last executing test programs: 5.719324225s ago: executing program 0 (id=2002): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r0 = memfd_create(&(0x7f0000000040)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p\x12\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\xcc{\x9d\xf1\xbd\xb0\xc7\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xef\t\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0Zt\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59) close(0xffffffffffffffff) rt_sigreturn() poll(0x0, 0x0, 0x6c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setxattr$incfs_id(0x0, 0x0, 0x0, 0x43, 0x0) 3.287384037s ago: executing program 1 (id=2032): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f0000000200)=@ethtool_gstrings}) 3.220155478s ago: executing program 1 (id=2034): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)={0x6c, r3, 0x405, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x6c}}, 0x0) 3.116670133s ago: executing program 1 (id=2038): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) readv(r1, 0x0, 0x0) close(r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) statx(0xffffffffffffffff, 0x0, 0x2000, 0x0, 0x0) 2.958390967s ago: executing program 0 (id=2042): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)='c', 0x1}], 0x1}, 0x0) close(r1) r2 = socket$inet(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket(0x1, 0x3, 0x0) recvmsg$inet_nvme(r3, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x0) close(r4) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0x5450, 0x0) 2.919935894s ago: executing program 2 (id=2043): r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) write$cgroup_devices(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="01202a3a8a"], 0x8) close(r2) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getcwd(0x0, 0xfffffffffffffe61) 2.844265545s ago: executing program 2 (id=2045): r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) close(0xffffffffffffffff) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000280)={'mangle\x00', 0x0, [0x0, 0x0, 0x2, 0x5127]}, &(0x7f0000000200)=0x54) r2 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x8946, 0x0) 2.81281109s ago: executing program 0 (id=2046): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x2}) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() r2 = eventfd(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RSTATFS(r3, &(0x7f0000001840)={0x43, 0x9, 0xfffc, {0x1ff, 0x1, 0x400}}, 0x43) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00cpuset'], 0x8) close(r1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x101000, 0x4) 2.768343127s ago: executing program 2 (id=2047): r0 = gettid() timer_create(0x0, &(0x7f0000004200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) timer_settime(0x0, 0x0, &(0x7f0000004080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigreturn() syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) readv(r2, 0x0, 0x0) 2.431411308s ago: executing program 2 (id=2052): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r0 = memfd_create(&(0x7f0000000040)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p\x12\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\xcc{\x9d\xf1\xbd\xb0\xc7\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xef\t\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0Zt\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_binder, @flat=@weak_handle, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 1.478795714s ago: executing program 1 (id=2062): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setgid(r2) 1.366454061s ago: executing program 1 (id=2063): r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2f6ec436631387c9, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 1.233562132s ago: executing program 3 (id=2064): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 1.201847006s ago: executing program 3 (id=2065): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$eJzsmL9rFEEUx78zu7e5FRFtUthYGDCi2cvuoaQ5NIJgJULir0oPs4Z4m5xcVjAHgsHGRjsLwcbCf8AiRSoLO/8BQQsVBAuvsLCxGZmd2b1JJnGPNVa+TzF8Z9978+a9233FgSCI/5Yvn39+enJuZv4kgP2YwJh+/s0BGFOaG/4fn9878ax1/sXrD6/erhx4sLn9PBkixNYH9T/kdwG8mXWQFpmK6F9STOjNPHihL4PjuNZXwRBofRMcV7SOwXBd6zuG7kr/ILi9lMTBrW6yIMW0XEK5RHJpbr/fYJ1hQe+FEIIZ9tW1fqedJHHPEK627WCqJIpknXGrfzV4GMxytIz7yS5ee/xoXe7z3kwb/QvBEeoimmCY089nMJb3RrXEqP+wOzzfserfsVrpKg1lRdaVaP3Yk2aZ4tBUtfBJWc5Z23QQVa6BrVE1DE2yk3tbsvXqZMItfxfP6B+0Qq6Lo1bx1Afwjyo1RaUqcjE+2Hxnm76WhQtWnoKN/v7UR71z/iFW75iPfof/Tcd2u9j7DTU/xEuGY8Z8co350UiX7zZW1/pTS8vtxXgxXomi5mkGPDwVNbJBpFZr7g3ns5/Np33G+bVdfD3u4X47TXuhWj3mwUea9qJsHxmfzdxG9/sNHZbiAoCjaiPHplec6Fg5mKd8eOYr1aTtRBAEQRAEQRAEQRAEQRAEUYkjYNm/oCVElzLv3wEAAP//0Ixjlw==") open(&(0x7f0000000340)='./file2\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffb, 0x2) getdents(r0, 0x0, 0x0) 1.026637943s ago: executing program 3 (id=2066): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8994, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000002c0)='./bus\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x327, &(0x7f0000000480)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x10c442, 0x28) ftruncate(r0, 0x2007ffd) sendfile(r0, r1, 0x0, 0x1000000201005) creat(&(0x7f0000001d80)='./bus\x00', 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x200, @mcast1, 0x6}, 0x1c) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) 964.742532ms ago: executing program 4 (id=2067): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 903.592022ms ago: executing program 4 (id=2068): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x21, 0x0, '\x00', @c}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc080661a, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) 697.677733ms ago: executing program 3 (id=2069): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000006000000000061100800020000009500000200000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r0 = socket(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c010004230eb1613e1cab4e3963b58a4a414e3054dee43738b4fc80f6558f7ecbcc58187bbb12448dd1f6efcd84eaa963230d42d729e7a2e498439df5167a82d6463d180629a29958f77e903b62fc2f68d911d044f294f9c96b5921a82e13dac215db81b85fe44894cad5903f95ee2652b9b6416cccfd21edf21254779675d6", @ANYRES16=0x0, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x76a, &(0x7f0000000fc0)="$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") socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000180)=0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4000}, 0x48) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7a680000) 678.504616ms ago: executing program 4 (id=2070): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="81000000000000003a"], 0x10) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 642.762892ms ago: executing program 4 (id=2071): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59) close(0xffffffffffffffff) rt_sigreturn() poll(0x0, 0x0, 0x6c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setxattr$incfs_id(0x0, 0x0, 0x0, 0x43, 0x0) 443.231022ms ago: executing program 1 (id=2072): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x0, 0x0) dup2(r2, r1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r2}) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) 152.537967ms ago: executing program 3 (id=2073): creat(&(0x7f0000000400)='./bus\x00', 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="3a00030007"], 0xd) 78.624898ms ago: executing program 2 (id=2074): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) dup3(r0, r1, 0x0) 30.601205ms ago: executing program 2 (id=2075): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00'}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7020000c3000000bf230000000000002703000000fefeff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400011000000404000001007d60b7030000000000006a0a00fe800000008500000053000000b7000000000000009500001000000000acaa8e53a53cb864c300094c07000000000000d94cf0987b00a749a8e53b5c9491cd1f2b94a64f1de23d03a8f0362ebfc44c77511e60070e25510070f7778d3e77ad85319f0113abbac795f8c24abca246150226eb93fe39233add8f68f87699162334343befce832cb8075c5f0ae30cde221371ff00000067e4b75da95370ae6fd2b99ac18f98403494d4a94e95fb8dcd813487b2bdb006c6465c15f04485a9f8c8e49d00000097184c8e9d34b1e382b25e9614634e8e09194f7b83138f5275d9ab463797a2f6dcb45d5f278cd4fb74559575da3560c01cdf1eaa3fc7a3fb4f1689dfd5b626174770e4dfd1c82a694efc62f9ef9c8c0ea1efa5b949ce22827f6fd1dfc69d03482d8ec264e3d96ad19a0c99a234b4b71b0bc22573f8594b91781cd8ff7f000000000000299ebf94588e60abe9a565c5bbdc0358226f8580dc1a83c6a44408de23475a74ef0deda8da4089269ccb4e728dee6320444576c87cc576291e5367a5f1a5d5a12f8313ffff0b7f73335279aa2b68c9f045831119881764c71bb65b5138c50e06024e80fd9656bc077e4e259695748989335ba9eeef288de73815f20fefd4acfb6813ffff00000b971aec1a3e618a08a94ecbd401c8109c87ee3f5c0501857538d2a766bfcf4128fbe726903aca577aa8943af747760718dee5a21396dce6f61c6f3c7e000000cb0868b48719e47296f2299df3ecfb5f3f0e42f6f1eb1dc64dcc8e397366d12033f6288edbda3b838100000000000000000000800000edd4e1266dc9d73223fe614f025a7f284de76b3b676a13c57a0ed24f6270c4cbbf93472eb8093d8296c68dfbb03ddedc3e029b08959b145a7b110068ba071e75d75716243052ad24b624fddc2f0f3a018c0085c2319c248d643cd09fa855b20a6d453f2e954ff0e55c010000008547c5a0ecefcc44cc9532f729167f215937357a4bb9746193c1ec000000000000dd43c108c2109d221b7b26b7c9c209000005b7918a6cd856b8fa806c85480443159c6bed51a0e021f05f7caa1b99cdb4d08d9031210ac00e67d8c40a18503cb7aabcc066dfbfd7f87abe1122f00e5454bec3563a19582e0000000000000000000000000084b27fc6a3f95bf02b4eb5f1599dd46edcad432cc216316fe07afe27649c89cf022a90d895a2d70fcde7a9c37ede0c47c27f44595ab4b1fb1ed5b1d91314b2d50f94a768fb605679485041a6376b8344a39af68aed2be39794dd86ae82f9660cf4f935255d71f9fab2e430ac42bba1f54141cf39d4d50c4ded504beacb0de210d7a3716dca7362c134b91cef3efc514fbcb4747e6814ac16449ac02a43d9d4151697b4b7890ec6b481c5f0ca8c52a6322f34a796fa5941d23409ecf73458223baaffb94a89ee2884df000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x40000f0, 0xe40, 0xffffffff, &(0x7f0000000280)="7b5515ccc8bca12641e65d58fd1a12f639", 0x0, 0x8001}, 0x28) 0s ago: executing program 3 (id=2076): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") open(&(0x7f0000000340)='./file2\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffb, 0x2) getdents(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): _1) entered disabled state [ 490.096394][ T9727] device bridge_slave_1 entered promiscuous mode [ 490.114342][ T6867] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 490.145631][ T9707] F2FS-fs (loop0): Unrecognized mount option "ÿÿ" or missing value [ 490.284597][ T9727] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.291484][ T9727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.298614][ T9727] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.305455][ T9727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.626769][ T9741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1630'. [ 490.823866][ T2722] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.832665][ T2722] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.844313][ T6867] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 490.853916][ T6867] usb 5-1: can't read configurations, error -71 [ 490.923239][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 490.931103][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 490.954400][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 490.962703][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 490.971086][ T7507] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.977954][ T7507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.985386][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 490.995463][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.004805][ T7507] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.011655][ T7507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.196702][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 491.243153][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 491.289124][ T6866] usb 2-1: USB disconnect, device number 95 [ 491.317609][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 491.330614][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 491.381821][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 491.390965][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 491.396576][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 491.415791][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 491.424509][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 491.428581][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 491.436859][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 491.452453][ T8187] device bridge_slave_1 left promiscuous mode [ 491.454489][ T7507] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 491.458764][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.473762][ T8187] device bridge_slave_0 left promiscuous mode [ 491.480804][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.483394][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 491.500201][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 491.511733][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 491.704416][ T414] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 491.814272][ T6866] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 491.864608][ T7507] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 491.954711][ T7507] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 491.973741][ T7507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 491.983830][ T7507] usb 1-1: SerialNumber: syz [ 492.039560][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 492.047981][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 492.064444][ T414] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 492.067975][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 492.086241][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 492.095083][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 492.103440][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 492.164409][ T414] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 492.173708][ T414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 492.181816][ T6866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.192777][ T414] usb 4-1: SerialNumber: syz [ 492.200267][ T6866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.219777][ T6866] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 492.229488][ T6866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.238795][ T9759] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 492.256422][ T6866] usb 2-1: config 0 descriptor?? [ 492.608165][ T9756] F2FS-fs (loop4): Unrecognized mount option "ÿÿ" or missing value [ 492.655949][ T9748] FAT-fs (loop0): Directory bread(block 64) failed [ 492.665919][ T9748] FAT-fs (loop0): Directory bread(block 65) failed [ 492.672432][ T9748] FAT-fs (loop0): Directory bread(block 66) failed [ 492.682687][ T9748] FAT-fs (loop0): Directory bread(block 67) failed [ 492.689244][ T9748] FAT-fs (loop0): Directory bread(block 68) failed [ 492.695895][ T9748] FAT-fs (loop0): Directory bread(block 69) failed [ 492.702414][ T9748] FAT-fs (loop0): Directory bread(block 70) failed [ 492.709164][ T9748] FAT-fs (loop0): Directory bread(block 71) failed [ 492.715820][ T9748] FAT-fs (loop0): Directory bread(block 72) failed [ 492.722259][ T9748] FAT-fs (loop0): Directory bread(block 73) failed [ 492.866446][ T9754] FAT-fs (loop3): Directory bread(block 64) failed [ 492.987504][ T9773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1640'. [ 493.081797][ T9754] FAT-fs (loop3): Directory bread(block 65) failed [ 493.142479][ T6866] hid (null): unknown global tag 0xc [ 493.147946][ T23] audit: type=1326 audit(1719566449.450:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9746 comm="syz.0.1636" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98ab56cb29 code=0x0 [ 493.155040][ T9754] FAT-fs (loop3): Directory bread(block 66) failed [ 493.174176][ T6866] hid-generic 0003:046D:C222.007E: unknown global tag 0xc [ 493.186828][ T6866] hid-generic 0003:046D:C222.007E: item 0 0 1 12 parsing failed [ 493.194979][ T6866] hid-generic: probe of 0003:046D:C222.007E failed with error -22 [ 493.204165][ T9754] FAT-fs (loop3): Directory bread(block 67) failed [ 493.210847][ T9754] FAT-fs (loop3): Directory bread(block 68) failed [ 493.234303][ T9754] FAT-fs (loop3): Directory bread(block 69) failed [ 493.240692][ T9754] FAT-fs (loop3): Directory bread(block 70) failed [ 493.251185][ T9754] FAT-fs (loop3): Directory bread(block 71) failed [ 493.281770][ T9754] FAT-fs (loop3): Directory bread(block 72) failed [ 493.289771][ T9754] FAT-fs (loop3): Directory bread(block 73) failed [ 493.344254][ T6866] usb 2-1: USB disconnect, device number 96 [ 493.382257][ T23] audit: type=1326 audit(1719566449.710:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9753 comm="syz.3.1638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe941f61b29 code=0x0 [ 493.405147][ T9776] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 493.414133][ T9776] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c11c, mo2=0002] [ 493.423176][ T9776] System zones: 1-12 [ 493.429059][ T9776] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2221: inode #15: comm syz.4.1642: corrupted in-inode xattr [ 493.444659][ T9776] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.1642: couldn't read orphan inode 15 (err -117) [ 493.457573][ T9776] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,data_err=abort,debug,noload,data_err=ignore,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 493.660555][ T7507] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 493.891816][ T414] cdc_ether 4-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 494.259800][ T9188] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.P8K7wZ/12/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 494.262678][ T23] audit: type=1400 audit(1719566450.590:430): avc: denied { getopt } for pid=9823 comm="syz.2.1644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 494.284595][ T9188] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 494.309216][ T9813] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 494.321601][ T9188] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.P8K7wZ/12/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 494.352480][ T9188] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 494.372545][ T9188] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.P8K7wZ/12/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 494.396326][ T9188] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 494.416443][ T9188] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.P8K7wZ/12/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 494.441172][ T9188] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 494.462275][ T9188] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.P8K7wZ/12/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 494.485452][ T9188] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 494.925221][ T2722] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 494.934915][ T18] usb 1-1: USB disconnect, device number 104 [ 494.945376][ T18] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 495.053204][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 495.066662][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.078663][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 495.109927][ T2091] usb 4-1: USB disconnect, device number 116 [ 495.125226][ T2091] cdc_ether 4-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 495.153305][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.163570][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.171460][ T9836] device bridge_slave_0 entered promiscuous mode [ 495.181030][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.188201][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.195792][ T9836] device bridge_slave_1 entered promiscuous mode [ 495.247874][ T9858] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 495.295620][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.302633][ T9836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.309772][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.316633][ T9836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.324369][ T6866] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 495.324516][ T9858] loop_set_status: loop3 () has still dirty pages (nrpages=2) [ 495.344502][ T2722] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 495.351886][ T2722] usb 3-1: can't read configurations, error -61 [ 495.404345][ T18] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 495.435210][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 495.459886][ T2091] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.480606][ T2091] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.500405][ T8187] device bridge_slave_1 left promiscuous mode [ 495.508130][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.524417][ T2722] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 495.532331][ T8187] device bridge_slave_0 left promiscuous mode [ 495.539130][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.633738][ T23] audit: type=1400 audit(1719566451.960:431): avc: denied { unlink } for pid=9594 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 495.657183][ T23] audit: type=1400 audit(1719566451.960:432): avc: denied { unlink } for pid=9594 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 495.681337][ T23] audit: type=1400 audit(1719566452.000:433): avc: denied { unlink } for pid=9594 comm="syz-executor" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 495.703400][ T6866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.714659][ T6866] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.766911][ T9894] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 495.865211][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 495.873562][ T6867] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.880449][ T6867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.888108][ T6866] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 495.898094][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 495.904484][ T18] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 495.906037][ T6866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.915880][ T18] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 495.923934][ T6867] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.933253][ T18] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 495.939665][ T6867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.094750][ T18] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 496.104146][ T18] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 496.113915][ T18] usb 1-1: SerialNumber: syz [ 496.146872][ T2722] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 496.154324][ T6866] usb 2-1: Product: syz [ 496.158230][ T6866] usb 2-1: Manufacturer: syz [ 496.162663][ T6866] usb 2-1: SerialNumber: syz [ 496.167187][ T2722] usb 3-1: can't read configurations, error -61 [ 496.173351][ T2722] usb usb3-port1: attempt power cycle [ 496.178819][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 496.187705][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 496.202770][ T18] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 496.211697][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 496.219968][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 496.244753][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 496.252498][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 496.261329][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 496.270174][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 496.279621][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 496.288006][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 496.299073][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 496.307391][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 496.429814][ T23] audit: type=1400 audit(1719566452.760:434): avc: denied { bind } for pid=9843 comm="syz.1.1650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 496.724289][ T2722] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 496.820230][ T9916] FAT-fs (loop0): Directory bread(block 64) failed [ 496.827118][ T9916] FAT-fs (loop0): Directory bread(block 65) failed [ 496.833604][ T9916] FAT-fs (loop0): Directory bread(block 66) failed [ 496.840436][ T9916] FAT-fs (loop0): Directory bread(block 67) failed [ 496.847007][ T9916] FAT-fs (loop0): Directory bread(block 68) failed [ 496.853558][ T9916] FAT-fs (loop0): Directory bread(block 69) failed [ 496.860410][ T9916] FAT-fs (loop0): Directory bread(block 70) failed [ 496.867879][ T9916] FAT-fs (loop0): Directory bread(block 71) failed [ 496.874856][ T9916] FAT-fs (loop0): Directory bread(block 72) failed [ 496.881339][ T9916] FAT-fs (loop0): Directory bread(block 73) failed [ 496.894964][ T6866] cdc_ncm 2-1:1.0: bind() failure [ 496.920769][ T6866] usb 2-1: USB disconnect, device number 97 [ 496.950359][ T23] audit: type=1326 audit(1719566453.280:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9839 comm="syz.0.1649" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98ab56cb29 code=0x0 [ 496.974315][ T2722] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 496.985057][ T2722] usb 3-1: can't read configurations, error -61 [ 497.134590][ T2722] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 497.338561][ T9915] F2FS-fs (loop3): Unrecognized mount option "ÿÿ" or missing value [ 497.374351][ T2722] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 497.381815][ T2722] usb 3-1: can't read configurations, error -71 [ 497.388638][ T2722] usb usb3-port1: unable to enumerate USB device [ 497.420655][ T6866] usb 1-1: USB disconnect, device number 105 [ 497.568987][ T9933] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1653'. [ 497.754277][ T1282] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 497.807963][ T9926] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 497.819378][ T9926] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c11c, mo2=0002] [ 497.831489][ T9926] System zones: 1-12 [ 497.840336][ T9924] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 497.855076][ T9926] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2221: inode #15: comm syz.2.1655: corrupted in-inode xattr [ 497.874843][ T9924] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c11c, mo2=0002] [ 497.883534][ T9926] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz.2.1655: couldn't read orphan inode 15 (err -117) [ 497.884377][ T9924] System zones: 1-12 [ 497.896175][ T9926] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,data_err=abort,debug,noload,data_err=ignore,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 498.002549][ T9924] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2221: inode #15: comm syz.1.1656: corrupted in-inode xattr [ 498.025516][ T9924] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.1656: couldn't read orphan inode 15 (err -117) [ 498.044561][ T9924] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,data_err=abort,debug,noload,data_err=ignore,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 498.060358][ T9931] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 498.244336][ T1282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.272174][ T1282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.305209][ T1282] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 498.334304][ T1282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.370718][ T1282] usb 5-1: config 0 descriptor?? [ 498.682085][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 498.714551][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 498.744621][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 498.782063][ T9616] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.9eCQaD/5/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 498.826294][ T9616] EXT4-fs error (device loop1): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 498.871978][ T9727] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.5KwGUH/4/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 498.894819][ T9616] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.9eCQaD/5/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 498.918789][ T9727] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 498.918804][ T9616] EXT4-fs error (device loop1): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 498.919073][ T9616] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.9eCQaD/5/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 498.979079][ T124] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 498.987347][ T9727] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.5KwGUH/4/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 498.987507][ T9616] EXT4-fs error (device loop1): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 499.029610][ T9727] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 499.029814][ T1282] hid (null): unknown global tag 0xc [ 499.058369][ T1282] hid-generic 0003:046D:C222.007F: unknown global tag 0xc [ 499.065844][ T9616] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.9eCQaD/5/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 499.065860][ T9727] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.5KwGUH/4/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 499.111144][ T1282] hid-generic 0003:046D:C222.007F: item 0 0 1 12 parsing failed [ 499.111312][ T9727] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 499.118999][ T1282] hid-generic: probe of 0003:046D:C222.007F failed with error -22 [ 499.145634][ T9616] EXT4-fs error (device loop1): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 499.153195][ T9727] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.5KwGUH/4/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 499.187089][ T9616] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.9eCQaD/5/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 499.187189][ T9727] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 499.230150][ T9616] EXT4-fs error (device loop1): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 499.233716][ T1282] usb 5-1: USB disconnect, device number 105 [ 499.258126][ T9727] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.5KwGUH/4/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 499.291173][ T9727] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 499.368713][ T9937] F2FS-fs (loop3): Unrecognized mount option "ÿÿ" or missing value [ 499.446620][ T124] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 499.574732][ T9957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1658'. [ 499.625222][ T124] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 499.774321][ T124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 499.802443][ T124] usb 1-1: SerialNumber: syz [ 500.029246][ T9966] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.036794][ T9966] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.044913][ T9966] device bridge_slave_0 entered promiscuous mode [ 500.068547][ T9966] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.084035][ T9966] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.095752][ T9966] device bridge_slave_1 entered promiscuous mode [ 500.365833][ T9972] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.372733][ T9972] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.380203][ T9972] device bridge_slave_0 entered promiscuous mode [ 500.389631][ T9972] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.396629][ T9972] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.403938][ T9972] device bridge_slave_1 entered promiscuous mode [ 500.431619][ T9952] FAT-fs (loop0): Directory bread(block 64) failed [ 500.438202][ T2722] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 500.446092][ T9952] FAT-fs (loop0): Directory bread(block 65) failed [ 500.452656][ T9952] FAT-fs (loop0): Directory bread(block 66) failed [ 500.459600][ T9952] FAT-fs (loop0): Directory bread(block 67) failed [ 500.466340][ T9952] FAT-fs (loop0): Directory bread(block 68) failed [ 500.472887][ T9952] FAT-fs (loop0): Directory bread(block 69) failed [ 500.479364][ T9952] FAT-fs (loop0): Directory bread(block 70) failed [ 500.485919][ T9952] FAT-fs (loop0): Directory bread(block 71) failed [ 500.492382][ T9952] FAT-fs (loop0): Directory bread(block 72) failed [ 500.498736][ T9952] FAT-fs (loop0): Directory bread(block 73) failed [ 500.534928][ T23] audit: type=1326 audit(1719566456.870:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9951 comm="syz.0.1659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98ab56cb29 code=0x0 [ 500.578780][ T1192] device bridge_slave_1 left promiscuous mode [ 500.585054][ T1192] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.592492][ T1192] device bridge_slave_0 left promiscuous mode [ 500.598748][ T1192] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.671561][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 500.678915][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 500.690303][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 500.698827][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 500.707031][ T1282] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.713861][ T1282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.729709][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 500.737495][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 500.746014][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 500.793328][ T7507] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.800221][ T7507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.824120][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 500.832554][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 500.841763][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 500.849737][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 500.862769][ T124] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 500.868797][ T2722] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 500.909235][ T2722] usb 4-1: can't read configurations, error -61 [ 500.917648][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 500.927001][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 500.955534][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 500.963391][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 500.972550][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 500.980297][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 500.988131][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 501.012841][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 501.021163][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.028041][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.055299][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 501.065396][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 501.075876][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 501.086692][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 501.096141][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 501.108985][ T7507] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.115863][ T7507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.290150][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 501.298923][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 501.308019][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 501.318567][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 501.334274][ T2722] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 501.356550][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 501.365607][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 501.399292][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 501.415376][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 501.434152][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 501.448007][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 501.456796][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 501.465790][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 501.473889][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 501.526391][T10002] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 501.574926][T10002] loop_set_status: loop1 () has still dirty pages (nrpages=2) [ 501.634402][ T2091] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 501.754466][ T2722] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 501.764301][ T2722] usb 4-1: can't read configurations, error -61 [ 501.774829][ T2722] usb usb4-port1: attempt power cycle [ 501.914662][ T1192] device bridge_slave_1 left promiscuous mode [ 501.920818][ T1192] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.928563][ T1192] device bridge_slave_0 left promiscuous mode [ 501.934782][ T1192] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.994390][ T2091] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 502.068881][ T7507] usb 1-1: USB disconnect, device number 106 [ 502.076822][ T7507] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 502.084405][ T2091] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 502.095762][ T2091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 502.103723][ T2091] usb 3-1: SerialNumber: syz [ 502.124323][ T6866] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 502.194267][ T2722] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 502.273024][T10019] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 502.327850][T10008] F2FS-fs (loop1): Unrecognized mount option "ÿÿ" or missing value [ 502.619515][T10047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1668'. [ 502.831719][ T6866] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 502.841325][ T2722] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 502.858308][ T2722] usb 4-1: can't read configurations, error -61 [ 502.866648][ T6866] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 502.885290][ T6866] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 502.925118][ T9999] FAT-fs (loop2): Directory bread(block 64) failed [ 502.931467][ T9999] FAT-fs (loop2): Directory bread(block 65) failed [ 502.956050][ T9999] FAT-fs (loop2): Directory bread(block 66) failed [ 502.962393][ T9999] FAT-fs (loop2): Directory bread(block 67) failed [ 502.983718][ T9999] FAT-fs (loop2): Directory bread(block 68) failed [ 502.996184][ T9999] FAT-fs (loop2): Directory bread(block 69) failed [ 503.014365][ T6866] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 503.023318][ T6866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 503.032823][ T9999] FAT-fs (loop2): Directory bread(block 70) failed [ 503.041708][ T9999] FAT-fs (loop2): Directory bread(block 71) failed [ 503.054269][ T6866] usb 5-1: SerialNumber: syz [ 503.061559][ T9999] FAT-fs (loop2): Directory bread(block 72) failed [ 503.078352][ T9999] FAT-fs (loop2): Directory bread(block 73) failed [ 503.091010][T10053] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 503.095234][ T6866] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 503.130178][ T23] audit: type=1326 audit(1719566459.460:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9998 comm="syz.2.1673" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd4b0eebb29 code=0x0 [ 503.153777][T10053] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c11c, mo2=0002] [ 503.163610][T10053] System zones: 1-12 [ 503.179028][T10053] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2221: inode #15: comm syz.1.1671: corrupted in-inode xattr [ 503.200144][T10062] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 503.209165][T10053] EXT4-fs error (device loop1): ext4_orphan_get:1240: comm syz.1.1671: couldn't read orphan inode 15 (err -117) [ 503.221114][T10053] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,data_err=abort,debug,noload,data_err=ignore,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 503.329796][T10070] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 503.825613][ T2091] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 504.031860][T10087] FAT-fs (loop4): Directory bread(block 64) failed [ 504.041411][T10087] FAT-fs (loop4): Directory bread(block 65) failed [ 504.052307][T10087] FAT-fs (loop4): Directory bread(block 66) failed [ 504.067757][T10087] FAT-fs (loop4): Directory bread(block 67) failed [ 504.074612][T10087] FAT-fs (loop4): Directory bread(block 68) failed [ 504.080993][T10087] FAT-fs (loop4): Directory bread(block 69) failed [ 504.094011][T10087] FAT-fs (loop4): Directory bread(block 70) failed [ 504.113296][T10087] FAT-fs (loop4): Directory bread(block 71) failed [ 504.127708][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 504.159701][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 504.171193][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 504.179830][T10087] FAT-fs (loop4): Directory bread(block 72) failed [ 504.187707][T10087] FAT-fs (loop4): Directory bread(block 73) failed [ 504.225199][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 504.239365][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 504.253131][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 504.511193][ T23] audit: type=1326 audit(1719566460.840:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10009 comm="syz.4.1669" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a094a3b29 code=0x0 [ 504.517629][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 504.545711][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 504.557039][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 504.577730][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 504.589781][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 504.601148][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 504.654279][ T2722] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 504.768513][ T414] usb 3-1: USB disconnect, device number 105 [ 504.785725][ T414] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 504.879448][T10117] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 504.888304][T10117] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c11c, mo2=0002] [ 504.896525][T10117] System zones: 1-12 [ 504.901254][T10117] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2221: inode #15: comm syz.2.1678: corrupted in-inode xattr [ 504.914480][T10117] EXT4-fs error (device loop2): ext4_orphan_get:1240: comm syz.2.1678: couldn't read orphan inode 15 (err -117) [ 504.926638][T10117] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,data_err=abort,debug,noload,data_err=ignore,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 505.019694][T10082] F2FS-fs (loop1): Unrecognized mount option "ÿÿ" or missing value [ 505.083857][ T2722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.098622][ T2722] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.128462][ T2722] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 505.147130][ T2722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.156327][ T2722] usb 4-1: config 0 descriptor?? [ 505.227176][T10145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1675'. [ 505.450782][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 505.475976][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 505.505395][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 505.618813][T10153] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 505.693828][T10150] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 505.734396][T10153] loop_set_status: loop1 () has still dirty pages (nrpages=2) [ 506.076209][ T2722] hid (null): unknown global tag 0xc [ 506.083765][ T2722] hid-generic 0003:046D:C222.0080: unknown global tag 0xc [ 506.090993][ T2722] hid-generic 0003:046D:C222.0080: item 0 0 1 12 parsing failed [ 506.099062][ T2722] hid-generic: probe of 0003:046D:C222.0080 failed with error -22 [ 506.138974][ T7507] usb 4-1: USB disconnect, device number 121 [ 506.262446][ T9966] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.JgymLJ/1/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 506.285957][ T9966] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 506.314652][ T9966] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.JgymLJ/1/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 506.333082][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 506.431587][ T9966] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 506.449645][ T2722] usb 5-1: USB disconnect, device number 106 [ 506.454699][ T9966] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.JgymLJ/1/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 506.586889][ T23] audit: type=1326 audit(1719566462.910:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10170 comm="syz.0.1682" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98ab56cb29 code=0x0 [ 506.760679][ T9966] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 506.781793][ T9966] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.JgymLJ/1/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 506.828150][ T9966] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 506.850124][ T9966] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.JgymLJ/1/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 506.922843][ T9966] EXT4-fs error (device loop2): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 506.978349][ T23] audit: type=1400 audit(1719566463.310:440): avc: denied { listen } for pid=10181 comm="syz.4.1685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 507.504455][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 507.513959][ T2722] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 507.550690][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 507.582428][T10193] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.589466][T10193] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.597230][T10193] device bridge_slave_0 entered promiscuous mode [ 507.604567][T10193] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.611475][T10193] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.619418][T10193] device bridge_slave_1 entered promiscuous mode [ 507.714192][T10193] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.721064][T10193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.728206][T10193] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.735064][T10193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.055253][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 508.062716][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 508.070743][ T5] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 508.081090][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 508.090855][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 508.098969][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 508.125465][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 508.125596][ T23] audit: type=1400 audit(1719566464.460:441): avc: denied { mounton } for pid=10207 comm="syz.4.1694" path="/root/syzkaller.HFtHEF/9/file0/file0" dev="loop4" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 508.134584][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 508.174692][ T2722] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 508.184744][ T2722] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 508.194614][ T2722] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 508.194618][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 508.195069][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 508.243409][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 508.251868][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 508.273880][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 508.282113][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 508.284569][ T2722] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 508.291296][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 508.300102][ T2722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 508.308899][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 508.315730][ T2722] usb 4-1: SerialNumber: syz [ 508.365393][ T2722] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 508.400346][T10211] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 508.409500][T10211] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c11c, mo2=0002] [ 508.465590][T10211] System zones: 1-12 [ 508.480987][T10211] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2221: inode #15: comm syz.4.1695: corrupted in-inode xattr [ 508.493236][T10211] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.1695: couldn't read orphan inode 15 (err -117) [ 508.505671][T10211] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,data_err=abort,debug,noload,data_err=ignore,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 508.525554][ T8187] device bridge_slave_1 left promiscuous mode [ 508.532030][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.758467][ T5] usb 1-1: not running at top speed; connect to a high speed hub [ 508.795624][ T8187] device bridge_slave_0 left promiscuous mode [ 508.803086][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.864467][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 508.894016][ T5] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 508.955850][T10222] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 509.084318][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 509.093293][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.317693][ T5] usb 1-1: Product: syz [ 509.334150][ T5] usb 1-1: Manufacturer: syz [ 509.339084][ T5] usb 1-1: SerialNumber: syz [ 509.409822][T10199] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 509.520998][T10230] FAT-fs (loop3): Directory bread(block 64) failed [ 509.533469][T10230] FAT-fs (loop3): Directory bread(block 65) failed [ 509.550206][T10230] FAT-fs (loop3): Directory bread(block 66) failed [ 509.567375][T10230] FAT-fs (loop3): Directory bread(block 67) failed [ 509.581511][T10230] FAT-fs (loop3): Directory bread(block 68) failed [ 509.588238][T10230] FAT-fs (loop3): Directory bread(block 69) failed [ 509.594856][T10230] FAT-fs (loop3): Directory bread(block 70) failed [ 509.601329][T10230] FAT-fs (loop3): Directory bread(block 71) failed [ 509.622521][T10230] FAT-fs (loop3): Directory bread(block 72) failed [ 509.629506][T10230] FAT-fs (loop3): Directory bread(block 73) failed [ 509.636159][T10199] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1692'. [ 509.640313][T10235] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 509.694345][ T5] cdc_ncm 1-1:1.0: bind() failure [ 509.700697][ T5] cdc_ncm 1-1:1.1: bind() failure [ 509.715514][ T5] usb 1-1: USB disconnect, device number 107 [ 509.770355][ T23] audit: type=1326 audit(1719566466.100:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.3.1686" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe941f61b29 code=0x0 [ 509.804813][T10220] F2FS-fs (loop1): Unrecognized mount option "ÿÿ" or missing value [ 510.036479][T10244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1696'. [ 510.285346][ T2091] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 510.446111][T10246] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 510.500296][ T2050] print_req_error: 6 callbacks suppressed [ 510.500313][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 510.524336][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 510.535960][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 510.654440][ T2091] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 510.917076][ T2722] usb 4-1: USB disconnect, device number 122 [ 510.984363][ T5] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 510.994344][ T2091] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 511.003440][ T2091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 511.011543][ T2091] usb 5-1: SerialNumber: syz [ 511.064415][ T414] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 511.374381][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.385383][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.395241][ T5] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 511.404144][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.417400][ T5] usb 1-1: config 0 descriptor?? [ 511.714393][ T414] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 511.725880][ T414] usb 3-1: can't read configurations, error -61 [ 511.729555][T10233] FAT-fs (loop4): Directory bread(block 64) failed [ 511.738614][T10233] FAT-fs (loop4): Directory bread(block 65) failed [ 511.745107][T10233] FAT-fs (loop4): Directory bread(block 66) failed [ 511.751451][T10233] FAT-fs (loop4): Directory bread(block 67) failed [ 511.758074][T10233] FAT-fs (loop4): Directory bread(block 68) failed [ 511.765617][T10233] FAT-fs (loop4): Directory bread(block 69) failed [ 511.772051][T10263] F2FS-fs (loop3): Unrecognized mount option "ÿÿ" or missing value [ 511.779817][T10233] FAT-fs (loop4): Directory bread(block 70) failed [ 511.786825][T10233] FAT-fs (loop4): Directory bread(block 71) failed [ 511.793322][T10233] FAT-fs (loop4): Directory bread(block 72) failed [ 511.799780][T10233] FAT-fs (loop4): Directory bread(block 73) failed [ 511.879005][ T23] audit: type=1326 audit(1719566468.210:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.4.1699" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a094a3b29 code=0x0 [ 511.904435][ T414] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 512.006933][T10273] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1703'. [ 512.650153][ T2091] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 512.662066][ T5] hid (null): unknown global tag 0xc [ 512.670467][ T5] hid-generic 0003:046D:C222.0081: unknown global tag 0xc [ 512.677442][ T5] hid-generic 0003:046D:C222.0081: item 0 0 1 12 parsing failed [ 512.686430][ T5] hid-generic: probe of 0003:046D:C222.0081 failed with error -22 [ 512.734303][ T383] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 512.854333][ T414] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 512.861789][ T414] usb 3-1: can't read configurations, error -61 [ 512.868103][ T414] usb usb3-port1: attempt power cycle [ 513.126480][ T383] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 513.136086][ T383] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 513.146423][ T383] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 513.234583][ T383] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 513.243662][ T383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 513.251834][ T383] usb 2-1: SerialNumber: syz [ 513.257516][T10299] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 513.266777][T10299] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c11c, mo2=0002] [ 513.274686][T10299] System zones: 1-12 [ 513.279158][T10299] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #15: comm syz.3.1707: corrupted in-inode xattr [ 513.284367][ T414] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 513.294751][T10299] EXT4-fs error (device loop3): ext4_orphan_get:1240: comm syz.3.1707: couldn't read orphan inode 15 (err -117) [ 513.310761][ T383] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 513.314750][T10299] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,data_err=abort,debug,noload,data_err=ignore,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 513.756875][ T414] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 513.764406][ T414] usb 3-1: can't read configurations, error -71 [ 513.785983][T10306] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 513.819473][ T2091] usb 5-1: USB disconnect, device number 107 [ 513.835712][ T2091] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 514.153474][T10313] FAT-fs (loop1): Directory bread(block 64) failed [ 514.187095][ T1282] usb 1-1: USB disconnect, device number 108 [ 514.187682][T10313] FAT-fs (loop1): Directory bread(block 65) failed [ 514.202820][T10313] FAT-fs (loop1): Directory bread(block 66) failed [ 514.209585][T10313] FAT-fs (loop1): Directory bread(block 67) failed [ 514.216150][T10313] FAT-fs (loop1): Directory bread(block 68) failed [ 514.222566][T10313] FAT-fs (loop1): Directory bread(block 69) failed [ 514.229068][T10313] FAT-fs (loop1): Directory bread(block 70) failed [ 514.235678][T10313] FAT-fs (loop1): Directory bread(block 71) failed [ 514.242194][T10313] FAT-fs (loop1): Directory bread(block 72) failed [ 514.248829][T10313] FAT-fs (loop1): Directory bread(block 73) failed [ 514.253459][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 514.332467][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 514.349380][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 514.400669][T10337] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 514.411539][ T23] audit: type=1326 audit(1719566470.700:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10279 comm="syz.1.1705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f112f467b29 code=0x0 [ 514.436861][T10337] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c11c, mo2=0002] [ 514.461951][T10337] System zones: 1-12 [ 514.488715][T10337] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2221: inode #15: comm syz.0.1711: corrupted in-inode xattr [ 514.531775][T10337] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.1711: couldn't read orphan inode 15 (err -117) [ 514.553418][T10337] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,data_err=abort,debug,noload,data_err=ignore,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 514.674577][T10347] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 515.184263][ T414] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 515.454326][ T414] usb 3-1: not running at top speed; connect to a high speed hub [ 515.513221][T10325] F2FS-fs (loop4): Unrecognized mount option "ÿÿ" or missing value [ 515.539613][ T9374] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.WyYfhL/19/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 515.563092][ T9374] EXT4-fs error (device loop0): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 515.582660][ T414] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 515.583938][ T9374] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.WyYfhL/19/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 515.593779][ T414] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 515.616843][ T9374] EXT4-fs error (device loop0): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 515.646612][ T9374] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.WyYfhL/19/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 515.672945][ T9374] EXT4-fs error (device loop0): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 515.692320][ T9374] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.WyYfhL/19/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 515.715591][ T9374] EXT4-fs error (device loop0): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 515.734746][ T9374] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.WyYfhL/19/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 515.758271][ T9374] EXT4-fs error (device loop0): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 515.784297][ T124] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 515.794347][ T414] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 515.803193][ T414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.827661][ T414] usb 3-1: Product: syz [ 515.831651][ T414] usb 3-1: Manufacturer: syz [ 515.845931][ T414] usb 3-1: SerialNumber: syz [ 515.874479][T10349] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 516.068623][T10368] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.234613][ T124] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 516.283482][T10368] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.291174][ T2722] usb 2-1: USB disconnect, device number 98 [ 516.291890][ T124] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 516.299447][T10368] device bridge_slave_0 entered promiscuous mode [ 516.310935][ T124] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 516.316113][T10368] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.332409][T10368] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.340119][T10368] device bridge_slave_1 entered promiscuous mode [ 516.340518][T10349] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1713'. [ 516.355247][T10374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1710'. [ 516.394426][ T414] cdc_ncm 3-1:1.0: bind() failure [ 516.402985][ T414] cdc_ncm 3-1:1.1: bind() failure [ 516.435451][ T414] usb 3-1: USB disconnect, device number 109 [ 516.444526][ T124] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 516.453376][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 516.463544][ T124] usb 4-1: SerialNumber: syz [ 516.488795][T10377] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 516.499311][T10377] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c11c, mo2=0002] [ 516.508514][T10377] System zones: 1-12 [ 516.513283][T10377] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2221: inode #15: comm syz.4.1719: corrupted in-inode xattr [ 516.515057][ T124] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 516.525718][T10377] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.1719: couldn't read orphan inode 15 (err -117) [ 516.545282][T10377] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,data_err=abort,debug,noload,data_err=ignore,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue [ 516.558263][T10368] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.566919][T10380] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 516.571391][T10368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.571526][T10368] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.593962][T10368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.617774][ T9836] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.HFtHEF/14/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 516.641427][ T9836] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 516.661199][ T9836] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.HFtHEF/14/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 516.686468][ T9836] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 516.721280][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 516.724868][ T9836] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.HFtHEF/14/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 516.751395][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.758919][ T9836] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 516.777997][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.778260][ T9836] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.HFtHEF/14/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 516.854816][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 516.867530][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.874400][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.884099][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 516.893239][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.900104][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.956048][ T9836] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 516.975390][ T9836] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 18: comm syz-executor: path /root/syzkaller.HFtHEF/14/file0/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 516.998710][ T9836] EXT4-fs error (device loop4): ext4_empty_dir:3034: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 517.073360][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 517.082125][ T414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 517.114414][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 517.123875][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 517.144612][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 517.152900][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 517.161658][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 517.169831][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 517.191228][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 517.211338][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 517.220966][ T7] device bridge_slave_1 left promiscuous mode [ 517.226993][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.236773][ T7] device bridge_slave_0 left promiscuous mode [ 517.253390][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.323351][T10395] FAT-fs (loop3): Directory bread(block 64) failed [ 517.329764][T10395] FAT-fs (loop3): Directory bread(block 65) failed [ 517.336323][T10395] FAT-fs (loop3): Directory bread(block 66) failed [ 517.342659][T10395] FAT-fs (loop3): Directory bread(block 67) failed [ 517.349372][T10395] FAT-fs (loop3): Directory bread(block 68) failed [ 517.355767][T10395] FAT-fs (loop3): Directory bread(block 69) failed [ 517.362576][T10395] FAT-fs (loop3): Directory bread(block 70) failed [ 517.368911][T10395] FAT-fs (loop3): Directory bread(block 71) failed [ 517.374295][ T414] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 517.375775][T10395] FAT-fs (loop3): Directory bread(block 72) failed [ 517.389222][T10395] FAT-fs (loop3): Directory bread(block 73) failed [ 517.424278][ T1282] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 517.460430][ T23] audit: type=1326 audit(1719566473.790:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.3.1714" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe941f61b29 code=0x0 [ 517.513833][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 517.522251][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 517.530552][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 517.538697][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 517.598106][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 517.623227][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 517.637384][T10399] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.644620][T10399] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.652144][T10399] device bridge_slave_0 entered promiscuous mode [ 517.658449][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 517.659891][T10399] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.673883][T10399] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.681895][T10399] device bridge_slave_1 entered promiscuous mode [ 517.764349][ T414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.784259][ T414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.799593][ T414] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 517.808618][ T414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.825265][ T414] usb 2-1: config 0 descriptor?? [ 517.832348][T10399] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.839216][T10399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.844353][ T1282] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 517.846362][T10399] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.860470][T10399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.863817][ T1282] usb 3-1: can't read configurations, error -61 [ 517.900007][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 517.908555][ T2722] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.916242][ T2722] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.935911][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 517.944755][ T2722] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.951590][ T2722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.959363][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 517.967487][ T2722] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.974337][ T2722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.996189][ T2091] usb 4-1: USB disconnect, device number 123 [ 518.014284][ T1282] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 518.014440][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 518.035154][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 518.043026][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 518.052610][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 518.088270][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 518.098254][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 518.115360][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 518.123503][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 518.149263][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 518.157457][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 518.176292][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 518.184817][ T2722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 518.202959][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 518.211899][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 518.228144][T10409] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 518.464378][ T1282] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 518.578428][ T1282] usb 3-1: can't read configurations, error -61 [ 518.655342][ T414] hid (null): unknown global tag 0xc [ 518.662132][ T414] hid-generic 0003:046D:C222.0082: unknown global tag 0xc [ 518.669512][ T414] hid-generic 0003:046D:C222.0082: item 0 0 1 12 parsing failed [ 518.669765][T10416] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 518.680082][ T414] hid-generic: probe of 0003:046D:C222.0082 failed with error -22 [ 518.686271][ T1282] usb usb3-port1: attempt power cycle [ 518.787219][ T7] device bridge_slave_1 left promiscuous mode [ 518.793402][T10403] F2FS-fs (loop0): Unrecognized mount option "ÿÿ" or missing value [ 518.806571][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.822100][ T7] device bridge_slave_0 left promiscuous mode [ 518.829711][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.508244][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 519.522647][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 519.537924][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 519.554410][ T1282] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 519.602875][T10427] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 520.234512][ T1282] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 520.258038][ T1282] usb 3-1: can't read configurations, error -71 [ 520.329091][T10441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1717'. [ 520.523173][ T7507] usb 2-1: USB disconnect, device number 99 [ 520.536531][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 520.565838][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 520.614246][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 520.657820][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 520.676648][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 520.689522][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 520.835059][ T23] audit: type=1400 audit(1719566477.170:446): avc: denied { read } for pid=10445 comm="syz.1.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 520.938489][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 520.972843][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 520.985437][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 521.012454][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 521.075201][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 521.128985][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 521.225563][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 521.292212][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 521.470612][T10440] F2FS-fs (loop2): Unrecognized mount option "ÿÿ" or missing value [ 521.810378][T10506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1728'. [ 522.646175][ T2050] print_req_error: 16 callbacks suppressed [ 522.646193][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 522.696327][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.714256][ T414] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 522.725376][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1782'. [ 522.743822][ T2050] buffer_io_error: 3 callbacks suppressed [ 522.743832][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 522.781188][T10574] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 522.794287][T10574] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 522.822218][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 522.837940][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.887844][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 522.925057][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 522.955406][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.974503][T10589] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1791'. [ 522.984739][ T414] usb 5-1: Using ep0 maxpacket: 8 [ 522.993611][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 523.033103][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 523.053922][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 523.111429][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 523.124310][ T414] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 523.135580][ T414] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 523.156338][ T414] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 523.177629][ T414] usb 5-1: config 250 has no interface number 0 [ 523.193147][ T414] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 523.217520][ T414] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 523.235122][ T414] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 105 [ 523.252695][ T414] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 523.266603][ T414] usb 5-1: config 250 interface 228 has no altsetting 0 [ 523.361846][T10597] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 523.384558][ T414] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 523.394006][T10597] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 523.396568][ T414] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 523.418775][ T414] usb 5-1: Product: syz [ 523.425886][ T414] usb 5-1: SerialNumber: syz [ 523.475068][ T414] hub 5-1:250.228: bad descriptor, ignoring hub [ 523.481998][ T414] hub: probe of 5-1:250.228 failed with error -5 [ 523.505303][T10604] netlink: 'syz.0.1796': attribute type 15 has an invalid length. [ 523.507411][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 523.519125][T10604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1796'. [ 523.533485][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 523.545712][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 523.575092][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 523.592962][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 523.627179][ T23] audit: type=1400 audit(1719566479.960:447): avc: denied { create } for pid=10608 comm="syz.2.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 523.657324][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 523.697047][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 523.737693][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 523.886580][ T414] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 108 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 524.106432][ T23] audit: type=1400 audit(1719566480.430:448): avc: denied { read write } for pid=10548 comm="syz.4.1772" name="lp0" dev="devtmpfs" ino=77535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 524.133805][ T23] audit: type=1400 audit(1719566480.440:449): avc: denied { open } for pid=10548 comm="syz.4.1772" path="/dev/usb/lp0" dev="devtmpfs" ino=77535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 524.154716][T10619] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 524.227156][ T18] usb 5-1: USB disconnect, device number 108 [ 524.247601][ T18] usblp0: removed [ 524.773125][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 526.054304][ T414] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 526.274524][ T23] audit: type=1400 audit(1719566482.610:450): avc: denied { ioctl } for pid=10751 comm="syz.1.1847" path="/dev/fuse" dev="devtmpfs" ino=9193 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 526.614265][ T414] usb 5-1: Using ep0 maxpacket: 8 [ 526.734312][ T414] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 526.742392][ T414] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 526.751326][ T414] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 526.764984][ T414] usb 5-1: config 250 has no interface number 0 [ 526.771359][ T414] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 526.794519][ T414] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 526.805026][ T414] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 105 [ 526.815408][ T414] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 526.829296][ T414] usb 5-1: config 250 interface 228 has no altsetting 0 [ 526.954319][ T414] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 526.963218][ T414] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 526.971754][ T414] usb 5-1: Product: syz [ 526.975871][ T414] usb 5-1: SerialNumber: syz [ 527.026840][ T414] hub 5-1:250.228: bad descriptor, ignoring hub [ 527.038563][ T414] hub: probe of 5-1:250.228 failed with error -5 [ 527.456203][ T414] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 109 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 527.747626][ T2050] print_req_error: 62 callbacks suppressed [ 527.747641][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 527.765086][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 527.776369][ T2050] buffer_io_error: 26 callbacks suppressed [ 527.776380][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 527.816969][T10848] netlink: 'syz.2.1879': attribute type 10 has an invalid length. [ 527.818795][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 527.837742][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 527.847014][T10851] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 527.849826][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 527.879783][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 527.892034][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 527.911800][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 527.920281][ C0] usblp0: nonzero read bulk status received: -71 [ 527.928541][ T414] usb 5-1: USB disconnect, device number 109 [ 527.937101][ T414] usblp0: removed [ 527.953479][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 527.965591][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 527.978649][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 527.994789][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 528.006731][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 528.018129][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 528.114266][ T7380] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 528.354257][ T7380] usb 3-1: Using ep0 maxpacket: 32 [ 528.479592][ T7380] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 528.487921][ T7380] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 528.494265][ T414] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 528.496699][ T7380] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 528.513014][ T7380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 528.523215][ T7380] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 528.532731][ T7380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 528.547430][ T7380] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 528.557028][ T7380] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 528.569807][ T7380] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 528.578932][ T7380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.587674][ T7380] usb 3-1: config 0 descriptor?? [ 528.808115][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 528.856376][ T7380] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 114 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 528.875289][ T7380] usb 3-1: USB disconnect, device number 114 [ 528.883491][ T7380] usblp0: removed [ 528.894355][ T414] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.909963][ T414] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 528.914270][ T124] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 528.921228][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 528.930023][ T23] audit: type=1400 audit(1719566485.270:451): avc: denied { read } for pid=10877 comm="syz.0.1890" name="usbmon0" dev="devtmpfs" ino=9283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 528.960138][ T23] audit: type=1400 audit(1719566485.270:452): avc: denied { open } for pid=10877 comm="syz.0.1890" path="/dev/usbmon0" dev="devtmpfs" ino=9283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 529.014428][ T414] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 529.023541][ T414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 529.031712][ T414] usb 2-1: SerialNumber: syz [ 529.295271][ T414] usb 2-1: 0:2 : does not exist [ 529.374367][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.385230][ T124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.394735][ T124] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 529.403576][ T124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.412228][ T124] usb 4-1: config 0 descriptor?? [ 529.424279][ T7380] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 529.513416][T10884] SELinux: security_context_str_to_sid(sysadm_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 529.528945][T10884] ------------[ cut here ]------------ [ 529.534263][T10884] WARNING: CPU: 0 PID: 10884 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 529.543507][T10884] Modules linked in: [ 529.547272][T10884] CPU: 0 PID: 10884 Comm: syz.4.1892 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 529.556965][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 529.566874][T10884] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 529.572324][T10884] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 5c 3b ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 34 56 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 529.591767][T10884] RSP: 0018:ffff8881bbfefa48 EFLAGS: 00010287 [ 529.597669][T10884] RAX: ffffffff81e5e5ec RBX: 0000000000000000 RCX: 0000000000040000 [ 529.605477][T10884] RDX: ffffc9000481a000 RSI: 0000000000007447 RDI: 0000000000007448 [ 529.613291][T10884] RBP: ffff8881d8b62330 R08: ffffffff81e5e376 R09: ffffed10395252a7 [ 529.621100][T10884] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 529.628914][T10884] R13: ffff8881ca929490 R14: ffff8881ca9294e0 R15: ffff8881d8b62360 [ 529.636727][T10884] FS: 00007f54951916c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 529.645491][T10884] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 529.651919][T10884] CR2: 0000000020001000 CR3: 00000001ecc93000 CR4: 00000000003406b0 [ 529.659724][T10884] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 529.667663][T10884] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 529.675429][T10884] Call Trace: [ 529.678570][T10884] ? __warn+0x162/0x250 [ 529.682553][T10884] ? report_bug+0x3a1/0x4e0 [ 529.686979][T10884] ? ovl_dir_modified+0x45c/0x570 [ 529.691843][T10884] ? ovl_dir_modified+0x45c/0x570 [ 529.696698][T10884] ? do_invalid_op+0x6e/0x110 [ 529.701213][T10884] ? invalid_op+0x1e/0x30 [ 529.705381][T10884] ? ovl_dir_modified+0x1e6/0x570 [ 529.710236][T10884] ? ovl_dir_modified+0x45c/0x570 [ 529.715099][T10884] ? ovl_dir_modified+0x45c/0x570 [ 529.719959][T10884] ? ovl_dir_modified+0x45c/0x570 [ 529.724824][T10884] ? ovl_path_type+0x18e/0x2f0 [ 529.729420][T10884] ovl_do_remove+0x6f0/0xc80 [ 529.733850][T10884] ? ovl_set_redirect+0x5f0/0x5f0 [ 529.738709][T10884] ? security_inode_rmdir+0xca/0x110 [ 529.743999][T10884] vfs_rmdir+0x285/0x3c0 [ 529.748083][T10884] incfs_kill_sb+0x105/0x200 [ 529.752510][T10884] deactivate_locked_super+0xa8/0x110 [ 529.757714][T10884] vfs_get_tree+0x1b9/0x260 [ 529.762143][T10884] do_new_mount+0x292/0x570 [ 529.766489][T10884] ? do_move_mount_old+0x160/0x160 [ 529.771515][T10884] ? security_capable+0x86/0xb0 [ 529.776204][T10884] do_mount+0x688/0xe10 [ 529.780199][T10884] ? copy_mount_string+0x30/0x30 [ 529.784967][T10884] ? copy_mount_options+0x29a/0x300 [ 529.790001][T10884] ksys_mount+0xc2/0xf0 [ 529.793996][T10884] __x64_sys_mount+0xb1/0xc0 [ 529.798421][T10884] do_syscall_64+0xca/0x1c0 [ 529.802769][T10884] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 529.808491][T10884] RIP: 0033:0x7f5495f0fb29 [ 529.812745][T10884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.832277][T10884] RSP: 002b:00007f5495191048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 529.840517][T10884] RAX: ffffffffffffffda RBX: 00007f549609dfa0 RCX: 00007f5495f0fb29 [ 529.848318][T10884] RDX: 00000000200004c0 RSI: 0000000020000440 RDI: 00000000200003c0 [ 529.856134][T10884] RBP: 00007f5495f90756 R08: 0000000020000dc0 R09: 0000000000000000 [ 529.864114][T10884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.871935][T10884] R13: 000000000000000b R14: 00007f549609dfa0 R15: 00007ffcca0da038 [ 529.879745][T10884] ---[ end trace 386200b146d17928 ]--- [ 529.911367][T10884] ------------[ cut here ]------------ [ 529.916670][T10884] WARNING: CPU: 1 PID: 10884 at fs/overlayfs/util.c:450 ovl_dir_modified+0x45c/0x570 [ 529.925931][T10884] Modules linked in: [ 529.929680][T10884] CPU: 1 PID: 10884 Comm: syz.4.1892 Tainted: G W 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 529.940780][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 529.950773][T10884] RIP: 0010:ovl_dir_modified+0x45c/0x570 [ 529.956229][T10884] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 5c 3b ae ff 49 ff 45 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 34 56 7e ff <0f> 0b e9 91 fd ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 30 fc ff [ 529.975846][T10884] RSP: 0018:ffff8881bbfefa48 EFLAGS: 00010283 [ 529.981749][T10884] RAX: ffffffff81e5e5ec RBX: 0000000000000000 RCX: 0000000000040000 [ 529.989561][T10884] RDX: ffffc9000481a000 RSI: 0000000000012451 RDI: 0000000000012452 [ 529.997547][T10884] RBP: ffff8881d8b62330 R08: ffffffff81e5e376 R09: ffffed10395252a7 [ 530.005356][T10884] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 530.013169][T10884] R13: ffff8881ca929490 R14: ffff8881ca9294e0 R15: ffff8881d8b62360 [ 530.020981][T10884] FS: 00007f54951916c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 530.029743][T10884] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 530.036172][T10884] CR2: 0000557555af9cd8 CR3: 00000001ecc93000 CR4: 00000000003406a0 [ 530.043980][T10884] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 530.051787][T10884] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 530.059599][T10884] Call Trace: [ 530.062740][T10884] ? __warn+0x162/0x250 [ 530.066727][T10884] ? report_bug+0x3a1/0x4e0 [ 530.071058][T10884] ? ovl_dir_modified+0x45c/0x570 [ 530.075925][T10884] ? ovl_dir_modified+0x45c/0x570 [ 530.080784][T10884] ? do_invalid_op+0x6e/0x110 [ 530.085294][T10884] ? invalid_op+0x1e/0x30 [ 530.089477][T10884] ? ovl_dir_modified+0x1e6/0x570 [ 530.094319][T10884] ? ovl_dir_modified+0x45c/0x570 [ 530.099178][T10884] ? ovl_dir_modified+0x45c/0x570 [ 530.104041][T10884] ? ovl_dir_modified+0x45c/0x570 [ 530.108902][T10884] ? ovl_path_type+0x18e/0x2f0 [ 530.113506][T10884] ovl_do_remove+0x6f0/0xc80 [ 530.117934][T10884] ? ovl_set_redirect+0x5f0/0x5f0 [ 530.122788][T10884] ? security_inode_rmdir+0xca/0x110 [ 530.127911][T10884] vfs_rmdir+0x285/0x3c0 [ 530.131990][T10884] incfs_kill_sb+0x18d/0x200 [ 530.136417][T10884] deactivate_locked_super+0xa8/0x110 [ 530.141627][T10884] vfs_get_tree+0x1b9/0x260 [ 530.145964][T10884] do_new_mount+0x292/0x570 [ 530.150304][T10884] ? do_move_mount_old+0x160/0x160 [ 530.155251][T10884] ? security_capable+0x86/0xb0 [ 530.159936][T10884] do_mount+0x688/0xe10 [ 530.163927][T10884] ? copy_mount_string+0x30/0x30 [ 530.168708][T10884] ? copy_mount_options+0x29a/0x300 [ 530.173752][T10884] ksys_mount+0xc2/0xf0 [ 530.177755][T10884] __x64_sys_mount+0xb1/0xc0 [ 530.182164][T10884] do_syscall_64+0xca/0x1c0 [ 530.186512][T10884] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 530.192223][T10884] RIP: 0033:0x7f5495f0fb29 [ 530.196477][T10884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.215914][T10884] RSP: 002b:00007f5495191048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 530.224160][T10884] RAX: ffffffffffffffda RBX: 00007f549609dfa0 RCX: 00007f5495f0fb29 [ 530.231970][T10884] RDX: 00000000200004c0 RSI: 0000000020000440 RDI: 00000000200003c0 [ 530.239782][T10884] RBP: 00007f5495f90756 R08: 0000000020000dc0 R09: 0000000000000000 [ 530.247592][T10884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.255404][T10884] R13: 000000000000000b R14: 00007f549609dfa0 R15: 00007ffcca0da038 [ 530.263219][T10884] ---[ end trace 386200b146d17929 ]--- [ 530.272966][ T2091] usb 2-1: USB disconnect, device number 100 [ 530.281846][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 530.357068][ T7380] usb 3-1: Using ep0 maxpacket: 32 [ 530.483763][ T7380] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 530.492260][ T7380] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 530.500762][ T7380] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 530.637684][ T7380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 530.647537][ T7380] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 530.657610][ T7380] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 530.667362][ T7380] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 530.677376][ T7380] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 530.692788][ T7380] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 530.702033][ T7380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.768482][ T7380] usb 3-1: config 0 descriptor?? [ 530.971643][ T7380] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 115 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 531.087348][ T124] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0083/input/input11 [ 531.159188][ T7380] usb 3-1: USB disconnect, device number 115 [ 531.168485][ T7380] usblp0: removed [ 531.172999][ T124] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0083/input/input12 [ 531.205109][ T124] uclogic 0003:256C:006D.0083: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 531.234564][ T23] audit: type=1400 audit(1719566487.570:453): avc: denied { ioctl } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=79213 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 531.237826][ T425] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 531.287234][ T2091] usb 4-1: USB disconnect, device number 124 [ 531.564395][ T7380] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 531.615867][T10910] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 531.824269][ T7380] usb 3-1: Using ep0 maxpacket: 8 [ 532.064681][ T7380] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 532.073066][ T7380] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 532.082417][ T7380] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 532.189018][ T7380] usb 3-1: config 250 has no interface number 0 [ 532.198457][ T7380] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 532.267403][ T7380] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 532.284260][T10928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1905'. [ 532.288178][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 532.293798][ T7380] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 105 [ 532.312463][T10928] tipc: Started in network mode [ 532.317368][T10928] tipc: Own node identity 6, cluster identity 4711 [ 532.324590][T10928] tipc: 32-bit node address hash set to 6 [ 532.357308][T10930] capability: warning: `syz.0.1906' uses deprecated v2 capabilities in a way that may be insecure [ 532.399984][ T7380] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 532.408992][T10932] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 532.414075][ T7380] usb 3-1: config 250 interface 228 has no altsetting 0 [ 532.424205][T10932] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 532.595093][ T7380] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 532.604168][ T7380] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 532.612914][ T7380] usb 3-1: Product: syz [ 532.617025][ T7380] usb 3-1: SerialNumber: syz [ 532.709875][ T7380] hub 3-1:250.228: bad descriptor, ignoring hub [ 532.723456][ T7380] hub: probe of 3-1:250.228 failed with error -5 [ 532.757643][ T2050] print_req_error: 14 callbacks suppressed [ 532.757660][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 532.795751][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 532.810798][ T2050] buffer_io_error: 2 callbacks suppressed [ 532.810809][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 532.909713][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 532.935176][ T23] audit: type=1400 audit(1719566489.270:454): avc: denied { connect } for pid=10946 comm="syz.4.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 532.942829][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 532.967209][T10940] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 532.982837][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 533.295988][ T7380] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 116 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 533.310890][T10940] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf, [ 533.347357][ T23] audit: type=1400 audit(1719566489.670:455): avc: denied { write } for pid=10938 comm="syz.3.1910" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 533.348925][ T9594] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 34: comm syz-executor: path /root/syzkaller.C7ZS7K/69/file0/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 533.391920][ T23] audit: type=1400 audit(1719566489.670:456): avc: denied { add_name } for pid=10938 comm="syz.3.1910" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 533.392460][ T9594] EXT4-fs (loop3): Remounting filesystem read-only [ 533.413601][ T23] audit: type=1400 audit(1719566489.670:457): avc: denied { associate } for pid=10938 comm="syz.3.1910" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 534.174952][T10968] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 534.197063][ T9594] EXT4-fs error (device loop3): ext4_lookup:1814: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256) [ 534.200285][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 534.222492][ T9594] EXT4-fs error (device loop3): ext4_lookup:1814: inode #14: comm syz-executor: iget: bad extra_isize 1056 (inode size 256) [ 534.227277][T10970] tipc: Invalid UDP bearer configuration [ 534.227304][T10970] tipc: Enabling of bearer rejected, failed to enable media [ 534.284245][ C0] usblp0: nonzero read bulk status received: -71 [ 534.578096][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 534.589824][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 534.636429][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 534.656944][ T2091] usb 3-1: USB disconnect, device number 116 [ 534.665448][ T2091] usblp0: removed [ 534.684325][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 534.701094][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 534.903216][ T23] audit: type=1400 audit(1719566491.230:458): avc: denied { ioctl } for pid=10982 comm="syz.1.1927" path="socket:[79420]" dev="sockfs" ino=79420 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 536.849640][ T23] audit: type=1400 audit(1719566493.180:459): avc: denied { read write } for pid=11015 comm="syz.1.1934" name="ppp" dev="devtmpfs" ino=9282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 536.880297][ T23] audit: type=1400 audit(1719566493.180:460): avc: denied { open } for pid=11015 comm="syz.1.1934" path="/dev/ppp" dev="devtmpfs" ino=9282 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 536.922269][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 536.939454][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 536.957466][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 536.957671][ T23] audit: type=1400 audit(1719566493.200:461): avc: denied { ioctl } for pid=11015 comm="syz.1.1934" path="/dev/ppp" dev="devtmpfs" ino=9282 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 537.002092][T10993] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.023912][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 537.024614][T10993] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.043228][T10993] device bridge_slave_0 entered promiscuous mode [ 537.077752][T11027] tipc: Invalid UDP bearer configuration [ 537.078079][T11027] tipc: Enabling of bearer rejected, failed to enable media [ 537.144982][T10993] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.152410][T10993] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.185311][ T414] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 537.222822][T10993] device bridge_slave_1 entered promiscuous mode [ 539.004544][ T414] usb 2-1: Using ep0 maxpacket: 32 [ 541.103415][ T8187] device bridge_slave_1 left promiscuous mode [ 541.112045][ T8187] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.140196][ T8187] device bridge_slave_0 left promiscuous mode [ 541.159659][ T8187] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.164301][ T414] usb 2-1: device descriptor read/all, error -71 [ 541.185676][ T23] audit: type=1400 audit(1719566497.520:462): avc: denied { write } for pid=11042 comm="syz.4.1942" path="socket:[80327]" dev="sockfs" ino=80327 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 541.212000][ T2050] print_req_error: 2 callbacks suppressed [ 541.212016][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 541.230911][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 541.243786][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 541.444355][ T7507] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 541.764247][ T7507] usb 1-1: Using ep0 maxpacket: 8 [ 541.799430][ T23] audit: type=1400 audit(1719566498.130:463): avc: denied { unmount } for pid=9972 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 541.823109][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 541.830968][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 542.289241][ T7507] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 542.298562][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 542.308689][ T7507] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 542.320092][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 542.328832][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.335706][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.344740][ T7507] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 542.354953][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 542.380863][ T7507] usb 1-1: config 250 has no interface number 0 [ 542.442423][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 542.461457][ T7507] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 542.473194][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.480045][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.487361][ T7507] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 542.497725][ T7507] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 105 [ 542.508304][ T7507] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 542.522138][ T7507] usb 1-1: config 250 interface 228 has no altsetting 0 [ 542.530125][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 542.537840][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 542.546062][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 542.568721][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 542.577505][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 542.595433][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 542.603376][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 542.629610][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 542.637894][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 542.646202][ T7507] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 542.765435][T11075] tipc: Invalid UDP bearer configuration [ 542.765463][T11075] tipc: Enabling of bearer rejected, failed to enable media [ 542.787455][ T7507] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 542.796275][ T7507] usb 1-1: Product: syz [ 542.798338][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 542.800739][ T7507] usb 1-1: SerialNumber: syz [ 542.885395][ T7507] hub 1-1:250.228: bad descriptor, ignoring hub [ 542.885909][ T2091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 542.891502][ T7507] hub: probe of 1-1:250.228 failed with error -5 [ 544.548035][ T7507] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 109 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 544.550294][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 544.611641][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 544.645031][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 544.699912][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 544.711578][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 544.731854][ T23] audit: type=1400 audit(1719566501.060:464): avc: denied { bind } for pid=11087 comm="syz.1.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 544.756305][ T7507] usb 1-1: USB disconnect, device number 109 [ 544.776506][ T7507] usblp0: removed [ 547.046810][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 547.128536][T11133] tipc: Invalid UDP bearer configuration [ 547.128565][T11133] tipc: Enabling of bearer rejected, failed to enable media [ 547.141177][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.157681][ T6866] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 547.174758][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 547.273969][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 547.336375][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.378158][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 547.426354][ T6866] usb 5-1: Using ep0 maxpacket: 8 [ 547.443298][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 547.494378][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 547.536051][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 547.574598][ T6866] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 547.612217][ T6866] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 547.674405][ T6866] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 547.683531][ T6866] usb 5-1: config 250 has no interface number 0 [ 547.703534][ T6866] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 547.722873][ T6866] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 547.737186][ T6866] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 105 [ 547.966125][ T6866] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 547.979915][ T6866] usb 5-1: config 250 interface 228 has no altsetting 0 [ 548.164315][ T6866] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 548.173191][ T6866] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 548.181533][ T6866] usb 5-1: Product: syz [ 548.186310][ T6866] usb 5-1: SerialNumber: syz [ 548.397424][ T6866] hub 5-1:250.228: bad descriptor, ignoring hub [ 548.419463][ T6866] hub: probe of 5-1:250.228 failed with error -5 [ 548.826990][ T6866] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 110 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 549.072894][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 549.085982][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 549.098161][T11195] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 549.106820][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 549.139147][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 549.152263][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 549.163921][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 549.176659][ T383] usb 5-1: USB disconnect, device number 110 [ 549.184080][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 549.194118][ T383] usblp0: removed [ 549.278291][T11211] tipc: Invalid UDP bearer configuration [ 549.278320][T11211] tipc: Enabling of bearer rejected, failed to enable media [ 549.317589][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 549.416756][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 549.545529][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 549.827015][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 550.206886][T11233] fuse: Unknown parameter 'fd0x0000000000000003' [ 550.279679][ T23] audit: type=1400 audit(1719566506.610:465): avc: denied { setcurrent } for pid=11234 comm="syz.2.2008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 551.959173][ T23] audit: type=1400 audit(1719566508.290:466): avc: denied { create } for pid=11286 comm="syz.3.2025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 552.258780][ T23] audit: type=1400 audit(1719566508.590:467): avc: denied { shutdown } for pid=11296 comm="syz.3.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 552.581753][ T2050] print_req_error: 10 callbacks suppressed [ 552.581769][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 552.624328][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.648865][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 552.725362][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 552.754513][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 552.779483][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 553.576746][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 553.618832][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.660628][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 553.693516][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 553.734695][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.776669][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 553.810299][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 553.855322][ T2050] blk_update_request: I/O error, dev loop0, sector 16777088 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.884262][ T2050] Buffer I/O error on dev loop0p2, logical block 2097136, async page read [ 553.910740][T11382] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 553.944586][ T383] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 553.984379][ T23] audit: type=1400 audit(1719566510.310:468): avc: denied { setopt } for pid=11385 comm="syz.3.2060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 554.127745][T11386] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 554.357032][T11400] binder: 11390:11400 ioctl c0306201 0 returned -14 [ 554.462014][T11403] erofs: (device loop3): mounted with opts: , root inode @ nid 36. [ 554.555975][ T383] usb 1-1: config index 0 descriptor too short (expected 51437, got 29) [ 554.564152][ T383] usb 1-1: config 229 has too many interfaces: 108, using maximum allowed: 32 [ 554.573921][ T383] usb 1-1: config 229 has an invalid descriptor of length 0, skipping remainder of the config [ 554.584163][ T383] usb 1-1: config 229 has 1 interface, different from the descriptor's value: 108 [ 554.593261][ T383] usb 1-1: config 229 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 554.678168][T11408] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 554.731953][T11411] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 554.764330][ T383] usb 1-1: New USB device found, idVendor=1e2d, idProduct=0069, bcdDevice=f7.47 [ 554.776506][ T383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.785510][T11408] attempt to access beyond end of device [ 554.785510][T11408] loop3: rw=0, want=209, limit=128 [ 554.795981][ T383] usb 1-1: Product: syz [ 554.801015][ T383] usb 1-1: Manufacturer: syz [ 554.809828][ T383] usb 1-1: SerialNumber: syz [ 554.826243][ T8187] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 554.954048][T11417] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 555.114974][ T383] cdc_ether 1-1:229.0: skipping garbage [ 555.120367][ T383] usb 1-1: bad CDC descriptors [ 555.138997][ T383] usb 1-1: USB disconnect, device number 110 [ 555.187867][T11427] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 555.202806][T11427] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 555.214914][T11427] EXT4-fs (loop3): This should not happen!! Data will be lost [ 555.214914][T11427] [ 555.224372][T11427] EXT4-fs (loop3): Total free blocks count 0 [ 555.230143][T11427] EXT4-fs (loop3): Free/Dirty block details [ 555.235918][T11427] EXT4-fs (loop3): free_blocks=2415919104 [ 555.241437][T11427] EXT4-fs (loop3): dirty_blocks=16 [ 555.246406][T11427] EXT4-fs (loop3): Block reservation details [ 555.252180][T11427] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 555.371364][ T382] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 555.398674][ T382] EXT4-fs (loop3): This should not happen!! Data will be lost [ 555.398674][ T382] [ 555.535905][T11435] kasan: CONFIG_KASAN_INLINE enabled [ 555.541115][T11435] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 555.549117][T11435] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 555.555885][T11435] CPU: 1 PID: 11435 Comm: syz.2.2075 Tainted: G W 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 555.567129][T11435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 555.577041][T11435] RIP: 0010:bpf_skb_ancestor_cgroup_id+0x114/0x270 [ 555.583464][T11435] Code: 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 5d 33 0c fe 48 8b 1b 48 8d bb 1c 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 2f 01 00 00 8b ab 1c 01 00 00 89 ef 44 [ 555.602899][T11435] RSP: 0018:ffff8881f25e7438 EFLAGS: 00010203 [ 555.608796][T11435] RAX: 0000000000000023 RBX: 0000000000000000 RCX: 0000000000000002 [ 555.616610][T11435] RDX: ffffc90001992000 RSI: 0000000000000080 RDI: 000000000000011c [ 555.624423][T11435] RBP: 0000000000000080 R08: ffffffff8387edaa R09: ffff8881f25e7760 [ 555.632228][T11435] R10: 0000000000000000 R11: 00000000000000c3 R12: dffffc0000000000 [ 555.640046][T11435] R13: ffffff7ea8ec7d22 R14: 00000000000000c3 R15: ffff8881e5073812 [ 555.647865][T11435] FS: 00007fdca2b756c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 555.656620][T11435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 555.663040][T11435] CR2: 0000001b30d1cff8 CR3: 00000001ec918000 CR4: 00000000003406a0 [ 555.670898][T11435] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 555.678663][T11435] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 555.686473][T11435] Call Trace: [ 555.689620][T11435] ? __die+0xb4/0x100 [ 555.693426][T11435] ? die+0x26/0x50 [ 555.696982][T11435] ? do_general_protection+0x266/0x3c0 [ 555.702275][T11435] ? 0xffffffffa0090000 [ 555.706268][T11435] ? do_trap+0x340/0x340 [ 555.710357][T11435] ? is_bpf_text_address+0x24c/0x260 [ 555.715474][T11435] ? stack_trace_save+0x1c0/0x1c0 [ 555.720330][T11435] ? __kernel_text_address+0x94/0x100 [ 555.725546][T11435] ? general_protection+0x28/0x30 [ 555.730401][T11435] ? bpf_skb_ancestor_cgroup_id+0xda/0x270 [ 555.736060][T11435] ? bpf_skb_ancestor_cgroup_id+0x114/0x270 [ 555.741776][T11435] ? bpf_skb_ancestor_cgroup_id+0xda/0x270 [ 555.747410][T11435] bpf_prog_81f4eab4c1e4241c+0x524/0x1000 [ 555.752967][T11435] ? stack_trace_snprint+0x170/0x170 [ 555.758091][T11435] ? __kasan_kmalloc+0x1d9/0x210 [ 555.762863][T11435] ? __kasan_kmalloc+0x171/0x210 [ 555.767632][T11435] ? kmem_cache_alloc+0xd9/0x250 [ 555.772404][T11435] ? build_skb+0x26/0x440 [ 555.776571][T11435] ? bpf_prog_test_run_skb+0x302/0xf00 [ 555.781868][T11435] ? __se_sys_bpf+0x2e37/0xbcb0 [ 555.786551][T11435] ? do_syscall_64+0xca/0x1c0 [ 555.791068][T11435] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 555.796980][T11435] ? ktime_get+0xf9/0x130 [ 555.801140][T11435] bpf_test_run+0x2ae/0x6c0 [ 555.805480][T11435] ? bpf_ctx_init+0x1a0/0x1a0 [ 555.809987][T11435] ? build_skb+0x259/0x440 [ 555.814242][T11435] bpf_prog_test_run_skb+0x73c/0xf00 [ 555.819368][T11435] ? __bpf_trace_bpf_test_finish+0x20/0x20 [ 555.825094][T11435] ? __bpf_prog_get+0x296/0x310 [ 555.829777][T11435] ? __bpf_trace_bpf_test_finish+0x20/0x20 [ 555.835427][T11435] __se_sys_bpf+0x2e37/0xbcb0 [ 555.839936][T11435] ? futex_wait+0x612/0x890 [ 555.844281][T11435] ? do_futex+0x19f0/0x19f0 [ 555.848620][T11435] ? __x64_sys_bpf+0x80/0x80 [ 555.853051][T11435] ? do_futex+0x13c1/0x19f0 [ 555.857380][T11435] ? debug_smp_processor_id+0x20/0x20 [ 555.862597][T11435] ? kmem_cache_alloc+0xd9/0x250 [ 555.867361][T11435] ? selinux_file_alloc_security+0x19/0x120 [ 555.873096][T11435] ? percpu_counter_add_batch+0x14d/0x170 [ 555.878651][T11435] ? memcpy+0x38/0x50 [ 555.882470][T11435] ? errseq_sample+0x3c/0x60 [ 555.886886][T11435] ? futex_exit_release+0x1e0/0x1e0 [ 555.891911][T11435] ? alloc_file_pseudo+0x280/0x2f0 [ 555.896862][T11435] ? security_socket_post_create+0x96/0xc0 [ 555.902498][T11435] ? check_preemption_disabled+0x153/0x320 [ 555.908141][T11435] ? debug_smp_processor_id+0x20/0x20 [ 555.913440][T11435] ? __se_sys_futex+0x355/0x470 [ 555.918128][T11435] ? __fdget+0x189/0x200 [ 555.922205][T11435] do_syscall_64+0xca/0x1c0 [ 555.926545][T11435] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 555.932446][T11435] RIP: 0033:0x7fdca38f3b29 [ 555.936782][T11435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.956309][T11435] RSP: 002b:00007fdca2b75048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 555.964727][T11435] RAX: ffffffffffffffda RBX: 00007fdca3a81fa0 RCX: 00007fdca38f3b29 [ 555.972886][T11435] RDX: 0000000000000028 RSI: 00000000200001c0 RDI: 000000000000000a [ 555.980696][T11435] RBP: 00007fdca3974756 R08: 0000000000000000 R09: 0000000000000000 [ 555.988592][T11435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.996404][T11435] R13: 000000000000000b R14: 00007fdca3a81fa0 R15: 00007ffe532e6b28 [ 556.004217][T11435] Modules linked in: [ 556.008621][T11435] ---[ end trace 386200b146d1792a ]--- [ 556.013915][T11435] RIP: 0010:bpf_skb_ancestor_cgroup_id+0x114/0x270 [ 556.020276][T11435] Code: 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 5d 33 0c fe 48 8b 1b 48 8d bb 1c 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 2f 01 00 00 8b ab 1c 01 00 00 89 ef 44 [ 556.039883][T11435] RSP: 0018:ffff8881f25e7438 EFLAGS: 00010203 [ 556.045879][T11435] RAX: 0000000000000023 RBX: 0000000000000000 RCX: 0000000000000002 [ 556.053655][T11435] RDX: ffffc90001992000 RSI: 0000000000000080 RDI: 000000000000011c [ 556.061501][T11435] RBP: 0000000000000080 R08: ffffffff8387edaa R09: ffff8881f25e7760 [ 556.069306][T11435] R10: 0000000000000000 R11: 00000000000000c3 R12: dffffc0000000000 [ 556.077141][T11435] R13: ffffff7ea8ec7d22 R14: 00000000000000c3 R15: ffff8881e5073812 [ 556.084932][T11435] FS: 00007fdca2b756c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 556.093749][T11435] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.100295][T11435] CR2: 0000001b30d1cff8 CR3: 00000001ec918000 CR4: 00000000003406a0 [ 556.108104][T11435] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 556.115929][T11435] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 556.123697][T11435] Kernel panic - not syncing: Fatal exception [ 556.129905][T11435] Kernel Offset: disabled [ 556.134033][T11435] Rebooting in 86400 seconds..