last executing test programs: 9.066169959s ago: executing program 3 (id=5158): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x20}}, @const={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x3e}, 0x28) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r4, 0x0, 0x24, &(0x7f0000000100)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r5}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r6}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0xfffffffc, 0x0, {0x2, 0x20, 0x0, 0x4, 0x3, 0x0, 0x0, 0x3, 0xf}, [@FRA_DST={0x8, 0x1, @private=0xa010101}]}, 0x24}}, 0x42094) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") 7.478761985s ago: executing program 3 (id=5162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000200)=[@increfs], 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$BLKGETNRZONES(r6, 0x80041285, &(0x7f0000000300)=0x6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) getgroups(0x2, &(0x7f0000000240)=[0xee00, 0xffffffffffffffff]) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2820433, &(0x7f0000000580)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@default_permissions}, {@default_permissions}], [{@hash}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@uid_lt={'uid<', r11}}]}}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x13497, 0x2021}, [@IFLA_LINK={0x8, 0x5, r8}, @IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0xfe, {0xfffffff7, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0x18, 0x1, {0x6, 0x6}}]}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000780)={0x1f, @none}, 0x8) 7.348042168s ago: executing program 3 (id=5163): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x20}}, @const={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x3e}, 0x28) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0xfffffffc, 0x0, {0x2, 0x20, 0x0, 0x4, 0x3, 0x0, 0x0, 0x3, 0xf}, [@FRA_DST={0x8, 0x1, @private=0xa010101}]}, 0x24}}, 0x42094) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") 6.415558119s ago: executing program 3 (id=5166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000200)=[@increfs], 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$BLKGETNRZONES(r6, 0x80041285, &(0x7f0000000300)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) getgroups(0x2, &(0x7f0000000240)=[0xee00, 0xffffffffffffffff]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2820433, &(0x7f0000000580)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@default_permissions}, {@default_permissions}], [{@hash}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@uid_lt={'uid<', r11}}]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x13497, 0x2021}, [@IFLA_LINK={0x8, 0x5, r8}, @IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0xfe, {0xfffffff7, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0x18, 0x1, {0x6, 0x6}}]}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) unshare(0x60000600) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000780)={0x1f, @none}, 0x8) 4.297391958s ago: executing program 3 (id=5169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x9cc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x8, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) pread64(r1, &(0x7f0000000040)=""/5, 0x5, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000002000000000000000085000000170000009500000000000000"], &(0x7f00000005c0)='GPL\x00'}, 0x80) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) 1.889699654s ago: executing program 3 (id=5194): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="0005090000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.511160212s ago: executing program 1 (id=5207): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r0}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[], 0xf0}}, 0x0) r1 = io_uring_setup(0x409, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xe2}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.458141407s ago: executing program 1 (id=5208): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x20000, 0xcbfb, 0x0, {0x5, 0x0, 0x48b, 0xa, 0x400000000000007, 0xd, 0xfff7ffff, 0x6, 0x101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.436552869s ago: executing program 1 (id=5209): socket$igmp6(0xa, 0x3, 0x2) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file0\x00', 0x1200000, &(0x7f0000000380)=ANY=[@ANYBLOB="666d61736b3d30303030303030303030303030303030303030303030312c6572726f72733d636f6e74696e75652c64656275672c6e6f646f74732c636865636b3d72656c617865642c666c7573682c00ae074f98d1b9346667e288c05bc5980f839b9c674e3c093268aee8c58355bf270e5e58f7b8cc8d6d0f"], 0x1, 0x11d9, &(0x7f0000001240)="$eJzs209rI3UYB/Bnu1nbzdpu/be6vfhDL3oZbA+evBRpQRpQ2kZoBWFKUw2JSejkkIhgwZsnX4hHb4L4BvouvBVB9NKTEZvYtLVWsLVR9vO55GG+8+Q3Q2Bgwu85euurTxp7RbaXd2Pqzp0odSLScYoUU3E3hg7i9S9Wf/lyY2t7bblSWVlPaXV5c/HNlNLcy9998NnXr3zfffD+N3PfTsfh/IdHPy39cPjo8PHRr5sf14tUL1Kr3U152mm3u/lOs5Z260UjS+m9Zi0vaqneKmr75/K9ZrvT6ae8tTtb7uzXiiLlrX5q1Pqp206fR0T+UV5vpSzL0mw5mLlGb/WPn3hwL56KwWAwuB/leBBPx2zMxcOYj2fi2Xguno8X4lG8GC/F45OzTr/g4NqXDwAAAAAAAAAAAAAAAAAAAMTxyTT/4J/O/wMAAAAAAAAAAAAAAAAAAAA3wPw/AAAAAAAAAAAAAAAAAAAATJ75fwAAAAAAAAAAAAAAAAAAAJi8ja3tteVKZWU9pZmIHw961V51+DnMV9+prLyRTpTGXT/3etW7p/niME/n8+koj/KlS/OZeO3VYf579va7lQv5Quz++7cPAAAAT4QsnZofHx2/32fZX+XD6sz/Axfe30uxUPrzepccYoKK/qeNvNms7V9VxNSZk6dHnX/bdXPFw9GSt7HWJIp7EfEfuAyFYlxM6onEbTrzkAcAAAAAAAAAAOB/5MptgIPRxttrbieMuD/p2wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+YweOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABLBQAA///Gs4Hb") r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000a000180c2000017aaaaaaabaabb88f7"], 0x16) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x88e7}, @void, @llc={@snap={0xab, 0x1, "c8a1", "d1f65f", 0x6005, "c6c41dc36a7232d7b744ea7a8f3fce7ebc94bfbcefe8e8ea3067b0fc285444ebdd4f9857004b224662a6a53946ee0d5deb7a9aed5d9ff19f0526f617ceac2ff0597d4c0e4db257e9b19e59c918958787f1820ffe1e055d05a2bcda46c405431336a84d8487884a3f920449fb36b4f6e878972771d392686a349810250e509d6bbc337e22c8ae8469aaea1338215c1e5a599ec2"}}}, 0xa0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r3, &(0x7f0000000880)={0x2020}, 0x2020) 1.11708838s ago: executing program 1 (id=5215): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000005a00)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x4000003, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") rt_sigaction(0xe, 0x0, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f0000000340)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) 950.767327ms ago: executing program 4 (id=5219): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x40000092, 0x0, 0x4}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x7}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b63, 0x3) bind$inet(0xffffffffffffffff, 0x0, 0x0) 878.125754ms ago: executing program 4 (id=5220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 768.630975ms ago: executing program 4 (id=5221): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x64c900, 0x86) shutdown(r0, 0x1) 764.390895ms ago: executing program 2 (id=5222): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 658.357196ms ago: executing program 4 (id=5223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="0100"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000008000080"]) 658.057735ms ago: executing program 2 (id=5224): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x44, 0x2, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xc, 0x10, 0x0, 0x0, 0xffff, {[@sack={0x5, 0x1a, [0x80000001, 0xffff, 0x0, 0x800, 0xfffffffa, 0x9]}]}}}}}}}, 0x0) 633.728828ms ago: executing program 4 (id=5225): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000007b000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000100f1dbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}}, 0x20040840) 610.87719ms ago: executing program 4 (id=5226): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, 0x1c) listen(r3, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 410.15595ms ago: executing program 2 (id=5227): socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x36, 0x4000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) 410.02108ms ago: executing program 2 (id=5228): socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 371.400714ms ago: executing program 1 (id=5230): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private0, @in=@multicast1, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0x8005, 0xfffffffffffffffd}, {0x0, 0x0, 0xffffffffffff34c9}, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x4d6, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 337.318187ms ago: executing program 0 (id=5231): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x120c, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/199, 0xc7, 0x2, 0xd}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 329.684778ms ago: executing program 0 (id=5232): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x33c, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) unlinkat(r0, &(0x7f0000000080)='./bus/file0\x00', 0x200) 222.134859ms ago: executing program 2 (id=5233): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@noauto_da_alloc}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000440)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0xdf5bd2188d086d3d) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000005e80)={@id={0x2, 0x0, @auto="f8ff13be93a237a05ecc5624c29bb9c0"}}) fallocate(r0, 0x20, 0x0, 0x8000) 221.946889ms ago: executing program 0 (id=5234): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) ioprio_get$pid(0x3, 0x0) 170.002213ms ago: executing program 1 (id=5235): unshare(0x28000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000008, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) lseek(r0, 0x0, 0x1) 150.925536ms ago: executing program 32 (id=5235): unshare(0x28000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000008, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) lseek(r0, 0x0, 0x1) 128.272348ms ago: executing program 0 (id=5236): creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0x123) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1b) 70.775813ms ago: executing program 0 (id=5237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000002c0)={@val={0xa, 0x88a8}, @void, @eth={@local, @empty, @val={@void, {0x8100, 0x3, 0x1, 0x2}}, {@ipv6={0x86dd, @generic={0x9, 0x6, "00cd69", 0x8, 0x2c, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@srh={0x21, 0x0, 0x4, 0x0, 0x9, 0x20, 0x3}]}}}}}}, 0x46) 70.170823ms ago: executing program 2 (id=5238): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 0s ago: executing program 0 (id=5239): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): r=0 [ 1312.779061][ T396] usb 5-1: config 0 descriptor?? [ 1312.849497][ T26] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1312.864183][ T26] usb 2-1: config 0 interface 0 has no altsetting 1 [ 1312.906936][T18806] loop2: detected capacity change from 0 to 1024 [ 1312.972178][T18806] EXT4-fs (loop2): Ignoring removed bh option [ 1312.980242][ T965] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1313.030074][ T26] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1313.090405][T18806] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1313.126610][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1313.209665][ T26] usb 2-1: SerialNumber: syz [ 1313.249378][ T965] usb 4-1: Using ep0 maxpacket: 32 [ 1313.276897][ T26] usb 2-1: config 0 descriptor?? [ 1313.349899][ T26] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1313.358560][ T26] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1313.379764][ T965] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1313.390396][ T965] usb 4-1: config 0 interface 0 has no altsetting 1 [ 1313.469376][ T965] usb 4-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1313.479981][ T965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1313.488461][ T965] usb 4-1: SerialNumber: syz [ 1313.491467][ T396] sony 0003:054C:09CC.006D: hidraw0: USB HID v80.01 Device [HID 054c:09cc] on usb-dummy_hcd.4-1/input0 [ 1313.505654][ T965] usb 4-1: config 0 descriptor?? [ 1313.511084][ T396] sony 0003:054C:09CC.006D: failed to claim input [ 1313.558108][T18790] syz.1.4928[18790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1313.558190][T18790] syz.1.4928[18790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1313.572287][ T965] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1313.662564][ T965] usb-storage 4-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1313.696652][ T26] usb 5-1: USB disconnect, device number 96 [ 1313.787334][T18802] syz.3.4931[18802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1313.787989][T18802] syz.3.4931[18802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1314.397567][ T965] usb 2-1: USB disconnect, device number 108 [ 1314.512868][ T30] audit: type=1326 audit(1761591179.921:9220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18827 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f089afc9 code=0x7ffc0000 [ 1314.562801][T18828] loop4: detected capacity change from 0 to 512 [ 1314.569281][ T30] audit: type=1326 audit(1761591179.921:9221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18827 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11f089afc9 code=0x7ffc0000 [ 1314.593532][ T30] audit: type=1326 audit(1761591179.921:9222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18827 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f089afc9 code=0x7ffc0000 [ 1314.617773][ T30] audit: type=1326 audit(1761591179.921:9223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18827 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11f089afc9 code=0x7ffc0000 [ 1314.641500][ T30] audit: type=1326 audit(1761591179.951:9224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18827 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f089afc9 code=0x7ffc0000 [ 1314.665845][ T26] usb 4-1: USB disconnect, device number 86 [ 1314.681064][T18828] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1314.695394][ T30] audit: type=1326 audit(1761591179.951:9225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18827 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f089afc9 code=0x7ffc0000 [ 1314.708017][T18832] loop3: detected capacity change from 0 to 128 [ 1314.721167][ T30] audit: type=1326 audit(1761591179.961:9226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18827 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11f089afc9 code=0x7ffc0000 [ 1314.765793][T18832] FAT-fs (loop3): Unrecognized mount option "®C—‘‘‚9ê:*µÒ&аœ" or missing value [ 1314.778635][T18833] binder: 18825:18833 ioctl c0306201 200000000080 returned -22 [ 1314.787277][T18833] 9pnet: Insufficient options for proto=fd [ 1314.794051][T18833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4936'. [ 1314.808015][T18828] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1314.915880][T18835] 9pnet: Insufficient options for proto=fd [ 1314.925297][T18828] netlink: 'syz.4.4937': attribute type 4 has an invalid length. [ 1314.933629][ T30] audit: type=1326 audit(1761591179.961:9227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18827 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f089afc9 code=0x7ffc0000 [ 1314.964342][T18828] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.4937'. [ 1315.053835][ T30] audit: type=1326 audit(1761591179.961:9228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18827 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f089afc9 code=0x7ffc0000 [ 1315.133387][T18844] loop3: detected capacity change from 0 to 256 [ 1315.170077][T18844] FAT-fs (loop3): Unrecognized mount option "shortname=win95Lí¢‚šiɾŒH˜q" or missing value [ 1316.230807][ T30] audit: type=1326 audit(1761591179.961:9229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18827 comm="syz.4.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11f089afc9 code=0x7ffc0000 [ 1316.623896][T18857] loop4: detected capacity change from 0 to 1024 [ 1316.631695][ T965] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1316.662811][T18857] EXT4-fs (loop4): Ignoring removed bh option [ 1316.916338][T18857] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1317.021437][ T965] usb 4-1: Using ep0 maxpacket: 32 [ 1317.044983][ T26] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1317.169372][ T965] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1317.179192][ T965] usb 4-1: config 0 interface 0 has no altsetting 1 [ 1317.209316][T10323] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1317.259560][ T965] usb 4-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1317.269687][ T965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1317.277849][ T965] usb 4-1: SerialNumber: syz [ 1317.283734][ T965] usb 4-1: config 0 descriptor?? [ 1317.297719][T18868] loop4: detected capacity change from 0 to 512 [ 1317.319784][ T965] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1317.327722][ T965] usb-storage 4-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1317.336357][ T1357] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1317.359838][T18868] EXT4-fs (loop4): Ignoring removed nobh option [ 1317.391532][T18868] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4946: bg 0: block 248: padding at end of block bitmap is not set [ 1317.407830][T18868] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.4946: Failed to acquire dquot type 1 [ 1317.409356][ T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.420469][T18868] EXT4-fs (loop4): 1 truncate cleaned up [ 1317.430476][ T26] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1317.436523][T18868] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x000000000000003c,,errors=continue. Quota mode: writeback. [ 1317.445515][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.463856][T18868] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1317.476076][ T26] usb 3-1: config 0 descriptor?? [ 1317.499325][T10323] usb 2-1: Using ep0 maxpacket: 32 [ 1317.539840][T18851] syz.3.4942[18851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1317.539917][T18851] syz.3.4942[18851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1317.599303][ T1357] usb 1-1: Using ep0 maxpacket: 32 [ 1317.629844][T10323] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1317.639106][T10323] usb 2-1: config 0 interface 0 has no altsetting 1 [ 1317.839523][ T1357] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1317.850913][ T1357] usb 1-1: config 0 interface 0 has no altsetting 1 [ 1317.860064][T10323] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1317.871481][T10323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1317.880775][T10323] usb 2-1: SerialNumber: syz [ 1317.887677][T10323] usb 2-1: config 0 descriptor?? [ 1317.930005][T10323] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1317.937764][T10323] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1317.949517][ T1357] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1317.960442][ T1357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1317.968588][ T1357] usb 1-1: SerialNumber: syz [ 1317.974092][ T1357] usb 1-1: config 0 descriptor?? [ 1318.019896][ T1357] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1318.029019][ T1357] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1318.104957][ T1357] usb 4-1: USB disconnect, device number 87 [ 1318.198437][ T26] usbhid 3-1:0.0: can't add hid device: -71 [ 1318.207175][ T26] usbhid: probe of 3-1:0.0 failed with error -71 [ 1318.218017][ T26] usb 3-1: USB disconnect, device number 107 [ 1318.729795][ T9309] Bluetooth: hci0: Frame reassembly failed (-84) [ 1319.406782][ T26] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1319.649291][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 1319.749610][ T1357] usb 2-1: USB disconnect, device number 109 [ 1319.769926][ T26] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1319.780139][ T26] usb 3-1: config 0 interface 0 has no altsetting 1 [ 1319.859475][ T26] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1319.869494][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1319.879297][ T26] usb 3-1: SerialNumber: syz [ 1319.885619][ T26] usb 3-1: config 0 descriptor?? [ 1319.929897][ T26] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1319.938907][ T26] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1320.022256][ T396] usb 1-1: USB disconnect, device number 86 [ 1320.135899][T18891] syz.2.4950[18891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1320.135954][T18891] syz.2.4950[18891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1320.202965][T18906] loop4: detected capacity change from 0 to 1024 [ 1320.229266][ T1357] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1320.250327][T18907] 9pnet: Insufficient options for proto=fd [ 1320.270524][T18907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4954'. [ 1320.311561][T18906] EXT4-fs (loop4): Ignoring removed bh option [ 1320.364515][T18906] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1320.663783][ T26] usb 3-1: USB disconnect, device number 108 [ 1320.678760][T18916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=18916 comm=syz.2.4956 [ 1320.759304][ T396] Bluetooth: hci0: command 0x1003 tx timeout [ 1320.765681][T15145] Bluetooth: hci0: sending frame failed (-49) [ 1320.809492][ T1357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.821748][ T1357] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1320.852935][ T1357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.874516][T18918] loop2: detected capacity change from 0 to 256 [ 1320.889306][T10323] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1320.932756][ T1357] usb 2-1: config 0 descriptor?? [ 1321.032241][T18918] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 1321.042380][T18918] SELinux: failed to load policy [ 1321.179345][T10323] usb 1-1: Using ep0 maxpacket: 32 [ 1321.299831][T10323] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1321.320180][T10323] usb 1-1: config 0 interface 0 has no altsetting 1 [ 1321.420203][ T1357] sony 0003:054C:09CC.006E: hidraw0: USB HID v80.01 Device [HID 054c:09cc] on usb-dummy_hcd.1-1/input0 [ 1321.446723][T10323] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1321.488237][ T1357] sony 0003:054C:09CC.006E: failed to claim input [ 1321.503621][T10323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1321.919343][ T1357] usb 2-1: USB disconnect, device number 110 [ 1321.928801][T10323] usb 1-1: SerialNumber: syz [ 1321.950149][T10323] usb 1-1: config 0 descriptor?? [ 1321.968888][T18919] fido_id[18919]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1321.999813][T10323] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1322.052103][T10323] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1322.356564][T18921] loop4: detected capacity change from 0 to 131072 [ 1322.422505][T18921] F2FS-fs (loop4): Invalid log sectors per block(570425347) log sectorsize(9) [ 1322.432078][T18921] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1322.441472][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1322.441486][ T30] audit: type=1326 audit(1761591187.851:9287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18926 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf994dfc9 code=0x7ffc0000 [ 1322.458929][T18921] F2FS-fs (loop4): invalid crc value [ 1322.490848][T18921] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 1322.493200][ T30] audit: type=1326 audit(1761591187.881:9288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18926 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fcdf994dfc9 code=0x7ffc0000 [ 1322.519396][T18921] F2FS-fs (loop4): recover fsync data on readonly fs [ 1322.526756][ T30] audit: type=1326 audit(1761591187.881:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18926 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf994dfc9 code=0x7ffc0000 [ 1322.534838][T18921] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 1322.568154][ T30] audit: type=1326 audit(1761591187.881:9290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18926 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdf994c810 code=0x7ffc0000 [ 1322.568341][ T1357] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1322.591904][ T30] audit: type=1326 audit(1761591187.881:9291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18926 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdf994c810 code=0x7ffc0000 [ 1322.599941][T18921] F2FS-fs (loop4): Bad quota inode 2:50331648 [ 1322.623376][ T30] audit: type=1326 audit(1761591187.881:9292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18926 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf994dfc9 code=0x7ffc0000 [ 1322.629313][T18921] F2FS-fs (loop4): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 1322.653084][ T30] audit: type=1326 audit(1761591187.881:9293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18926 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fcdf994dfc9 code=0x7ffc0000 [ 1322.663325][T18921] F2FS-fs (loop4): Cannot turn on quota_ino: -22 [ 1322.687196][ T30] audit: type=1326 audit(1761591187.881:9294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18926 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf994dfc9 code=0x7ffc0000 [ 1322.694345][T18921] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 1322.717601][ T30] audit: type=1326 audit(1761591187.881:9295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18926 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcdf994dfc9 code=0x7ffc0000 [ 1322.724768][T18921] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 1322.748986][ T30] audit: type=1326 audit(1761591187.881:9296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18926 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf994dfc9 code=0x7ffc0000 [ 1322.781602][ T396] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1322.839304][T10323] Bluetooth: hci0: command 0x1001 tx timeout [ 1322.845756][T15145] Bluetooth: hci0: sending frame failed (-49) [ 1322.899274][ T1357] usb 3-1: Using ep0 maxpacket: 32 [ 1323.029383][ T1357] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1323.038320][ T1357] usb 3-1: config 0 interface 0 has no altsetting 1 [ 1323.067602][T18934] loop4: detected capacity change from 0 to 1024 [ 1323.119544][ T1357] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1323.128697][ T1357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1323.136734][ T1357] usb 3-1: SerialNumber: syz [ 1323.141950][ T1357] usb 3-1: config 0 descriptor?? [ 1323.159802][T18934] EXT4-fs (loop4): Ignoring removed bh option [ 1323.171541][T18934] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1323.200007][ T1357] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1323.208354][ T1357] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1323.209802][ T396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1323.228228][ T396] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1323.238568][ T396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.249841][ T396] usb 2-1: config 0 descriptor?? [ 1323.386909][T18925] syz.2.4958[18925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1323.386963][T18925] syz.2.4958[18925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1323.489938][ T1357] usb 1-1: USB disconnect, device number 87 [ 1323.789844][ T396] usbhid 2-1:0.0: can't add hid device: -71 [ 1323.796116][ T396] usbhid: probe of 2-1:0.0 failed with error -71 [ 1323.804295][ T396] usb 2-1: USB disconnect, device number 111 [ 1323.908944][T10323] usb 3-1: USB disconnect, device number 109 [ 1323.921910][ T1357] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1324.021211][T18946] loop4: detected capacity change from 0 to 1024 [ 1324.062622][T18946] EXT4-fs (loop4): Ignoring removed bh option [ 1324.160219][T18946] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1324.359278][T10323] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1324.379395][ T1357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.395252][ T1357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1324.405792][T18952] 9pnet: Insufficient options for proto=fd [ 1324.415397][T18952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4965'. [ 1324.509383][ T1357] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1324.519364][ T1357] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1324.527895][ T1357] usb 1-1: Manufacturer: syz [ 1324.533404][ T1357] usb 1-1: config 0 descriptor?? [ 1324.609270][T10323] usb 3-1: Using ep0 maxpacket: 32 [ 1324.729335][T10323] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1324.738864][T10323] usb 3-1: config 0 interface 0 has no altsetting 1 [ 1324.839773][T10323] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1324.849436][T10323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1324.857959][T10323] usb 3-1: SerialNumber: syz [ 1324.886649][T10323] usb 3-1: config 0 descriptor?? [ 1324.919397][ T9629] Bluetooth: hci0: command 0x1009 tx timeout [ 1324.931443][T10323] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1324.933839][T18956] loop4: detected capacity change from 0 to 1024 [ 1324.948265][T18956] EXT4-fs (loop4): Ignoring removed bh option [ 1324.955750][T10323] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1325.022937][T18956] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1325.131934][T18944] syz.2.4964[18944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1325.132021][T18944] syz.2.4964[18944] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1325.517783][ T3499] Bluetooth: hci1: Frame reassembly failed (-84) [ 1325.649335][ T1357] uclogic 0003:256C:006D.006F: failed retrieving Huion firmware version: -71 [ 1325.659357][ T1357] uclogic 0003:256C:006D.006F: failed probing parameters: -71 [ 1325.667149][ T1357] uclogic: probe of 0003:256C:006D.006F failed with error -71 [ 1325.678548][ T1357] usb 1-1: USB disconnect, device number 88 [ 1325.887929][T18971] loop4: detected capacity change from 0 to 1024 [ 1325.954610][ T9629] usb 3-1: USB disconnect, device number 110 [ 1326.053595][T18971] EXT4-fs (loop4): Ignoring removed bh option [ 1326.071760][T18974] loop2: detected capacity change from 0 to 1024 [ 1326.080717][T18971] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1326.126954][T18974] EXT4-fs (loop2): Ignoring removed bh option [ 1326.140956][T18974] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1326.505439][T18985] loop4: detected capacity change from 0 to 128 [ 1326.571106][T18985] FAT-fs (loop4): Unrecognized mount option "®C—‘‘‚9ê:*µÒ&аœ" or missing value [ 1326.716320][T18987] loop0: detected capacity change from 0 to 1024 [ 1326.794330][T18987] EXT4-fs (loop0): Ignoring removed bh option [ 1326.840127][T18987] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1326.871336][T18993] loop2: detected capacity change from 0 to 512 [ 1327.000279][T18993] EXT4-fs (loop2): Ignoring removed nobh option [ 1327.012142][T18993] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4974: bg 0: block 248: padding at end of block bitmap is not set [ 1327.027881][T18993] EXT4-fs error (device loop2): ext4_acquire_dquot:6200: comm syz.2.4974: Failed to acquire dquot type 1 [ 1327.067449][T18993] EXT4-fs (loop2): 1 truncate cleaned up [ 1327.073773][T18993] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x000000000000003c,,errors=continue. Quota mode: writeback. [ 1327.100174][T18997] loop4: detected capacity change from 0 to 256 [ 1327.141262][T18997] FAT-fs (loop4): Unrecognized mount option "shortname=win95Lí¢‚šiɾŒH˜q" or missing value [ 1327.159862][T18993] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1327.784267][ T1357] Bluetooth: hci1: command 0x1003 tx timeout [ 1327.799585][T15253] Bluetooth: hci1: sending frame failed (-49) [ 1328.070026][T19003] loop4: detected capacity change from 0 to 512 [ 1328.124811][T19003] EXT4-fs (loop4): Ignoring removed nobh option [ 1328.144425][T19003] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.4976: bg 0: block 248: padding at end of block bitmap is not set [ 1328.160092][T19003] __quota_error: 24 callbacks suppressed [ 1328.160110][T19003] Quota error (device loop4): write_blk: dquota write failed [ 1328.168369][T19005] loop2: detected capacity change from 0 to 128 [ 1328.174075][ T1357] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1328.188545][T19003] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1328.198673][T19003] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.4976: Failed to acquire dquot type 1 [ 1328.211177][T19003] EXT4-fs (loop4): 1 truncate cleaned up [ 1328.217001][T19003] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x000000000000003c,,errors=continue. Quota mode: writeback. [ 1328.234729][T19003] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1328.629394][ T1357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.642232][ T1357] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1328.652299][ T1357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.661981][ T1357] usb 1-1: config 0 descriptor?? [ 1329.339477][ T1357] usbhid 1-1:0.0: can't add hid device: -71 [ 1329.345825][ T1357] usbhid: probe of 1-1:0.0 failed with error -71 [ 1329.353907][ T1357] usb 1-1: USB disconnect, device number 89 [ 1329.370838][T19017] loop3: detected capacity change from 0 to 128 [ 1329.450398][T19017] FAT-fs (loop3): Unrecognized mount option "®C—‘‘‚9ê:*µÒ&аœ" or missing value [ 1329.749060][T19021] loop3: detected capacity change from 0 to 256 [ 1329.841234][T19021] FAT-fs (loop3): Unrecognized mount option "shortname=win95Lí¢‚šiɾŒH˜q" or missing value [ 1329.879321][ T1357] Bluetooth: hci1: command 0x1001 tx timeout [ 1329.912165][ T47] Bluetooth: hci1: sending frame failed (-49) [ 1331.252255][T19039] loop4: detected capacity change from 0 to 1024 [ 1331.292032][T19043] loop3: detected capacity change from 0 to 1024 [ 1331.331143][T19043] EXT4-fs (loop3): Ignoring removed bh option [ 1331.331143][T19039] EXT4-fs (loop4): Ignoring removed bh option [ 1331.351658][T19043] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1331.493357][T19050] loop0: detected capacity change from 0 to 1024 [ 1331.566408][T19050] EXT4-fs (loop0): Ignoring removed bh option [ 1331.621524][ T3054] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1331.631334][T19050] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1331.714170][T19054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=19054 comm=syz.4.4988 [ 1331.913093][T19058] loop4: detected capacity change from 0 to 256 [ 1331.930941][T19059] loop3: detected capacity change from 0 to 1024 [ 1331.959259][T10323] Bluetooth: hci1: command 0x1009 tx timeout [ 1332.000281][T19059] EXT4-fs (loop3): Ignoring removed bh option [ 1332.020696][ T30] audit: type=1326 audit(1761591197.431:9319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19060 comm="syz.0.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0b8bafc9 code=0x7ffc0000 [ 1332.237983][T19061] loop0: detected capacity change from 0 to 512 [ 1332.317573][ T30] audit: type=1326 audit(1761591197.461:9320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19060 comm="syz.0.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe0b8bafc9 code=0x7ffc0000 [ 1332.420773][T19061] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1332.467279][ T30] audit: type=1326 audit(1761591197.511:9321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19060 comm="syz.0.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0b8bafc9 code=0x7ffc0000 [ 1332.494387][ T30] audit: type=1326 audit(1761591197.511:9322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19060 comm="syz.0.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe0b8bafc9 code=0x7ffc0000 [ 1332.531956][T19061] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1332.632526][T19061] netlink: 'syz.0.4990': attribute type 4 has an invalid length. [ 1332.641217][ T30] audit: type=1326 audit(1761591197.521:9323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19060 comm="syz.0.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0b8bafc9 code=0x7ffc0000 [ 1332.665404][T19061] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4990'. [ 1332.683708][ T30] audit: type=1326 audit(1761591197.531:9324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19060 comm="syz.0.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe0b8bafc9 code=0x7ffc0000 [ 1332.708074][ T30] audit: type=1326 audit(1761591197.531:9325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19060 comm="syz.0.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0b8bafc9 code=0x7ffc0000 [ 1332.734029][ T30] audit: type=1326 audit(1761591197.531:9326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19060 comm="syz.0.4990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe0b8bafc9 code=0x7ffc0000 [ 1332.879764][T19059] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1332.928353][T19069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=19069 comm=syz.0.4991 [ 1333.079403][ T3054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.146728][T19074] loop0: detected capacity change from 0 to 256 [ 1333.186886][ T3054] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1333.200132][ T3054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.533679][T19074] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 1334.544083][T19074] SELinux: failed to load policy [ 1335.852958][ T3054] usb 3-1: config 0 descriptor?? [ 1335.875395][ T3054] usb 3-1: can't set config #0, error -71 [ 1335.906427][ T3054] usb 3-1: USB disconnect, device number 111 [ 1336.269314][T10323] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1336.549342][T10323] usb 2-1: Using ep0 maxpacket: 32 [ 1336.669331][T10323] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1336.699118][T10323] usb 2-1: config 0 interface 0 has no altsetting 1 [ 1336.789474][T10323] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1336.808947][T10323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1336.839280][T10323] usb 2-1: SerialNumber: syz [ 1336.844833][T10323] usb 2-1: config 0 descriptor?? [ 1336.889867][T10323] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1336.964980][T10323] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1337.021468][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1337.021482][ T30] audit: type=1326 audit(1761591202.431:9366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19102 comm="syz.2.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1337.051494][ T9629] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1337.059874][ T30] audit: type=1326 audit(1761591202.461:9367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19102 comm="syz.2.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1337.096906][ T30] audit: type=1326 audit(1761591202.461:9368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19102 comm="syz.2.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1337.129687][T19103] loop2: detected capacity change from 0 to 512 [ 1337.150083][T19103] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1337.153184][T19105] loop3: detected capacity change from 0 to 1024 [ 1337.159669][ T30] audit: type=1326 audit(1761591202.461:9369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19102 comm="syz.2.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1337.190677][ T30] audit: type=1326 audit(1761591202.461:9370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19102 comm="syz.2.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1337.217544][T19105] EXT4-fs (loop3): Ignoring removed bh option [ 1337.221422][ T30] audit: type=1326 audit(1761591202.471:9371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19102 comm="syz.2.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1337.251290][T19103] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1337.277092][T19103] netlink: 'syz.2.5001': attribute type 4 has an invalid length. [ 1337.278511][T19105] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1337.285041][ T30] audit: type=1326 audit(1761591202.491:9372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19102 comm="syz.2.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1337.319486][T19103] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5001'. [ 1337.332031][ T30] audit: type=1326 audit(1761591202.531:9373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19102 comm="syz.2.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1337.364886][ T30] audit: type=1326 audit(1761591202.531:9374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19102 comm="syz.2.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1337.389040][ T30] audit: type=1326 audit(1761591202.531:9375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19102 comm="syz.2.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1337.413314][ T9629] usb 1-1: Using ep0 maxpacket: 32 [ 1337.508650][T19114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=19114 comm=syz.2.5002 [ 1337.584382][ T9629] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1337.593390][ T9629] usb 1-1: config 0 interface 0 has no altsetting 1 [ 1337.689597][ T9629] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1337.714623][T19116] loop2: detected capacity change from 0 to 256 [ 1337.725799][ T9629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1337.800387][ T9629] usb 1-1: SerialNumber: syz [ 1337.850497][ T9629] usb 1-1: config 0 descriptor?? [ 1337.911973][ T9629] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1337.967563][ T9629] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1338.110552][T19097] syz.0.4999[19097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1338.110676][T19097] syz.0.4999[19097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1338.666909][ T9629] usb 1-1: USB disconnect, device number 90 [ 1338.706901][T19120] loop0: detected capacity change from 0 to 512 [ 1338.740122][T19120] EXT4-fs (loop0): Ignoring removed nobh option [ 1338.798367][T19120] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.5003: bg 0: block 248: padding at end of block bitmap is not set [ 1338.836742][T19120] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.5003: Failed to acquire dquot type 1 [ 1338.872123][T19120] EXT4-fs (loop0): 1 truncate cleaned up [ 1338.889079][T19120] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x000000000000003c,,errors=continue. Quota mode: writeback. [ 1338.941732][ T1357] usb 2-1: USB disconnect, device number 112 [ 1338.966275][T19120] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1339.216988][T19127] binder: 19124:19127 ioctl 4018620d 0 returned -22 [ 1341.499302][ T3054] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1341.579436][ T1357] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1341.835826][T19145] loop0: detected capacity change from 0 to 1024 [ 1341.866538][T19145] EXT4-fs (loop0): Ignoring removed bh option [ 1341.893076][T19145] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1341.959256][ T1357] usb 3-1: Using ep0 maxpacket: 32 [ 1341.989278][ T5150] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1342.079364][ T1357] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1342.088265][ T1357] usb 3-1: config 0 interface 0 has no altsetting 1 [ 1342.089472][ T3054] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.105953][ T3054] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1342.115231][ T3054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.124467][ T3054] usb 2-1: config 0 descriptor?? [ 1342.179405][ T1357] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1342.188551][ T1357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1342.196762][ T1357] usb 3-1: SerialNumber: syz [ 1342.202499][ T1357] usb 3-1: config 0 descriptor?? [ 1342.239759][ T1357] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1342.281356][ T1357] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1342.359357][ T5150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.371286][ T5150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.447649][T19133] syz.2.5006[19133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1342.447729][T19133] syz.2.5006[19133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1342.469350][ T5150] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1342.490052][ T5150] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1342.498137][ T5150] usb 5-1: Manufacturer: syz [ 1342.509483][ T5150] usb 5-1: config 0 descriptor?? [ 1342.791563][ T3054] sony 0003:054C:09CC.0070: hidraw0: USB HID v80.01 Device [HID 054c:09cc] on usb-dummy_hcd.1-1/input0 [ 1342.802723][ T3054] sony 0003:054C:09CC.0070: failed to claim input [ 1342.962376][ T3054] usb 2-1: USB disconnect, device number 113 [ 1343.046098][T10323] usb 3-1: USB disconnect, device number 112 [ 1343.217077][T19166] loop0: detected capacity change from 0 to 1024 [ 1343.279943][T19166] EXT4-fs (loop0): Ignoring removed bh option [ 1343.297683][T19168] loop3: detected capacity change from 0 to 128 [ 1343.306285][T19166] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1343.474707][T19172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=19172 comm=syz.1.5016 [ 1343.520476][T10323] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1343.643347][T19174] loop1: detected capacity change from 0 to 256 [ 1343.724401][ T5150] uclogic 0003:256C:006D.0071: failed retrieving Huion firmware version: -71 [ 1343.736436][ T5150] uclogic 0003:256C:006D.0071: failed probing parameters: -71 [ 1343.744005][ T5150] uclogic: probe of 0003:256C:006D.0071 failed with error -71 [ 1343.899851][T10323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.935041][T10323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.169690][T10323] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1344.204170][T10323] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1344.390942][T10323] usb 3-1: Manufacturer: syz [ 1344.400230][T10323] usb 3-1: config 0 descriptor?? [ 1344.588755][T19180] binder: 19175:19180 ioctl 4018620d 0 returned -22 [ 1344.887845][ T5150] usb 5-1: USB disconnect, device number 97 [ 1345.038843][T19184] loop0: detected capacity change from 0 to 1024 [ 1345.690357][T19184] EXT4-fs (loop0): Ignoring removed bh option [ 1345.700914][T19184] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1345.744974][T19190] loop1: detected capacity change from 0 to 128 [ 1345.839733][T19190] FAT-fs (loop1): Unrecognized mount option "®C—‘‘‚9ê:*µÒ&аœ" or missing value [ 1346.133501][T19190] loop1: detected capacity change from 0 to 256 [ 1346.140212][T10323] uclogic 0003:256C:006D.0072: failed retrieving Huion firmware version: -71 [ 1346.149018][T10323] uclogic 0003:256C:006D.0072: failed probing parameters: -71 [ 1346.166717][T10323] uclogic: probe of 0003:256C:006D.0072 failed with error -71 [ 1346.185490][T10323] usb 3-1: USB disconnect, device number 113 [ 1346.312999][T19190] FAT-fs (loop1): Unrecognized mount option "shortname=win95Lí¢‚šiɾŒH˜q" or missing value [ 1346.467546][T19207] loop0: detected capacity change from 0 to 1024 [ 1346.514124][T19207] EXT4-fs (loop0): Ignoring removed bh option [ 1346.618451][T19207] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1346.663344][T10323] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1347.419259][ T3054] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1347.510638][T10323] usb 5-1: Using ep0 maxpacket: 32 [ 1347.668446][T19225] loop1: detected capacity change from 0 to 512 [ 1348.618107][T10323] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1348.878653][T19228] loop3: detected capacity change from 0 to 1024 [ 1348.934154][T10323] usb 5-1: config 0 interface 0 has no altsetting 1 [ 1348.951065][T19225] EXT4-fs (loop1): Ignoring removed nobh option [ 1348.967036][T19228] EXT4-fs (loop3): Ignoring removed bh option [ 1349.049751][T10323] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1349.059085][T10323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1349.076341][T19228] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1349.099638][ T3054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1349.114162][T19225] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.5030: bg 0: block 248: padding at end of block bitmap is not set [ 1349.128517][ T3054] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1349.137802][ T3054] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.140120][T19225] __quota_error: 40 callbacks suppressed [ 1349.140137][T19225] Quota error (device loop1): write_blk: dquota write failed [ 1349.159900][T10323] usb 5-1: SerialNumber: syz [ 1349.164745][T19225] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1349.172720][T19235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=19235 comm=syz.0.5031 [ 1349.175801][ T3054] usb 3-1: config 0 descriptor?? [ 1349.193010][T19225] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.5030: Failed to acquire dquot type 1 [ 1349.205307][T19225] EXT4-fs (loop1): 1 truncate cleaned up [ 1349.211258][T19225] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x000000000000003c,,errors=continue. Quota mode: writeback. [ 1349.228234][T19225] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1349.256106][T10323] usb 5-1: config 0 descriptor?? [ 1349.371447][T19237] loop0: detected capacity change from 0 to 256 [ 1349.379489][T19238] syz.4.5024[19238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1349.379658][T19238] syz.4.5024[19238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1350.174543][T10323] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1350.701692][T19247] binder: 19242:19247 ioctl 4018620d 0 returned -22 [ 1350.857426][T10323] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1351.063106][T19251] loop2: detected capacity change from 0 to 1024 [ 1351.072916][T19251] EXT4-fs (loop2): Ignoring removed bh option [ 1351.116320][ T396] usb 5-1: USB disconnect, device number 98 [ 1351.133671][T19251] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1351.149327][ T3054] usbhid 3-1:0.0: can't add hid device: -71 [ 1351.162895][ T3054] usbhid: probe of 3-1:0.0 failed with error -71 [ 1351.171335][ T3054] usb 3-1: USB disconnect, device number 114 [ 1351.220401][T19260] loop1: detected capacity change from 0 to 128 [ 1351.227687][ T30] audit: type=1326 audit(1761591216.631:9414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19254 comm="syz.0.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0b8bafc9 code=0x7ffc0000 [ 1351.255771][T19257] loop0: detected capacity change from 0 to 512 [ 1351.262955][ T30] audit: type=1326 audit(1761591216.661:9415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19254 comm="syz.0.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe0b8bafc9 code=0x7ffc0000 [ 1351.295476][ T30] audit: type=1326 audit(1761591216.661:9416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19254 comm="syz.0.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0b8bafc9 code=0x7ffc0000 [ 1351.426783][T19261] binder: 19255:19261 ioctl c0306201 200000000080 returned -22 [ 1351.463078][T19261] 9pnet: Insufficient options for proto=fd [ 1351.541997][T19257] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1351.556456][ T30] audit: type=1326 audit(1761591216.661:9417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19254 comm="syz.0.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe0b8bafc9 code=0x7ffc0000 [ 1351.583304][T19260] FAT-fs (loop1): Unrecognized mount option "®C—‘‘‚9ê:*µÒ&аœ" or missing value [ 1351.691766][ T30] audit: type=1326 audit(1761591216.661:9418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19254 comm="syz.0.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0b8bafc9 code=0x7ffc0000 [ 1351.722879][T19257] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1351.739863][T19260] loop1: detected capacity change from 0 to 256 [ 1351.746592][T19260] FAT-fs (loop1): Unrecognized mount option "shortname=win95Lí¢‚šiɾŒH˜q" or missing value [ 1351.761318][ T30] audit: type=1326 audit(1761591216.661:9419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19254 comm="syz.0.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe0b8bafc9 code=0x7ffc0000 [ 1351.792595][ T30] audit: type=1326 audit(1761591216.661:9420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19254 comm="syz.0.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0b8bafc9 code=0x7ffc0000 [ 1351.818054][ T30] audit: type=1326 audit(1761591216.661:9421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19254 comm="syz.0.5034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe0b8bafc9 code=0x7ffc0000 [ 1351.931760][T19257] netlink: 'syz.0.5034': attribute type 4 has an invalid length. [ 1351.939801][T19257] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5034'. [ 1353.479275][T19280] binder: 19275:19280 ioctl c0306201 200000000080 returned -22 [ 1353.677054][T19278] loop4: detected capacity change from 0 to 1024 [ 1353.881184][T19278] EXT4-fs (loop4): Ignoring removed bh option [ 1353.922767][T19285] loop1: detected capacity change from 0 to 512 [ 1353.950512][T19285] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1353.972471][T19278] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1354.009154][T19285] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1354.036823][T19285] netlink: 'syz.1.5044': attribute type 4 has an invalid length. [ 1354.045028][T19285] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.5044'. [ 1354.165903][T19300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=19300 comm=syz.1.5046 [ 1354.184004][T19299] loop2: detected capacity change from 0 to 1024 [ 1354.254660][ T1357] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1354.432960][T19303] loop1: detected capacity change from 0 to 256 [ 1354.494348][T19299] EXT4-fs (loop2): Ignoring removed bh option [ 1354.659492][ T1357] usb 4-1: Using ep0 maxpacket: 32 [ 1354.693678][T19299] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1354.904344][T19309] binder: 19304:19309 ioctl c0306201 0 returned -14 [ 1355.593967][ T1357] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1355.609282][ T1357] usb 4-1: config 0 interface 0 has no altsetting 1 [ 1355.650653][T19312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=19312 comm=syz.4.5049 [ 1355.727466][ T1357] usb 4-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1355.740457][ T1357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1355.748610][ T1357] usb 4-1: SerialNumber: syz [ 1355.753978][ T1357] usb 4-1: config 0 descriptor?? [ 1355.789337][T19316] loop4: detected capacity change from 0 to 256 [ 1355.829817][ T1357] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1355.849964][ T1357] usb-storage 4-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1355.926332][T19320] binder: 19314:19320 ioctl c0306201 200000000080 returned -22 [ 1355.942230][T19320] 9pnet: Insufficient options for proto=fd [ 1356.093878][T19291] syz.3.5045[19291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1356.093952][T19291] syz.3.5045[19291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1356.157270][ T30] kauditd_printk_skb: 93 callbacks suppressed [ 1356.157285][ T30] audit: type=1326 audit(1761591221.561:9515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1356.210592][T19322] loop2: detected capacity change from 0 to 512 [ 1356.224598][ T30] audit: type=1326 audit(1761591221.561:9516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1356.248770][ T30] audit: type=1326 audit(1761591221.561:9517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1356.275007][ T30] audit: type=1326 audit(1761591221.561:9518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1356.275075][T19322] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1356.310293][ T30] audit: type=1326 audit(1761591221.591:9519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1356.334786][ T30] audit: type=1326 audit(1761591221.591:9520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1356.358591][ T30] audit: type=1326 audit(1761591221.591:9521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1356.382251][ T30] audit: type=1326 audit(1761591221.591:9522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1356.406130][ T30] audit: type=1326 audit(1761591221.591:9523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1356.430094][ T30] audit: type=1326 audit(1761591221.611:9524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19321 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1356.434155][T19322] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1356.456113][T19313] loop0: detected capacity change from 0 to 131072 [ 1356.478014][T19322] netlink: 'syz.2.5051': attribute type 4 has an invalid length. [ 1356.485923][T19322] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5051'. [ 1356.520389][T19313] F2FS-fs (loop0): Invalid log sectors per block(570425347) log sectorsize(9) [ 1356.529409][T19313] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1356.538932][T19313] F2FS-fs (loop0): invalid crc value [ 1356.572426][T19313] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 1356.630989][ T1357] usb 4-1: USB disconnect, device number 88 [ 1356.654572][T19313] F2FS-fs (loop0): recover fsync data on readonly fs [ 1356.754274][T19313] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 1357.630331][T19313] F2FS-fs (loop0): Bad quota inode 2:50331648 [ 1357.637177][T19078] Bluetooth: hci0: Frame reassembly failed (-84) [ 1357.637760][T19313] F2FS-fs (loop0): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 1357.654961][T19313] F2FS-fs (loop0): Cannot turn on quota_ino: -22 [ 1357.661743][T19313] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 1357.669687][T19313] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 1357.849330][T19339] loop4: detected capacity change from 0 to 1024 [ 1357.859472][ T3054] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1357.884750][T19341] loop2: detected capacity change from 0 to 512 [ 1357.899786][T19339] EXT4-fs (loop4): Ignoring removed bh option [ 1357.927052][T19341] EXT4-fs (loop2): Ignoring removed nobh option [ 1357.967582][T19339] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1357.991863][T19341] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5057: bg 0: block 248: padding at end of block bitmap is not set [ 1358.016752][T19341] EXT4-fs error (device loop2): ext4_acquire_dquot:6200: comm syz.2.5057: Failed to acquire dquot type 1 [ 1358.041104][T19341] EXT4-fs (loop2): 1 truncate cleaned up [ 1358.046779][T19341] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x000000000000003c,,errors=continue. Quota mode: writeback. [ 1358.063903][T19341] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1358.109286][ T3054] usb 2-1: Using ep0 maxpacket: 32 [ 1358.259360][ T3054] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1358.612211][ T3054] usb 2-1: config 0 interface 0 has no altsetting 1 [ 1358.869311][ T3054] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1358.880477][ T3054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1358.891232][ T3054] usb 2-1: SerialNumber: syz [ 1358.897102][ T3054] usb 2-1: config 0 descriptor?? [ 1358.989844][ T3054] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1358.998171][ T3054] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1359.143321][T19364] loop2: detected capacity change from 0 to 1024 [ 1359.166311][T19365] binder: 19357:19365 ioctl c0306201 0 returned -14 [ 1359.197303][T19362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=19362 comm=syz.4.5060 [ 1359.222531][T19364] EXT4-fs (loop2): Ignoring removed bh option [ 1359.441812][T19364] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1359.634108][T19371] loop4: detected capacity change from 0 to 256 [ 1359.642827][ T2132] Bluetooth: hci0: command 0x1003 tx timeout [ 1359.650626][ T47] Bluetooth: hci0: sending frame failed (-49) [ 1360.072670][T19373] loop0: detected capacity change from 0 to 128 [ 1360.267093][T19373] FAT-fs (loop0): Unrecognized mount option "®C—‘‘‚9ê:*µÒ&аœ" or missing value [ 1360.336752][ T2132] usb 2-1: USB disconnect, device number 114 [ 1360.352645][T19375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=19375 comm=syz.1.5062 [ 1360.456995][T19373] loop0: detected capacity change from 0 to 256 [ 1360.499868][T19373] FAT-fs (loop0): Unrecognized mount option "shortname=win95Lí¢‚šiɾŒH˜q" or missing value [ 1360.743962][T19377] loop1: detected capacity change from 0 to 256 [ 1360.894309][T19383] binder: 19378:19383 ioctl c0306201 200000000080 returned -22 [ 1360.909345][T19387] loop2: detected capacity change from 0 to 512 [ 1360.916486][T19383] 9pnet: Insufficient options for proto=fd [ 1360.940213][T19377] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 1360.964613][T19377] SELinux: failed to load policy [ 1360.973870][T19387] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1361.013567][T19387] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1361.049272][T19387] netlink: 'syz.2.5063': attribute type 4 has an invalid length. [ 1361.059396][T19387] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5063'. [ 1361.757193][ T1357] Bluetooth: hci0: command 0x1001 tx timeout [ 1361.767325][ T47] Bluetooth: hci0: sending frame failed (-49) [ 1363.455773][T19410] binder: 19407:19410 ioctl c0306201 0 returned -14 [ 1363.779296][ T350] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1363.825576][T10323] Bluetooth: hci0: command 0x1009 tx timeout [ 1363.943423][T19406] loop4: detected capacity change from 0 to 131072 [ 1363.953814][T19406] F2FS-fs (loop4): Invalid log sectors per block(570425347) log sectorsize(9) [ 1363.963390][T19406] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1363.987044][T19406] F2FS-fs (loop4): invalid crc value [ 1363.993755][T19414] loop1: detected capacity change from 0 to 1024 [ 1364.009844][T19406] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 1364.021985][T19414] EXT4-fs (loop1): Ignoring removed bh option [ 1364.047077][T19406] F2FS-fs (loop4): recover fsync data on readonly fs [ 1364.054803][T19406] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 1364.065167][T19414] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1364.088587][T19406] F2FS-fs (loop4): Bad quota inode 2:50331648 [ 1364.095102][T19406] F2FS-fs (loop4): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 1364.105622][T19406] F2FS-fs (loop4): Cannot turn on quota_ino: -22 [ 1364.150675][T19406] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 1364.161672][ T350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1364.173541][T19406] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 1364.181341][ T350] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.280592][ T350] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1364.289924][ T350] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1364.298020][ T350] usb 1-1: Manufacturer: syz [ 1364.549764][ T350] usb 1-1: config 0 descriptor?? [ 1364.755465][T19426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=19426 comm=syz.1.5075 [ 1364.950887][T19430] loop1: detected capacity change from 0 to 256 [ 1364.988620][T19429] loop4: detected capacity change from 0 to 1024 [ 1365.111215][T19429] EXT4-fs (loop4): Ignoring removed bh option [ 1365.483832][T19430] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 1365.494216][T19430] SELinux: failed to load policy [ 1366.215362][T19429] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1366.240098][T19437] loop1: detected capacity change from 0 to 512 [ 1366.270066][T19437] EXT4-fs (loop1): Ignoring removed nobh option [ 1366.312505][T19437] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.5077: bg 0: block 248: padding at end of block bitmap is not set [ 1366.389357][T19437] __quota_error: 111 callbacks suppressed [ 1366.389373][T19437] Quota error (device loop1): write_blk: dquota write failed [ 1366.405907][T19437] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1366.415968][T19437] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.5077: Failed to acquire dquot type 1 [ 1366.438015][T19437] EXT4-fs (loop1): 1 truncate cleaned up [ 1366.443830][T19437] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x000000000000003c,,errors=continue. Quota mode: writeback. [ 1366.460350][ T350] uclogic 0003:256C:006D.0073: failed retrieving Huion firmware version: -71 [ 1366.469128][ T350] uclogic 0003:256C:006D.0073: failed probing parameters: -71 [ 1366.469358][T19437] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1366.476790][ T350] uclogic: probe of 0003:256C:006D.0073 failed with error -71 [ 1366.496804][ T350] usb 1-1: USB disconnect, device number 91 [ 1367.216491][T19442] loop2: detected capacity change from 0 to 131072 [ 1367.237500][T19451] loop4: detected capacity change from 0 to 128 [ 1367.322081][T19442] F2FS-fs (loop2): Invalid log sectors per block(570425347) log sectorsize(9) [ 1367.461869][T19442] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1367.471540][T19442] F2FS-fs (loop2): invalid crc value [ 1367.478084][T19442] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 1367.489400][T10323] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1367.519457][T19442] F2FS-fs (loop2): recover fsync data on readonly fs [ 1367.526350][T19442] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 1367.536777][T19442] F2FS-fs (loop2): Bad quota inode 2:50331648 [ 1367.543069][T19442] F2FS-fs (loop2): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 1367.553487][T19442] F2FS-fs (loop2): Cannot turn on quota_ino: -22 [ 1367.560148][T19442] F2FS-fs (loop2): Try to recover 2th superblock, ret: -30 [ 1367.567480][T19442] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 1367.740519][T10323] usb 2-1: Using ep0 maxpacket: 32 [ 1367.879793][T10323] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1367.889027][T10323] usb 2-1: config 0 interface 0 has no altsetting 1 [ 1368.459309][ T1357] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1368.469840][T10323] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1368.479003][T10323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1368.487366][T10323] usb 2-1: SerialNumber: syz [ 1368.503040][T10323] usb 2-1: config 0 descriptor?? [ 1368.540352][T10323] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1368.548661][T10323] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1368.637683][T19469] loop3: detected capacity change from 0 to 512 [ 1368.675373][T19469] EXT4-fs (loop3): Ignoring removed nobh option [ 1368.691044][T19469] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5086: bg 0: block 248: padding at end of block bitmap is not set [ 1368.699311][ T9629] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1368.705691][T19469] Quota error (device loop3): write_blk: dquota write failed [ 1368.720406][T19469] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1368.730645][T19469] EXT4-fs error (device loop3): ext4_acquire_dquot:6200: comm syz.3.5086: Failed to acquire dquot type 1 [ 1368.747656][T19453] syz.1.5080[19453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1368.747731][T19453] syz.1.5080[19453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1368.747858][T19469] EXT4-fs (loop3): 1 truncate cleaned up [ 1368.770879][ T1357] usb 3-1: Using ep0 maxpacket: 32 [ 1368.781763][T19469] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x000000000000003c,,errors=continue. Quota mode: writeback. [ 1368.799063][T19469] ext4 filesystem being mounted at /507/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1368.929380][T10323] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1368.937571][ T1357] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1368.946846][ T1357] usb 3-1: config 0 interface 0 has no altsetting 1 [ 1369.329389][ T1357] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1369.338696][ T1357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1369.346847][ T1357] usb 3-1: SerialNumber: syz [ 1369.352154][ T1357] usb 3-1: config 0 descriptor?? [ 1369.389409][ T9629] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.401081][ T1357] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1369.408102][ T9629] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1369.417204][T10323] usb 5-1: Using ep0 maxpacket: 32 [ 1369.423178][ T9629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.431749][ T1357] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1369.440393][ T9629] usb 1-1: config 0 descriptor?? [ 1369.578869][T10323] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1369.588304][T10323] usb 5-1: config 0 interface 0 has no altsetting 1 [ 1369.599288][ T965] usb 2-1: USB disconnect, device number 115 [ 1369.610888][T19457] syz.2.5082[19457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1369.610978][T19457] syz.2.5082[19457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1369.625993][T19479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=19479 comm=syz.1.5088 [ 1369.689496][T10323] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1369.698784][T10323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1369.706808][T10323] usb 5-1: SerialNumber: syz [ 1369.712020][T10323] usb 5-1: config 0 descriptor?? [ 1369.749753][T10323] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1369.771088][T10323] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1369.800328][T19483] loop1: detected capacity change from 0 to 256 [ 1369.869283][ T1357] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1369.969377][ T9629] usbhid 1-1:0.0: can't add hid device: -71 [ 1369.975358][ T9629] usbhid: probe of 1-1:0.0 failed with error -71 [ 1369.979517][T19483] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 1369.990616][ T9629] usb 1-1: USB disconnect, device number 92 [ 1369.999489][T19483] SELinux: failed to load policy [ 1370.109238][ T1357] usb 4-1: Using ep0 maxpacket: 32 [ 1370.157965][ T965] usb 3-1: USB disconnect, device number 115 [ 1370.249320][ T1357] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1370.262548][ T1357] usb 4-1: config 0 interface 0 has no altsetting 1 [ 1370.349756][ T1357] usb 4-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1370.367315][ T1357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1370.609182][ T1357] usb 4-1: SerialNumber: syz [ 1370.693107][ T1357] usb 4-1: config 0 descriptor?? [ 1370.769839][ T1357] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1370.781236][ T1357] usb-storage 4-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1370.896769][T19494] loop0: detected capacity change from 0 to 1024 [ 1370.975719][T19494] EXT4-fs (loop0): Ignoring removed bh option [ 1371.086882][T19494] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1371.640739][T19504] binder: 19499:19504 ioctl c0306201 200000000080 returned -22 [ 1373.180665][T19506] loop1: detected capacity change from 0 to 256 [ 1373.185227][ T1357] usb 4-1: USB disconnect, device number 89 [ 1373.194658][ T9629] usb 5-1: USB disconnect, device number 99 [ 1373.340442][T19506] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 1373.351298][T19506] SELinux: failed to load policy [ 1373.544983][T19513] loop4: detected capacity change from 0 to 1024 [ 1373.673324][T19513] EXT4-fs (loop4): Ignoring removed bh option [ 1373.718834][T19513] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1374.014469][T10323] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1374.067186][ T3549] Bluetooth: hci0: Frame reassembly failed (-84) [ 1374.140216][T19515] 9pnet: Insufficient options for proto=fd [ 1374.148042][T19515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5093'. [ 1374.150746][T19524] loop1: detected capacity change from 0 to 512 [ 1374.166897][T19524] EXT4-fs (loop1): Ignoring removed nobh option [ 1374.181652][T19524] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.5098: bg 0: block 248: padding at end of block bitmap is not set [ 1374.196255][T19524] Quota error (device loop1): write_blk: dquota write failed [ 1374.204168][T19524] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1374.214629][T19524] EXT4-fs error (device loop1): ext4_acquire_dquot:6200: comm syz.1.5098: Failed to acquire dquot type 1 [ 1374.226653][T19524] EXT4-fs (loop1): 1 truncate cleaned up [ 1374.232564][T19524] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x000000000000003c,,errors=continue. Quota mode: writeback. [ 1374.249447][T19524] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1374.260483][T10323] usb 3-1: Using ep0 maxpacket: 32 [ 1374.533350][T10323] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1374.582413][T10323] usb 3-1: config 0 interface 0 has no altsetting 1 [ 1374.789762][T10323] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1374.800452][T10323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1374.809100][T10323] usb 3-1: SerialNumber: syz [ 1374.844365][T10323] usb 3-1: config 0 descriptor?? [ 1374.890228][T10323] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1374.898627][T10323] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1375.001414][ T1357] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1375.095733][T19512] syz.2.5094[19512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1375.095790][T19512] syz.2.5094[19512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1375.249289][ T1357] usb 1-1: Using ep0 maxpacket: 32 [ 1375.292415][T19540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=19540 comm=syz.4.5102 [ 1375.339380][ T6] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1375.409370][ T1357] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1375.418442][ T1357] usb 1-1: config 0 interface 0 has no altsetting 1 [ 1375.464181][T19542] loop4: detected capacity change from 0 to 256 [ 1375.492018][T19542] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 1375.502432][T19542] SELinux: failed to load policy [ 1375.509516][ T1357] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1375.518822][ T1357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1375.527558][ T1357] usb 1-1: SerialNumber: syz [ 1375.539284][ T1357] usb 1-1: config 0 descriptor?? [ 1375.579857][ T1357] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1375.606939][ T1357] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1375.620413][T10323] usb 3-1: USB disconnect, device number 116 [ 1375.699707][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1375.711173][ T6] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1375.720614][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.731142][ T6] usb 2-1: config 0 descriptor?? [ 1376.029263][T10323] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1376.119244][ T1357] Bluetooth: hci0: command 0x1003 tx timeout [ 1376.126828][ T47] Bluetooth: hci0: sending frame failed (-49) [ 1376.221076][ T6] sony 0003:054C:09CC.0074: hidraw0: USB HID v80.01 Device [HID 054c:09cc] on usb-dummy_hcd.1-1/input0 [ 1376.232545][ T6] sony 0003:054C:09CC.0074: failed to claim input [ 1376.399382][T10323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1376.411405][T10323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1376.426176][ T1357] usb 2-1: USB disconnect, device number 116 [ 1376.499351][T10323] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1376.508541][T10323] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1376.517036][T10323] usb 3-1: Manufacturer: syz [ 1376.522396][T10323] usb 3-1: config 0 descriptor?? [ 1376.529321][ T9629] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1376.889374][ T9629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1376.900510][ T9629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1376.940585][ T30] audit: type=1326 audit(1761591242.351:9634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19551 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf994dfc9 code=0x7ffc0000 [ 1376.966890][ T30] audit: type=1326 audit(1761591242.351:9635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19551 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf994dfc9 code=0x7ffc0000 [ 1376.991159][ T30] audit: type=1326 audit(1761591242.351:9636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19551 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fcdf994dfc9 code=0x7ffc0000 [ 1377.016728][ T30] audit: type=1326 audit(1761591242.351:9637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19551 comm="syz.1.5105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf994dfc9 code=0x7ffc0000 [ 1377.044617][ T9629] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1377.054522][ T9629] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1377.062671][ T9629] usb 5-1: Manufacturer: syz [ 1377.068083][ T9629] usb 5-1: config 0 descriptor?? [ 1377.304216][ T1357] usb 1-1: USB disconnect, device number 93 [ 1377.346366][ T965] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1377.514517][T19559] loop0: detected capacity change from 0 to 1024 [ 1377.559309][T10323] uclogic 0003:256C:006D.0075: failed retrieving Huion firmware version: -71 [ 1377.568625][T10323] uclogic 0003:256C:006D.0075: failed probing parameters: -71 [ 1377.577573][T10323] uclogic: probe of 0003:256C:006D.0075 failed with error -71 [ 1377.588203][T10323] usb 3-1: USB disconnect, device number 117 [ 1377.594425][ T965] usb 2-1: Using ep0 maxpacket: 32 [ 1377.609557][T19559] EXT4-fs (loop0): Ignoring removed bh option [ 1377.631240][T19559] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1377.719358][ T965] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1377.728317][ T965] usb 2-1: config 0 interface 0 has no altsetting 1 [ 1377.809423][ T965] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1377.818596][ T965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1377.826637][ T965] usb 2-1: SerialNumber: syz [ 1377.832419][ T965] usb 2-1: config 0 descriptor?? [ 1377.869853][ T965] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1377.879568][ T965] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1378.009340][ T9629] uclogic 0003:256C:006D.0076: failed retrieving Huion firmware version: -71 [ 1378.020091][ T9629] uclogic 0003:256C:006D.0076: failed probing parameters: -71 [ 1378.028351][ T9629] uclogic: probe of 0003:256C:006D.0076 failed with error -71 [ 1378.037398][ T9629] usb 5-1: USB disconnect, device number 100 [ 1378.199293][ T965] Bluetooth: hci0: command 0x1001 tx timeout [ 1378.206407][ T47] Bluetooth: hci0: sending frame failed (-49) [ 1378.675417][T19078] Bluetooth: hci1: Frame reassembly failed (-84) [ 1378.998995][T19574] loop4: detected capacity change from 0 to 131072 [ 1379.059833][T19574] F2FS-fs (loop4): Invalid log sectors per block(570425347) log sectorsize(9) [ 1379.069296][T19574] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1379.080016][T19574] F2FS-fs (loop4): invalid crc value [ 1379.087403][T19574] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 1379.111477][T19574] F2FS-fs (loop4): recover fsync data on readonly fs [ 1379.119569][T19574] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 1379.130326][T19574] F2FS-fs (loop4): Bad quota inode 2:50331648 [ 1379.137069][T19574] F2FS-fs (loop4): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 1379.147907][T19574] F2FS-fs (loop4): Cannot turn on quota_ino: -22 [ 1379.159612][T19574] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 1379.167587][T19574] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 1379.259296][ T9629] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1379.599334][T10323] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1379.619387][ T9629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1379.632380][ T9629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1379.719600][ T9629] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1379.729306][ T9629] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1379.738140][ T9629] usb 3-1: Manufacturer: syz [ 1379.745071][ T9629] usb 3-1: config 0 descriptor?? [ 1379.839286][T10323] usb 5-1: Using ep0 maxpacket: 32 [ 1379.959343][T10323] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1379.968303][T10323] usb 5-1: config 0 interface 0 has no altsetting 1 [ 1379.989503][ T1357] usb 2-1: USB disconnect, device number 117 [ 1380.049408][T10323] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1380.058560][T10323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1380.066883][T10323] usb 5-1: SerialNumber: syz [ 1380.072579][T10323] usb 5-1: config 0 descriptor?? [ 1380.109990][T10323] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1380.117860][T10323] usb-storage 5-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1380.279318][T10323] Bluetooth: hci0: command 0x1009 tx timeout [ 1380.315255][T19579] syz.4.5112[19579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1380.315312][T19579] syz.4.5112[19579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1380.389297][ T1357] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1380.599314][T10323] Bluetooth: hci1: command 0x1003 tx timeout [ 1380.605436][T15253] Bluetooth: hci1: sending frame failed (-49) [ 1380.689416][ T9629] uclogic 0003:256C:006D.0077: failed retrieving Huion firmware version: -71 [ 1380.698593][ T9629] uclogic 0003:256C:006D.0077: failed probing parameters: -71 [ 1380.706112][ T9629] uclogic: probe of 0003:256C:006D.0077 failed with error -71 [ 1380.714971][ T9629] usb 3-1: USB disconnect, device number 118 [ 1380.769366][ T1357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1380.781066][ T1357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1380.831775][T10323] usb 5-1: USB disconnect, device number 101 [ 1380.844178][T19585] loop4: detected capacity change from 0 to 512 [ 1380.851526][T19585] EXT4-fs (loop4): Ignoring removed nobh option [ 1380.861847][T19585] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.5114: bg 0: block 248: padding at end of block bitmap is not set [ 1380.876920][T19585] Quota error (device loop4): write_blk: dquota write failed [ 1380.884852][ T1357] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1380.884935][T19585] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1380.894739][ T1357] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1380.904145][T19585] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.5114: Failed to acquire dquot type 1 [ 1380.912865][ T1357] usb 2-1: Manufacturer: syz [ 1380.924312][T19585] EXT4-fs (loop4): 1 truncate cleaned up [ 1380.931683][ T1357] usb 2-1: config 0 descriptor?? [ 1380.933995][T19585] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x000000000000003c,,errors=continue. Quota mode: writeback. [ 1380.955212][T19585] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1381.448100][T19594] binder: 19591:19594 ioctl c0306201 200000000080 returned -22 [ 1381.770897][T19600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=19600 comm=syz.4.5118 [ 1381.955765][T19602] loop4: detected capacity change from 0 to 256 [ 1381.964517][ T1357] uclogic 0003:256C:006D.0078: failed retrieving Huion firmware version: -71 [ 1381.973669][ T1357] uclogic 0003:256C:006D.0078: failed probing parameters: -71 [ 1381.981513][ T1357] uclogic: probe of 0003:256C:006D.0078 failed with error -71 [ 1382.004193][ T1357] usb 2-1: USB disconnect, device number 118 [ 1382.109821][T19602] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 1382.119835][T19602] SELinux: failed to load policy [ 1382.813212][ T6] Bluetooth: hci1: command 0x1001 tx timeout [ 1382.832422][T15253] Bluetooth: hci1: sending frame failed (-49) [ 1383.149293][ T1357] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1383.414663][ T1357] usb 3-1: Using ep0 maxpacket: 32 [ 1383.495314][T19611] loop1: detected capacity change from 0 to 1024 [ 1383.539391][ T1357] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1383.549760][ T1357] usb 3-1: config 0 interface 0 has no altsetting 1 [ 1383.570672][T19611] EXT4-fs (loop1): Ignoring removed bh option [ 1383.581212][T19611] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1383.639421][ T1357] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1383.648817][ T1357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1383.656839][ T1357] usb 3-1: SerialNumber: syz [ 1383.662268][ T1357] usb 3-1: config 0 descriptor?? [ 1383.699906][ T1357] usb-storage 3-1:0.0: USB Mass Storage device detected [ 1383.707570][ T1357] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1384.029259][ T6] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1384.239884][T19621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=19621 comm=syz.1.5123 [ 1384.435664][T19623] loop1: detected capacity change from 0 to 256 [ 1384.752585][T19623] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 1384.762790][T19623] SELinux: failed to load policy [ 1385.348251][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.431440][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1385.449689][ T396] Bluetooth: hci1: command 0x1009 tx timeout [ 1385.457192][ T3054] usb 3-1: USB disconnect, device number 119 [ 1385.481346][T19628] loop2: detected capacity change from 0 to 1024 [ 1385.501718][T19631] loop3: detected capacity change from 0 to 1024 [ 1385.511807][T19628] EXT4-fs (loop2): Ignoring removed bh option [ 1385.529310][ T6] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1385.539103][T19628] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1385.569606][ T6] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1385.587962][ T6] usb 5-1: Manufacturer: syz [ 1385.596806][ T6] usb 5-1: config 0 descriptor?? [ 1385.690122][T19631] EXT4-fs (loop3): Ignoring removed bh option [ 1385.704506][ T30] audit: type=1326 audit(1761591251.111:9638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1385.728591][ T30] audit: type=1326 audit(1761591251.111:9639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1385.753384][ T30] audit: type=1326 audit(1761591251.111:9640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1385.777440][ T30] audit: type=1326 audit(1761591251.111:9641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1385.783368][T19631] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1385.829305][ T30] audit: type=1326 audit(1761591251.161:9642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1385.882228][T19636] loop2: detected capacity change from 0 to 512 [ 1385.919348][ T30] audit: type=1326 audit(1761591251.161:9643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1385.942893][ T30] audit: type=1326 audit(1761591251.281:9644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1385.966454][ T30] audit: type=1326 audit(1761591251.281:9645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1385.990171][ T30] audit: type=1326 audit(1761591251.281:9646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1385.990224][T19636] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1386.018435][ T30] audit: type=1326 audit(1761591251.281:9647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1386.084792][ T30] audit: type=1326 audit(1761591251.281:9648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1386.088470][T19636] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1386.148918][ T30] audit: type=1326 audit(1761591251.281:9649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1386.227655][ T30] audit: type=1326 audit(1761591251.281:9650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faa01e18fc9 code=0x7ffc0000 [ 1386.251565][ T30] audit: type=1326 audit(1761591251.281:9651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faa01e19003 code=0x7ffc0000 [ 1386.266314][T19636] netlink: 'syz.2.5127': attribute type 4 has an invalid length. [ 1386.274952][ T30] audit: type=1326 audit(1761591251.291:9652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.2.5127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7faa01e17a7f code=0x7ffc0000 [ 1386.306639][T19636] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5127'. [ 1386.422134][T19630] loop1: detected capacity change from 0 to 131072 [ 1386.475705][T19630] F2FS-fs (loop1): Invalid log sectors per block(570425347) log sectorsize(9) [ 1386.499283][T19630] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1386.519790][T19630] F2FS-fs (loop1): invalid crc value [ 1386.534784][T19630] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 1386.558303][T19630] F2FS-fs (loop1): recover fsync data on readonly fs [ 1386.565083][T19630] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 1386.576879][T19630] F2FS-fs (loop1): Bad quota inode 2:50331648 [ 1386.583109][T19630] F2FS-fs (loop1): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 1386.595209][T19630] F2FS-fs (loop1): Cannot turn on quota_ino: -22 [ 1386.770194][T19648] binder: 19642:19648 ioctl c0306201 200000000080 returned -22 [ 1386.817668][T19630] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30 [ 1386.826384][T19630] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 1387.023568][ T6] uclogic 0003:256C:006D.0079: failed retrieving Huion firmware version: -71 [ 1387.032474][ T6] uclogic 0003:256C:006D.0079: failed probing parameters: -71 [ 1387.040497][ T6] uclogic: probe of 0003:256C:006D.0079 failed with error -71 [ 1387.051618][ T6] usb 5-1: USB disconnect, device number 102 [ 1387.277202][T19654] loop4: detected capacity change from 0 to 512 [ 1387.311962][T19656] loop3: detected capacity change from 0 to 512 [ 1387.351214][T19654] EXT4-fs (loop4): Ignoring removed nobh option [ 1387.375257][T19658] loop1: detected capacity change from 0 to 1024 [ 1387.409937][T19654] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.5132: bg 0: block 248: padding at end of block bitmap is not set [ 1387.429085][T19658] EXT4-fs (loop1): Ignoring removed bh option [ 1387.440305][T19654] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.5132: Failed to acquire dquot type 1 [ 1387.447505][T19658] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1387.452444][T19654] EXT4-fs (loop4): 1 truncate cleaned up [ 1387.482965][T19654] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x000000000000003c,,errors=continue. Quota mode: writeback. [ 1387.499712][T19654] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1387.512075][T19656] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1387.531497][T19656] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1387.552368][T19656] netlink: 'syz.3.5133': attribute type 4 has an invalid length. [ 1387.561634][T19656] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.5133'. [ 1387.883476][ T6] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1387.929282][ T9629] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1388.213360][T19675] loop4: detected capacity change from 0 to 1024 [ 1388.249375][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1388.260369][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1388.261971][T19675] EXT4-fs (loop4): Ignoring removed bh option [ 1388.280521][T19675] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1388.303846][ T9629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1388.315611][ T9629] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1388.349394][ T6] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1388.358605][ T6] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1388.366754][ T6] usb 3-1: Manufacturer: syz [ 1388.372179][ T6] usb 3-1: config 0 descriptor?? [ 1388.389303][T10323] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1388.409413][ T9629] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1388.418585][ T9629] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1388.426793][ T9629] usb 4-1: Manufacturer: syz [ 1388.437726][ T9629] usb 4-1: config 0 descriptor?? [ 1388.444226][T19679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=19679 comm=syz.4.5138 [ 1388.625080][T19681] loop4: detected capacity change from 0 to 256 [ 1388.752009][T19681] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 1388.762002][T19681] SELinux: failed to load policy [ 1388.778649][T10323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1388.946531][T10323] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1389.070237][T10323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.164686][T10323] usb 2-1: config 0 descriptor?? [ 1389.677594][T19689] loop4: detected capacity change from 0 to 512 [ 1389.685523][T19689] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 1389.700574][ T9629] uclogic 0003:256C:006D.007A: failed retrieving Huion firmware version: -71 [ 1389.713265][ T9629] uclogic 0003:256C:006D.007A: failed probing parameters: -71 [ 1389.721171][ T9629] uclogic: probe of 0003:256C:006D.007A failed with error -71 [ 1389.738995][ T9629] usb 4-1: USB disconnect, device number 90 [ 1389.740318][T19689] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1389.770571][T19689] netlink: 'syz.4.5140': attribute type 4 has an invalid length. [ 1389.779308][T19692] binder: 19682:19692 ioctl c0306201 200000000080 returned -22 [ 1389.786907][T19689] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.5140'. [ 1389.804502][T19692] 9pnet: Insufficient options for proto=fd [ 1389.814012][T19692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5139'. [ 1389.959288][ T6] uclogic 0003:256C:006D.007B: failed retrieving Huion firmware version: -71 [ 1389.968323][ T6] uclogic 0003:256C:006D.007B: failed probing parameters: -71 [ 1389.976318][ T6] uclogic: probe of 0003:256C:006D.007B failed with error -71 [ 1389.985593][ T6] usb 3-1: USB disconnect, device number 120 [ 1390.049779][T10323] usbhid 2-1:0.0: can't add hid device: -71 [ 1390.083431][T19696] binder: 19693:19696 ioctl 4018620d 0 returned -22 [ 1390.108761][T10323] usbhid: probe of 2-1:0.0 failed with error -71 [ 1390.257356][T10323] usb 2-1: USB disconnect, device number 119 [ 1390.481685][T19703] loop0: detected capacity change from 0 to 1024 [ 1390.550616][T19703] EXT4-fs (loop0): Ignoring removed bh option [ 1390.595091][T19702] loop3: detected capacity change from 0 to 1024 [ 1390.595434][T19703] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1390.640368][T19702] EXT4-fs (loop3): Ignoring removed bh option [ 1390.673518][T19702] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1390.712598][T19713] loop2: detected capacity change from 0 to 512 [ 1391.300017][T19715] binder: 19708:19715 ioctl c0306201 200000000080 returned -22 [ 1391.379763][T19713] EXT4-fs (loop2): Ignoring removed nobh option [ 1391.418674][T19713] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5145: bg 0: block 248: padding at end of block bitmap is not set [ 1391.433356][T19713] __quota_error: 159 callbacks suppressed [ 1391.433369][T19713] Quota error (device loop2): write_blk: dquota write failed [ 1391.446737][T19713] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1391.456916][T19713] EXT4-fs error (device loop2): ext4_acquire_dquot:6200: comm syz.2.5145: Failed to acquire dquot type 1 [ 1391.503269][T19713] EXT4-fs (loop2): 1 truncate cleaned up [ 1391.508949][T19713] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x000000000000003c,,errors=continue. Quota mode: writeback. [ 1391.525985][T19713] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1391.674578][T19726] loop4: detected capacity change from 0 to 1024 [ 1391.819996][ T9629] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1392.012675][T19726] EXT4-fs (loop4): Ignoring removed bh option [ 1392.058266][T19729] loop3: detected capacity change from 0 to 512 [ 1392.104235][T19726] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1392.189871][T19729] EXT4-fs (loop3): Ignoring removed nobh option [ 1392.339611][T19737] loop2: detected capacity change from 0 to 1024 [ 1392.350836][T19729] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5149: bg 0: block 248: padding at end of block bitmap is not set [ 1392.396485][T19729] Quota error (device loop3): write_blk: dquota write failed [ 1392.407222][T19737] EXT4-fs (loop2): Ignoring removed bh option [ 1392.459486][ T9629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.496461][ T9629] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1392.506774][T19737] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1392.543044][T19729] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1392.558711][ T9629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.570452][T19729] EXT4-fs error (device loop3): ext4_acquire_dquot:6200: comm syz.3.5149: Failed to acquire dquot type 1 [ 1392.591303][ T9629] usb 2-1: config 0 descriptor?? [ 1392.619758][T19729] EXT4-fs (loop3): 1 truncate cleaned up [ 1392.625439][T19729] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x000000000000003c,,errors=continue. Quota mode: writeback. [ 1392.645473][T19729] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1393.164440][T19722] loop0: detected capacity change from 0 to 131072 [ 1393.248421][T19722] F2FS-fs (loop0): Invalid log sectors per block(570425347) log sectorsize(9) [ 1393.263259][T19748] loop4: detected capacity change from 0 to 1024 [ 1393.270238][T19722] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1393.282525][T19722] F2FS-fs (loop0): invalid crc value [ 1393.288607][T19748] EXT4-fs (loop4): Ignoring removed bh option [ 1393.298274][T19751] loop3: detected capacity change from 0 to 512 [ 1393.309737][T19722] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 1393.321456][T19751] EXT4-fs (loop3): Ignoring removed nobh option [ 1393.353498][T19722] F2FS-fs (loop0): recover fsync data on readonly fs [ 1393.359296][ T9629] usbhid 2-1:0.0: can't add hid device: -71 [ 1393.360418][T19722] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 1393.366175][ T9629] usbhid: probe of 2-1:0.0 failed with error -71 [ 1393.381178][T19722] F2FS-fs (loop0): Bad quota inode 2:50331648 [ 1393.384331][ T9629] usb 2-1: USB disconnect, device number 120 [ 1393.388871][T19722] F2FS-fs (loop0): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 1393.401757][T19751] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.5153: bg 0: block 248: padding at end of block bitmap is not set [ 1393.404402][ T3054] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1393.424403][T19722] F2FS-fs (loop0): Cannot turn on quota_ino: -22 [ 1393.427274][T19751] Quota error (device loop3): write_blk: dquota write failed [ 1393.433776][T19748] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1393.440286][T19751] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1393.463685][T19722] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 1393.473409][T19751] EXT4-fs error (device loop3): ext4_acquire_dquot:6200: comm syz.3.5153: Failed to acquire dquot type 1 [ 1393.480201][T19722] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 1393.493387][T19751] EXT4-fs (loop3): 1 truncate cleaned up [ 1393.504704][T19751] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x000000000000003c,,errors=continue. Quota mode: writeback. [ 1393.521435][T19751] ext4 filesystem being mounted at /517/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1394.009388][ T3054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1394.026402][ T3054] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1394.580839][T19767] loop0: detected capacity change from 0 to 1024 [ 1394.627119][T19767] EXT4-fs (loop0): Ignoring removed bh option [ 1394.727848][ T3054] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1394.737170][ T3054] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1394.746522][ T3054] usb 3-1: Manufacturer: syz [ 1394.758179][ T3054] usb 3-1: config 0 descriptor?? [ 1394.766817][T19767] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1395.597786][T19775] loop4: detected capacity change from 0 to 1024 [ 1395.839759][T19777] loop3: detected capacity change from 0 to 1024 [ 1395.859902][T19775] EXT4-fs (loop4): Ignoring removed bh option [ 1395.870430][T19777] EXT4-fs (loop3): Ignoring removed bh option [ 1395.915110][T19777] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1395.923873][T19775] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1395.941365][T19779] loop1: detected capacity change from 0 to 128 [ 1396.265355][T19789] binder: 19788:19789 ioctl c0306201 200000000080 returned -22 [ 1396.274063][T19789] 9pnet: Insufficient options for proto=fd [ 1396.280717][T19789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5162'. [ 1396.339335][ T9629] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1396.404810][T19793] loop4: detected capacity change from 0 to 1024 [ 1396.442427][T19793] EXT4-fs (loop4): Ignoring removed bh option [ 1396.580345][T19793] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1396.695629][T19792] loop3: detected capacity change from 0 to 1024 [ 1396.746751][T19792] EXT4-fs (loop3): Ignoring removed bh option [ 1396.753083][ T9629] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1396.764535][ T9629] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1396.780370][T19792] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1396.809347][ T3054] uclogic 0003:256C:006D.007C: failed retrieving Huion firmware version: -71 [ 1396.818449][ T3054] uclogic 0003:256C:006D.007C: failed probing parameters: -71 [ 1396.825993][ T3054] uclogic: probe of 0003:256C:006D.007C failed with error -71 [ 1396.869872][ T9629] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1396.880205][ T9629] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1396.929334][T19804] binder: 19799:19804 ioctl 4018620d 0 returned -22 [ 1396.955741][ T9629] usb 1-1: Manufacturer: syz [ 1397.081694][ T3054] usb 3-1: USB disconnect, device number 121 [ 1397.104210][ T9629] usb 1-1: config 0 descriptor?? [ 1397.138381][T19806] loop4: detected capacity change from 0 to 512 [ 1397.277696][T19806] EXT4-fs (loop4): Ignoring removed nobh option [ 1397.296084][T19806] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.5165: bg 0: block 248: padding at end of block bitmap is not set [ 1397.311087][T19806] Quota error (device loop4): write_blk: dquota write failed [ 1397.318653][T19806] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1397.328903][T19806] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.5165: Failed to acquire dquot type 1 [ 1397.343782][T19806] EXT4-fs (loop4): 1 truncate cleaned up [ 1397.355645][T19806] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x000000000000003c,,errors=continue. Quota mode: writeback. [ 1397.374492][T19806] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1397.401217][T19813] binder: 19807:19813 ioctl c0306201 200000000080 returned -22 [ 1397.416657][T19813] 9pnet: Insufficient options for proto=fd [ 1397.606572][T19815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=19815 comm=syz.2.5167 [ 1398.540567][T19821] loop1: detected capacity change from 0 to 1024 [ 1399.342719][T19823] loop2: detected capacity change from 0 to 256 [ 1399.390020][T19821] EXT4-fs (loop1): Ignoring removed bh option [ 1399.514495][T19823] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 1399.524413][T19823] SELinux: failed to load policy [ 1399.589862][ T9629] uclogic 0003:256C:006D.007D: failed retrieving Huion firmware version: -71 [ 1399.627070][ T9629] uclogic 0003:256C:006D.007D: failed probing parameters: -71 [ 1399.734730][T19829] loop0: detected capacity change from 0 to 512 [ 1399.757437][ T9629] uclogic: probe of 0003:256C:006D.007D failed with error -71 [ 1399.782971][T19829] EXT4-fs (loop0): Ignoring removed nobh option [ 1399.792471][ T9629] usb 1-1: USB disconnect, device number 94 [ 1399.817095][T19829] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.5170: bg 0: block 248: padding at end of block bitmap is not set [ 1399.833791][T19829] Quota error (device loop0): write_blk: dquota write failed [ 1399.841463][T19829] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1399.851703][T19829] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.5170: Failed to acquire dquot type 1 [ 1399.864398][T19829] EXT4-fs (loop0): 1 truncate cleaned up [ 1399.870163][T19829] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x000000000000003c,,errors=continue. Quota mode: writeback. [ 1399.887974][T19829] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1400.017532][ T2132] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1400.025795][T19821] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,dioread_lock,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 1400.061211][T19835] loop2: detected capacity change from 0 to 256 [ 1400.263416][T19835] exfat: Deprecated parameter 'utf8' [ 1400.296857][T19835] exfat: Unknown parameter 'keep_last_dots' [ 1400.459427][ T2132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1400.471202][ T2132] usb 4-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1400.487377][ T2132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.510232][ T2132] usb 4-1: config 0 descriptor?? [ 1400.811390][ T30] audit: type=1400 audit(1761591266.221:9810): avc: denied { accept } for pid=19845 comm="syz.0.5174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1400.851257][T19848] loop0: detected capacity change from 0 to 256 [ 1400.884506][T19848] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1401.036584][ T30] audit: type=1400 audit(1761591266.441:9811): avc: denied { setopt } for pid=19849 comm="syz.0.5176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1401.152259][T19856] loop0: detected capacity change from 0 to 128 [ 1401.179416][ T2132] usbhid 4-1:0.0: can't add hid device: -71 [ 1401.185934][ T2132] usbhid: probe of 4-1:0.0 failed with error -71 [ 1401.194838][ T2132] usb 4-1: USB disconnect, device number 91 [ 1401.246784][ T30] audit: type=1400 audit(1761591266.651:9812): avc: denied { create } for pid=19859 comm="syz.2.5181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1401.318619][T19868] 9pnet: Could not find request transport: rdma [ 1401.350279][ T30] audit: type=1400 audit(1761591266.761:9813): avc: denied { write } for pid=19873 comm="syz.0.5185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1401.753965][T19886] loop4: detected capacity change from 0 to 128 [ 1401.776375][ T30] audit: type=1400 audit(1761591267.181:9814): avc: denied { map } for pid=19887 comm="syz.2.5192" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1401.800468][ T30] audit: type=1400 audit(1761591267.181:9815): avc: denied { call } for pid=19887 comm="syz.2.5192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1401.835305][T19886] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 1401.853324][T19898] loop1: detected capacity change from 0 to 256 [ 1401.933354][T19909] loop1: detected capacity change from 0 to 512 [ 1401.961663][T19909] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1402.019387][T19909] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,bsddf,,errors=continue. Quota mode: writeback. [ 1402.036184][T19909] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1402.046965][ T2132] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1402.120533][T19907] loop4: detected capacity change from 0 to 40427 [ 1402.135930][T19907] F2FS-fs (loop4): invalid crc value [ 1402.161953][T19907] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1402.184176][T19907] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1402.210971][T19907] attempt to access beyond end of device [ 1402.210971][T19907] loop4: rw=2049, want=45104, limit=40427 [ 1402.223990][T19907] attempt to access beyond end of device [ 1402.223990][T19907] loop4: rw=2049, want=45112, limit=40427 [ 1402.244051][T12032] attempt to access beyond end of device [ 1402.244051][T12032] loop4: rw=2049, want=45120, limit=40427 [ 1402.282974][T19933] loop8: detected capacity change from 0 to 8 [ 1402.309288][ T2132] usb 4-1: Using ep0 maxpacket: 32 [ 1402.319163][T19931] loop1: detected capacity change from 0 to 8192 [ 1402.327713][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1402.327727][ T30] audit: type=1400 audit(1761591267.731:9825): avc: denied { write } for pid=19934 comm="syz.0.5212" name="001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1402.382516][ T30] audit: type=1400 audit(1761591267.791:9826): avc: denied { write } for pid=19936 comm="syz.0.5213" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1402.395031][T19939] loop0: detected capacity change from 0 to 512 [ 1402.430990][T19939] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 1402.437746][T19939] EXT4-fs (loop0): mount failed [ 1402.494614][T19942] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5210'. [ 1402.501276][ T2132] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 1402.515306][ T2132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1402.526796][ T2132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1402.759263][T19957] tipc: Started in network mode [ 1402.764310][T19957] tipc: Node identity c64fe14ebdf5, cluster identity 4711 [ 1402.771588][ T2132] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1402.780824][T19957] tipc: Enabled bearer , priority 0 [ 1402.787504][ T2132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.796166][T19957] device syzkaller0 entered promiscuous mode [ 1402.802444][ T2132] usb 4-1: Product: syz [ 1402.802726][T19944] loop1: detected capacity change from 0 to 32768 [ 1402.806668][ T2132] usb 4-1: Manufacturer: syz [ 1402.819449][T19957] tipc: Resetting bearer [ 1402.825398][ T2132] usb 4-1: SerialNumber: syz [ 1402.830127][T19956] tipc: Resetting bearer [ 1402.830774][ T2132] usb 4-1: config 0 descriptor?? [ 1402.841860][T19956] tipc: Disabling bearer [ 1402.908134][T19960] overlayfs: failed to clone lowerpath [ 1402.917007][ T30] audit: type=1400 audit(1761591268.321:9827): avc: denied { connect } for pid=19961 comm="syz.4.5221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1402.955081][ T30] audit: type=1400 audit(1761591268.321:9828): avc: denied { shutdown } for pid=19961 comm="syz.4.5221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1402.975747][ T30] audit: type=1400 audit(1761591268.351:9829): avc: denied { unmount } for pid=12541 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1403.064574][ T30] audit: type=1400 audit(1761591268.471:9830): avc: denied { name_bind } for pid=19971 comm="syz.4.5226" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1403.122941][T19958] loop1: detected capacity change from 0 to 40427 [ 1403.133816][T19958] F2FS-fs (loop1): fault_injection options not supported [ 1403.152043][T19958] F2FS-fs (loop1): fault_type options not supported [ 1403.168260][T19958] F2FS-fs (loop1): invalid crc value [ 1403.176632][T19958] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1403.212914][T19958] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1403.268880][T19984] netlink: 268 bytes leftover after parsing attributes in process `syz.0.5229'. [ 1403.286230][T12311] attempt to access beyond end of device [ 1403.286230][T12311] loop1: rw=0, want=45072, limit=40427 [ 1403.294014][ T30] audit: type=1400 audit(1761591268.691:9831): avc: denied { write } for pid=19985 comm="syz.0.5231" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1403.333765][T19989] loop0: detected capacity change from 0 to 128 [ 1403.340527][ T30] audit: type=1400 audit(1761591268.731:9832): avc: denied { transfer } for pid=19985 comm="syz.0.5231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1403.396668][T19991] loop2: detected capacity change from 0 to 1024 [ 1403.435641][T19991] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1403.446738][T19991] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1403.464413][ T30] audit: type=1400 audit(1761591268.871:9833): avc: denied { append } for pid=19990 comm="syz.2.5233" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1403.546407][T19991] EXT4-fs (loop2): shut down requested (2) [ 1403.556000][ T30] audit: type=1400 audit(1761591268.961:9834): avc: denied { append } for pid=19999 comm="syz.0.5236" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1403.621064][T19998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.628167][T19998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.635631][T19998] device bridge_slave_0 entered promiscuous mode [ 1403.642790][T19998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.650063][T19998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.657945][T19998] device bridge_slave_1 entered promiscuous mode [ 1403.670026][T20009] ================================================================== [ 1403.678129][T20009] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 1403.687323][T20009] Read of size 1 at addr ffff8881336b93f8 by task syz.0.5239/20009 [ 1403.695216][T20009] [ 1403.697521][T20009] CPU: 0 PID: 20009 Comm: syz.0.5239 Not tainted syzkaller #0 [ 1403.705254][T20009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1403.715314][T20009] Call Trace: [ 1403.718583][T20009] [ 1403.721501][T20009] __dump_stack+0x21/0x30 [ 1403.725824][T20009] dump_stack_lvl+0xee/0x150 [ 1403.730416][T20009] ? show_regs_print_info+0x20/0x20 [ 1403.735616][T20009] ? load_image+0x3a0/0x3a0 [ 1403.740108][T20009] ? unwind_get_return_address+0x4d/0x90 [ 1403.745755][T20009] print_address_description+0x7f/0x2c0 [ 1403.751335][T20009] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 1403.757833][T20009] kasan_report+0xf1/0x140 [ 1403.762244][T20009] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 1403.768737][T20009] __asan_report_load1_noabort+0x14/0x20 [ 1403.774365][T20009] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 1403.780714][T20009] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 1403.786908][T20009] ? xfrm_netlink_rcv+0x72/0x90 [ 1403.791759][T20009] ? netlink_unicast+0x876/0xa40 [ 1403.796785][T20009] ? netlink_sendmsg+0x86a/0xb70 [ 1403.801747][T20009] ? ____sys_sendmsg+0x5a2/0x8c0 [ 1403.806793][T20009] ? ___sys_sendmsg+0x1f0/0x260 [ 1403.811651][T20009] ? x64_sys_call+0x4b/0x9a0 [ 1403.816255][T20009] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1403.822309][T20009] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 1403.828462][T20009] xfrm_policy_inexact_insert+0x70/0x1130 [ 1403.834740][T20009] ? __get_hash_thresh+0x10c/0x420 [ 1403.839852][T20009] ? policy_hash_bysel+0x110/0x4f0 [ 1403.844950][T20009] xfrm_policy_insert+0x126/0x9a0 [ 1403.849985][T20009] ? xfrm_policy_construct+0x54f/0x1f00 [ 1403.856060][T20009] xfrm_add_policy+0x4d1/0x830 [ 1403.860947][T20009] ? xfrm_dump_sa_done+0xc0/0xc0 [ 1403.865885][T20009] xfrm_user_rcv_msg+0x45c/0x6e0 [ 1403.870835][T20009] ? xfrm_netlink_rcv+0x90/0x90 [ 1403.875782][T20009] ? avc_has_perm_noaudit+0x460/0x460 [ 1403.881604][T20009] ? x64_sys_call+0x4b/0x9a0 [ 1403.887041][T20009] ? selinux_nlmsg_lookup+0x237/0x4c0 [ 1403.892535][T20009] netlink_rcv_skb+0x1e0/0x430 [ 1403.897531][T20009] ? xfrm_netlink_rcv+0x90/0x90 [ 1403.902403][T20009] ? netlink_ack+0xb60/0xb60 [ 1403.907015][T20009] ? wait_for_completion_killable_timeout+0x10/0x10 [ 1403.913680][T20009] ? __netlink_lookup+0x387/0x3b0 [ 1403.918822][T20009] xfrm_netlink_rcv+0x72/0x90 [ 1403.923563][T20009] netlink_unicast+0x876/0xa40 [ 1403.928343][T20009] netlink_sendmsg+0x86a/0xb70 [ 1403.929325][ T2132] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1403.933101][T20009] ? netlink_getsockopt+0x530/0x530 [ 1403.933131][T20009] ? sock_alloc_file+0xba/0x260 [ 1403.950888][T20009] ? security_socket_sendmsg+0x82/0xa0 [ 1403.956360][T20009] ? netlink_getsockopt+0x530/0x530 [ 1403.961815][T20009] ____sys_sendmsg+0x5a2/0x8c0 [ 1403.966581][T20009] ? __sys_sendmsg_sock+0x40/0x40 [ 1403.971610][T20009] ? import_iovec+0x7c/0xb0 [ 1403.976124][T20009] ___sys_sendmsg+0x1f0/0x260 [ 1403.980792][T20009] ? __sys_sendmsg+0x250/0x250 [ 1403.985566][T20009] ? __fdget+0x1a1/0x230 [ 1403.989806][T20009] __x64_sys_sendmsg+0x1e2/0x2a0 [ 1403.994820][T20009] ? ___sys_sendmsg+0x260/0x260 [ 1403.999660][T20009] ? __kasan_check_write+0x14/0x20 [ 1404.004760][T20009] ? switch_fpu_return+0x15d/0x2c0 [ 1404.009862][T20009] x64_sys_call+0x4b/0x9a0 [ 1404.014290][T20009] do_syscall_64+0x4c/0xa0 [ 1404.018694][T20009] ? clear_bhb_loop+0x50/0xa0 [ 1404.023449][T20009] ? clear_bhb_loop+0x50/0xa0 [ 1404.028155][T20009] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1404.034142][T20009] RIP: 0033:0x7fbe0b8bafc9 [ 1404.038549][T20009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1404.058145][T20009] RSP: 002b:00007fbe0a323038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1404.066556][T20009] RAX: ffffffffffffffda RBX: 00007fbe0bb11fa0 RCX: 00007fbe0b8bafc9 [ 1404.074517][T20009] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 1404.082478][T20009] RBP: 00007fbe0b93df91 R08: 0000000000000000 R09: 0000000000000000 [ 1404.090441][T20009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1404.098403][T20009] R13: 00007fbe0bb12038 R14: 00007fbe0bb11fa0 R15: 00007ffeff4a2008 [ 1404.106367][T20009] [ 1404.109371][T20009] [ 1404.111677][T20009] Allocated by task 20009: [ 1404.116080][T20009] __kasan_kmalloc+0xda/0x110 [ 1404.120759][T20009] __kmalloc+0x13d/0x2c0 [ 1404.124993][T20009] sk_prot_alloc+0xed/0x320 [ 1404.129486][T20009] sk_alloc+0x38/0x430 [ 1404.133536][T20009] pfkey_create+0x12a/0x660 [ 1404.138025][T20009] __sock_create+0x38d/0x7a0 [ 1404.142600][T20009] __sys_socket+0xec/0x190 [ 1404.147088][T20009] __x64_sys_socket+0x7a/0x90 [ 1404.151753][T20009] x64_sys_call+0x8c5/0x9a0 [ 1404.156328][T20009] do_syscall_64+0x4c/0xa0 [ 1404.160728][T20009] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1404.166609][T20009] [ 1404.168915][T20009] The buggy address belongs to the object at ffff8881336b9000 [ 1404.168915][T20009] which belongs to the cache kmalloc-1k of size 1024 [ 1404.182996][T20009] The buggy address is located 1016 bytes inside of [ 1404.182996][T20009] 1024-byte region [ffff8881336b9000, ffff8881336b9400) [ 1404.196425][T20009] The buggy address belongs to the page: [ 1404.202034][T20009] page:ffffea0004cdae00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1336b8 [ 1404.212258][T20009] head:ffffea0004cdae00 order:3 compound_mapcount:0 compound_pincount:0 [ 1404.220570][T20009] flags: 0x4000000000010200(slab|head|zone=1) [ 1404.227336][T20009] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 1404.235946][T20009] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1404.244507][T20009] page dumped because: kasan: bad access detected [ 1404.250917][T20009] page_owner tracks the page as allocated [ 1404.256611][T20009] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 101, ts 1057592983846, free_ts 1055654338209 [ 1404.277347][T20009] post_alloc_hook+0x192/0x1b0 [ 1404.282114][T20009] prep_new_page+0x1c/0x110 [ 1404.286600][T20009] get_page_from_freelist+0x2cc5/0x2d50 [ 1404.292132][T20009] __alloc_pages+0x18f/0x440 [ 1404.296795][T20009] new_slab+0xa1/0x4d0 [ 1404.300849][T20009] ___slab_alloc+0x381/0x810 [ 1404.305424][T20009] __slab_alloc+0x49/0x90 [ 1404.309745][T20009] __kmalloc_track_caller+0x169/0x2c0 [ 1404.315104][T20009] __alloc_skb+0x21a/0x740 [ 1404.319504][T20009] netlink_sendmsg+0x602/0xb70 [ 1404.324253][T20009] ____sys_sendmsg+0x5a2/0x8c0 [ 1404.329000][T20009] ___sys_sendmsg+0x1f0/0x260 [ 1404.333685][T20009] __x64_sys_sendmsg+0x1e2/0x2a0 [ 1404.338607][T20009] x64_sys_call+0x4b/0x9a0 [ 1404.343008][T20009] do_syscall_64+0x4c/0xa0 [ 1404.347412][T20009] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1404.353301][T20009] page last free stack trace: [ 1404.358082][T20009] free_unref_page_prepare+0x542/0x550 [ 1404.363529][T20009] free_unref_page+0xa2/0x550 [ 1404.368195][T20009] free_compound_page+0x78/0xa0 [ 1404.373119][T20009] __put_compound_page+0x77/0xb0 [ 1404.378041][T20009] __put_page+0xbc/0xe0 [ 1404.382207][T20009] skb_release_data+0x3d3/0xa10 [ 1404.387044][T20009] __kfree_skb+0x50/0x70 [ 1404.391270][T20009] tcp_rtx_queue_unlink_and_free+0x205/0x720 [ 1404.397258][T20009] tcp_ack+0x2145/0x6000 [ 1404.401569][T20009] tcp_rcv_established+0x6bc/0x19b0 [ 1404.406755][T20009] tcp_v4_do_rcv+0x597/0x9f0 [ 1404.411328][T20009] tcp_v4_rcv+0x21cd/0x2810 [ 1404.415819][T20009] ip_protocol_deliver_rcu+0x314/0x6c0 [ 1404.421262][T20009] ip_local_deliver+0x2de/0x530 [ 1404.426097][T20009] ip_sublist_rcv+0x747/0x850 [ 1404.430756][T20009] ip_list_rcv+0x3da/0x420 [ 1404.435157][T20009] [ 1404.437490][T20009] Memory state around the buggy address: [ 1404.443097][T20009] ffff8881336b9280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1404.451225][T20009] ffff8881336b9300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1404.459267][T20009] >ffff8881336b9380: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 1404.467305][T20009] ^ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1404.475264][T20009] ffff8881336b9400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1404.483303][T20009] ffff8881336b9480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1404.491443][T20009] ================================================================== [ 1404.499488][T20009] Disabling lock debugging due to kernel taint [ 1404.633181][T19353] usb 4-1: USB disconnect, device number 92 [ 1404.724229][ T3549] device veth1_macvtap left promiscuous mode [ 1404.730299][ T3549] device veth0_vlan left promiscuous mode [ 1405.361179][ T3549] tipc: Left network mode [ 1406.320157][ T3549] device bridge_slave_1 left promiscuous mode [ 1406.326322][ T3549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.333834][ T3549] device bridge_slave_0 left promiscuous mode [ 1406.339979][ T3549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.347764][ T3549] device bridge_slave_1 left promiscuous mode [ 1406.353906][ T3549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.361264][ T3549] device bridge_slave_0 left promiscuous mode [ 1406.367352][ T3549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.375556][ T3549] device bridge_slave_1 left promiscuous mode [ 1406.381800][ T3549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.389149][ T3549] device bridge_slave_0 left promiscuous mode [ 1406.395309][ T3549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.403364][ T3549] device bridge_slave_1 left promiscuous mode [ 1406.409660][ T3549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.417020][ T3549] device bridge_slave_0 left promiscuous mode [ 1406.423164][ T3549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.431002][ T3549] device bridge_slave_1 left promiscuous mode [ 1406.437196][ T3549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.444678][ T3549] device bridge_slave_0 left promiscuous mode [ 1406.450831][ T3549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.458949][ T3549] device veth1_macvtap left promiscuous mode [ 1406.465053][ T3549] device veth0_vlan left promiscuous mode [ 1406.471030][ T3549] device veth1_macvtap left promiscuous mode [ 1406.477270][ T3549] device veth0_vlan left promiscuous mode