last executing test programs: 4.324934236s ago: executing program 1 (id=205): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0), 0x2, 0x0) sendfile(r1, r1, 0x0, 0xfb5) socket(0x1, 0x8000c, 0xfff) 4.313963647s ago: executing program 1 (id=207): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000040)="a5", 0x1}], 0x1}, 0x11) close(r1) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000080)='\b', 0x1}], 0x1}, 0x0) 4.232328313s ago: executing program 1 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) renameat2(0xffffffffffffff9c, &(0x7f0000000840)='./file4\x00', r0, &(0x7f0000000900)='./file7\x00', 0x0) 4.226560953s ago: executing program 1 (id=211): openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 4.203861235s ago: executing program 1 (id=212): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a000008090581032b000000000904010000020d00000904010102020d0000090000000002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.833781944s ago: executing program 4 (id=231): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 2.788987398s ago: executing program 4 (id=232): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2, &(0x7f0000000280)=ANY=[], 0x81, 0x14f7, &(0x7f0000001580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000016c0), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2.725841172s ago: executing program 4 (id=233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 2.706540934s ago: executing program 4 (id=234): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000002c0)={0x0, 0x0, 0x6, "5401471e4720"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="000c0100000001"], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.640856651s ago: executing program 1 (id=249): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000300), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x400c4808, &(0x7f00000000c0)={0x3, 0x200}) 1.477290643s ago: executing program 3 (id=256): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x35, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN]}}]}, 0x30}}, 0x0) 1.436338716s ago: executing program 3 (id=257): syz_open_dev$evdev(&(0x7f0000000000), 0x186c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) mount$9p_fd(0x20100000, &(0x7f0000000380)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.411504408s ago: executing program 3 (id=259): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.389875259s ago: executing program 3 (id=260): r0 = io_uring_setup(0x1951, &(0x7f0000000280)={0x0, 0x0, 0x400, 0x3, 0x352}) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) read$usbmon(r1, 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.343780052s ago: executing program 3 (id=262): open(&(0x7f0000000000)='./bus\x00', 0x60942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./bus\x00', &(0x7f0000000400), 0x200808, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x801c581f, 0x0) 1.325058114s ago: executing program 3 (id=264): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}]}}}]}}]}}, 0x0) syz_usb_ep_write(r1, 0x82, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 1.23936734s ago: executing program 2 (id=271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) 1.229731721s ago: executing program 2 (id=272): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) 1.211760712s ago: executing program 2 (id=275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0xfffffffffffffff8}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) 1.203606553s ago: executing program 0 (id=276): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="ab", 0x1}], 0x1, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x20040001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r3) 1.201205353s ago: executing program 2 (id=277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000005c0)=r1) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)) 1.189045014s ago: executing program 0 (id=278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0x7d, 0x0, 0x0) 1.155880497s ago: executing program 2 (id=279): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f00000005c0)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}, 0x2}, 0x0) 1.150086247s ago: executing program 2 (id=280): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x325, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa, "4378c6db"}, @global=@item_012={0x1, 0x1, 0x8, "0f"}]}}, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, 0x0, 0x0) 1.056475323s ago: executing program 0 (id=281): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) 216.856635ms ago: executing program 0 (id=282): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 210.367715ms ago: executing program 0 (id=283): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 203.801276ms ago: executing program 4 (id=284): syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") r0 = eventfd2(0x0, 0x80801) r1 = dup(r0) write$binfmt_misc(r1, &(0x7f00000020c0)=ANY=[], 0x96) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0xffffffffffffffda}, 0x50) 116.765112ms ago: executing program 0 (id=285): unshare(0x22020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0xc, &(0x7f0000001640), 0x4) 0s ago: executing program 4 (id=287): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0xe) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600702, 0x19) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. [ 19.352916][ T28] audit: type=1400 audit(1725294111.166:66): avc: denied { mounton } for pid=280 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.353830][ T280] cgroup: Unknown subsys name 'net' [ 19.355914][ T28] audit: type=1400 audit(1725294111.166:67): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.359481][ T28] audit: type=1400 audit(1725294111.176:68): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.359632][ T280] cgroup: Unknown subsys name 'devices' [ 19.477750][ T280] cgroup: Unknown subsys name 'hugetlb' [ 19.483146][ T280] cgroup: Unknown subsys name 'rlimit' [ 19.612043][ T28] audit: type=1400 audit(1725294111.426:69): avc: denied { setattr } for pid=280 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.635010][ T28] audit: type=1400 audit(1725294111.426:70): avc: denied { mounton } for pid=280 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.659520][ T28] audit: type=1400 audit(1725294111.426:71): avc: denied { mount } for pid=280 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.666148][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 19.691383][ T28] audit: type=1400 audit(1725294111.506:72): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.716596][ T28] audit: type=1400 audit(1725294111.506:73): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.744832][ T28] audit: type=1400 audit(1725294111.556:74): avc: denied { read } for pid=280 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.770134][ T28] audit: type=1400 audit(1725294111.556:75): avc: denied { open } for pid=280 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.770185][ T280] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.510857][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.517781][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.524822][ T290] device bridge_slave_0 entered promiscuous mode [ 20.532574][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.539449][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.546622][ T290] device bridge_slave_1 entered promiscuous mode [ 20.624759][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.631684][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.638827][ T294] device bridge_slave_0 entered promiscuous mode [ 20.645386][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.652331][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.659559][ T294] device bridge_slave_1 entered promiscuous mode [ 20.669210][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.676058][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.683151][ T292] device bridge_slave_0 entered promiscuous mode [ 20.703477][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.710377][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.717516][ T292] device bridge_slave_1 entered promiscuous mode [ 20.730122][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.736973][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.744047][ T293] device bridge_slave_0 entered promiscuous mode [ 20.753985][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.760897][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.768091][ T293] device bridge_slave_1 entered promiscuous mode [ 20.830074][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.836963][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.844039][ T291] device bridge_slave_0 entered promiscuous mode [ 20.862388][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.869280][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.876685][ T291] device bridge_slave_1 entered promiscuous mode [ 20.914960][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.921816][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.929052][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.935992][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.019270][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.026126][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.033216][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.040024][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.090863][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.097902][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.104984][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.111792][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.119505][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.126810][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.133964][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.141067][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.148605][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.155548][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.163786][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.171072][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.194967][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.202927][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.209769][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.216923][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.224842][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.231680][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.239076][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.267034][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.274198][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.282331][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.289174][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.296334][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.304232][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.310979][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.318134][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.346873][ T290] device veth0_vlan entered promiscuous mode [ 21.353587][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.362181][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.369959][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.377396][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.384629][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.392448][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.415973][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.423330][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.430739][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.439243][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.447207][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.454029][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.461298][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.469241][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.476088][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.493591][ T294] device veth0_vlan entered promiscuous mode [ 21.509936][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.517905][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.526300][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.533950][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.541399][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.548826][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.556862][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.563682][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.571279][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.579311][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.586155][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.593358][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.601200][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.608982][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.617029][ T19] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.623855][ T19] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.631095][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.639121][ T19] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.645966][ T19] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.653130][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.661029][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.674661][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.694345][ T292] device veth0_vlan entered promiscuous mode [ 21.710391][ T290] device veth1_macvtap entered promiscuous mode [ 21.717649][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.725508][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.733497][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.741439][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.749186][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.757398][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.765386][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.772998][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.780693][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.788884][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.796905][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.804777][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.812770][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.820288][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.828389][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.836594][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.843850][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.854370][ T293] device veth0_vlan entered promiscuous mode [ 21.863502][ T292] device veth1_macvtap entered promiscuous mode [ 21.872471][ T291] device veth0_vlan entered promiscuous mode [ 21.883181][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.890966][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.899218][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.907322][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.915453][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.923009][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.930614][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.938379][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.946361][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.961026][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.968256][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.975387][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.982792][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.989984][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.998067][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.009485][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.017737][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.025833][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.034148][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.046624][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.054575][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.066328][ T294] device veth1_macvtap entered promiscuous mode [ 22.083784][ T291] device veth1_macvtap entered promiscuous mode [ 22.095027][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.103863][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.111446][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.119484][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.127554][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.135484][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.154406][ T293] device veth1_macvtap entered promiscuous mode [ 22.162258][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.175741][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.193580][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.201889][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.212183][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.220623][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.236167][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.244280][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.261645][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.274437][ T65] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.342043][ T340] loop3: detected capacity change from 0 to 128 [ 22.407170][ T337] syz.4.9 (337) used greatest stack depth: 22000 bytes left [ 22.414767][ T340] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 22.436170][ T340] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 22.501885][ T354] loop4: detected capacity change from 0 to 256 [ 22.546004][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 22.561918][ T293] EXT4-fs (loop3): unmounting filesystem. [ 22.595638][ T329] loop1: detected capacity change from 0 to 40427 [ 22.606528][ T329] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 22.614128][ T329] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 22.623128][ T329] F2FS-fs (loop1): invalid crc value [ 22.629863][ T329] F2FS-fs (loop1): Found nat_bits in checkpoint [ 22.658197][ T329] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 22.665220][ T329] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 22.711900][ T329] syz.1.2: attempt to access beyond end of device [ 22.711900][ T329] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 22.746302][ T379] IPv6: NLM_F_REPLACE set, but no existing node found! [ 22.766807][ T43] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 22.779170][ T43] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 22.805953][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 22.946044][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 22.963331][ T406] loop2: detected capacity change from 0 to 2048 [ 22.970121][ T408] Illegal XDP return value 1028525290 on prog (id 18) dev N/A, expect packet loss! [ 22.975897][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 22.989313][ T406] ======================================================= [ 22.989313][ T406] WARNING: The mand mount option has been deprecated and [ 22.989313][ T406] and is ignored by this kernel. Remove the mand [ 22.989313][ T406] option from the mount to silence this warning. [ 22.989313][ T406] ======================================================= [ 23.030846][ T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 23.051988][ T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 23.098821][ T406] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 23.107482][ T19] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.128319][ T406] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 23.151396][ T406] EXT4-fs (loop2): shut down requested (2) [ 23.163536][ T406] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 23.178858][ T406] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=13 [ 25.015878][ C0] sched: RT throttling activated [ 25.015878][ C1] sched: RT throttling activated [ 25.016248][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 25.035968][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.043770][ T24] usb 1-1: Product: syz [ 25.047928][ T24] usb 1-1: Manufacturer: syz [ 25.052329][ T24] usb 1-1: SerialNumber: syz [ 25.066362][ T290] EXT4-fs (loop2): unmounting filesystem. [ 25.118154][ T419] loop2: detected capacity change from 0 to 256 [ 25.158532][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 25.158545][ T28] audit: type=1400 audit(1725294116.976:138): avc: denied { write } for pid=420 comm="syz.2.43" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 25.166444][ T421] usb usb8: usbfs: process 421 (syz.2.43) did not claim interface 0 before use [ 25.251112][ T425] loop2: detected capacity change from 0 to 512 [ 25.267854][ T28] audit: type=1400 audit(1725294117.086:139): avc: denied { write } for pid=423 comm="syz.0.44" name="event0" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 25.290563][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 25.298933][ T414] loop4: detected capacity change from 0 to 40427 [ 25.321111][ T414] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 25.325935][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 25.328945][ T414] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 25.343084][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 25.349550][ T414] F2FS-fs (loop4): invalid crc value [ 25.370811][ T19] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 25.382321][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.386999][ T24] usb 1-1: USB disconnect, device number 2 [ 25.404048][ T19] usb 4-1: config 0 descriptor?? [ 25.412553][ T425] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 25.423373][ T425] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 25.426197][ T394] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 25.454047][ T414] F2FS-fs (loop4): Found nat_bits in checkpoint [ 25.464740][ T28] audit: type=1400 audit(1725294117.276:140): avc: denied { create } for pid=424 comm="syz.2.45" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 25.496312][ T290] EXT4-fs (loop2): unmounting filesystem. [ 25.518055][ T28] audit: type=1400 audit(1725294117.336:141): avc: denied { create } for pid=438 comm="syz.2.48" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.556497][ T28] audit: type=1400 audit(1725294117.356:142): avc: denied { map } for pid=438 comm="syz.2.48" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15892 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.582427][ T28] audit: type=1400 audit(1725294117.356:143): avc: denied { read write } for pid=438 comm="syz.2.48" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15892 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.615972][ T414] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 25.623964][ T414] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 25.760555][ T292] syz-executor: attempt to access beyond end of device [ 25.760555][ T292] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 25.894500][ T28] audit: type=1400 audit(1725294117.706:144): avc: denied { create } for pid=443 comm="syz.4.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 25.914755][ T19] plantronics 0003:047F:FFFF.0001: unknown global tag 0xd [ 25.922149][ T19] plantronics 0003:047F:FFFF.0001: item 0 4 1 13 parsing failed [ 25.930129][ T19] plantronics 0003:047F:FFFF.0001: parse failed [ 25.936601][ T19] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22 [ 26.025342][ T446] loop4: detected capacity change from 0 to 40427 [ 26.032093][ T446] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 26.039691][ T446] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 26.050451][ T446] F2FS-fs (loop4): Found nat_bits in checkpoint [ 26.096490][ T446] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 26.103392][ T446] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 26.138387][ T24] usb 4-1: USB disconnect, device number 2 [ 26.146513][ T318] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.173588][ T43] kworker/u4:2: attempt to access beyond end of device [ 26.173588][ T43] loop4: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 26.248730][ T457] loop2: detected capacity change from 0 to 2048 [ 26.262563][ T457] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 26.273947][ T28] audit: type=1400 audit(1725294374.086:145): avc: denied { mounton } for pid=456 comm="syz.2.55" path="/21/file1/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.297191][ T457] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.298452][ T28] audit: type=1400 audit(1725294374.106:146): avc: denied { read } for pid=456 comm="syz.2.55" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.312809][ T462] netlink: 'syz.4.53': attribute type 22 has an invalid length. [ 26.342159][ T28] audit: type=1400 audit(1725294374.106:147): avc: denied { write } for pid=456 comm="syz.2.55" name="file0" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.365302][ T290] EXT4-fs (loop2): unmounting filesystem. [ 26.400731][ T465] loop1: detected capacity change from 0 to 512 [ 26.404622][ T468] loop4: detected capacity change from 0 to 2 [ 26.418281][ T465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 26.428571][ T465] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 26.451204][ T291] EXT4-fs (loop1): unmounting filesystem. [ 26.456016][ T318] usb 1-1: Using ep0 maxpacket: 16 [ 26.564919][ T474] loop2: detected capacity change from 0 to 40427 [ 26.571630][ T474] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 26.576006][ T318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.579243][ T474] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 26.593253][ T318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.598684][ T474] F2FS-fs (loop2): invalid crc value [ 26.608005][ T318] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.613633][ T474] F2FS-fs (loop2): Found nat_bits in checkpoint [ 26.625915][ T318] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 26.640654][ T318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.652019][ T318] usb 1-1: config 0 descriptor?? [ 26.659874][ T474] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 26.667260][ T474] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 26.755937][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.842437][ T502] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 26.849630][ T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.860542][ T504] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.961523][ T507] loop3: detected capacity change from 0 to 8192 [ 26.970700][ T507] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 26.982692][ T507] capability: warning: `syz.3.73' uses deprecated v2 capabilities in a way that may be insecure [ 27.075988][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.136729][ T318] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 27.145859][ T318] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 27.146086][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.153945][ T318] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 27.166721][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.175522][ T318] microsoft 0003:045E:07DA.0002: no inputs found [ 27.185616][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 27.191597][ T318] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 27.200259][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.217657][ T24] usb 2-1: config 0 descriptor?? [ 27.226033][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 27.237117][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 27.248227][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 27.261248][ T19] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 27.270116][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.277935][ T319] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.285586][ T19] usb 5-1: config 0 descriptor?? [ 27.305964][ T480] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 27.325932][ T65] usb 3-1: Using ep0 maxpacket: 16 [ 27.359977][ T40] usb 1-1: USB disconnect, device number 3 [ 27.445997][ T65] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.456742][ T65] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 27.466418][ T65] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 27.479227][ T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.488062][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.516045][ T495] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 27.536644][ T65] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 27.636013][ T319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.646697][ T319] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 27.659381][ T319] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 27.668232][ T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.676661][ T319] usb 4-1: config 0 descriptor?? [ 27.686654][ T24] sony 0003:054C:0268.0003: unknown main item tag 0x0 [ 27.698059][ T24] sony 0003:054C:0268.0003: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 27.709722][ T24] sony 0003:054C:0268.0003: failed to claim input [ 27.756319][ T65] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 27.762991][ T65] usb 3-1: USB disconnect, device number 2 [ 27.769882][ T19] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 27.778256][ T19] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 27.789190][ T19] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 27.910542][ T520] tipc: Started in network mode [ 27.915254][ T520] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 27.924474][ T520] tipc: Enabled bearer , priority 10 [ 27.932704][ T19] usb 2-1: USB disconnect, device number 2 [ 28.036644][ T522] loop0: detected capacity change from 0 to 40427 [ 28.045461][ T522] F2FS-fs (loop0): Found nat_bits in checkpoint [ 28.067821][ T65] usb 5-1: USB disconnect, device number 2 [ 28.071183][ T522] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 28.094016][ T294] syz-executor: attempt to access beyond end of device [ 28.094016][ T294] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 28.156888][ T319] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 28.164400][ T319] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 28.177199][ T319] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 28.334815][ T546] syz.0.89 (546) used greatest stack depth: 20752 bytes left [ 28.367644][ T19] usb 4-1: USB disconnect, device number 3 [ 28.616030][ T319] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.856262][ T319] usb 3-1: Using ep0 maxpacket: 16 [ 28.882702][ T563] loop3: detected capacity change from 0 to 512 [ 28.889307][ T563] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.902262][ T563] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 28.912901][ T563] EXT4-fs (loop3): 1 truncate cleaned up [ 28.918403][ T563] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 28.918414][ T295] tipc: Node number set to 4269801488 [ 28.935734][ T563] EXT4-fs (loop3): re-mounted. Quota mode: none. [ 28.945157][ T293] EXT4-fs (loop3): unmounting filesystem. [ 29.056051][ T40] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 29.125940][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.135989][ T319] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 29.144841][ T319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.152675][ T319] usb 3-1: Product: syz [ 29.156732][ T319] usb 3-1: Manufacturer: syz [ 29.161057][ T319] usb 3-1: SerialNumber: syz [ 29.166570][ T319] usb 3-1: config 0 descriptor?? [ 29.206694][ T319] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 29.214307][ T319] usb 3-1: Detected FT232H [ 29.225935][ T19] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.375921][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 29.416432][ T319] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 29.456050][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.466854][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.476644][ T40] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 29.485578][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.494323][ T40] usb 5-1: config 0 descriptor?? [ 29.499352][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.510297][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.520160][ T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 29.529276][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.538015][ T24] usb 1-1: config 0 descriptor?? [ 29.585967][ T19] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 29.596568][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.607430][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.617184][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 29.630010][ T19] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 29.639111][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.647705][ T19] usb 4-1: config 0 descriptor?? [ 29.692740][ T575] loop1: detected capacity change from 0 to 131072 [ 29.699646][ T575] F2FS-fs (loop1): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 29.708082][ T575] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 29.716426][ T575] F2FS-fs (loop1): invalid crc value [ 29.722829][ T575] F2FS-fs (loop1): Found nat_bits in checkpoint [ 29.746279][ T575] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 29.753135][ T575] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 29.772047][ T575] F2FS-fs (loop1): sanity_check_inode: corrupted inode i_blocks i_ino=8 iblocks=0, run fsck to fix. [ 29.897097][ T319] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 29.987587][ T40] itetech 0003:258A:6A88.0006: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.4-1/input0 [ 30.006722][ T24] lenovo 0003:17EF:6009.0007: item fetching failed at offset 1/5 [ 30.014347][ T24] lenovo 0003:17EF:6009.0007: hid_parse failed [ 30.020331][ T24] lenovo: probe of 0003:17EF:6009.0007 failed with error -22 [ 30.099003][ T319] usb 3-1: USB disconnect, device number 3 [ 30.107236][ T319] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 30.116524][ T319] ftdi_sio 3-1:0.0: device disconnected [ 30.127077][ T19] wacom 0003:056A:0331.0008: item fetching failed at offset 3/5 [ 30.134616][ T19] wacom 0003:056A:0331.0008: parse failed [ 30.140145][ T19] wacom: probe of 0003:056A:0331.0008 failed with error -22 [ 30.155989][ T40] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.188938][ T24] usb 5-1: USB disconnect, device number 3 [ 30.226162][ T313] usb 1-1: USB disconnect, device number 4 [ 30.329428][ T319] usb 4-1: USB disconnect, device number 4 [ 30.515987][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.526704][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.536230][ T40] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 30.545069][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.553439][ T40] usb 2-1: config 0 descriptor?? [ 30.615759][ T585] loop2: detected capacity change from 0 to 512 [ 30.627865][ T585] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 30.636656][ T585] ext4 filesystem being mounted at /27/bus supports timestamps until 2038 (0x7fffffff) [ 30.648436][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 30.648458][ T28] audit: type=1400 audit(1725294378.466:177): avc: denied { open } for pid=584 comm="syz.2.103" path="/27/bus/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.677366][ T28] audit: type=1400 audit(1725294378.466:178): avc: denied { ioctl } for pid=584 comm="syz.2.103" path="/27/bus/file2" dev="loop2" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.677598][ T290] EXT4-fs (loop2): unmounting filesystem. [ 30.716356][ T28] audit: type=1400 audit(1725294378.536:179): avc: denied { wake_alarm } for pid=589 comm="syz.4.105" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.778865][ T595] loop0: detected capacity change from 0 to 2048 [ 30.810875][ T595] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 30.829246][ T28] audit: type=1400 audit(1725294378.646:180): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.857934][ T294] EXT4-fs (loop0): unmounting filesystem. [ 30.869038][ T28] audit: type=1400 audit(1725294378.676:181): avc: denied { setopt } for pid=611 comm="syz.4.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.893092][ T28] audit: type=1400 audit(1725294378.676:182): avc: denied { setopt } for pid=611 comm="syz.4.114" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.932969][ T28] audit: type=1400 audit(1725294378.676:183): avc: denied { connect } for pid=611 comm="syz.4.114" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.936654][ T619] loop0: detected capacity change from 0 to 128 [ 30.956196][ T28] audit: type=1400 audit(1725294378.736:184): avc: denied { read } for pid=616 comm="syz.0.115" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 30.989542][ T28] audit: type=1400 audit(1725294378.736:185): avc: denied { open } for pid=616 comm="syz.0.115" path="/19/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.017159][ T619] syz.0.118: attempt to access beyond end of device [ 31.017159][ T619] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 31.018987][ T28] audit: type=1400 audit(1725294378.736:186): avc: denied { ioctl } for pid=616 comm="syz.0.115" path="/19/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6725 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.056877][ T40] isku 0003:1E7D:319C.0009: item fetching failed at offset 3/7 [ 31.064537][ T40] isku 0003:1E7D:319C.0009: parse failed [ 31.071300][ T40] isku: probe of 0003:1E7D:319C.0009 failed with error -22 [ 31.248014][ T647] loop3: detected capacity change from 0 to 16 [ 31.261453][ T647] erofs: (device loop3): mounted with root inode @ nid 36. [ 31.268392][ T637] loop4: detected capacity change from 0 to 40427 [ 31.275115][ T637] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 31.282744][ T637] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 31.283268][ T313] usb 2-1: USB disconnect, device number 3 [ 31.306022][ T637] F2FS-fs (loop4): Found nat_bits in checkpoint [ 31.353773][ T637] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 31.360745][ T637] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 31.385940][ T40] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 31.404859][ T292] syz-executor: attempt to access beyond end of device [ 31.404859][ T292] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 31.695958][ T295] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 31.708629][ T677] xt_hashlimit: size too large, truncated to 1048576 [ 31.755925][ T319] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 31.826005][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.837051][ T40] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.847004][ T40] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 31.859981][ T40] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 31.869014][ T40] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.877776][ T40] usb 1-1: config 0 descriptor?? [ 32.065982][ T318] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.076115][ T295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.086877][ T295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.096430][ T295] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 32.105250][ T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.113736][ T295] usb 4-1: config 0 descriptor?? [ 32.115971][ T319] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 32.129141][ T319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.139774][ T319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.149335][ T319] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 32.236012][ T319] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 32.245069][ T319] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 32.252944][ T319] usb 5-1: Manufacturer: syz [ 32.257914][ T319] usb 5-1: config 0 descriptor?? [ 32.305943][ T318] usb 2-1: Using ep0 maxpacket: 16 [ 32.366827][ T40] prodikeys 0003:041E:2801.000A: unexpected long global item [ 32.374268][ T40] prodikeys 0003:041E:2801.000A: hid parse failed [ 32.380540][ T40] prodikeys: probe of 0003:041E:2801.000A failed with error -22 [ 32.425998][ T318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.436713][ T318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.446235][ T318] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 32.455071][ T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.463702][ T318] usb 2-1: config 0 descriptor?? [ 32.568996][ T65] usb 1-1: USB disconnect, device number 5 [ 32.596759][ T295] logitech-djreceiver 0003:046D:C71B.000B: unknown main item tag 0x0 [ 32.736617][ T319] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 32.743611][ T319] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 32.752191][ T319] appleir 0003:05AC:8243.000C: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 32.799457][ T295] usb 4-1: USB disconnect, device number 5 [ 32.946583][ T318] cp2112 0003:10C4:EA90.000D: unexpected long global item [ 32.953611][ T318] cp2112 0003:10C4:EA90.000D: parse failed [ 32.959224][ T318] cp2112: probe of 0003:10C4:EA90.000D failed with error -22 [ 33.006764][ T318] usb 5-1: USB disconnect, device number 4 [ 33.085301][ T43] Bluetooth: hci1: Frame reassembly failed (-84) [ 33.148817][ T65] usb 2-1: USB disconnect, device number 4 [ 33.354485][ T699] syz.3.149[699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.354554][ T699] syz.3.149[699] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.367323][ T699] Invalid ELF header magic: != ELF [ 33.404145][ T703] loop3: detected capacity change from 0 to 256 [ 33.527647][ T711] loop4: detected capacity change from 0 to 512 [ 33.533945][ T711] EXT4-fs: Ignoring removed orlov option [ 33.539937][ T711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.549126][ T711] EXT4-fs (loop4): orphan cleanup on readonly fs [ 33.555754][ T711] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.155: bg 0: block 248: padding at end of block bitmap is not set [ 33.570199][ T711] EXT4-fs error (device loop4): ext4_acquire_dquot:6764: comm syz.4.155: Failed to acquire dquot type 1 [ 33.581734][ T711] EXT4-fs (loop4): 1 truncate cleaned up [ 33.587382][ T711] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.598754][ T711] EXT4-fs: Ignoring removed orlov option [ 33.604386][ T711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.612656][ T711] EXT4-fs error (device loop4): __ext4_remount:6412: comm syz.4.155: Abort forced by user [ 33.623551][ T711] syz.4.155 (711) used greatest stack depth: 19976 bytes left [ 33.631979][ T292] EXT4-fs (loop4): unmounting filesystem. [ 33.645436][ T714] loop4: detected capacity change from 0 to 512 [ 33.656948][ T714] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a803c019, mo2=0000] [ 33.669246][ T714] System zones: 0-2, 18-18, 34-34 [ 33.677855][ T714] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 16: block 41:freeing already freed block (bit 41); block bitmap corrupt. [ 33.692496][ T714] EXT4-fs (loop4): 1 orphan inode deleted [ 33.695932][ T295] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 33.698691][ T714] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 33.714212][ T714] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038 (0x7fffffff) [ 33.740939][ T292] EXT4-fs (loop4): unmounting filesystem. [ 33.896487][ T693] Bluetooth: hci0: command 0x1003 tx timeout [ 33.896532][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 33.935917][ T295] usb 4-1: Using ep0 maxpacket: 32 [ 33.976440][ T731] loop2: detected capacity change from 0 to 512 [ 33.984478][ T731] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 33.995858][ T731] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 34.006059][ T731] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.163: Corrupt directory, running e2fsck is recommended [ 34.018693][ T65] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 34.019312][ T731] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 34.034044][ T731] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz.2.163: corrupted in-inode xattr [ 34.045913][ T731] EXT4-fs (loop2): Remounting filesystem read-only [ 34.052287][ T731] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.163: couldn't read orphan inode 15 (err -117) [ 34.056060][ T295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 34.065327][ T731] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.074779][ T295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 34.094599][ T295] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 34.103389][ T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.105414][ T731] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 34.111845][ T295] usb 4-1: config 0 descriptor?? [ 34.122621][ T731] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 34.137378][ T731] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.163: Corrupt directory, running e2fsck is recommended [ 34.145961][ T707] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 34.150397][ T731] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 34.166400][ T295] hub 4-1:0.0: USB hub found [ 34.168289][ T731] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 34.182523][ T731] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.163: Corrupt directory, running e2fsck is recommended [ 34.195510][ T734] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 34.206814][ T734] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 34.217035][ T734] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz.2.163: Corrupt directory, running e2fsck is recommended [ 34.229997][ T731] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 34.246250][ T290] EXT4-fs (loop2): unmounting filesystem. [ 34.385969][ T295] hub 4-1:0.0: 2 ports detected [ 34.405962][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.416701][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.426195][ T65] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.438820][ T65] usb 5-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 34.447642][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.456284][ T65] usb 5-1: config 0 descriptor?? [ 34.545941][ T40] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.622232][ T746] loop1: detected capacity change from 0 to 2048 [ 34.636777][ T316] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 34.774760][ T756] xt_hashlimit: size too large, truncated to 1048576 [ 34.805910][ T40] usb 3-1: Using ep0 maxpacket: 16 [ 34.835963][ T295] hub 4-1:0.0: set hub depth failed [ 34.888349][ T295] usb 4-1: USB disconnect, device number 6 [ 34.935971][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.936692][ T65] holtek_mouse 0003:04D9:A070.000E: invalid report_size 862009739 [ 34.946820][ T40] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.961421][ T65] holtek_mouse 0003:04D9:A070.000E: item 0 4 1 7 parsing failed [ 34.964447][ T40] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 34.971710][ T65] holtek_mouse 0003:04D9:A070.000E: hid parse failed: -22 [ 34.980927][ T40] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.987461][ T65] holtek_mouse: probe of 0003:04D9:A070.000E failed with error -22 [ 34.996179][ T40] usb 3-1: config 0 descriptor?? [ 35.039707][ T768] xt_hashlimit: size too large, truncated to 1048576 [ 35.095919][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 35.106033][ T688] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 35.174109][ T295] usb 5-1: USB disconnect, device number 5 [ 35.385946][ T65] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 35.496835][ T40] hid-multitouch 0003:1FD2:6007.000F: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 35.585966][ T319] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.725370][ T40] usb 3-1: USB disconnect, device number 4 [ 35.745962][ T65] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.756904][ T65] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 35.765917][ T295] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 35.769747][ T65] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 35.785729][ T65] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.794356][ T65] usb 1-1: config 0 descriptor?? [ 35.825950][ T319] usb 2-1: Using ep0 maxpacket: 8 [ 35.945998][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.956743][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.966231][ T319] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 35.978861][ T319] usb 2-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 35.987670][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.996343][ T319] usb 2-1: config 0 descriptor?? [ 36.035961][ T295] usb 4-1: Using ep0 maxpacket: 16 [ 36.165948][ T295] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.276633][ T65] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 36.285617][ T65] plantronics 0003:047F:FFFF.0010: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 36.386038][ T295] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 36.394934][ T295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.402769][ T295] usb 4-1: Product: syz [ 36.406706][ T295] usb 4-1: Manufacturer: syz [ 36.411110][ T295] usb 4-1: SerialNumber: syz [ 36.416375][ T295] usb 4-1: config 0 descriptor?? [ 36.457322][ T319] ntrig 0003:1B96:0010.0011: item fetching failed at offset 5/7 [ 36.465325][ T319] ntrig 0003:1B96:0010.0011: parse failed [ 36.471040][ T319] ntrig: probe of 0003:1B96:0010.0011 failed with error -22 [ 36.505935][ T318] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 36.566488][ T319] usb 1-1: USB disconnect, device number 6 [ 36.659557][ T6] usb 2-1: USB disconnect, device number 5 [ 36.745913][ T318] usb 3-1: Using ep0 maxpacket: 32 [ 36.815946][ T40] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 36.865945][ T318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 36.877052][ T318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 36.888278][ T318] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 36.897164][ T318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.905984][ T318] usb 3-1: config 0 descriptor?? [ 36.926000][ T295] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 36.932203][ T295] usb 4-1: No valid video chain found. [ 36.935966][ T809] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 36.956343][ T318] hub 3-1:0.0: USB hub found [ 37.055953][ T40] usb 5-1: Using ep0 maxpacket: 32 [ 37.095637][ T820] syz.0.203[820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.095685][ T820] syz.0.203[820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.108156][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 37.108169][ T28] audit: type=1400 audit(1725294384.926:229): avc: denied { mounton } for pid=819 comm="syz.0.203" path="/28/file0" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.150578][ T295] usb 4-1: USB disconnect, device number 7 [ 37.206045][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 37.217765][ T40] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 37.228974][ T40] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 37.235925][ T318] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 37.237908][ T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.259621][ T40] usb 5-1: config 0 descriptor?? [ 37.275457][ T319] kernel write not supported for file /checkreqprot (pid: 319 comm: kworker/0:5) [ 37.286001][ T813] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 37.306412][ T40] hub 5-1:0.0: USB hub found [ 37.345946][ T318] usbhid 3-1:0.0: can't add hid device: -71 [ 37.351716][ T318] usbhid: probe of 3-1:0.0 failed with error -71 [ 37.386363][ T318] usb 3-1: USB disconnect, device number 5 [ 37.535931][ T6] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 37.555939][ T319] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 37.605945][ T40] hub 5-1:0.0: 2 ports detected [ 37.625935][ T40] hub 5-1:0.0: insufficient power available to use all downstream ports [ 37.673356][ T843] loop3: detected capacity change from 0 to 256 [ 37.679703][ T843] exfat: Deprecated parameter 'utf8' [ 37.684815][ T843] exfat: Deprecated parameter 'utf8' [ 37.692501][ T843] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x41aa7242, utbl_chksum : 0xe619d30d) [ 37.712193][ T28] audit: type=1400 audit(1725294385.526:230): avc: denied { add_name } for pid=842 comm="syz.3.214" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.712580][ T845] syz.2.215[845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.733459][ T28] audit: type=1400 audit(1725294385.546:231): avc: denied { associate } for pid=842 comm="syz.3.214" name="memory.events" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 37.733857][ T845] syz.2.215[845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.750646][ T28] audit: type=1400 audit(1725294385.566:232): avc: denied { append } for pid=842 comm="syz.3.214" path="/54/file1/memory.events" dev="loop3" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.802024][ T28] audit: type=1400 audit(1725294385.566:233): avc: denied { map } for pid=842 comm="syz.3.214" path="/54/file1/memory.events" dev="loop3" ino=1048602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.826060][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 37.826554][ T40] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 37.837224][ T40] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 37.859735][ T28] audit: type=1400 audit(1725294385.676:234): avc: denied { connect } for pid=850 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.898463][ T28] audit: type=1400 audit(1725294385.716:235): avc: denied { read } for pid=850 comm="syz.3.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.923879][ T28] audit: type=1400 audit(1725294385.736:236): avc: denied { append } for pid=852 comm="syz.3.219" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 37.954718][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.965978][ T40] usbhid 5-1:0.0: can't add hid device: -71 [ 37.971829][ T40] usbhid: probe of 5-1:0.0 failed with error -71 [ 37.986034][ T6] usb 1-1: config 0 has no interfaces? [ 37.991352][ T319] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.002231][ T319] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 38.006815][ T40] usb 5-1: USB disconnect, device number 6 [ 38.125953][ T582] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 38.155996][ T6] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 38.164898][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.172705][ T6] usb 1-1: Product: syz [ 38.176742][ T319] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 38.185497][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.193360][ T6] usb 1-1: Manufacturer: syz [ 38.197803][ T6] usb 1-1: SerialNumber: syz [ 38.202360][ T319] usb 2-1: Product: syz [ 38.206341][ T319] usb 2-1: Manufacturer: syz [ 38.210741][ T319] usb 2-1: SerialNumber: syz [ 38.215580][ T6] r8152-cfgselector 1-1: config 0 descriptor?? [ 38.465996][ T6] r8152-cfgselector 1-1: Unknown version 0x0000 [ 38.485960][ T582] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.496942][ T582] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.506939][ T582] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 38.515799][ T582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.524338][ T582] usb 3-1: config 0 descriptor?? [ 38.534619][ T28] audit: type=1400 audit(1725294386.346:237): avc: denied { create } for pid=865 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 38.554298][ T28] audit: type=1400 audit(1725294386.366:238): avc: denied { sys_admin } for pid=865 comm="syz.4.225" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 38.680284][ T40] r8152-cfgselector 1-1: USB disconnect, device number 7 [ 38.691478][ T879] netlink: 'syz.4.231': attribute type 3 has an invalid length. [ 38.724243][ T882] loop4: detected capacity change from 0 to 256 [ 38.737408][ T882] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 39.006785][ T582] cypress 0003:04B4:07B1.0012: unknown main item tag 0x6 [ 39.013674][ T582] cypress 0003:04B4:07B1.0012: item fetching failed at offset 4/5 [ 39.021582][ T582] cypress 0003:04B4:07B1.0012: parse failed [ 39.027325][ T582] cypress: probe of 0003:04B4:07B1.0012 failed with error -22 [ 39.065931][ T295] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 39.211121][ T6] usb 3-1: USB disconnect, device number 6 [ 39.332148][ T898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.239'. [ 39.340916][ T898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.239'. [ 39.345986][ T319] cdc_ncm 2-1:1.0: bind() failure [ 39.358436][ T900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.240'. [ 39.376239][ T319] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 39.395958][ T319] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 39.405538][ T319] usb 2-1: USB disconnect, device number 6 [ 39.425993][ T295] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 39.435593][ T295] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 39.595989][ T295] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 39.604936][ T295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.613002][ T295] usb 5-1: Product: syz [ 39.617278][ T295] usb 5-1: Manufacturer: syz [ 39.621713][ T295] usb 5-1: SerialNumber: syz [ 39.631839][ T295] usb 5-1: config 0 descriptor?? [ 39.655979][ T886] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 39.664232][ T886] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 39.879204][ T886] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 39.889747][ T886] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 39.975918][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 39.975931][ T688] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.037067][ T938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 40.069598][ T6] kernel write not supported for file /input/event2 (pid: 6 comm: kworker/0:0) [ 40.131780][ T949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.261'. [ 40.144978][ T319] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 40.515976][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 40.527013][ T319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 40.538183][ T319] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 40.551140][ T319] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 40.560132][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.568452][ T319] usb 2-1: config 0 descriptor?? [ 40.586046][ T923] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 40.615938][ T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 40.645937][ T582] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 40.795969][ T295] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 40.805425][ T295] usb 5-1: USB disconnect, device number 7 [ 40.885915][ T582] usb 4-1: Using ep0 maxpacket: 8 [ 41.005962][ T582] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 41.036676][ T319] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 41.043951][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.054627][ T319] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 41.061773][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.071388][ T319] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 41.078535][ T6] usb 3-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 41.088240][ T319] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 41.095426][ T319] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 41.095974][ T582] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.102676][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.111999][ T582] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 41.119325][ T319] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 41.127443][ T582] usb 4-1: SerialNumber: syz [ 41.135391][ T6] usb 3-1: config 0 descriptor?? [ 41.143734][ T319] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 41.152407][ T319] plantronics 0003:047F:FFFF.0013: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 41.176340][ T582] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 41.306497][ T318] usb 2-1: USB disconnect, device number 7 [ 41.338482][ T633] tipc: Disabling bearer [ 41.356051][ T633] tipc: Left network mode [ 41.438528][ T995] loop4: detected capacity change from 0 to 32768 [ 41.469413][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.476273][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.483346][ T997] device bridge_slave_0 entered promiscuous mode [ 41.503259][ T1002] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 41.510883][ T1002] #PF: supervisor instruction fetch in kernel mode [ 41.512403][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.517213][ T1002] #PF: error_code(0x0010) - not-present page [ 41.517225][ T1002] PGD 12e3a1067 P4D 12e3a1067 PUD 12bec8067 PMD 0 [ 41.534231][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.536224][ T1002] Oops: 0010 [#1] PREEMPT SMP KASAN [ 41.536241][ T1002] CPU: 1 PID: 1002 Comm: syz.4.287 Not tainted 6.1.93-syzkaller-00069-ga1895da8bd3b #0 [ 41.543673][ T997] device bridge_slave_1 entered promiscuous mode [ 41.548113][ T1002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 41.548124][ T1002] RIP: 0010:0x0 [ 41.576932][ T1002] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 41.584130][ T1002] RSP: 0018:ffffc90000ce6ff8 EFLAGS: 00010246 [ 41.590033][ T1002] RAX: 1ffff9200019ceb8 RBX: dffffc0000000000 RCX: 0000000000040000 [ 41.597844][ T1002] RDX: ffffc900028c5000 RSI: ffffea00051c0800 RDI: ffff88811a84ad80 [ 41.605657][ T1002] RBP: ffffc90000ce7150 R08: ffffffff81a46b48 R09: fffff94000a38107 [ 41.613470][ T1002] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000ce75c0 [ 41.621279][ T1002] R13: ffffea00051c0800 R14: ffffc90000ce75d8 R15: 0000000000000000 [ 41.629100][ T1002] FS: 00007feecd8b96c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 41.637857][ T1002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.644282][ T1002] CR2: ffffffffffffffd6 CR3: 0000000110dd8000 CR4: 00000000003506a0 [ 41.652094][ T1002] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.659911][ T1002] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.667716][ T1002] Call Trace: [ 41.670841][ T1002] [ 41.673616][ T1002] ? __die_body+0x62/0xb0 [ 41.677783][ T1002] ? __die+0x7e/0x90 [ 41.681515][ T1002] ? page_fault_oops+0x7f9/0xa90 [ 41.686290][ T1002] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 41.691669][ T1002] ? cgroup_rstat_updated+0xe5/0x370 [ 41.696791][ T1002] ? is_errata93+0xc7/0x240 [ 41.701132][ T1002] ? exc_page_fault+0x529/0x6d0 [ 41.705820][ T1002] ? asm_exc_page_fault+0x27/0x30 [ 41.710680][ T1002] ? read_pages+0x838/0xd40 [ 41.715017][ T1002] read_pages+0x89c/0xd40 [ 41.719185][ T1002] ? workingset_activation+0x430/0x430 [ 41.724477][ T1002] ? folio_add_lru+0x280/0x3f0 [ 41.729078][ T1002] ? page_cache_ra_unbounded+0x690/0x690 [ 41.734546][ T1002] ? filemap_add_folio+0x18f/0x200 [ 41.739495][ T1002] ? __filemap_add_folio+0xd10/0xd10 [ 41.744616][ T1002] page_cache_ra_order+0x822/0xc40 [ 41.749563][ T1002] ? do_page_cache_ra+0x110/0x110 [ 41.754423][ T1002] ? xas_create+0xf3a/0x1630 [ 41.758880][ T1002] ondemand_readahead+0x91a/0xee0 [ 41.763711][ T1002] ? cgroup_rstat_updated+0xe5/0x370 [ 41.768832][ T1002] ? page_cache_sync_ra+0x450/0x450 [ 41.773863][ T1002] ? blk_cgroup_congested+0x132/0x150 [ 41.777242][ T1003] raw-gadget.3 gadget.3: fail, usb_ep_set_halt returned -11 [ 41.779076][ T1002] page_cache_sync_ra+0x3d6/0x450 [ 41.791052][ T1002] hpage_collapse_scan_file+0x19ba/0x46e0 [ 41.796608][ T1002] ? hugepage_vma_revalidate+0x310/0x310 [ 41.802073][ T1002] ? mutex_unlock+0xb2/0x260 [ 41.806502][ T1002] ? __lru_add_drain_all+0x714/0x770 [ 41.811619][ T1002] madvise_collapse+0x639/0xcf0 [ 41.816307][ T1002] ? khugepaged_min_free_kbytes_update+0x90/0x90 [ 41.822470][ T1002] ? memset+0x35/0x40 [ 41.826297][ T1002] ? blk_start_plug+0x9c/0x130 [ 41.830897][ T1002] do_madvise+0x1604/0x40b0 [ 41.835233][ T1002] ? schedule_preempt_disabled+0x20/0x20 [ 41.840710][ T1002] ? madvise_set_anon_name+0x4c0/0x4c0 [ 41.845999][ T1002] ? __kasan_check_write+0x14/0x20 [ 41.850939][ T1002] ? wake_up_q+0x11c/0x1d0 [ 41.855195][ T1002] ? futex_wake+0x758/0xb60 [ 41.859535][ T1002] ? futex_wake_mark+0x170/0x170 [ 41.864306][ T1002] ? ____kasan_slab_free+0x13c/0x180 [ 41.869426][ T1002] ? __kasan_slab_free+0x11/0x20 [ 41.874199][ T1002] ? putname+0xfa/0x150 [ 41.878191][ T1002] ? putname+0xfa/0x150 [ 41.882186][ T1002] ? getname_flags+0x3a2/0x520 [ 41.886783][ T1002] ? do_futex+0x501/0x9a0 [ 41.890951][ T1002] ? __this_cpu_preempt_check+0x13/0x20 [ 41.896332][ T1002] ? xfd_validate_state+0x6f/0x170 [ 41.901305][ T1002] ? restore_fpregs_from_fpstate+0xfc/0x230 [ 41.907008][ T1002] ? save_fpregs_to_fpstate+0x220/0x220 [ 41.912388][ T1002] ? fpregs_restore_userregs+0x130/0x290 [ 41.917856][ T1002] __x64_sys_madvise+0xa8/0xc0 [ 41.922455][ T1002] x64_sys_call+0xec/0x9a0 [ 41.926707][ T1002] do_syscall_64+0x3b/0xb0 [ 41.930957][ T1002] ? clear_bhb_loop+0x55/0xb0 [ 41.935477][ T1002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 41.941202][ T1002] RIP: 0033:0x7feeccb79eb9 [ 41.945457][ T1002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.964901][ T1002] RSP: 002b:00007feecd8b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 41.973143][ T1002] RAX: ffffffffffffffda RBX: 00007feeccd15f80 RCX: 00007feeccb79eb9 [ 41.980954][ T1002] RDX: 0000000000000019 RSI: 0000000000600702 RDI: 0000000020000000 [ 41.988765][ T1002] RBP: 00007feeccbe793e R08: 0000000000000000 R09: 0000000000000000 [ 41.996581][ T1002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.004396][ T1002] R13: 0000000000000000 R14: 00007feeccd15f80 R15: 00007ffefb0513a8 [ 42.012207][ T1002] [ 42.015071][ T1002] Modules linked in: [ 42.018812][ T1002] CR2: 0000000000000000 [ 42.022903][ T1002] ---[ end trace 0000000000000000 ]--- [ 42.028189][ T1002] RIP: 0010:0x0 [ 42.031492][ T1002] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 42.038689][ T1002] RSP: 0018:ffffc90000ce6ff8 EFLAGS: 00010246 [ 42.044593][ T1002] RAX: 1ffff9200019ceb8 RBX: dffffc0000000000 RCX: 0000000000040000 [ 42.052403][ T1002] RDX: ffffc900028c5000 RSI: ffffea00051c0800 RDI: ffff88811a84ad80 [ 42.060215][ T1002] RBP: ffffc90000ce7150 R08: ffffffff81a46b48 R09: fffff94000a38107 [ 42.068024][ T1002] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000ce75c0 [ 42.075838][ T1002] R13: ffffea00051c0800 R14: ffffc90000ce75d8 R15: 0000000000000000 [ 42.083649][ T1002] FS: 00007feecd8b96c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 42.092414][ T1002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.098836][ T1002] CR2: ffffffffffffffd6 CR3: 0000000110dd8000 CR4: 00000000003506a0 [ 42.106651][ T1002] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.114462][ T1002] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.122273][ T1002] Kernel panic - not syncing: Fatal exception [ 42.128377][ T1002] Kernel Offset: disabled [ 42.132491][ T1002] Rebooting in 86400 seconds..