last executing test programs: 5.086595138s ago: executing program 1: pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.42273761s ago: executing program 1: syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYBLOB="c3649be801cfa9d37b32e5a81bd8ef65d2d6ae7c55dce6f28d147bd4743ac27b", @ANYRES16, @ANYBLOB="91f895dd7ebcc2b83a83fb121e4e844e5d7a09e7d4a4979f3fdfe200b83e593144c1cf15b5624e3448b3b40065bc381005ed653b2e5aeafdfb38eeddb8c08b04fb2e46eba33d22f32db6a9608832f35ee976140648653030c5dd9306f90fc9f46534c6d9f2b37f945ba052c7197494046b00916b8f07b5b9f05f77f79225aa0700a01e414c5352def7a6078229384108c95320a4abf33afd65548efaf0b3dc54c4c10995d3e08a9017ae0c8828c59983d23cf29ff4ff4a16908f199ba7"], 0x1, 0x556c, &(0x7f000000b980)="$eJzs3MtvG0UYAPBZp2npkwhxgFNXqpASqbbqtKngFqAVD5Eq4nHgVBzbsdza3ih2nJATEhxRD/wnCCROHPkbOHDmhjiAuCGBvLMmhPIosvNqfz9p/e3Mjr+dWa1afbuRA/DEmkt/+SkJl8LZEMJMCOFCEvL9pNhyyzE8F0K4HEIo/WlLiv4/Ok6HEM6FEC6NksecSX7o7vMxy5s/f/3tmVPnP//quyNaMnAMvBBC6G7E/e1ujFkrxntFf23YzmP3xrCI8UD3ftHOYtxuruUZtmvjcbU8Xm/F8dnGVn8U1zu1+ii22ut5/0YvnrA/bI3z5F+4V9vM243mWh7b/SyPrd04r53d+G/bbn8Q8zSKfB/m6cNgMI6xv7nTjOvZuJ/Hem9Q9Me8WaO5M4rDIhanC/Ws08jnsTbJlT7e3mr3tnbSYXOz38566VKl+mKlerNc3cwazUHzRrnWbdy8kc63OqNh5UGz1l1uZVmr06zUs+5COt+q18vVajp/q7nWrvXSarVyvXKtvLRQ7F1NX7vzXtpppPOj+Eq7t3W63emn69lmGr+xkC5Wrr+0kF6ppu+srKarb9++vbL67t1b7995eeWNV4tBD00rnV+8trhYrl4rL1YXjsH6R//vPuL6B5Os/5Ni0v9j/clklwf+3d4N9uBI5wFwgjxU/4eDqv9D+Ozq8MrSj+p/YGtf6yTW/2Ga9f+opFL//3f9W5q8/p+o/j2u9f8JXj9MxAMmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAn1vezX7ye78zF9vmi/2LR9UzRTkIIpRDCb39jJpzel3OmyDP7D+Nn/zKHb5KQZxid40yxnQshLBfbr08f9FUAAACAx9eXH11+EKv1+DF31BPiMMWHNqULH0wpXxJCmJ37YUrZSqOPZ6eULL+/T4WdKWXLH2A9NaVk8ZHbqWlleyQz4/Dxxb3OfEFJDKVDnQ4AAHAoZvaFw61CAAAAOEyf7m9O7bUWx1wSxq8yx++C87+837sHzu47BgAAAJxAyVFPAAAAADhwef3v9/8AAADg8RZ//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+J2du7lRG4gCAPxscID8KCjKPV3knBuUkRJyzDFQQJqgBNJCGkApgdy2hBWssEdoba0ldrGXXfR9kgeeMW9mgMubQQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPv0v1vM/v778br9iclKe3f483c0IAAAAaNoW63n5ZFrF79L5D+nUpxRnEZFHxEO1+yDe1HIOUp6i5fqiMYa/EWWGQx+jdLyNiG/puP3Y96cAAAAA12uzXM2qar1qppceEM+pWrTJ33/vKF8WEcX0pqNs+aH53FGy8vc9jJ/HeD96ZILaCle5gDXuaGjVktvwhG67M6g9pJmMF+WXWEZ5P/0CAACXVK8EWqoQAAAArsCPp7+1+UduXpZ/X+9HzT297Ngc9xnTrmjaEJzUIgAAAOAVyi49AAAAAKB3Zf3v/n8AAABw3ar7/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCnbbGeb5arWdvrixPz7Pbn6W5GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcMf+vKNACIRBGOxd35nM/Q8rDRoam1SB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv3zxtHEQUA/O3e7eUPoBiDXBhQkCigIfYlJKSEAmRR8BGQLOccDA6BxAWJLJAbqJDrNAhKhJBApst3SB1LaUKXwoWRqIN2b9deJ4acEmv34vx+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFS23o9X0zLu5IeJYVy9dnt7dSHvNx/oczfX70znLY+TR030/XsHn/wYS7rxWv385FTt5Nvm8wEAAOAQ2qcY71T1fUTczTbm8j6dKOr/rLomr/l/emHvEA/W/Zvbq0fLL01X9f+ff9x7eWeiieE8+aCLS8uD2YdT6R7UMp82Jx55Rbe488XvXjrFG5J+tPbSVlbcz+SHW7c+6BXhkSayBQAex6mqL4Pq56G877eZGADPjG6t8K7q/85EuzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANGFrLZ6r4iQipru7cW5ze3Vhv/7m+p3pqp27cWO9PmY+RBYRi0vLg6zBtYy7q9eufz6/vDy40nxwMiLam70MPhnhmoj/v6b8eEZ7q/jvIBmPNFoN0vL9GZd8doP7JyKebJzqs3fwGbb0DQkAgEMrK1te19/NNuby15LJiPs/763/36zFMWL9f+/Tc7frc9Xr/35jKxx/MyuXvpy5eu3620uX5i8OLg6+eOd0/93+mfNnz56fye/V7MxipIPZttMEAADgKdYrW73+Tycf3v8/XotjxPr/qx/739Tn6qj/97W76dd2JgAAAM+i3k704uv//J3sc0XS68XX8ysrV/rD48756eGx0XQf05Gy1ev/zmTbWQEAAABN2FpL9uz/X6jFMeL+//O/vPJbfcxORByLuBwRg1MLl5cvNLecsdbE3zkXE/XaXikAAABtOVa2+v5/Vjz/n+488pBGxFtvDOPqf12NUv93Pvzu1/pc9ef/zzS3xLGUTg3vR9FPRXSn2s4IAACAw+xo2fJi/69sY+6z349/3PP8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDT/g0AAP//SAE1oA==") mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0xc0096616, 0x0) 4.052015557s ago: executing program 2: syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setrlimit(0xf, &(0x7f0000000280)={0x89c, 0x4}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}]}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000340)='GPL\x00'}, 0x78) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r6 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000000600)="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", 0x1e0) sendfile(r5, r6, 0x0, 0xef85) 3.673425445s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x5c9c8df6) ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)) 3.045392581s ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_free_blocks\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x0, 0x2, 0xc2, 0x0, 0x87}}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0xc, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10) mount$incfs(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x11000, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x3026c25, &(0x7f0000000840)={[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) r8 = openat$cgroup_int(r6, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x3ff, 0x12) 3.008135117s ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0x116d962d5f73552, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0xd80}], 0x1}}], 0x1, 0x122, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)='U', 0x1}], 0x1}, 0x0) 2.590492971s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd53}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) fsopen(0x0, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) getcwd(0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 2.07911374s ago: executing program 2: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x3000040, &(0x7f0000000440)=ANY=[], 0x83, 0x1501, &(0x7f0000002180)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0xc593, &(0x7f0000000100)=ANY=[@ANYRES8], 0x1, 0x1207, &(0x7f0000001b80)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 2.07772594s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xa2) mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000340)) 1.841413087s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='ext4_es_lookup_extent_exit\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@generic={&(0x7f0000000cc0)='./file0\x00'}, 0x18) 1.658025015s ago: executing program 2: open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7cc8a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_int(r5, &(0x7f0000000100), 0x1001) 1.536743754s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_begin_ordered_truncate\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_begin_ordered_truncate\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x42400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 1.529921595s ago: executing program 0: write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) gettid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r2, &(0x7f00000000c0)="3f033608260712002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.509132908s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x2000}}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2802}, 0x80) 1.483573672s ago: executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000020000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0x0, 0x11012, r0, 0x0) 1.444476767s ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='ext4_free_blocks\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x0, 0x2, 0xc2, 0x0, 0x87}}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0xc, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7}, 0x10) mount$incfs(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x11000, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x3026c25, &(0x7f0000000840)={[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) r8 = openat$cgroup_int(r6, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x3ff, 0x12) 961.090772ms ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0xbb, &(0x7f0000000180)=""/187, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x267e}, 0x80) 733.473897ms ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x200009, &(0x7f0000000600)={[{@data_writeback}, {@data_err_ignore}, {@minixdf}, {@errors_remount}, {@data_writeback}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@usrjquota}, {@delalloc}, {@nodelalloc}]}, 0xee, 0x46e, &(0x7f0000000c40)="$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") 619.288664ms ago: executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="1f1b1832a59600000000000081"], 0x0) 566.565992ms ago: executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x1b}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 513.876371ms ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd53}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) fsopen(0x0, 0x0) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) getcwd(0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x40087708, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000300)='\x00\x00\x03\v\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 457.130709ms ago: executing program 0: syz_read_part_table(0x1052, &(0x7f0000001080)="$eJzsz7EOQTEYBeBz3d5gkngZg8Fgs4sHEbNr8DJeyOOQltEqIvm+4W970p6k4bc220nK8D5M6+guSVY51P0585ok4+tCyemerPtksWzBLn1bh8/tY1fa+2OtyayOa986kzy6/e27nwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA//AMAAD//1xxCEk=") 385.57278ms ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x18c7c80, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000140)={0xc, 0xffffffffffffffff, 0xfffffff4, 0x2}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x9, 0x8, 0x6, 0x0, 0x1}, 0x48) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xf, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1c000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$packet(0x11, 0x3, 0x300) 264.557789ms ago: executing program 4: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000020000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0x0, 0x11012, r0, 0x0) 214.046187ms ago: executing program 0: fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f00000002c0)='\x00', 0x1, 0x0) r0 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r0, &(0x7f00000014c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000080)=0x80) close(r2) ioctl$BTRFS_IOC_INO_PATHS(r1, 0x5450, 0x0) 194.34896ms ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r2, @ANYBLOB="080004000000000014001680100001800c0009"], 0x3c}}, 0x0) 147.196627ms ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "478b78d5ac"}}}}}}, 0x0) 113.046182ms ago: executing program 4: syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/38, 0x26) creat(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 69.599769ms ago: executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x10000, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 0s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) kernel console output (not intermixed with test programs): or.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccc7e5f69 code=0x7fc00000 [ 463.961848][ T393] uclogic 0003:256C:006D.00FD: failed probing pen v2 parameters: -71 [ 463.991307][ T30] audit: type=1326 audit(1717480650.586:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccc7e5f69 code=0x7fc00000 [ 464.069350][ T6689] syz-executor.0[6689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 464.069717][ T6689] syz-executor.0[6689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 464.197663][ T60] hid (null): unknown global tag 0xc [ 464.272425][ T393] uclogic 0003:256C:006D.00FD: failed probing parameters: -71 [ 464.279768][ T393] uclogic: probe of 0003:256C:006D.00FD failed with error -71 [ 464.293475][ T393] usb 2-1: USB disconnect, device number 86 [ 464.300719][ T60] wacom 0003:056A:00D0.00FE: unknown global tag 0xc [ 464.309591][ T30] audit: type=1326 audit(1717480650.586:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccc7e5f69 code=0x7fc00000 [ 464.333576][ T60] wacom 0003:056A:00D0.00FE: item 0 2 1 12 parsing failed [ 464.342233][ T30] audit: type=1326 audit(1717480650.586:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccc7e5f69 code=0x7fc00000 [ 464.345982][ T60] wacom 0003:056A:00D0.00FE: parse failed [ 464.366477][ T30] audit: type=1326 audit(1717480650.586:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccc7e5f69 code=0x7fc00000 [ 464.389885][ T60] wacom: probe of 0003:056A:00D0.00FE failed with error -22 [ 464.395592][ T30] audit: type=1326 audit(1717480650.586:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccc7e5f69 code=0x7fc00000 [ 464.404391][ T60] usb 3-1: USB disconnect, device number 99 [ 464.431419][ T30] audit: type=1326 audit(1717480650.586:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccc7e5f69 code=0x7fc00000 [ 464.436391][ T6694] loop4: detected capacity change from 0 to 256 [ 464.520732][ T6694] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 464.718552][ T6701] loop0: detected capacity change from 0 to 128 [ 464.821964][ T6704] loop3: detected capacity change from 0 to 128 [ 464.906915][ T393] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 465.268359][ T5996] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 465.336991][ T393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.347772][ T393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.579864][ T393] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 465.589093][ T393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.602164][ T393] usb 2-1: config 0 descriptor?? [ 465.636994][ T5996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.647949][ T5996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.660600][ T5996] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 465.669587][ T5996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.678628][ T5996] usb 3-1: config 0 descriptor?? [ 465.849707][ T6722] syz-executor.0[6722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 465.850079][ T6722] syz-executor.0[6722] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 466.218896][ T5996] hid (null): bogus close delimiter [ 466.459646][ T393] hid (null): bogus close delimiter [ 466.496948][ T5996] usb 3-1: language id specifier not provided by device, defaulting to English [ 466.574396][ T6731] loop0: detected capacity change from 0 to 512 [ 466.597027][ T393] usb 2-1: language id specifier not provided by device, defaulting to English [ 466.638164][ T6731] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 466.649059][ T6731] ext4 filesystem being mounted at /root/syzkaller-testdir1647521800/syzkaller.yo92A1/174/bus supports timestamps until 2038 (0x7fffffff) [ 466.958565][ T6742] overlayfs: conflicting lowerdir path [ 467.523460][ T6709] loop2: detected capacity change from 0 to 256 [ 467.539985][ T6747] loop4: detected capacity change from 0 to 128 [ 467.609091][ T6709] exfat: Bad value for 'uid' [ 467.618062][ T6749] loop3: detected capacity change from 0 to 128 [ 467.661317][ T5996] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00FF/input/input246 [ 467.678742][ T5996] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.00FF/input/input247 [ 467.718712][ T5996] uclogic 0003:256C:006D.00FF: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 467.794866][ T6699] loop1: detected capacity change from 0 to 256 [ 467.847508][ T6699] exfat: Bad value for 'uid' [ 467.860007][ T392] usb 3-1: USB disconnect, device number 100 [ 467.938356][ T393] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0100/input/input248 [ 467.969340][ T393] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0100/input/input249 [ 468.013031][ T393] uclogic 0003:256C:006D.0100: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 468.047002][ T332] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 468.159607][ T392] usb 2-1: USB disconnect, device number 87 [ 468.383541][ T6757] loop2: detected capacity change from 0 to 128 [ 468.446997][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.461301][ T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.479193][ T332] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.508504][ T332] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 468.527320][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.544713][ T332] usb 1-1: config 0 descriptor?? [ 469.016761][ T348] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 469.024313][ T392] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 469.077239][ T332] hid (null): unknown global tag 0xc [ 469.084604][ T332] wacom 0003:056A:00D0.0101: unknown global tag 0xc [ 469.091054][ T332] wacom 0003:056A:00D0.0101: item 0 2 1 12 parsing failed [ 469.098106][ T332] wacom 0003:056A:00D0.0101: parse failed [ 469.103644][ T332] wacom: probe of 0003:056A:00D0.0101 failed with error -22 [ 469.278188][ T5996] usb 1-1: USB disconnect, device number 92 [ 469.437739][ T6772] syz-executor.2[6772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.438056][ T6772] syz-executor.2[6772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.705231][ T348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.717955][ T6778] loop2: detected capacity change from 0 to 128 [ 469.728246][ T392] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.744137][ T392] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 469.757292][ T348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.766900][ T392] usb 4-1: New USB device found, idVendor=006d, idProduct=0000, bcdDevice= 0.00 [ 469.775816][ T392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.783914][ T348] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 469.793700][ T392] usb 4-1: config 0 descriptor?? [ 469.798646][ T348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.807381][ T348] usb 5-1: config 0 descriptor?? [ 469.857447][ T392] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 469.976940][ T5996] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 470.012626][ T6783] loop0: detected capacity change from 0 to 256 [ 470.058344][ T6783] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 470.297148][ T348] hid (null): bogus close delimiter [ 470.336969][ T5996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.347785][ T5996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.357619][ T5996] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 470.366427][ T5996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.374965][ T5996] usb 2-1: config 0 descriptor?? [ 470.506969][ T348] usb 5-1: language id specifier not provided by device, defaulting to English [ 470.743907][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 470.743925][ T30] audit: type=1326 audit(1717480657.456:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fd6def69 code=0x7fc00000 [ 470.774490][ T30] audit: type=1326 audit(1717480657.456:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5fd6def69 code=0x7fc00000 [ 470.801468][ T30] audit: type=1326 audit(1717480657.456:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fd6def69 code=0x7fc00000 [ 470.855342][ T30] audit: type=1326 audit(1717480657.456:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fd6def69 code=0x7fc00000 [ 470.881614][ T30] audit: type=1326 audit(1717480657.456:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fd6def69 code=0x7fc00000 [ 470.908885][ T5996] hid (null): bogus close delimiter [ 470.918844][ T30] audit: type=1326 audit(1717480657.456:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fd6def69 code=0x7fc00000 [ 470.964535][ T6759] loop4: detected capacity change from 0 to 256 [ 470.986948][ T30] audit: type=1326 audit(1717480657.456:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fd6def69 code=0x7fc00000 [ 471.010766][ T30] audit: type=1326 audit(1717480657.456:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fd6def69 code=0x7fc00000 [ 471.034551][ T30] audit: type=1326 audit(1717480657.456:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fd6def69 code=0x7fc00000 [ 471.058356][ T30] audit: type=1326 audit(1717480657.456:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5fd6def69 code=0x7fc00000 [ 471.127846][ T6759] exfat: Bad value for 'uid' [ 471.178195][ T348] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0102/input/input250 [ 471.191305][ T348] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0102/input/input251 [ 471.211362][ T348] uclogic 0003:256C:006D.0102: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 471.359139][ T6776] loop1: detected capacity change from 0 to 256 [ 471.377630][ T6776] exfat: Bad value for 'uid' [ 471.396240][ T60] usb 5-1: USB disconnect, device number 91 [ 471.436982][ T392] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 471.593911][ T2525] usb 4-1: USB disconnect, device number 100 [ 471.607477][ T6795] loop3: detected capacity change from 0 to 128 [ 471.696941][ T5996] uclogic 0003:256C:006D.0103: failed retrieving string descriptor #200: -71 [ 471.705569][ T5996] uclogic 0003:256C:006D.0103: failed retrieving pen parameters: -71 [ 471.720245][ T5996] uclogic 0003:256C:006D.0103: failed probing pen v2 parameters: -71 [ 471.728232][ T5996] uclogic 0003:256C:006D.0103: failed probing parameters: -71 [ 471.735711][ T5996] uclogic: probe of 0003:256C:006D.0103 failed with error -71 [ 471.744335][ T5996] usb 2-1: USB disconnect, device number 88 [ 471.796901][ T348] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 471.826961][ T392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.846879][ T392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.856455][ T392] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 471.865752][ T392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.874501][ T392] usb 1-1: config 0 descriptor?? [ 471.925386][ T6800] SELinux: security_context_str_to_sid(r) failed for (dev ?, type ?) errno=-22 [ 471.936761][ T6800] SELinux: security_context_str_to_sid(r) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 472.461750][ T348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.473009][ T348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.483022][ T348] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 472.492123][ T348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.503445][ T348] usb 3-1: config 0 descriptor?? [ 472.842283][ T539] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 473.017328][ T348] hid (null): bogus close delimiter [ 473.126974][ T332] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 473.236969][ T348] usb 3-1: language id specifier not provided by device, defaulting to English [ 473.245799][ T539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.256482][ T539] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.266236][ T539] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 473.275139][ T539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.283646][ T539] usb 2-1: config 0 descriptor?? [ 473.547035][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.557785][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.567311][ T332] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 473.579973][ T332] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 473.588825][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.597583][ T332] usb 5-1: config 0 descriptor?? [ 473.669081][ T6793] loop2: detected capacity change from 0 to 256 [ 473.706913][ T5856] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 473.707577][ T6793] exfat: Bad value for 'uid' [ 473.767151][ T539] hid (null): bogus close delimiter [ 473.818270][ T348] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0104/input/input252 [ 473.831288][ T348] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0104/input/input253 [ 473.850299][ T348] uclogic 0003:256C:006D.0104: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 474.019111][ T6] usb 3-1: USB disconnect, device number 101 [ 474.047175][ T332] hid (null): unknown global tag 0xc [ 474.053397][ T332] wacom 0003:056A:00D0.0106: unknown global tag 0xc [ 474.059898][ T332] wacom 0003:056A:00D0.0106: item 0 2 1 12 parsing failed [ 474.066984][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.067074][ T332] wacom 0003:056A:00D0.0106: parse failed [ 474.078339][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.083281][ T332] wacom: probe of 0003:056A:00D0.0106 failed with error -22 [ 474.093219][ T5856] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 474.112581][ T5856] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 474.121477][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.135557][ T5856] usb 4-1: config 0 descriptor?? [ 474.229359][ T6806] loop1: detected capacity change from 0 to 256 [ 474.237081][ T392] usbhid 1-1:0.0: can't add hid device: -71 [ 474.242826][ T392] usbhid: probe of 1-1:0.0 failed with error -71 [ 474.257670][ T392] usb 1-1: USB disconnect, device number 93 [ 474.258023][ T2525] usb 5-1: USB disconnect, device number 92 [ 474.269790][ T6806] exfat: Bad value for 'uid' [ 474.546964][ T539] uclogic 0003:256C:006D.0105: failed retrieving string descriptor #200: -71 [ 474.555706][ T539] uclogic 0003:256C:006D.0105: failed retrieving pen parameters: -71 [ 474.566845][ T539] uclogic 0003:256C:006D.0105: failed probing pen v2 parameters: -71 [ 474.574781][ T539] uclogic 0003:256C:006D.0105: failed probing parameters: -71 [ 474.582273][ T539] uclogic: probe of 0003:256C:006D.0105 failed with error -71 [ 474.590766][ T539] usb 2-1: USB disconnect, device number 89 [ 474.616916][ T392] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 474.633818][ T6823] loop2: detected capacity change from 0 to 256 [ 474.644378][ T6823] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 474.647215][ T5856] hid (null): unknown global tag 0xc [ 474.665891][ T5856] wacom 0003:056A:00D0.0107: unknown global tag 0xc [ 474.672556][ T5856] wacom 0003:056A:00D0.0107: item 0 2 1 12 parsing failed [ 474.679657][ T5856] wacom 0003:056A:00D0.0107: parse failed [ 474.685190][ T5856] wacom: probe of 0003:056A:00D0.0107 failed with error -22 [ 474.859046][ T5856] usb 4-1: USB disconnect, device number 101 [ 475.016975][ T392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.027815][ T392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.037318][ T392] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.049945][ T392] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 475.062660][ T392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.071057][ T392] usb 1-1: config 0 descriptor?? [ 475.336915][ T539] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 475.386054][ T6831] loop3: detected capacity change from 0 to 512 [ 475.423173][ T6833] SELinux: security_context_str_to_sid(r) failed for (dev ?, type ?) errno=-22 [ 475.432445][ T6833] SELinux: security_context_str_to_sid(r) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 475.469547][ T6831] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 475.480975][ T6831] ext4 filesystem being mounted at /root/syzkaller-testdir4122708688/syzkaller.Ng9hCu/371/bus supports timestamps until 2038 (0x7fffffff) [ 475.547144][ T392] hid (null): unknown global tag 0xc [ 475.553932][ T392] wacom 0003:056A:00D0.0108: unknown global tag 0xc [ 475.560391][ T392] wacom 0003:056A:00D0.0108: item 0 2 1 12 parsing failed [ 475.567743][ T392] wacom 0003:056A:00D0.0108: parse failed [ 475.573286][ T392] wacom: probe of 0003:056A:00D0.0108 failed with error -22 [ 475.621463][ T6841] loop4: detected capacity change from 0 to 128 [ 475.736943][ T392] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 475.744496][ T539] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.752753][ T5856] usb 1-1: USB disconnect, device number 94 [ 475.766966][ T539] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.780882][ T539] usb 2-1: New USB device found, idVendor=006d, idProduct=0000, bcdDevice= 0.00 [ 475.796900][ T539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.805264][ T539] usb 2-1: config 0 descriptor?? [ 475.847447][ T539] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 476.116968][ T392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.127737][ T392] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.137374][ T392] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 476.146181][ T392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.154623][ T392] usb 3-1: config 0 descriptor?? [ 476.560027][ T2525] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 476.854733][ T539] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 476.862401][ T392] hid (null): bogus close delimiter [ 476.946948][ T2525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.957871][ T2525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.967475][ T2525] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 476.976280][ T2525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.984772][ T2525] usb 4-1: config 0 descriptor?? [ 477.169008][ T6835] loop2: detected capacity change from 0 to 256 [ 477.207445][ T6835] exfat: Bad value for 'uid' [ 477.256987][ T539] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.267738][ T539] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.277385][ T539] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 477.286228][ T539] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.294811][ T539] usb 1-1: config 0 descriptor?? [ 477.467139][ T2525] hid (null): bogus close delimiter [ 477.687159][ T2525] usb 4-1: language id specifier not provided by device, defaulting to English [ 477.750821][ T392] uclogic 0003:256C:006D.0109: failed retrieving string descriptor #200: -71 [ 477.759582][ T392] uclogic 0003:256C:006D.0109: failed retrieving pen parameters: -71 [ 477.767410][ T392] uclogic 0003:256C:006D.0109: failed probing pen v2 parameters: -71 [ 477.775293][ T392] uclogic 0003:256C:006D.0109: failed probing parameters: -71 [ 477.782640][ T392] uclogic: probe of 0003:256C:006D.0109 failed with error -71 [ 477.790770][ T392] usb 3-1: USB disconnect, device number 102 [ 477.847336][ T539] hid (null): bogus close delimiter [ 478.059804][ T348] usb 2-1: USB disconnect, device number 90 [ 478.067010][ T539] usb 1-1: language id specifier not provided by device, defaulting to English [ 478.080662][ T6866] loop2: detected capacity change from 0 to 128 [ 478.109532][ T6851] loop3: detected capacity change from 0 to 256 [ 478.167684][ T6851] exfat: Bad value for 'uid' [ 478.228617][ T2525] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.010A/input/input254 [ 478.297932][ T2525] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.010A/input/input255 [ 478.304334][ T6872] SELinux: security_context_str_to_sid(r) failed for (dev ?, type ?) errno=-22 [ 478.314832][ T2525] uclogic 0003:256C:006D.010A: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 478.324367][ T6872] SELinux: security_context_str_to_sid(r) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 478.501147][ T6876] overlayfs: conflicting lowerdir path [ 478.603806][ T6853] loop0: detected capacity change from 0 to 256 [ 478.670706][ T2525] usb 4-1: USB disconnect, device number 102 [ 478.699635][ T6853] exfat: Bad value for 'uid' [ 478.720240][ T348] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 478.788221][ T539] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.010B/input/input256 [ 478.814359][ T539] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.010B/input/input257 [ 478.833091][ T539] uclogic 0003:256C:006D.010B: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 478.958591][ T6879] loop2: detected capacity change from 0 to 512 [ 478.999077][ T392] usb 1-1: USB disconnect, device number 95 [ 479.048782][ T6879] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 479.060311][ T6879] ext4 filesystem being mounted at /root/syzkaller-testdir627338749/syzkaller.dDuve9/385/bus supports timestamps until 2038 (0x7fffffff) [ 479.096963][ T348] usb 2-1: config 0 has no interfaces? [ 479.257210][ T6884] loop3: detected capacity change from 0 to 128 [ 479.286957][ T348] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 479.295841][ T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.304011][ T348] usb 2-1: Product: syz [ 479.316954][ T348] usb 2-1: Manufacturer: syz [ 479.321963][ T348] usb 2-1: SerialNumber: syz [ 479.327549][ T348] r8152-cfgselector 2-1: config 0 descriptor?? [ 479.526932][ T5856] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 479.596931][ T348] r8152-cfgselector 2-1: Unknown version 0x0000 [ 479.603707][ T348] r8152-cfgselector 2-1: USB disconnect, device number 91 [ 479.886945][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.898185][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.908560][ T5856] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.921294][ T5856] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 479.930378][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.955778][ T5856] usb 5-1: config 0 descriptor?? [ 480.266909][ T6] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 480.366909][ T348] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 480.417022][ T539] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 480.427320][ T5856] hid (null): unknown global tag 0xc [ 480.433910][ T5856] wacom 0003:056A:00D0.010C: unknown global tag 0xc [ 480.442003][ T5856] wacom 0003:056A:00D0.010C: item 0 2 1 12 parsing failed [ 480.505333][ T5856] wacom 0003:056A:00D0.010C: parse failed [ 480.511223][ T5856] wacom: probe of 0003:056A:00D0.010C failed with error -22 [ 480.760921][ T5856] usb 5-1: USB disconnect, device number 93 [ 480.857033][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.867854][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.877436][ T6] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 480.886231][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.894843][ T6] usb 3-1: config 0 descriptor?? [ 480.986976][ T348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.997719][ T348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.007267][ T539] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.017118][ T348] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 481.025938][ T348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.033813][ T539] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 481.046453][ T539] usb 4-1: New USB device found, idVendor=006d, idProduct=0000, bcdDevice= 0.00 [ 481.055637][ T539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.063697][ T348] usb 2-1: config 0 descriptor?? [ 481.069077][ T539] usb 4-1: config 0 descriptor?? [ 481.108200][ T539] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 481.332219][ T6909] loop0: detected capacity change from 0 to 128 [ 481.377422][ T6] hid (null): bogus close delimiter [ 481.735644][ T348] hid (null): bogus close delimiter [ 481.980047][ T6898] loop2: detected capacity change from 0 to 256 [ 482.027488][ T6898] exfat: Bad value for 'uid' [ 482.098950][ T6900] loop1: detected capacity change from 0 to 256 [ 482.137562][ T6900] exfat: Bad value for 'uid' [ 482.216719][ T6919] loop4: detected capacity change from 0 to 128 [ 482.336942][ T6] uclogic 0003:256C:006D.010D: failed retrieving string descriptor #200: -71 [ 482.345696][ T6] uclogic 0003:256C:006D.010D: failed retrieving pen parameters: -71 [ 482.353683][ T6] uclogic 0003:256C:006D.010D: failed probing pen v2 parameters: -71 [ 482.361558][ T6] uclogic 0003:256C:006D.010D: failed probing parameters: -71 [ 482.368975][ T6] uclogic: probe of 0003:256C:006D.010D failed with error -71 [ 482.379100][ T6] usb 3-1: USB disconnect, device number 103 [ 482.436954][ T348] uclogic 0003:256C:006D.010E: failed retrieving string descriptor #200: -71 [ 482.446766][ T348] uclogic 0003:256C:006D.010E: failed retrieving pen parameters: -71 [ 482.455342][ T348] uclogic 0003:256C:006D.010E: failed probing pen v2 parameters: -71 [ 482.463541][ T348] uclogic 0003:256C:006D.010E: failed probing parameters: -71 [ 482.472109][ T348] uclogic: probe of 0003:256C:006D.010E failed with error -71 [ 482.485394][ T348] usb 2-1: USB disconnect, device number 92 [ 482.546896][ T60] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 482.907001][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.917860][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.927575][ T60] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 482.936474][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.945316][ T60] usb 1-1: config 0 descriptor?? [ 483.016261][ T6926] device syzkaller0 entered promiscuous mode [ 483.130796][ T6932] loop4: detected capacity change from 0 to 512 [ 483.154635][ T5856] usb 4-1: USB disconnect, device number 103 [ 483.166196][ T6934] loop3: detected capacity change from 0 to 128 [ 483.210659][ T6932] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 483.221619][ T348] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 483.229619][ T6932] ext4 filesystem being mounted at /root/syzkaller-testdir2921111498/syzkaller.VM6VY7/168/bus supports timestamps until 2038 (0x7fffffff) [ 483.427219][ T60] hid (null): bogus close delimiter [ 483.616964][ T348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.630369][ T348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.640216][ T348] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 483.646976][ T60] usb 1-1: language id specifier not provided by device, defaulting to English [ 483.649302][ T348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.666572][ T348] usb 2-1: config 0 descriptor?? [ 483.976910][ T6] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 484.059668][ T6921] loop0: detected capacity change from 0 to 256 [ 484.087484][ T6921] exfat: Bad value for 'uid' [ 484.157173][ T348] hid (null): bogus close delimiter [ 484.158564][ T60] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.010F/input/input258 [ 484.175265][ T60] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.010F/input/input259 [ 484.188017][ T60] uclogic 0003:256C:006D.010F: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 484.336930][ T392] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 484.347182][ T60] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 484.370853][ T5996] usb 1-1: USB disconnect, device number 96 [ 484.377108][ T348] usb 2-1: language id specifier not provided by device, defaulting to English [ 484.386124][ T6] usb 3-1: config 0 has no interfaces? [ 484.567006][ T6] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 484.575913][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.583732][ T6] usb 3-1: Product: syz [ 484.587797][ T6] usb 3-1: Manufacturer: syz [ 484.592207][ T6] usb 3-1: SerialNumber: syz [ 484.597491][ T6] r8152-cfgselector 3-1: config 0 descriptor?? [ 484.706979][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.717704][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.727266][ T60] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 484.736102][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.736982][ T392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.747930][ T60] usb 4-1: config 0 descriptor?? [ 484.755036][ T392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.768921][ T392] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 484.777856][ T392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.786339][ T392] usb 5-1: config 0 descriptor?? [ 484.791872][ T6930] loop1: detected capacity change from 0 to 256 [ 484.846954][ T6] r8152-cfgselector 3-1: Unknown version 0x0000 [ 484.847562][ T6930] exfat: Bad value for 'uid' [ 484.853662][ T6] r8152-cfgselector 3-1: USB disconnect, device number 104 [ 484.928103][ T348] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0110/input/input260 [ 484.941330][ T348] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0110/input/input261 [ 484.957281][ T348] uclogic 0003:256C:006D.0110: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 485.142564][ T5996] usb 2-1: USB disconnect, device number 93 [ 485.157016][ T5856] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 485.354802][ T6953] loop2: detected capacity change from 0 to 128 [ 485.615268][ T6954] overlayfs: failed to resolve './file2': -2 [ 485.797100][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.893331][ T5856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.897589][ T6960] loop1: detected capacity change from 0 to 128 [ 485.914342][ T5856] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.939486][ T5856] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 485.954507][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.973991][ T5856] usb 1-1: config 0 descriptor?? [ 486.457204][ T5856] hid (null): unknown global tag 0xc [ 486.463803][ T5856] wacom 0003:056A:00D0.0112: unknown global tag 0xc [ 486.473238][ T5856] wacom 0003:056A:00D0.0112: item 0 2 1 12 parsing failed [ 486.480397][ T5856] wacom 0003:056A:00D0.0112: parse failed [ 486.486179][ T5856] wacom: probe of 0003:056A:00D0.0112 failed with error -22 [ 486.656924][ T5996] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 486.668062][ T6] usb 1-1: USB disconnect, device number 97 [ 487.046961][ T5856] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 487.057049][ T5996] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 487.064581][ T5996] usb 3-1: can't read configurations, error -61 [ 487.126960][ T60] usb 4-1: string descriptor 0 read error: -71 [ 487.151683][ T60] uclogic 0003:256C:006D.0111: failed retrieving string descriptor #200: -71 [ 487.160414][ T60] uclogic 0003:256C:006D.0111: failed retrieving pen parameters: -71 [ 487.168432][ T60] uclogic 0003:256C:006D.0111: failed probing pen v2 parameters: -71 [ 487.176480][ T60] uclogic 0003:256C:006D.0111: failed probing parameters: -71 [ 487.176998][ T392] usbhid 5-1:0.0: can't add hid device: -71 [ 487.184086][ T60] uclogic: probe of 0003:256C:006D.0111 failed with error -71 [ 487.195851][ T392] usbhid: probe of 5-1:0.0 failed with error -71 [ 487.207012][ T392] usb 5-1: USB disconnect, device number 94 [ 487.210877][ T60] usb 4-1: USB disconnect, device number 104 [ 487.224225][ T5996] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 487.259615][ T6976] loop3: detected capacity change from 0 to 256 [ 487.319194][ T6976] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 487.557268][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.568915][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.578612][ T5856] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 487.587620][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.596327][ T5856] usb 2-1: config 0 descriptor?? [ 487.646957][ T5996] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 487.654392][ T5996] usb 3-1: can't read configurations, error -61 [ 487.660666][ T5996] usb usb3-port1: attempt power cycle [ 487.766914][ T392] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 487.987130][ T30] kauditd_printk_skb: 332 callbacks suppressed [ 487.987153][ T30] audit: type=1326 audit(1717480674.706:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651ac38f69 code=0x7fc00000 [ 488.017012][ T30] audit: type=1326 audit(1717480674.706:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f651ac38f69 code=0x7fc00000 [ 488.041011][ T30] audit: type=1326 audit(1717480674.706:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651ac38f69 code=0x7fc00000 [ 488.065333][ T30] audit: type=1326 audit(1717480674.706:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651ac38f69 code=0x7fc00000 [ 488.066925][ T5996] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 488.096937][ T5856] hid (null): bogus close delimiter [ 488.103818][ T30] audit: type=1326 audit(1717480674.706:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651ac38f69 code=0x7fc00000 [ 488.127939][ T30] audit: type=1326 audit(1717480674.706:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651ac38f69 code=0x7fc00000 [ 488.152282][ T30] audit: type=1326 audit(1717480674.706:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651ac38f69 code=0x7fc00000 [ 488.191460][ T30] audit: type=1326 audit(1717480674.706:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651ac38f69 code=0x7fc00000 [ 488.197054][ T392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.215367][ T30] audit: type=1326 audit(1717480674.706:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651ac38f69 code=0x7fc00000 [ 488.236893][ T392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.250066][ T30] audit: type=1326 audit(1717480674.706:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651ac38f69 code=0x7fc00000 [ 488.259716][ T392] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 488.295295][ T392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.305192][ T392] usb 5-1: config 0 descriptor?? [ 488.328193][ T6983] loop3: detected capacity change from 0 to 512 [ 488.427304][ T6986] overlayfs: conflicting lowerdir path [ 488.496951][ T5996] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 488.515367][ T5996] usb 3-1: can't read configurations, error -61 [ 488.570925][ T6968] loop1: detected capacity change from 0 to 256 [ 488.624191][ T6968] exfat: Bad value for 'uid' [ 488.634368][ T6983] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 488.645277][ T6983] ext4 filesystem being mounted at /root/syzkaller-testdir4122708688/syzkaller.Ng9hCu/378/bus supports timestamps until 2038 (0x7fffffff) [ 488.667102][ T5996] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 488.917059][ T5856] uclogic 0003:256C:006D.0113: failed retrieving string descriptor #200: -71 [ 488.927298][ T5996] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 488.938522][ T5856] uclogic 0003:256C:006D.0113: failed retrieving pen parameters: -71 [ 488.946743][ T5996] usb 3-1: can't read configurations, error -61 [ 488.955765][ T5856] uclogic 0003:256C:006D.0113: failed probing pen v2 parameters: -71 [ 488.955827][ T392] hid (null): bogus close delimiter [ 488.970521][ T5996] usb usb3-port1: unable to enumerate USB device [ 488.979118][ T5856] uclogic 0003:256C:006D.0113: failed probing parameters: -71 [ 488.988069][ T5856] uclogic: probe of 0003:256C:006D.0113 failed with error -71 [ 488.998403][ T5856] usb 2-1: USB disconnect, device number 94 [ 489.058582][ T6993] loop0: detected capacity change from 0 to 512 [ 489.128522][ T6993] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 489.139368][ T6993] ext4 filesystem being mounted at /root/syzkaller-testdir1647521800/syzkaller.yo92A1/190/bus supports timestamps until 2038 (0x7fffffff) [ 489.255069][ T6998] loop3: detected capacity change from 0 to 128 [ 489.421289][ T6973] loop4: detected capacity change from 0 to 256 [ 489.488017][ T6973] exfat: Bad value for 'uid' [ 489.545134][ T7006] loop0: detected capacity change from 0 to 128 [ 489.746932][ T2525] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 489.756938][ T392] uclogic 0003:256C:006D.0114: failed retrieving string descriptor #200: -71 [ 489.765544][ T392] uclogic 0003:256C:006D.0114: failed retrieving pen parameters: -71 [ 489.781109][ T392] uclogic 0003:256C:006D.0114: failed probing pen v2 parameters: -71 [ 489.796910][ T392] uclogic 0003:256C:006D.0114: failed probing parameters: -71 [ 489.807487][ T392] uclogic: probe of 0003:256C:006D.0114 failed with error -71 [ 489.821408][ T392] usb 5-1: USB disconnect, device number 95 [ 489.886903][ T5856] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 490.107218][ T2525] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.123412][ T2525] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.142815][ T2525] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 490.158381][ T2525] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.169210][ T2525] usb 2-1: config 0 descriptor?? [ 490.277023][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.287988][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.297605][ T5856] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 490.306390][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.319781][ T5856] usb 3-1: config 0 descriptor?? [ 490.677137][ T2525] hid (null): bogus close delimiter [ 490.736897][ T6] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 490.797212][ T5856] hid (null): bogus close delimiter [ 490.916933][ T60] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 491.016973][ T5856] usb 3-1: language id specifier not provided by device, defaulting to English [ 491.138893][ T7004] loop1: detected capacity change from 0 to 256 [ 491.167009][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.177734][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.178463][ T7004] exfat: Bad value for 'uid' [ 491.187890][ T6] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 491.200804][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.209171][ T6] usb 5-1: config 0 descriptor?? [ 491.276932][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.293173][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.303150][ T60] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 491.312270][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.320762][ T60] usb 1-1: config 0 descriptor?? [ 491.356912][ T392] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 491.439172][ T7002] loop2: detected capacity change from 0 to 256 [ 491.487510][ T7002] exfat: Bad value for 'uid' [ 491.516951][ T2525] uclogic 0003:256C:006D.0115: failed retrieving string descriptor #200: -71 [ 491.525612][ T2525] uclogic 0003:256C:006D.0115: failed retrieving pen parameters: -71 [ 491.533663][ T2525] uclogic 0003:256C:006D.0115: failed probing pen v2 parameters: -71 [ 491.541656][ T2525] uclogic 0003:256C:006D.0115: failed probing parameters: -71 [ 491.548892][ T2525] uclogic: probe of 0003:256C:006D.0115 failed with error -71 [ 491.557105][ T2525] usb 2-1: USB disconnect, device number 95 [ 491.618201][ T5856] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0116/input/input262 [ 491.630893][ T5856] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0116/input/input263 [ 491.648106][ T5856] uclogic 0003:256C:006D.0116: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 491.747548][ T392] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.757560][ T392] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 491.770299][ T392] usb 4-1: New USB device found, idVendor=006d, idProduct=0000, bcdDevice= 0.00 [ 491.779288][ T392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.790213][ T392] usb 4-1: config 0 descriptor?? [ 491.945190][ T60] usbhid 1-1:0.0: can't add hid device: -71 [ 491.981992][ T60] usbhid: probe of 1-1:0.0 failed with error -71 [ 492.015533][ T60] usb 1-1: USB disconnect, device number 98 [ 492.077693][ T5856] usb 3-1: USB disconnect, device number 109 [ 492.078155][ T392] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 492.295677][ T7028] loop1: detected capacity change from 0 to 256 [ 492.421121][ T7028] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 492.760519][ T7036] loop2: detected capacity change from 0 to 512 [ 492.829122][ T7036] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 492.840021][ T7036] ext4 filesystem being mounted at /root/syzkaller-testdir627338749/syzkaller.dDuve9/392/bus supports timestamps until 2038 (0x7fffffff) [ 493.040370][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 493.040394][ T30] audit: type=1326 audit(1717480679.756:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea93d95f69 code=0x7fc00000 [ 493.191391][ T30] audit: type=1326 audit(1717480679.786:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea93d95f69 code=0x7fc00000 [ 493.218284][ T30] audit: type=1326 audit(1717480679.786:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea93d95f69 code=0x7fc00000 [ 493.242120][ T30] audit: type=1326 audit(1717480679.786:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea93d95f69 code=0x7fc00000 [ 493.274597][ T30] audit: type=1326 audit(1717480679.796:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea93d95f69 code=0x7fc00000 [ 493.314267][ T30] audit: type=1326 audit(1717480679.796:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea93d95f69 code=0x7fc00000 [ 493.348900][ T30] audit: type=1326 audit(1717480679.796:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea93d95f69 code=0x7fc00000 [ 493.382093][ T30] audit: type=1326 audit(1717480679.796:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea93d95f69 code=0x7fc00000 [ 493.406177][ T30] audit: type=1326 audit(1717480679.796:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea93d95f69 code=0x7fc00000 [ 493.430384][ T30] audit: type=1326 audit(1717480679.796:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea93d95f69 code=0x7fc00000 [ 493.445455][ T7050] loop4: detected capacity change from 0 to 128 [ 493.455809][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 493.467795][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 493.475011][ T6] usb 5-1: USB disconnect, device number 96 [ 493.646952][ T539] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 493.657055][ T392] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 494.111716][ T60] usb 4-1: USB disconnect, device number 105 [ 494.142662][ T7060] loop3: detected capacity change from 0 to 128 [ 494.193502][ T7062] loop4: detected capacity change from 0 to 128 [ 494.296961][ T539] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.307865][ T539] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.317821][ T539] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 494.326815][ T539] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.338915][ T539] usb 1-1: config 0 descriptor?? [ 494.406972][ T392] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 494.415398][ T392] usb 2-1: can't read configurations, error -61 [ 494.567120][ T392] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 494.827174][ T539] hid (null): bogus close delimiter [ 494.837013][ T6] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 494.976957][ T392] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 494.984494][ T392] usb 2-1: can't read configurations, error -61 [ 494.990976][ T392] usb usb2-port1: attempt power cycle [ 495.216940][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.227782][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.237458][ T6] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 495.246321][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.254879][ T6] usb 3-1: config 0 descriptor?? [ 495.279043][ T7045] loop0: detected capacity change from 0 to 256 [ 495.317492][ T7045] exfat: Bad value for 'uid' [ 495.326913][ T5856] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 495.406954][ T348] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 495.417020][ T392] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 495.617025][ T539] uclogic 0003:256C:006D.0117: failed retrieving string descriptor #200: -71 [ 495.625655][ T539] uclogic 0003:256C:006D.0117: failed retrieving pen parameters: -71 [ 495.633676][ T539] uclogic 0003:256C:006D.0117: failed probing pen v2 parameters: -71 [ 495.641623][ T539] uclogic 0003:256C:006D.0117: failed probing parameters: -71 [ 495.649044][ T539] uclogic: probe of 0003:256C:006D.0117 failed with error -71 [ 495.657268][ T539] usb 1-1: USB disconnect, device number 99 [ 495.686977][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.697727][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.707552][ T5856] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 495.716411][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.727014][ T392] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 495.734407][ T392] usb 2-1: can't read configurations, error -61 [ 495.778194][ T5856] usb 4-1: config 0 descriptor?? [ 495.816939][ T348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.827824][ T348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.837729][ T348] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 495.846575][ T348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.090157][ T392] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 496.098665][ T348] usb 5-1: config 0 descriptor?? [ 496.257140][ T5856] hid (null): bogus close delimiter [ 496.323822][ T7079] loop0: detected capacity change from 0 to 256 [ 496.337055][ T392] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 496.344639][ T392] usb 2-1: can't read configurations, error -71 [ 496.351085][ T392] usb usb2-port1: unable to enumerate USB device [ 496.428019][ T7079] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 496.637575][ T5856] usb 4-1: language id specifier not provided by device, defaulting to English [ 496.705341][ T348] hid (null): bogus close delimiter [ 496.846976][ T348] usb 5-1: language id specifier not provided by device, defaulting to English [ 497.049696][ T7071] loop3: detected capacity change from 0 to 256 [ 497.087826][ T7071] exfat: Bad value for 'uid' [ 497.148316][ T5856] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0118/input/input264 [ 497.331133][ T7088] overlayfs: conflicting lowerdir path [ 497.927150][ T7073] loop4: detected capacity change from 0 to 256 [ 497.958258][ T5856] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0118/input/input265 [ 497.963778][ T7073] exfat: Bad value for 'uid' [ 497.987001][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 497.994819][ T5856] uclogic 0003:256C:006D.0118: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 497.996528][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 498.010828][ T7097] loop1: detected capacity change from 0 to 128 [ 498.024629][ T6] usb 3-1: USB disconnect, device number 110 [ 498.024634][ T5856] usb 4-1: USB disconnect, device number 106 [ 498.088164][ T348] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0119/input/input266 [ 498.106115][ T348] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0119/input/input267 [ 498.119346][ T348] uclogic 0003:256C:006D.0119: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 498.286953][ T5996] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 498.297112][ T348] usb 5-1: USB disconnect, device number 97 [ 498.506967][ T6] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 498.646924][ T5996] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.657012][ T5996] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 498.669739][ T5996] usb 1-1: New USB device found, idVendor=006d, idProduct=0000, bcdDevice= 0.00 [ 498.678562][ T5996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.686970][ T5996] usb 1-1: config 0 descriptor?? [ 498.726926][ T5856] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 498.734944][ T5996] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 498.916991][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.927782][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.937650][ T6] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 499.117350][ T5856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.140801][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.159223][ T5856] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 499.173629][ T5856] usb 4-1: New USB device found, idVendor=006d, idProduct=0000, bcdDevice= 0.00 [ 499.183722][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.195491][ T5856] usb 4-1: config 0 descriptor?? [ 499.293575][ T7113] overlayfs: conflicting lowerdir path [ 499.382839][ T5856] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 499.498271][ T6] usb 3-1: config 0 descriptor?? [ 500.282768][ T7125] overlayfs: failed to resolve './file2': -2 [ 500.439592][ T392] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 500.569187][ T7127] loop4: detected capacity change from 0 to 128 [ 500.886929][ T392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.897711][ T392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.907406][ T392] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 500.916309][ T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.925006][ T392] usb 2-1: config 0 descriptor?? [ 501.014086][ T5996] usb 1-1: USB disconnect, device number 100 [ 501.027392][ T7131] loop0: detected capacity change from 0 to 128 [ 501.427204][ T392] hid (null): bogus close delimiter [ 501.466718][ T332] usb 4-1: USB disconnect, device number 107 [ 501.597188][ T6] usb 3-1: string descriptor 0 read error: -71 [ 501.616953][ T6] uclogic 0003:256C:006D.011A: failed retrieving string descriptor #200: -71 [ 501.625708][ T6] uclogic 0003:256C:006D.011A: failed retrieving pen parameters: -71 [ 501.634102][ T6] uclogic 0003:256C:006D.011A: failed probing pen v2 parameters: -71 [ 502.159159][ T7147] loop1: detected capacity change from 0 to 256 [ 502.266178][ T7147] exfat: Bad value for 'uid' [ 502.412734][ T6] uclogic 0003:256C:006D.011A: failed probing parameters: -71 [ 502.420308][ T6] uclogic: probe of 0003:256C:006D.011A failed with error -71 [ 502.488798][ T6] usb 3-1: USB disconnect, device number 111 [ 502.717390][ T7156] loop0: detected capacity change from 0 to 512 [ 502.815280][ T7156] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 502.826179][ T7156] ext4 filesystem being mounted at /root/syzkaller-testdir1647521800/syzkaller.yo92A1/199/bus supports timestamps until 2038 (0x7fffffff) [ 502.977765][ T332] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 503.302144][ T7165] loop4: detected capacity change from 0 to 128 [ 503.346973][ T6] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 503.486943][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.497742][ T332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.520730][ T332] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 503.529760][ T332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.538278][ T332] usb 4-1: config 0 descriptor?? [ 503.978186][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.989132][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.000640][ T6] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 504.009693][ T392] usb 2-1: string descriptor 0 read error: -71 [ 504.015966][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.024617][ T6] usb 3-1: config 0 descriptor?? [ 504.029553][ T392] uclogic 0003:256C:006D.011B: failed retrieving string descriptor #200: -71 [ 504.038331][ T392] uclogic 0003:256C:006D.011B: failed retrieving pen parameters: -71 [ 504.046208][ T392] uclogic 0003:256C:006D.011B: failed probing pen v2 parameters: -71 [ 504.054404][ T392] uclogic 0003:256C:006D.011B: failed probing parameters: -71 [ 504.061878][ T392] uclogic: probe of 0003:256C:006D.011B failed with error -71 [ 504.070251][ T392] usb 2-1: USB disconnect, device number 100 [ 504.552582][ T7178] loop0: detected capacity change from 0 to 128 [ 504.606880][ T392] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 504.856934][ T6] usb 3-1: string descriptor 0 read error: -71 [ 504.876957][ T6] uclogic 0003:256C:006D.011C: failed retrieving string descriptor #200: -71 [ 504.895829][ T6] uclogic 0003:256C:006D.011C: failed retrieving pen parameters: -71 [ 504.916119][ T6] uclogic 0003:256C:006D.011C: failed probing pen v2 parameters: -71 [ 504.937429][ T6] uclogic 0003:256C:006D.011C: failed probing parameters: -71 [ 504.957109][ T6] uclogic: probe of 0003:256C:006D.011C failed with error -71 [ 504.974707][ T6] usb 3-1: USB disconnect, device number 112 [ 504.996946][ T392] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.007325][ T392] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 505.020067][ T392] usb 2-1: New USB device found, idVendor=006d, idProduct=0000, bcdDevice= 0.00 [ 505.032019][ T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.043710][ T392] usb 2-1: config 0 descriptor?? [ 505.087394][ T392] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 505.453099][ T7191] loop4: detected capacity change from 0 to 128 [ 505.636972][ T332] usbhid 4-1:0.0: can't add hid device: -71 [ 505.642881][ T6] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 505.653828][ T332] usbhid: probe of 4-1:0.0 failed with error -71 [ 505.661093][ T332] usb 4-1: USB disconnect, device number 108 [ 505.746907][ T60] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 506.006919][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 506.126964][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.137834][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.147657][ T60] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 506.162180][ T60] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 506.171077][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.179572][ T60] usb 1-1: config 0 descriptor?? [ 506.286937][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.296973][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 506.310280][ T6] usb 3-1: New USB device found, idVendor=006d, idProduct=0000, bcdDevice= 0.00 [ 506.319406][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.328253][ T6] usb 3-1: config 0 descriptor?? [ 506.375668][ T7202] loop4: detected capacity change from 0 to 128 [ 506.382373][ T6] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 506.524804][ T7206] loop3: detected capacity change from 0 to 512 [ 506.647659][ T7206] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 506.658609][ T7206] ext4 filesystem being mounted at /root/syzkaller-testdir4122708688/syzkaller.Ng9hCu/388/bus supports timestamps until 2038 (0x7fffffff) [ 507.011005][ T5856] usb 2-1: USB disconnect, device number 101 [ 507.125862][ T7219] loop3: detected capacity change from 0 to 128 [ 507.404049][ T5856] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 507.806956][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.817858][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.837853][ T5856] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 507.849535][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.858040][ T5856] usb 2-1: config 0 descriptor?? [ 508.348033][ T7232] overlayfs: conflicting lowerdir path [ 508.399505][ T5856] hid (null): bogus close delimiter [ 508.421574][ T2525] usb 3-1: USB disconnect, device number 113 [ 508.584400][ T7162] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 508.601567][ T60] usbhid 1-1:0.0: can't add hid device: -71 [ 508.610130][ T60] usbhid: probe of 1-1:0.0 failed with error -71 [ 508.617884][ T60] usb 1-1: USB disconnect, device number 101 [ 508.869304][ T7217] loop1: detected capacity change from 0 to 256 [ 508.891900][ T7217] exfat: Bad value for 'uid' [ 509.016897][ T60] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 509.016924][ T7162] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.016954][ T7162] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.044646][ T7162] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 509.072781][ T7162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.088800][ T7243] loop4: detected capacity change from 0 to 128 [ 509.089730][ T7162] usb 4-1: config 0 descriptor?? [ 509.136952][ T5856] uclogic 0003:256C:006D.011D: failed retrieving string descriptor #200: -71 [ 509.145718][ T5856] uclogic 0003:256C:006D.011D: failed retrieving pen parameters: -71 [ 509.153787][ T5856] uclogic 0003:256C:006D.011D: failed probing pen v2 parameters: -71 [ 509.161762][ T5856] uclogic 0003:256C:006D.011D: failed probing parameters: -71 [ 509.169087][ T5856] uclogic: probe of 0003:256C:006D.011D failed with error -71 [ 509.177530][ T5856] usb 2-1: USB disconnect, device number 102 [ 509.376940][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.387845][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.397825][ T60] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 509.406860][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.417205][ T60] usb 1-1: config 0 descriptor?? [ 509.896975][ T7162] usb 4-1: string descriptor 0 read error: -71 [ 509.916920][ T7162] uclogic 0003:256C:006D.011E: failed retrieving string descriptor #200: -71 [ 509.936882][ T7162] uclogic 0003:256C:006D.011E: failed retrieving pen parameters: -71 [ 509.944783][ T7162] uclogic 0003:256C:006D.011E: failed probing pen v2 parameters: -71 [ 509.952912][ T7162] uclogic 0003:256C:006D.011E: failed probing parameters: -71 [ 509.960544][ T7162] uclogic: probe of 0003:256C:006D.011E failed with error -71 [ 509.972794][ T7162] usb 4-1: USB disconnect, device number 109 [ 509.976952][ T60] usbhid 1-1:0.0: can't add hid device: -71 [ 509.984506][ T60] usbhid: probe of 1-1:0.0 failed with error -71 [ 509.995036][ T60] usb 1-1: USB disconnect, device number 102 [ 510.049745][ T7254] loop4: detected capacity change from 0 to 512 [ 510.138824][ T7254] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 510.146917][ T385] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 510.149704][ T7254] ext4 filesystem being mounted at /root/syzkaller-testdir2921111498/syzkaller.VM6VY7/189/bus supports timestamps until 2038 (0x7fffffff) [ 510.806918][ T385] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.816918][ T385] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 510.829681][ T385] usb 2-1: New USB device found, idVendor=006d, idProduct=0000, bcdDevice= 0.00 [ 510.838615][ T385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.087811][ T7272] syz-executor.3[7272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 511.095683][ T7272] syz-executor.3[7272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 511.110279][ T7274] syz-executor.0[7274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 511.121826][ T7274] syz-executor.0[7274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 511.286907][ T332] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 511.318940][ T26] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 511.326973][ T385] usb 2-1: config 0 descriptor?? [ 511.367477][ T385] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 511.616924][ T6] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 511.677007][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.686994][ T26] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 511.700879][ T26] usb 3-1: New USB device found, idVendor=006d, idProduct=0000, bcdDevice= 0.00 [ 511.709743][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.717248][ T7279] device syzkaller0 entered promiscuous mode [ 511.719055][ T26] usb 3-1: config 0 descriptor?? [ 511.736965][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.747921][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.757737][ T332] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 511.766581][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.768009][ T26] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 511.778850][ T332] usb 5-1: config 0 descriptor?? [ 511.996962][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.007798][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.017427][ T6] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 512.026220][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.034669][ T6] usb 1-1: config 0 descriptor?? [ 512.422939][ T7286] overlayfs: failed to resolve './file2': -2 [ 512.949074][ T392] usb 2-1: USB disconnect, device number 103 [ 513.376893][ T392] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 513.564388][ T7297] loop3: detected capacity change from 0 to 128 [ 513.631429][ T7162] usb 3-1: USB disconnect, device number 114 [ 513.737030][ T392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.763201][ T332] usb 5-1: string descriptor 0 read error: -71 [ 513.772705][ T392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.782542][ T392] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 513.791609][ T332] uclogic 0003:256C:006D.011F: failed retrieving string descriptor #200: -71 [ 513.800833][ T392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.812035][ T332] uclogic 0003:256C:006D.011F: failed retrieving pen parameters: -71 [ 513.822874][ T392] usb 2-1: config 0 descriptor?? [ 513.838023][ T332] uclogic 0003:256C:006D.011F: failed probing pen v2 parameters: -71 [ 513.856918][ T332] uclogic 0003:256C:006D.011F: failed probing parameters: -71 [ 513.864214][ T332] uclogic: probe of 0003:256C:006D.011F failed with error -71 [ 513.872598][ T332] usb 5-1: USB disconnect, device number 98 [ 514.246895][ T332] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 514.327107][ T392] hid (null): bogus close delimiter [ 514.536932][ T6] usb 1-1: string descriptor 0 read error: -71 [ 514.556968][ T6] uclogic 0003:256C:006D.0120: failed retrieving string descriptor #200: -71 [ 514.565718][ T6] uclogic 0003:256C:006D.0120: failed retrieving pen parameters: -71 [ 514.575758][ T6] uclogic 0003:256C:006D.0120: failed probing pen v2 parameters: -71 [ 514.583864][ T6] uclogic 0003:256C:006D.0120: failed probing parameters: -71 [ 514.591543][ T6] uclogic: probe of 0003:256C:006D.0120 failed with error -71 [ 514.600536][ T6] usb 1-1: USB disconnect, device number 103 [ 514.606959][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.617769][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.628414][ T332] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 514.633052][ T7312] loop0: detected capacity change from 0 to 512 [ 514.638152][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.655819][ T332] usb 5-1: config 0 descriptor?? [ 514.674550][ T7312] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 514.685549][ T7312] ext4 filesystem being mounted at /root/syzkaller-testdir1647521800/syzkaller.yo92A1/207/bus supports timestamps until 2038 (0x7fffffff) [ 514.806679][ T7295] loop1: detected capacity change from 0 to 256 [ 515.211727][ T7295] exfat: Bad value for 'uid' [ 515.293532][ T331] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 515.517084][ T7324] loop0: detected capacity change from 0 to 128 [ 515.616965][ T392] uclogic 0003:256C:006D.0121: failed retrieving string descriptor #200: -71 [ 515.628946][ T392] uclogic 0003:256C:006D.0121: failed retrieving pen parameters: -71 [ 515.645732][ T392] uclogic 0003:256C:006D.0121: failed probing pen v2 parameters: -71 [ 515.662587][ T392] uclogic 0003:256C:006D.0121: failed probing parameters: -71 [ 515.677589][ T392] uclogic: probe of 0003:256C:006D.0121 failed with error -71 [ 515.686938][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.703241][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.719327][ T392] usb 2-1: USB disconnect, device number 104 [ 515.734849][ T331] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 515.746890][ T385] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 515.747314][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.773069][ T331] usb 4-1: config 0 descriptor?? [ 516.156961][ T385] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.167757][ T385] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.177499][ T385] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 516.186623][ T385] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.195381][ T385] usb 3-1: config 0 descriptor?? [ 516.297886][ T7329] device syzkaller0 entered promiscuous mode [ 516.316999][ T331] usbhid 4-1:0.0: can't add hid device: -71 [ 516.322791][ T331] usbhid: probe of 4-1:0.0 failed with error -71 [ 516.331645][ T331] usb 4-1: USB disconnect, device number 110 [ 516.667212][ T385] hid (null): bogus close delimiter [ 516.706903][ T60] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 516.896939][ T385] usb 3-1: language id specifier not provided by device, defaulting to English [ 516.988680][ T7340] loop1: detected capacity change from 0 to 128 [ 517.037045][ T332] usb 5-1: string descriptor 0 read error: -71 [ 517.056907][ T332] uclogic 0003:256C:006D.0122: failed retrieving string descriptor #200: -71 [ 517.065746][ T332] uclogic 0003:256C:006D.0122: failed retrieving pen parameters: -71 [ 517.073758][ T332] uclogic 0003:256C:006D.0122: failed probing pen v2 parameters: -71 [ 517.086984][ T60] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.091947][ T332] uclogic 0003:256C:006D.0122: failed probing parameters: -71 [ 517.107207][ T332] uclogic: probe of 0003:256C:006D.0122 failed with error -71 [ 517.112435][ T60] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 517.120408][ T332] usb 5-1: USB disconnect, device number 99 [ 517.159079][ T60] usb 1-1: New USB device found, idVendor=006d, idProduct=0000, bcdDevice= 0.00 [ 517.174620][ T7344] loop4: detected capacity change from 0 to 128 [ 517.187026][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.203785][ T60] usb 1-1: config 0 descriptor?? [ 517.258029][ T60] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 517.309685][ T7321] loop2: detected capacity change from 0 to 256 [ 517.387461][ T7321] exfat: Bad value for 'uid' [ 517.438350][ T385] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0123/input/input268 [ 517.455027][ T385] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0123/input/input269 [ 517.509061][ T385] uclogic 0003:256C:006D.0123: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 517.639220][ T7162] usb 3-1: USB disconnect, device number 115 [ 517.986912][ T331] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 518.410126][ T7361] loop2: detected capacity change from 0 to 128 [ 518.617061][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.628234][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.639025][ T331] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 518.649164][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.662446][ T331] usb 4-1: config 0 descriptor?? [ 519.296892][ T7162] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 519.436346][ T392] usb 1-1: USB disconnect, device number 104 [ 519.577006][ T332] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 519.656949][ T7162] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.667733][ T7162] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.677316][ T7162] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 519.686265][ T7162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.694766][ T7162] usb 2-1: config 0 descriptor?? [ 519.766918][ T60] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 519.866932][ T392] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 519.936957][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.947700][ T332] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.957576][ T332] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 519.966422][ T332] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.974860][ T332] usb 5-1: config 0 descriptor?? [ 520.176974][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.177221][ T7162] hid (null): bogus close delimiter [ 520.187848][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.202371][ T60] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 520.211205][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.219871][ T60] usb 3-1: config 0 descriptor?? [ 520.227029][ T392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.237966][ T392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.247603][ T392] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 520.256434][ T392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.265211][ T392] usb 1-1: config 0 descriptor?? [ 520.516938][ T332] usbhid 5-1:0.0: can't add hid device: -71 [ 520.522959][ T332] usbhid: probe of 5-1:0.0 failed with error -71 [ 520.530401][ T332] usb 5-1: USB disconnect, device number 100 [ 520.628981][ T7366] loop1: detected capacity change from 0 to 256 [ 520.667400][ T7366] exfat: Bad value for 'uid' [ 520.766952][ T331] usb 4-1: string descriptor 0 read error: -71 [ 520.773325][ T392] hid (null): bogus close delimiter [ 520.797216][ T331] uclogic 0003:256C:006D.0124: failed retrieving string descriptor #200: -71 [ 521.102138][ T7383] loop3: detected capacity change from 0 to 128 [ 521.103840][ T392] usb 1-1: language id specifier not provided by device, defaulting to English [ 521.133895][ T7162] uclogic 0003:256C:006D.0125: failed retrieving string descriptor #200: -71 [ 521.142558][ T331] uclogic 0003:256C:006D.0124: failed retrieving pen parameters: -71 [ 521.151122][ T7162] uclogic 0003:256C:006D.0125: failed retrieving pen parameters: -71 [ 521.159340][ T331] uclogic 0003:256C:006D.0124: failed probing pen v2 parameters: -71 [ 521.167562][ T7162] uclogic 0003:256C:006D.0125: failed probing pen v2 parameters: -71 [ 521.175579][ T331] uclogic 0003:256C:006D.0124: failed probing parameters: -71 [ 521.197102][ T7162] uclogic 0003:256C:006D.0125: failed probing parameters: -71 [ 521.204591][ T7162] uclogic: probe of 0003:256C:006D.0125 failed with error -71 [ 521.211961][ T331] uclogic: probe of 0003:256C:006D.0124 failed with error -71 [ 521.220348][ T7162] usb 2-1: USB disconnect, device number 105 [ 521.226977][ T331] usb 4-1: USB disconnect, device number 111 [ 521.422270][ T7375] loop0: detected capacity change from 0 to 256 [ 521.433103][ T7375] exfat: Bad value for 'uid' [ 521.516963][ T392] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0126/input/input270 [ 521.531773][ T392] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0126/input/input271 [ 521.553594][ T392] uclogic 0003:256C:006D.0126: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 521.584375][ T7392] loop1: detected capacity change from 0 to 128 [ 521.675399][ T392] usb 1-1: USB disconnect, device number 105 [ 521.826885][ T5856] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 522.222803][ T7402] loop0: detected capacity change from 0 to 512 [ 522.277179][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.307262][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.371534][ T5856] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 522.382354][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.451354][ T5856] usb 5-1: config 0 descriptor?? [ 522.548698][ T7402] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 522.559611][ T7402] ext4 filesystem being mounted at /root/syzkaller-testdir1647521800/syzkaller.yo92A1/211/bus supports timestamps until 2038 (0x7fffffff) [ 522.686965][ T60] usbhid 3-1:0.0: can't add hid device: -71 [ 522.693806][ T60] usbhid: probe of 3-1:0.0 failed with error -71 [ 522.701465][ T60] usb 3-1: USB disconnect, device number 116 [ 523.737032][ T385] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 523.838978][ T392] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 524.106929][ T385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.117792][ T385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.127770][ T385] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 524.136778][ T385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.149953][ T385] usb 1-1: config 0 descriptor?? [ 524.228156][ T30] kauditd_printk_skb: 172 callbacks suppressed [ 524.228172][ T30] audit: type=1400 audit(1717480710.946:3388): avc: denied { ioctl } for pid=7428 comm="syz-executor.1" path="/dev/ptp0" dev="devtmpfs" ino=168 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 524.237074][ T392] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.269295][ T392] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 524.269847][ T30] audit: type=1400 audit(1717480710.986:3389): avc: denied { ioctl } for pid=7428 comm="syz-executor.1" path="socket:[36927]" dev="sockfs" ino=36927 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 524.282294][ T392] usb 4-1: New USB device found, idVendor=006d, idProduct=0000, bcdDevice= 0.00 [ 524.316663][ T392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.316679][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.331418][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.331811][ T392] usb 4-1: config 0 descriptor?? [ 524.345219][ T7431] device bridge_slave_1 left promiscuous mode [ 524.351325][ T7431] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.358682][ T7431] device bridge_slave_0 left promiscuous mode [ 524.364777][ T7431] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.387508][ T392] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 524.570735][ T30] audit: type=1400 audit(1717480711.286:3390): avc: denied { write } for pid=7435 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 524.579280][ T7436] loop2: detected capacity change from 0 to 256 [ 524.606103][ T30] audit: type=1400 audit(1717480711.316:3391): avc: denied { create } for pid=7437 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 524.626523][ T30] audit: type=1400 audit(1717480711.316:3392): avc: denied { write } for pid=7437 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 524.627849][ T7440] loop1: detected capacity change from 0 to 512 [ 524.677924][ T7436] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 524.688107][ T7440] EXT4-fs (loop1): Mount option "delalloc" incompatible with ext2 [ 524.697828][ T30] audit: type=1400 audit(1717480711.416:3393): avc: denied { write } for pid=7439 comm="syz-executor.1" name="igmp" dev="proc" ino=4026532494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 524.756626][ T7443] loop1: detected capacity change from 0 to 512 [ 524.769425][ T7443] EXT4-fs (loop1): 1 orphan inode deleted [ 524.775028][ T7443] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 524.786728][ T7441] overlayfs: failed to resolve './file2': -2 [ 524.796700][ T7448] loop2: detected capacity change from 0 to 512 [ 524.802983][ T7443] ext4 filesystem being mounted at /root/syzkaller-testdir3002181108/syzkaller.pfyC0g/414/file0 supports timestamps until 2038 (0x7fffffff) [ 524.822076][ T7448] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 524.845793][ T7448] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 524.856211][ T7448] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 524.878748][ T7448] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 524.887085][ T7448] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 524.899416][ T7448] EXT4-fs (loop2): Remounting filesystem read-only [ 524.905803][ T7448] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 524.918049][ T7448] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,auto_da_alloc,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 524.948136][ T7448] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 524.959565][ T7448] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 524.969691][ T7448] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 525.080259][ T7456] Zero length message leads to an empty skb [ 525.087453][ T5856] usb 5-1: string descriptor 0 read error: -71 [ 525.089072][ T30] audit: type=1400 audit(1717480711.806:3394): avc: denied { ioctl } for pid=7455 comm="syz-executor.4" path="socket:[36969]" dev="sockfs" ino=36969 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 525.126951][ T5856] uclogic 0003:256C:006D.0127: failed retrieving string descriptor #200: -71 [ 525.135557][ T5856] uclogic 0003:256C:006D.0127: failed retrieving pen parameters: -71 [ 525.151018][ T5856] uclogic 0003:256C:006D.0127: failed probing pen v2 parameters: -71 [ 525.168213][ T5856] uclogic 0003:256C:006D.0127: failed probing parameters: -71 [ 525.175601][ T5856] uclogic: probe of 0003:256C:006D.0127 failed with error -71 [ 525.192006][ T30] audit: type=1400 audit(1717480711.846:3395): avc: denied { name_bind } for pid=7457 comm="syz-executor.4" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 525.193727][ T5856] usb 5-1: USB disconnect, device number 101 [ 525.215217][ T30] audit: type=1400 audit(1717480711.846:3396): avc: denied { create } for pid=7457 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 525.241680][ T30] audit: type=1400 audit(1717480711.846:3397): avc: denied { write } for pid=7457 comm="syz-executor.4" path="socket:[35961]" dev="sockfs" ino=35961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 525.300106][ T7474] loop4: detected capacity change from 0 to 512 [ 525.353430][ T7464] device syzkaller0 entered promiscuous mode [ 525.399165][ T7474] EXT4-fs (loop4): 1 orphan inode deleted [ 525.404780][ T7474] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 525.415726][ T7474] ext4 filesystem being mounted at /root/syzkaller-testdir2921111498/syzkaller.VM6VY7/205/file0 supports timestamps until 2038 (0x7fffffff) [ 525.848315][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 525.873427][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 526.307765][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 526.341023][ T331] usb 4-1: USB disconnect, device number 112 [ 526.367405][ T7520] loop2: detected capacity change from 0 to 512 [ 526.445982][ T7520] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 526.457521][ T7520] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 526.467858][ T7520] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 526.492677][ T7520] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 526.501014][ T7520] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 526.513772][ T7520] EXT4-fs (loop2): Remounting filesystem read-only [ 526.520547][ T7520] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 526.549268][ T7520] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,auto_da_alloc,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 526.576991][ T385] usbhid 1-1:0.0: can't add hid device: -71 [ 526.582761][ T385] usbhid: probe of 1-1:0.0 failed with error -71 [ 526.602367][ T7524] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.609329][ T7524] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.618248][ T7520] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 526.634876][ T7520] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 526.637456][ T385] usb 1-1: USB disconnect, device number 106 [ 526.644954][ T7520] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 526.661292][ T7524] device bridge_slave_1 left promiscuous mode [ 526.669802][ T7524] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.677414][ T7524] device bridge_slave_0 left promiscuous mode [ 526.683475][ T7524] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.720426][ T7531] loop1: detected capacity change from 0 to 2048 [ 526.741056][ T7531] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 526.782093][ T7536] loop2: detected capacity change from 0 to 2048 [ 526.838229][ T7536] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 526.858783][ T10] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 526.873857][ T10] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 526.890062][ T10] EXT4-fs (loop2): This should not happen!! Data will be lost [ 526.890062][ T10] [ 526.901195][ T10] EXT4-fs (loop2): Total free blocks count 0 [ 526.909089][ T10] EXT4-fs (loop2): Free/Dirty block details [ 526.915067][ T10] EXT4-fs (loop2): free_blocks=2415919104 [ 527.151850][ T10] EXT4-fs (loop2): dirty_blocks=16 [ 527.156802][ T10] EXT4-fs (loop2): Block reservation details [ 527.174749][ T10] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 527.253706][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 527.301308][ T7562] loop0: detected capacity change from 0 to 512 [ 527.359344][ T7562] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 527.372879][ T7562] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 527.382963][ T7562] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 527.410088][ T7562] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 527.418181][ T7562] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.0: corrupted in-inode xattr [ 527.434193][ T7562] EXT4-fs (loop0): Remounting filesystem read-only [ 527.440709][ T7562] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 527.454191][ T7562] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,auto_da_alloc,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 527.485725][ T7578] loop3: detected capacity change from 0 to 1024 [ 527.507404][ T7562] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 527.519122][ T7562] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it [ 527.529779][ T7562] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 527.577933][ T7578] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,bsddf,acl,errors=remount-ro,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,nodelalloc,auto_da_alloc,norecovery,. Quota mode: none. [ 527.624192][ T7578] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 527.673449][ T7582] loop0: detected capacity change from 0 to 512 [ 527.701986][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 527.756652][ T7574] loop2: detected capacity change from 0 to 40427 [ 527.778935][ T7574] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 527.786306][ T7582] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 527.791063][ T7592] loop1: detected capacity change from 0 to 8192 [ 527.810819][ T7592] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 527.816497][ T7574] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 527.823451][ T7592] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 527.834086][ T7582] ext4 filesystem being mounted at /root/syzkaller-testdir1647521800/syzkaller.yo92A1/219/file0 supports timestamps until 2038 (0x7fffffff) [ 527.836884][ T7592] FAT-fs (loop1): Filesystem has been set read-only [ 527.854339][ T7574] F2FS-fs (loop2): user quota file already specified [ 527.874406][ T7582] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 283: padding at end of block bitmap is not set [ 527.959337][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 528.016111][ T7608] device pim6reg1 entered promiscuous mode [ 528.327021][ T7615] loop0: detected capacity change from 0 to 256 [ 528.366066][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 528.378321][ T7615] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 528.586356][ T7635] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.593380][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.612107][ T7635] device bridge_slave_0 entered promiscuous mode [ 528.620083][ T7636] syz-executor.4[7636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 528.620154][ T7636] syz-executor.4[7636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 528.635282][ T7635] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.662925][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.670607][ T7635] device bridge_slave_1 entered promiscuous mode [ 528.747645][ T7635] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.754521][ T7635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.761764][ T7635] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.768755][ T7635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.799183][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 528.807648][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.823845][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.858502][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 528.866506][ T2525] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.873376][ T2525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.880933][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 528.889006][ T2525] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.895844][ T2525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.911842][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 528.919955][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 528.927781][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 528.935858][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 528.955036][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 528.963487][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 528.976601][ T7635] device veth0_vlan entered promiscuous mode [ 528.984425][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 528.992136][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 529.000046][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 529.007590][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 529.023506][ T7635] device veth1_macvtap entered promiscuous mode [ 529.030846][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 529.039116][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 529.047185][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 529.078254][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 529.086484][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 529.095198][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 529.103317][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 529.150973][ T7664] loop2: detected capacity change from 0 to 512 [ 529.210458][ T7664] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 529.227877][ T7664] ext4 filesystem being mounted at /root/syzkaller-testdir3251782835/syzkaller.bqoiZA/0/file0 supports timestamps until 2038 (0x7fffffff) [ 529.271371][ T7664] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 283: padding at end of block bitmap is not set [ 529.287327][ T10] device bridge_slave_1 left promiscuous mode [ 529.293283][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.303465][ T10] device bridge_slave_0 left promiscuous mode [ 529.321358][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.361212][ T10] device veth1_macvtap left promiscuous mode [ 529.372863][ T10] device veth0_vlan left promiscuous mode [ 529.400506][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 529.400523][ T30] audit: type=1400 audit(1717480716.116:3424): avc: denied { bind } for pid=7676 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 529.640442][ T7689] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 529.967050][ T30] audit: type=1400 audit(1717480716.686:3425): avc: denied { bind } for pid=7718 comm="syz-executor.2" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 530.026073][ T30] audit: type=1400 audit(1717480716.686:3426): avc: denied { node_bind } for pid=7718 comm="syz-executor.2" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 530.112368][ T30] audit: type=1400 audit(1717480716.686:3427): avc: denied { write } for pid=7718 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 530.161581][ T30] audit: type=1400 audit(1717480716.686:3428): avc: denied { nlmsg_write } for pid=7718 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 530.285728][ T7725] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.300319][ T7725] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.315330][ T7725] device bridge_slave_0 entered promiscuous mode [ 530.330212][ T7725] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.344739][ T7725] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.352373][ T7725] device bridge_slave_1 entered promiscuous mode [ 530.559916][ T7725] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.566787][ T7725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.573920][ T7725] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.580683][ T7725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.683605][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 530.694684][ T2525] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.710077][ T2525] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.741946][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 530.753312][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.760183][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.785986][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 530.805013][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.811905][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.846121][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 530.859615][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 530.881667][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 530.913073][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 530.920981][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 530.930017][ T7725] device veth0_vlan entered promiscuous mode [ 530.937344][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 530.944693][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 530.970216][ T7725] device veth1_macvtap entered promiscuous mode [ 530.987937][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 530.995965][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 531.004481][ T385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 531.052691][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 531.063295][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 531.071813][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 531.080495][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 531.146777][ T30] audit: type=1400 audit(1717480717.856:3429): avc: denied { ioctl } for pid=7751 comm="syz-executor.1" path="socket:[36582]" dev="sockfs" ino=36582 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 531.331613][ T30] audit: type=1400 audit(1717480718.046:3430): avc: denied { bind } for pid=7764 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 531.371454][ T7769] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 531.388359][ T30] audit: type=1400 audit(1717480718.046:3431): avc: denied { write } for pid=7764 comm="syz-executor.2" path="socket:[36598]" dev="sockfs" ino=36598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 531.419336][ T7769] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 531.439401][ T7770] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 531.507981][ T10] device bridge_slave_1 left promiscuous mode [ 531.513941][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.532738][ T10] device bridge_slave_0 left promiscuous mode [ 531.546933][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.554871][ T10] device veth1_macvtap left promiscuous mode [ 531.566947][ T10] device veth0_vlan left promiscuous mode [ 531.731213][ T30] audit: type=1400 audit(1717480718.446:3432): avc: denied { bind } for pid=7785 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 531.805107][ T30] audit: type=1400 audit(1717480718.516:3433): avc: denied { create } for pid=7796 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 531.837588][ T7799] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 531.852303][ T7797] device syzkaller0 entered promiscuous mode [ 532.127382][ T7831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=7831 comm=syz-executor.3 [ 532.163107][ T7834] syz-executor.4[7834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 532.163236][ T7834] syz-executor.4[7834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 532.182308][ T7834] syz-executor.4[7834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 532.209674][ T7834] syz-executor.4[7834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 532.238829][ T7842] tipc: Enabling of bearer rejected, failed to enable media [ 532.289362][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 532.644885][ T7882] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 533.314337][ T7923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=7923 comm=syz-executor.3 [ 533.373679][ T7929] process 'syz-executor.1' launched './file0' with NULL argv: empty string added [ 533.652366][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 533.921355][ T7962] loop0: detected capacity change from 0 to 40427 [ 533.981706][ T7962] F2FS-fs (loop0): Found nat_bits in checkpoint [ 534.025785][ T7962] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 534.067084][ T3402] attempt to access beyond end of device [ 534.067084][ T3402] loop0: rw=2049, want=45104, limit=40427 [ 534.127939][ T7972] loop3: detected capacity change from 0 to 256 [ 534.189943][ T7972] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 534.326494][ T7979] loop0: detected capacity change from 0 to 1024 [ 534.419186][ T7979] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 534.442834][ T7979] ext4 filesystem being mounted at /root/syzkaller-testdir1647521800/syzkaller.yo92A1/265/file1 supports timestamps until 2038 (0x7fffffff) [ 534.497504][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 534.497522][ T30] audit: type=1400 audit(1717480721.216:3439): avc: denied { ioctl } for pid=7978 comm="syz-executor.0" path="/root/syzkaller-testdir1647521800/syzkaller.yo92A1/265/file1/file1" dev="loop0" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 534.556903][ T30] audit: type=1400 audit(1717480721.256:3440): avc: denied { write } for pid=7969 comm="syz-executor.3" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 534.608982][ T30] audit: type=1400 audit(1717480721.256:3441): avc: denied { add_name } for pid=7969 comm="syz-executor.3" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 534.677087][ T30] audit: type=1400 audit(1717480721.256:3442): avc: denied { associate } for pid=7969 comm="syz-executor.3" name="cpu.stat" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 534.745683][ T30] audit: type=1400 audit(1717480721.296:3443): avc: denied { append } for pid=7969 comm="syz-executor.3" path="/root/syzkaller-testdir4122708688/syzkaller.Ng9hCu/424/file2/cpu.stat" dev="loop3" ino=1048970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 535.169215][ T7974] loop2: detected capacity change from 0 to 131072 [ 535.211061][ T7974] F2FS-fs (loop2): invalid crc value [ 535.220582][ T7974] F2FS-fs (loop2): Mismatch valid blocks 0 vs. 2 [ 535.226752][ T7974] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 535.545236][ T8014] loop0: detected capacity change from 0 to 256 [ 535.618900][ T30] audit: type=1400 audit(1717480722.336:3444): avc: denied { read write } for pid=8007 comm="syz-executor.2" name="event0" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 535.656784][ T8014] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 535.688080][ T8019] loop3: detected capacity change from 0 to 2048 [ 535.719065][ T8021] loop1: detected capacity change from 0 to 1024 [ 535.725519][ T30] audit: type=1400 audit(1717480722.366:3445): avc: denied { open } for pid=8007 comm="syz-executor.2" path="/dev/input/event0" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 535.825438][ T8021] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 535.851195][ T8021] ext4 filesystem being mounted at /root/syzkaller-testdir3002181108/syzkaller.pfyC0g/458/file1 supports timestamps until 2038 (0x7fffffff) [ 536.146124][ T30] audit: type=1400 audit(1717480722.736:3446): avc: denied { ioctl } for pid=8013 comm="syz-executor.0" path="/root/syzkaller-testdir1647521800/syzkaller.yo92A1/268/file2/cpu.stat" dev="loop0" ino=1048971 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 536.557074][ T8039] loop4: detected capacity change from 0 to 2048 [ 536.596947][ T60] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 536.770671][ T8039] Alternate GPT is invalid, using primary GPT. [ 536.818214][ T8039] loop4: p1 p2 p3 [ 536.919706][ T8046] loop2: detected capacity change from 0 to 128 [ 536.972964][ T30] audit: type=1400 audit(1717480723.686:3447): avc: denied { mounton } for pid=8045 comm="syz-executor.2" path="/root/syzkaller-testdir4049196571/syzkaller.A62Ghw/19/file0/bus" dev="loop2" ino=1048972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 536.973025][ T8046] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 537.009544][ T8046] overlayfs: missing 'lowerdir' [ 537.073814][ T8042] loop1: detected capacity change from 0 to 40427 [ 537.116968][ T60] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.126945][ T60] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 537.156968][ T2525] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 537.160011][ T8042] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 537.172299][ T8042] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 537.192503][ T8042] F2FS-fs (loop1): Found nat_bits in checkpoint [ 537.227118][ T60] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 537.239823][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 537.239910][ T8042] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 537.254862][ T8042] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 537.254888][ T60] usb 4-1: SerialNumber: syz [ 537.406890][ T2525] usb 5-1: Using ep0 maxpacket: 32 [ 537.443344][ T8058] loop0: detected capacity change from 0 to 2048 [ 537.536950][ T2525] usb 5-1: config 0 has an invalid interface number: 155 but max is 0 [ 537.545091][ T2525] usb 5-1: config 0 has no interface number 0 [ 537.551143][ T2525] usb 5-1: config 0 interface 155 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 537.561157][ T2525] usb 5-1: config 0 interface 155 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 537.610770][ T8064] loop0: detected capacity change from 0 to 1024 [ 537.687856][ T8064] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 537.709702][ T8064] ext4 filesystem being mounted at /root/syzkaller-testdir1647521800/syzkaller.yo92A1/273/file1 supports timestamps until 2038 (0x7fffffff) [ 537.736989][ T2525] usb 5-1: New USB device found, idVendor=05d1, idProduct=1002, bcdDevice=c5.61 [ 537.768677][ T2525] usb 5-1: New USB device strings: Mfr=225, Product=1, SerialNumber=3 [ 537.776663][ T2525] usb 5-1: Product: syz [ 537.816886][ T2525] usb 5-1: Manufacturer: syz [ 537.827927][ T2525] usb 5-1: SerialNumber: syz [ 537.836805][ T2525] usb 5-1: config 0 descriptor?? [ 537.849545][ T8068] loop0: detected capacity change from 0 to 512 [ 537.868037][ T60] usb 4-1: USB disconnect, device number 113 [ 537.888930][ T8068] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 537.888930][ T8068] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 537.888930][ T8068] [ 537.908200][ T2525] ftdi_sio 5-1:0.155: FTDI USB Serial Device converter detected [ 537.916080][ T2525] usb 5-1: Detected FT-X [ 537.926846][ T2525] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 3 [ 537.959374][ T8068] EXT4-fs (loop0): 1 orphan inode deleted [ 537.972275][ T8068] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noacl,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 537.997080][ T8068] ext4 filesystem being mounted at /root/syzkaller-testdir1647521800/syzkaller.yo92A1/274/file1 supports timestamps until 2038 (0x7fffffff) [ 538.127102][ T2525] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 538.147298][ T2525] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 538.198697][ T2525] ftdi_sio 5-1:0.155: GPIO initialisation failed: -71 [ 538.236273][ T2525] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 538.353885][ T2525] usb 5-1: USB disconnect, device number 102 [ 538.434765][ T2525] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 538.444361][ T2525] ftdi_sio 5-1:0.155: device disconnected [ 538.766198][ T8085] loop0: detected capacity change from 0 to 40427 [ 538.797757][ T30] audit: type=1400 audit(1717480725.516:3448): avc: denied { map } for pid=8092 comm="syz-executor.4" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 538.844225][ T8085] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 538.852051][ T8085] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 538.893783][ T8096] loop2: detected capacity change from 0 to 256 [ 538.935953][ T8085] F2FS-fs (loop0): Found nat_bits in checkpoint [ 538.947605][ T8096] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 538.961577][ T8096] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 538.972880][ T8105] loop4: detected capacity change from 0 to 512 [ 538.987432][ T8096] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 539.007669][ T8105] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 539.034584][ T8105] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 539.063739][ T8085] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 539.072820][ T8085] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 539.102829][ T8105] EXT4-fs (loop4): orphan cleanup on readonly fs [ 539.155810][ T8105] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 361: padding at end of block bitmap is not set [ 539.170722][ T8105] EXT4-fs (loop4): Remounting filesystem read-only [ 539.177210][ T8105] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6153: Corrupt filesystem [ 539.186001][ T8105] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 2185560079 (level 1) [ 539.200611][ T8105] EXT4-fs (loop4): 1 truncate cleaned up [ 539.206136][ T8105] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,noblock_validity,discard,errors=remount-ro,journal_dev=0x0000000000000001. Quota mode: none. [ 539.525262][ T8130] syz-executor.2[8130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.525342][ T8130] syz-executor.2[8130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.608074][ T8115] device syzkaller0 entered promiscuous mode [ 540.259705][ T8143] loop2: detected capacity change from 0 to 512 [ 540.260757][ T8146] loop4: detected capacity change from 0 to 256 [ 540.311119][ T8146] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 540.333562][ T8146] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 540.353678][ T8146] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 540.371944][ T8143] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 540.386153][ T8143] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 540.439442][ T8143] EXT4-fs (loop2): group descriptors corrupted! [ 540.668529][ T8155] loop0: detected capacity change from 0 to 8192 [ 540.707399][ T8155] loop0: p3 p4 < > [ 540.713031][ T8155] loop0: p3 start 619264 is beyond EOD, truncated [ 540.782844][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 540.828887][ T1105] udevd[1105]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 540.984788][ T8176] BUG: unable to handle page fault for address: ffffffffff600000 [ 540.992540][ T8176] #PF: supervisor read access in kernel mode [ 540.998354][ T8176] #PF: error_code(0x0001) - permissions violation [ 541.004603][ T8176] PGD 6812067 P4D 6812067 PUD 6814067 PMD 6816067 PTE 8000000006809165 [ 541.012676][ T8176] Oops: 0001 [#1] PREEMPT SMP KASAN [ 541.017711][ T8176] CPU: 0 PID: 8176 Comm: syz-executor.4 Not tainted 5.15.149-syzkaller-00131-g79bd336c7a94 #0 [ 541.027780][ T8176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 541.037680][ T8176] RIP: 0010:copy_from_kernel_nofault+0x86/0x2e0 [ 541.043767][ T8176] Code: 48 89 55 d0 0f 85 ea 01 00 00 ff 02 bf 07 00 00 00 4c 89 ee e8 cb 92 d6 ff 49 83 fd 07 76 5c 4d 89 fe 49 83 c5 f8 49 83 c7 08 <49> 8b 1c 24 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 [ 541.063192][ T8176] RSP: 0018:ffffc90000a57030 EFLAGS: 00010292 [ 541.069090][ T8176] RAX: 0000000000000002 RBX: 00007ffffffff000 RCX: ffff88811b23e2c0 [ 541.076906][ T8176] RDX: ffff88811b23ee50 RSI: 0000000000000008 RDI: 0000000000000007 [ 541.084851][ T8176] RBP: ffffc90000a57068 R08: ffffffff8199a795 R09: ffffed1023647c59 [ 541.092653][ T8176] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffff600000 [ 541.100466][ T8176] R13: 0000000000000000 R14: ffffc90000a570c8 R15: ffffc90000a570d0 [ 541.108278][ T8176] FS: 00007f7ccbb606c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 541.117047][ T8176] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.123467][ T8176] CR2: ffffffffff600000 CR3: 000000010ea71000 CR4: 00000000003506b0 [ 541.131277][ T8176] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 541.139085][ T8176] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 541.146909][ T8176] Call Trace: [ 541.150037][ T8176] [ 541.152810][ T8176] ? __die_body+0x62/0xb0 [ 541.156967][ T8176] ? __die+0x7e/0x90 [ 541.160700][ T8176] ? page_fault_oops+0x7f9/0xa90 [ 541.165473][ T8176] ? kernelmode_fixup_or_oops+0x270/0x270 [ 541.171117][ T8176] ? 0xffffffffa0002144 [ 541.175105][ T8176] ? is_bpf_text_address+0x172/0x190 [ 541.180227][ T8176] ? __kernel_text_address+0x9b/0x110 [ 541.185443][ T8176] ? exc_page_fault+0x521/0x830 [ 541.190135][ T8176] ? asm_exc_page_fault+0x27/0x30 [ 541.194998][ T8176] ? copy_from_kernel_nofault+0x75/0x2e0 [ 541.200447][ T8176] ? copy_from_kernel_nofault+0x86/0x2e0 [ 541.205918][ T8176] bpf_probe_read_compat+0x112/0x180 [ 541.211037][ T8176] bpf_prog_baa065642a502c00+0x64/0xacc [ 541.216417][ T8176] bpf_trace_run6+0x18d/0x2c0 [ 541.220930][ T8176] ? bpf_trace_run5+0x290/0x290 [ 541.225618][ T8176] ? ext4_ext_check_inode+0x80/0x80 [ 541.230650][ T8176] __bpf_trace_ext4_ext_remove_space_done+0x4a/0x60 [ 541.237075][ T8176] ext4_ext_remove_space+0x48b4/0x4a60 [ 541.242369][ T8176] ? __kasan_check_write+0x14/0x20 [ 541.247319][ T8176] ? ext4_es_insert_extent+0x2ff0/0x2ff0 [ 541.252784][ T8176] ? _raw_write_lock+0xa4/0x170 [ 541.257479][ T8176] ? __ext4_mark_inode_dirty+0x53c/0x7a0 [ 541.262941][ T8176] ? ext4_ext_index_trans_blocks+0x120/0x120 [ 541.268755][ T8176] ? ext4_es_remove_extent+0x297/0x460 [ 541.274046][ T8176] ? ext4_es_lookup_extent+0x940/0x940 [ 541.279346][ T8176] ext4_ext_truncate+0x19a/0x240 [ 541.284123][ T8176] ext4_truncate+0x96c/0xfa0 [ 541.288549][ T8176] ? __ext4_mark_inode_dirty+0x7a0/0x7a0 [ 541.294010][ T8176] ext4_setattr+0xf84/0x1940 [ 541.298433][ T8176] ? current_time+0x1af/0x2f0 [ 541.302950][ T8176] ? ext4_write_inode+0x730/0x730 [ 541.307814][ T8176] notify_change+0xc7a/0xf30 [ 541.312235][ T8176] ? cap_inode_need_killpriv+0x51/0x60 [ 541.317530][ T8176] do_truncate+0x21c/0x300 [ 541.321857][ T8176] ? put_page_bootmem+0x190/0x190 [ 541.326649][ T8176] path_openat+0x28ed/0x2f40 [ 541.331075][ T8176] ? kmem_cache_free+0x116/0x2e0 [ 541.335846][ T8176] ? __kasan_slab_alloc+0xb1/0xe0 [ 541.340701][ T8176] ? kmem_cache_alloc+0xf5/0x200 [ 541.345477][ T8176] ? getname_flags+0xba/0x520 [ 541.349990][ T8176] ? __x64_sys_openat+0x243/0x290 [ 541.354852][ T8176] ? do_filp_open+0x460/0x460 [ 541.359366][ T8176] do_filp_open+0x21c/0x460 [ 541.363705][ T8176] ? vfs_tmpfile+0x2c0/0x2c0 [ 541.368138][ T8176] do_sys_openat2+0x13f/0x830 [ 541.372645][ T8176] ? do_sys_open+0x220/0x220 [ 541.377071][ T8176] ? security_bpf+0x82/0xb0 [ 541.381416][ T8176] __x64_sys_openat+0x243/0x290 [ 541.386104][ T8176] ? __ia32_sys_open+0x270/0x270 [ 541.390869][ T8176] ? __kasan_check_read+0x11/0x20 [ 541.395751][ T8176] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 541.401196][ T8176] do_syscall_64+0x3d/0xb0 [ 541.405450][ T8176] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 541.411176][ T8176] RIP: 0033:0x7f7ccc7e5f69 [ 541.415430][ T8176] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 541.434873][ T8176] RSP: 002b:00007f7ccbb600c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 541.443118][ T8176] RAX: ffffffffffffffda RBX: 00007f7ccc91cfa0 RCX: 00007f7ccc7e5f69 [ 541.450933][ T8176] RDX: 0000000000007a05 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 541.458745][ T8176] RBP: 00007f7ccc843706 R08: 0000000000000000 R09: 0000000000000000 [ 541.466554][ T8176] R10: 0000000000001700 R11: 0000000000000246 R12: 0000000000000000 [ 541.474363][ T8176] R13: 000000000000000b R14: 00007f7ccc91cfa0 R15: 00007ffc89fe87a8 [ 541.482267][ T8176] [ 541.485132][ T8176] Modules linked in: [ 541.488867][ T8176] CR2: ffffffffff600000 [ 541.492858][ T8176] ---[ end trace ca25e12fc4b26956 ]--- [ 541.498146][ T8176] RIP: 0010:copy_from_kernel_nofault+0x86/0x2e0 [ 541.504220][ T8176] Code: 48 89 55 d0 0f 85 ea 01 00 00 ff 02 bf 07 00 00 00 4c 89 ee e8 cb 92 d6 ff 49 83 fd 07 76 5c 4d 89 fe 49 83 c5 f8 49 83 c7 08 <49> 8b 1c 24 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 [ 541.523671][ T8176] RSP: 0018:ffffc90000a57030 EFLAGS: 00010292 [ 541.529559][ T8176] RAX: 0000000000000002 RBX: 00007ffffffff000 RCX: ffff88811b23e2c0 [ 541.537376][ T8176] RDX: ffff88811b23ee50 RSI: 0000000000000008 RDI: 0000000000000007 [ 541.545186][ T8176] RBP: ffffc90000a57068 R08: ffffffff8199a795 R09: ffffed1023647c59 [ 541.553086][ T8176] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffff600000 [ 541.560911][ T8176] R13: 0000000000000000 R14: ffffc90000a570c8 R15: ffffc90000a570d0 [ 541.568703][ T8176] FS: 00007f7ccbb606c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 541.577470][ T8176] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.583895][ T8176] CR2: ffffffffff600000 CR3: 000000010ea71000 CR4: 00000000003506b0 [ 541.591709][ T8176] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 541.599517][ T8176] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 541.607337][ T8176] Kernel panic - not syncing: Fatal exception [ 541.613464][ T8176] Kernel Offset: disabled [ 541.617595][ T8176] Rebooting in 86400 seconds..