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 122.202831][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.214653][ T319] usb 2-1: config 0 descriptor?? [ 122.413077][ T1218] usbhid 9-1:0.0: can't add hid device: -71 [ 122.419988][ T1218] usbhid: probe of 9-1:0.0 failed with error -71 [ 122.427818][ T1218] usb 9-1: USB disconnect, device number 2 [ 122.498733][ T6183] overlayfs: missing 'lowerdir' [ 122.516700][ T6185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2480'. [ 122.637922][ T319] wacom 0003:056A:0059.002C: unknown main item tag 0x3 [ 122.644648][ T319] wacom 0003:056A:0059.002C: unbalanced collection at end of report description [ 122.654757][ T319] wacom 0003:056A:0059.002C: parse failed [ 122.660952][ T319] wacom: probe of 0003:056A:0059.002C failed with error -22 [ 122.756640][ T6221] SELinux: policydb version 388426523 does not match my version range 15-33 [ 122.765439][ T6221] SELinux: failed to load policy [ 122.840654][ T1218] usb 2-1: USB disconnect, device number 16 [ 122.927677][ T6240] input: syz0 as /devices/virtual/input/input26 [ 123.361476][ T6264] /dev/loop0: Can't open blockdev [ 123.404225][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 123.404247][ T28] audit: type=1400 audit(2000000056.260:1767): avc: denied { relabelfrom } for pid=6271 comm="syz.2.2520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 123.431265][ T28] audit: type=1400 audit(2000000056.260:1768): avc: denied { relabelto } for pid=6271 comm="syz.2.2520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 123.469159][ T28] audit: type=1400 audit(2000000056.330:1769): avc: denied { getopt } for pid=6274 comm="syz.1.2521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.729708][ T28] audit: type=1400 audit(2000000056.590:1770): avc: denied { shutdown } for pid=6305 comm="syz.1.2534" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.808947][ T28] audit: type=1400 audit(2000000056.670:1771): avc: denied { ioctl } for pid=6311 comm="syz.1.2537" path="socket:[44753]" dev="sockfs" ino=44753 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.866801][ T6320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6320 comm=syz.1.2541 [ 123.898396][ T6322] xt_bpf: check failed: parse error [ 123.956983][ T6328] netlink: 'syz.2.2545': attribute type 7 has an invalid length. [ 123.966774][ T6328] netlink: 'syz.2.2545': attribute type 5 has an invalid length. [ 123.976825][ T6328] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2545'. [ 124.139654][ T28] audit: type=1400 audit(2000000057.000:1772): avc: denied { bind } for pid=6350 comm="syz.2.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.236330][ T28] audit: type=1400 audit(2000000057.090:1773): avc: denied { setopt } for pid=6354 comm="syz.2.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 124.315430][ T28] audit: type=1400 audit(2000000057.170:1774): avc: denied { write } for pid=6369 comm="syz.7.2562" name="/" dev="incremental-fs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.359302][ T6375] SELinux: ebitmap start bit (5259586) is not a multiple of the map unit size (64) [ 124.368626][ T28] audit: type=1400 audit(2000000057.200:1775): avc: denied { add_name } for pid=6369 comm="syz.7.2562" name=".pending_reads" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.390061][ T6375] SELinux: failed to load policy [ 124.400772][ T28] audit: type=1400 audit(2000000057.200:1776): avc: denied { associate } for pid=6369 comm="syz.7.2562" name=".pending_reads" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 124.765753][ T6395] netlink: 'syz.4.2573': attribute type 11 has an invalid length. [ 124.790336][ T6416] device batadv_slave_1 entered promiscuous mode [ 124.797109][ T6415] device batadv_slave_1 left promiscuous mode [ 124.857169][ T60] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 125.046437][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 125.054227][ T60] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 125.070460][ T60] usb 3-1: config 0 has no interface number 0 [ 125.079217][ T60] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 125.091538][ T60] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 125.103994][ T60] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 125.123126][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.130982][ T60] usb 3-1: Product: syz [ 125.134995][ T60] usb 3-1: Manufacturer: syz [ 125.139464][ T60] usb 3-1: SerialNumber: syz [ 125.144240][ T60] usb 3-1: config 0 descriptor?? [ 125.149313][ T6410] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 125.156414][ T6410] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 125.246555][ T320] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 125.375284][ T6496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2620'. [ 125.384604][ T6410] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 125.394354][ T6410] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 125.437572][ T320] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.454540][ T320] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.464432][ T320] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.473373][ T320] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.483972][ T320] usb 9-1: config 0 descriptor?? [ 125.627062][ T60] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 125.639924][ T60] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 125.655588][ T60] asix: probe of 3-1:0.251 failed with error -5 [ 125.662515][ T60] usb 3-1: USB disconnect, device number 12 [ 125.691689][ T6521] binder: 6520:6521 ioctl c00c6211 0 returned -14 [ 125.789196][ T6537] general protection fault, probably for non-canonical address 0xdffffc000000001a: 0000 [#1] PREEMPT SMP KASAN [ 125.800772][ T6537] KASAN: null-ptr-deref in range [0x00000000000000d0-0x00000000000000d7] [ 125.809001][ T6537] CPU: 1 PID: 6537 Comm: syz.1.2638 Not tainted 6.1.129-syzkaller-00055-gca24c52e3c25 #0 [ 125.818634][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.828534][ T6537] RIP: 0010:dev_map_enqueue+0x72/0x340 [ 125.833821][ T6537] Code: 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 83 a0 25 00 48 8b 03 48 89 45 c8 4d 8d ae d0 00 00 00 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 5f a0 25 00 bb 20 02 00 00 49 03 [ 125.853261][ T6537] RSP: 0018:ffffc90002a3f7a0 EFLAGS: 00010202 [ 125.859158][ T6537] RAX: 000000000000001a RBX: ffff8881260b4c20 RCX: 0000000000080000 [ 125.866971][ T6537] RDX: ffffc90002abb000 RSI: 00000000000000be RDI: 00000000000000bf [ 125.874794][ T6537] RBP: ffffc90002a3f7e0 R08: ffffffff841583cd R09: ffffffff84158302 [ 125.882594][ T6537] R10: 0000000000000004 R11: ffff88812bf9bcc0 R12: dffffc0000000000 [ 125.890411][ T6537] R13: 00000000000000d0 R14: 0000000000000000 R15: ffff888116910000 [ 125.898217][ T6537] FS: 00007f9d3d8456c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 125.906985][ T6537] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.913407][ T6537] CR2: 00007ffe55253e38 CR3: 00000001158aa000 CR4: 00000000003506a0 [ 125.921223][ T6537] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 125.929028][ T6537] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 125.936839][ T6537] Call Trace: [ 125.939962][ T6537] [ 125.942742][ T6537] ? __die_body+0x62/0xb0 [ 125.946907][ T6537] ? die_addr+0x9f/0xd0 [ 125.950902][ T6537] ? exc_general_protection+0x317/0x4c0 [ 125.956286][ T6537] ? trace_event_buffer_commit+0x26d/0x920 [ 125.961923][ T6537] ? asm_exc_general_protection+0x27/0x30 [ 125.967478][ T6537] ? xdp_do_redirect+0x502/0xc60 [ 125.972247][ T6537] ? xdp_do_redirect+0x5cd/0xc60 [ 125.977028][ T6537] ? dev_map_enqueue+0x72/0x340 [ 125.981713][ T6537] xdp_do_redirect+0x5ed/0xc60 [ 125.986317][ T6537] tun_xdp_act+0xdb/0xc00 [ 125.990480][ T6537] ? avc_denied+0x1b0/0x1b0 [ 125.994818][ T6537] ? finish_task_switch+0x167/0x7b0 [ 125.999850][ T6537] ? tun_flow_update+0x560/0x560 [ 126.004627][ T6537] tun_get_user+0xb35/0x3a90 [ 126.009052][ T6537] ? tun_get_user+0x7e6/0x3a90 [ 126.013664][ T6537] ? tun_do_read+0x2000/0x2000 [ 126.018252][ T6537] ? ref_tracker_alloc+0x31d/0x450 [ 126.023200][ T6537] ? file_has_perm+0x508/0x6c0 [ 126.027810][ T6537] ? futex_wait_setup+0x330/0x330 [ 126.032659][ T6537] ? tun_get+0xe9/0x120 [ 126.036660][ T6537] tun_chr_write_iter+0x129/0x210 [ 126.041511][ T6537] vfs_write+0xaf6/0xed0 [ 126.045594][ T6537] ? file_end_write+0x1c0/0x1c0 [ 126.050275][ T6537] ? do_futex+0x55a/0x9a0 [ 126.054442][ T6537] ? __fget_files+0x2cb/0x330 [ 126.058959][ T6537] ? __fdget_pos+0x204/0x390 [ 126.063382][ T6537] ? ksys_write+0x77/0x2c0 [ 126.067720][ T6537] ksys_write+0x199/0x2c0 [ 126.071897][ T6537] ? __this_cpu_preempt_check+0x13/0x20 [ 126.077268][ T6537] ? xfd_validate_state+0x6f/0x170 [ 126.082301][ T6537] ? __ia32_sys_read+0x90/0x90 [ 126.086901][ T6537] ? fpregs_restore_userregs+0x130/0x290 [ 126.092372][ T6537] __x64_sys_write+0x7b/0x90 [ 126.096798][ T6537] x64_sys_call+0x2f/0x9a0 [ 126.101049][ T6537] do_syscall_64+0x3b/0xb0 [ 126.105300][ T6537] ? clear_bhb_loop+0x55/0xb0 [ 126.109818][ T6537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.115546][ T6537] RIP: 0033:0x7f9d3c98bc1f [ 126.119797][ T6537] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 126.139238][ T6537] RSP: 002b:00007f9d3d845000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 126.147481][ T6537] RAX: ffffffffffffffda RBX: 00007f9d3cba5fa0 RCX: 00007f9d3c98bc1f [ 126.155292][ T6537] RDX: 000000000000006a RSI: 0000200000000180 RDI: 00000000000000c8 [ 126.163103][ T6537] RBP: 00007f9d3ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 126.170916][ T6537] R10: 000000000000006a R11: 0000000000000293 R12: 0000000000000000 [ 126.178725][ T6537] R13: 0000000000000000 R14: 00007f9d3cba5fa0 R15: 00007fff8f07f628 [ 126.186543][ T6537] [ 126.189401][ T6537] Modules linked in: [ 126.193207][ T6537] ---[ end trace 0000000000000000 ]--- [ 126.198463][ T6537] RIP: 0010:dev_map_enqueue+0x72/0x340 [ 126.203726][ T6537] Code: 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 83 a0 25 00 48 8b 03 48 89 45 c8 4d 8d ae d0 00 00 00 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 5f a0 25 00 bb 20 02 00 00 49 03 [ 126.223205][ T6537] RSP: 0018:ffffc90002a3f7a0 EFLAGS: 00010202 [ 126.229087][ T6537] RAX: 000000000000001a RBX: ffff8881260b4c20 RCX: 0000000000080000 [ 126.237022][ T6537] RDX: ffffc90002abb000 RSI: 00000000000000be RDI: 00000000000000bf [ 126.244804][ T6537] RBP: ffffc90002a3f7e0 R08: ffffffff841583cd R09: ffffffff84158302 [ 126.252637][ T6537] R10: 0000000000000004 R11: ffff88812bf9bcc0 R12: dffffc0000000000 [ 126.260443][ T6537] R13: 00000000000000d0 R14: 0000000000000000 R15: ffff888116910000 [ 126.268253][ T6537] FS: 00007f9d3d8456c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 126.277023][ T6537] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.283421][ T6537] CR2: 00007ffe55253e38 CR3: 00000001158aa000 CR4: 00000000003506a0 [ 126.291254][ T6537] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.299066][ T6537] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 126.306891][ T6537] Kernel panic - not syncing: Fatal exception in interrupt [ 126.314203][ T6537] Kernel Offset: disabled [ 126.318329][ T6537] Rebooting in 86400 seconds..