last executing test programs: 26.873757117s ago: executing program 1 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') 26.034369397s ago: executing program 1 (id=465): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_connect$printer(0x3, 0x0, 0x0, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x81, 0x6, 0x4, 0x10, 0x4}, 0x8, &(0x7f0000000080)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000280)={0x20, 0x12, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 22.187962851s ago: executing program 1 (id=494): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000001c0)={0x4, 0x4, 0xe3, 0x2, 0x8, "dd81c57a12d3f46cf3e9dffa8a465f3359d2b2", 0x697f, 0xf}) 22.174968201s ago: executing program 1 (id=495): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000001840)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x145042, 0x1ac) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x100000b, 0x2013, r0, 0x0) write$cgroup_subtree(r0, 0x0, 0x32600) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r1, 0x0, 0x4041) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xae8, 0x863, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 21.193309445s ago: executing program 1 (id=512): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000}) r1 = open(&(0x7f0000000300)='.\x00', 0x101000, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, 0x0) 21.080464967s ago: executing program 1 (id=513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 21.019328369s ago: executing program 32 (id=513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10.714485649s ago: executing program 3 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x4, 0x37a, &(0x7f0000000340)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYBLOB="faffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) 9.169432047s ago: executing program 0 (id=555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x4, 0x37a, &(0x7f0000000340)="$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") r2 = timerfd_create(0x8, 0x80000) timerfd_gettime(r2, 0x0) readv(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYBLOB="faffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) 9.168700747s ago: executing program 3 (id=557): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/tcp6\x00') syz_emit_ethernet(0xcb, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}, @void, {@llc_tr={0x11, {@llc={0xe, 0xf8, "75e6", "597a97461c5a0827842566383dcf47ae3e07cb24bbc7898c38710f724c1993083f38f2651ed7b999bcf8f7ef98cec628ef570f0823f0fd87f1639778e744f0f79015be8ce077e8d94cbdf9740e1c3f041f470008278a7888042b2a6e9e96796bc803a3cbf9a8b62a0c171ec52dd6a67304d9d14f3b1fd779645f3d24fffebbfa2f9e45d7551cb77dc664c4352bc7e39ddc68356da71d8bc18e3c28f4f9076b28f4dccaab19e48072da2d5662f1d30bbdfc7960d1f733688592"}}}}}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r2, 0x5608, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x270, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbb8f}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a693c83}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3a8f}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @loopback, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}}}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xab2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4b0}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x20000001}, 0x8010) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7c, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="300000000000000029000000040000008402000400000000040200030401"], 0x30}, 0x800) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) lseek(r8, 0xfffffffffffffff8, 0x1) r9 = socket(0x10, 0x3, 0x0) connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x1, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc010}, 0x4044040) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000700)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e25, 0x80a0000a, @loopback, 0xfffbf803}, 0x1c) r10 = socket$packet(0x11, 0x2, 0x300) unshare(0x60400) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYRESHEX=r10], 0x38}, 0x1, 0x0, 0x0, 0x4081}, 0x1) 9.168483447s ago: executing program 4 (id=558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000000000001410000001c0017fffffffd000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000800)={[{}, {@usrquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x3, 0x447, &(0x7f0000000380)="$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") syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r4, r5, r6, &(0x7f0000000780)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r7 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$generic(r8, r9, 0x2c, 0x8) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000440)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x3, 0x127, 0x0, 0x0, 0x1000, 0x1d6, 0xffffffffffffffff, 0x0, 0xa}}}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') preadv(r3, &(0x7f0000000a00)=[{&(0x7f0000000440)=""/15, 0xf}, {&(0x7f0000000940)=""/133, 0x85}], 0x2, 0x3, 0x5) r12 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) syz_ublk_add_dev(r12, r13, r14, r15, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, r16, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xcc}}}, &(0x7f0000000300)) r17 = gettid() setpgid(r17, r17) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r5, r10, &(0x7f0000000ac0)={0x2e, 0xf, 0x0, r11, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, r16, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a80)=@any_dev={0x1, 0x188, 0x0, 0x0, 0x1000, 0x2, r17, 0x0, 0x10}}}, &(0x7f0000000b40)) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x80, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002600)=""/4113, 0x1011) write(r0, &(0x7f00000002c0)="fff7ffffffff00000000000188ca4f4000ca0d515c8e631810000000000000000100008b01000001011bf2ef017968f84367de2617fb2f00000200007ac0ffb84103e7b7bdb2cb89b4d9929d80b60d126bc914974bd72523495f092a659682f0f3445986bb93d6491f2deeb7768877a717a7c37a49ca", 0x76) 7.541413467s ago: executing program 3 (id=559): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x50}, 0x40000100) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x80000092}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.541076037s ago: executing program 0 (id=560): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0xff7f000000000000, 0x3fc}, 0x0, r1}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000432612307172f464ab5f6c80124b2108", @ANYRES32, @ANYBLOB="0300"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x4000, 0x3000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x2a9, &(0x7f0000000500)="$eJzs3c9qK1UcB/DfpGmSq4tk4UoUB3Th6nJ7nyBF7oVidpKFulCxLUgThBYK/sHYleDKjUufQBC68yXc+AY+gODOLgpHJplp/pimDTStfz6fTU/POd85vzOZULLI6YevDI/28zg8+/K3aLWyqHWjGxdZdKIWla9jTve7AAD+zS5Sij/SxDq5LCJamysLANigtf/+n2+8JABgw9559723d3u91C4+zj8ffnPaLz7ZFz8n47uH8UkM4iCeRDsuI9KVSft5SmlUzwudeGM4Ou0XyeEHv5TX3/09YpzfiXZ0xl3z+b3es518YiY/Kup4oVy/W+SfRjteWrL+Xu/Z0yX56Dfizddn6n8c7fj14/g0BrE/LmKa/2onz99K3//5xftFeUU+G532m+N5U2nrnl8aAAAAAAAAAAAAAAAAAAAAAAD+wx6XZ+c0Y3x+T9FVnr+zdVn8sh15pTN/Ps8kn1UXWjgfaJTih+p8nSd5nqdy4jRfj5frUX+YXQMAAAAAAAAAAAAAAAAAAMA/y8lnnx99NBgcHN9JozoNoPpa//rXOR+nujM9r8XqVHO6Vq1srlgitqo5WcTKeopN3NFtuanx6Lqaf/xp3Qu2bp6zXazVusNdVC/3TE9UPdnye9i8mtyqHpKfq56UUmrELVdvXDeU1nr8GkuH2mvfjcaL48ZoxZzIrivs21en78tyKFvcRWPuPs81tsvGTHzh2Vj9PD9aeKf8Tea0DgAAAAAAAAAAAAAAAAAA2Kjp14CXDJ6tjNZSc2NlAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC9mv7//zUaozJ8i8mNOD554C0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/BXAAAA//+kUFzM") r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x108) getdents(r8, &(0x7f0000001fc0)=""/184, 0x20002078) 7.540821127s ago: executing program 2 (id=561): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, 0x0, &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 7.534937856s ago: executing program 4 (id=562): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000fcffffff18010000202064250000009ab10900002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000085000000230000009500000000000000a4409a2472f6f8bee77004617cf7831af91fa4c8b3ea2cc3a6290f8fc1f9f87dc122ad040630ee946d8d80abcd589829ccacb097e25fb01bc9840311a1061e0fe81e0b979dc501a71c8625"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.827677628s ago: executing program 0 (id=563): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f00000001c0), 0x3, 0x4bc, &(0x7f0000000a40)="$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") setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfe80ffff}, 0x1c) rename(0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) 5.827491398s ago: executing program 2 (id=564): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000063012a000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x2, 0x100000002, 0x20000000000007}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=@setlink={0x40, 0x13, 0x5, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x41000}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_CARRIER={0x5}, @IFLA_PORT_SELF={0x4}]}, 0x40}}, 0x8084) 5.827236848s ago: executing program 3 (id=565): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = dup2(r0, r0) write$binfmt_register(r1, &(0x7f0000000040)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'bbr', 0x3a, '9p\x00', 0x3a, './file1', 0x3a, [0x46, 0x43]}, 0x2f) sendmsg$802154_raw(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000100)="d8560742cf024f2a4195106eaa27a299845c31903e91fc1f08cf5ff8fd8a7acd591dba37ceb0fbaf5b06f748a02e1599087d4deb18aa83a6a29f40388f4b8593a7c2492450ce7136f7f21871a9936e48f33351132e7a3b766d998e8607a8044b1dd4552084aa27a9c14bff57cb9a03786c69c552f509e387d312be706f1d1bdc6f5140b33ea21040cfe62055affa4f2a", 0x90}, 0x1, 0x0, 0x0, 0x8010}, 0x4) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000340)={@loopback, @empty}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x1, r4}, 0xa0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x19, 0x0, @void}, 0x30) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = io_uring_setup(0x12be, &(0x7f00000002c0)={0x0, 0xd610, 0x400, 0x1, 0x3c}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7000002, 0x8031, 0xffffffffffffffff, 0x6be38000) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f00000001c0)=[0x4, 0x1], 0x2) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000480)=0x13) io_pgetevents(0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000016c0)) syz_usb_connect$uac1(0x0, 0xb9, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003000000406b1d01014000010203010902"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0x6, &(0x7f0000000300)=@string={0x6, 0x3, "62d91dda"}}]}) 5.827082048s ago: executing program 4 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x4, 0x37a, &(0x7f0000000340)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYBLOB="faffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) 3.970645223s ago: executing program 0 (id=567): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc51b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x40, "", [{{0x9, 0x4, 0x0, 0x10, 0xfe, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x31, 0x28, {0x28, 0x4, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b48"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={r4, 0x0, 0xfe}, &(0x7f0000000140)=ANY=[], 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.968496743s ago: executing program 2 (id=568): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg(r0, 0x0, 0xfffffd91, 0x24000041) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 3.968229743s ago: executing program 4 (id=569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x4, 0x37a, &(0x7f0000000340)="$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") r2 = timerfd_create(0x8, 0x80000) timerfd_gettime(r2, 0x0) readv(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYBLOB="faffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) 2.05839305s ago: executing program 0 (id=570): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200, 0xfffffff7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r2, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x40, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x100, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x80000, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x2a7, 0x0, r3}}], 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200, 0xfffffff7) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020) (async) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) (async) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) (async) syz_ublk_setup_queues(r2, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x40, 0x1, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x100, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x80000, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x2a7, 0x0, r3}}], 0x1, 0x0, 0x0) (async) 2.0578837s ago: executing program 2 (id=571): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/tcp6\x00') syz_emit_ethernet(0xcb, &(0x7f0000000400)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}, @void, {@llc_tr={0x11, {@llc={0xe, 0xf8, "75e6", "597a97461c5a0827842566383dcf47ae3e07cb24bbc7898c38710f724c1993083f38f2651ed7b999bcf8f7ef98cec628ef570f0823f0fd87f1639778e744f0f79015be8ce077e8d94cbdf9740e1c3f041f470008278a7888042b2a6e9e96796bc803a3cbf9a8b62a0c171ec52dd6a67304d9d14f3b1fd779645f3d24fffebbfa2f9e45d7551cb77dc664c4352bc7e39ddc68356da71d8bc18e3c28f4f9076b28f4dccaab19e48072da2d5662f1d30bbdfc7960d1f733688592"}}}}}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r2, 0x5608, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x270, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xbb8f}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5a693c83}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3a8f}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @loopback, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}}}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xab2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4b0}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x20000001}, 0x8010) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7c, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="300000000000000029000000040000008402000400000000040200030401"], 0x30}, 0x800) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) lseek(r8, 0xfffffffffffffff8, 0x1) r9 = socket(0x10, 0x3, 0x0) connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x31, 0x829, 0x1, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc010}, 0x4044040) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e25, 0x80a0000a, @loopback, 0xfffbf803}, 0x1c) r10 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYRESHEX=r10], 0x38}, 0x1, 0x0, 0x0, 0x4081}, 0x1) 2.05718493s ago: executing program 3 (id=572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x33) 2.05676631s ago: executing program 4 (id=573): r0 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x4, r1, 0x1, 0x1c, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38000, 0x1}, 0x44040) 44.591949ms ago: executing program 0 (id=574): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0xff7f000000000000, 0x3fc}, 0x0, r1}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000432612307172f464ab5f6c80124b2108e957c1f9c683", @ANYRES32, @ANYBLOB="0300"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x0, 0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x4000, 0x3000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x2a9, &(0x7f0000000500)="$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") r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x108) getdents(r8, &(0x7f0000001fc0)=""/184, 0x20002078) 44.204369ms ago: executing program 2 (id=575): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x20) 43.904698ms ago: executing program 3 (id=576): socketpair(0x23, 0xa, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, 0x0, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) (async) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x34020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setrlimit(0x0, &(0x7f00000000c0)={0xffffffff, 0xffffffffffffffff}) (async) setrlimit(0x0, &(0x7f00000000c0)={0xffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x4, 0xab9, 0x0, 0x0, 0x1000, 0x10, 0x0, 0x0, 0x31}}}, &(0x7f0000000300)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000000)={0x0, 0x6, 0x5}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000040)=0x5, 0x4) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000040)=0x5, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c00000005000000810000000100001301000000ffffffff00020000000000d7070000000000000a050000000800000000000001000000002700780200000000000000030000000007000000000000000100000d000000001000000003000000050000000000000c040000000061610000891e28c90c03318a873eff407b64fd82b2cec7b6a5d6e500b2"], &(0x7f0000000500)=""/155, 0x89, 0x9b, 0x1}, 0x28) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x84, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x845}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010081000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030300000000000000000000010000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030300000000000000000000010000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0xb, &(0x7f0000000080)=0x4a3d, 0x4) (async) setsockopt$inet6_int(r9, 0x29, 0xb, &(0x7f0000000080)=0x4a3d, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000180)) (async) ioctl$sock_inet6_tcp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000180)) 43.410158ms ago: executing program 4 (id=577): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000000540)="$eJzs3M1rI2UYAPA3/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6bJNGQ3yZQmTWtPHjyKB/8TUfDk0b/Bg2dv4kHxJiiZd6pbXUFomtjN7weTZ95n3jzzTg6BZyYkAFNrMfn151K4Ea6EEGZDCNdDyPdLxZbbjOGFEMLNEMLMY1upyP+ZuBRCuBpCuDEsHmuWikOf3x7c2vjprV+++e7y3LUvvv6+SANTaPi10tmL+4edGLNmjA+LfG3QymNnfVDEeKC9EI93spg/THfyCoe1k3m1PK414/xs76A3jLvtWn0Ym63dPL/XjSfsDZondfI3PKzt5+NGupPHVi/LY/M4nvfoOH63Hff6sU6jqPdRXj70+ycx5tOjNF7P3qM81rv9Ih/rZo30aBgHRSxOF+pZu5GvY+cMH/T/3Nut7sFRMkj3e62sm2xUqi9VqnfK1f2skfbT9XKt07izniw128Np5X5a62w2s6zZTiv1rLOcLDXr9XK1mizdTXdatW5SrVbWKivljeVi73by+v33knYjWRrGV1vdg36r3Ut2s/0kvmM5Wa2svbyc3Kom72xtJ9sP7t3b2n73g7vv339l683Xikn/WFaytLqyulqurpRXq8tTdP2fFIse4fXDmZQmvQCAi2fC/T8wpV48Q//feVSMn9j/7z8I4fz7/6D/H4kL1f9Oe/9/DtcPZ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYWj/Mf/lGvrMYx9eK/DNF6rliXAohzIQQfn+C2XDpVM3Zos78v8yf/9savi2FvMLwHJeL7WoIYbPYfnv2vD8FAAAAeHp99fHNz2K3Hl8WJ70gxinetJm5/uGI6i2EEOYXfxxRtZnhy/MjKhbm8u1oRNXyG1gLIyoWb7nNjarafzJ7Kiw8FkoxzIx1OQAAwFic7gTG24UAAAAwTp9OegFMRimcPMo8eRac//L+rweCV06NAAAAgAuoNOkFAAAAAOcu7//9/x8AAAA83eL//wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+wcz83agNRHICfbRzIPwVFuaeV3KCMlJBjjhEFpAkKyIEa0gA1kFtKiHCEx8vCisNKHtta9H2SGWyZH28sOMyMNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCkP/Wujh+ff/bNOTb95OkNAAAAcMuh3q3bN8t0/ra7/r679LE7LyKijIhbY/cqXl1lVl1O/Xj/r8v76yc1/I5oE07fMe+ONxHxpTv+fRj6KQAAAMD92m+2qzRaTy/LqQtiTGnSpnz3NVNeERH18m+mtPKU9ylTWPv7nsX3TGntBNYiU1iacpvlSnuW9u9+nrVbXDRFasqbHzsXma3vAADAiKqrZtxRCAAAAGP6NnUBTKOIh6XM81LgPDXd8t7rqzMAAADgBSqmLgAAAAAYXDv+H2n/v2ag/f+aKtvjAAAAgPuU9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgSId6t95vtqu+Ocemnzy9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4z/68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fzGkcVBwD8zczO1lbFGCWHiCh4sBebbmtrD4J4UIIH/wQhpNsau/VHm4MtRczFm+Tci6g3EUGJt578B3puoZd66yGHCuJxZGZndqdtsNtgZ6bJ5wNv33eG4b3vm4WQ77xJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDK9rvTOMk/5sZxXJ67cffKat7fvK/PXdu8tZi3PI6aTPrJ8HL9IFpoLxEAAAD2j6Sq70MIt9Ot5byP54r6P62uyWv+758dx1U9f3/dX/VV7Z+333+78+JkornxPPmgZ9ZGw6MPptJ7fKvstuceekWvuPPFs5ek+ELiDzZe2E6L+xl9e/36e/0iPNBEtgDAbhyp+jKofh/K+0GbiQGwb/RqhXdV/ydz7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ITtjfB0FUchhMXeNM7dvHtldaf+2uatxaqdvHp1M3w9HTMfIg0hnFkbDY82uppuu3jp8rmV0Wh4YYbg7cN//JhlWTbTxQ8PXgkh/B/j7CZ4p1z+uY9muDiEFjLcTfBPN9LoWhCXX3ZX8nkyghZ/KAEAsCelZcvr+tvp1nJ+LpoPIfvh3vr/9VocZqz/73x88kZ9rnr9P2hshd23tH7+86WLly6/sXZ+5ezw7PDTN48N3hocP3XixKml4lnJkicmAAAAPLIsy7LJQb9s9fo/nn9w//9QLQ4z1v9ffDf4qj5xov7f0XTTr+1MAAAA9rfnX/37r2iH81G/H75cWV+/MBh/To6PjT9bSPWRHShbvf5P5tvOCgAAAGjC9kZ0z/7/6VocZtz/f+anl36pj5mEEA6W+/9HVj8bnW5uOZ3WxJ8Tt71GAAAA2nWwbPX9/7R4/z+evPIQhxAOvzaOy38D+J/1f1rW/8n73/xcn6v+/v/x5pbYSfHC+H4U/UIIvYW2MwIAAGAve6psebH/Z7q1/Mmvhz7se/8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGn/BgAA//9kDEPy") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init1(0x0) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0xa, 0x0, &(0x7f0000001600)=0xfffffebf) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f0000000180)=0xfffffffc) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x100000000000000, 0x2000003}) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') 0s ago: executing program 2 (id=578): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)=@setlink={0x40, 0x13, 0x5, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x41000}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_CARRIER={0x5}, @IFLA_PORT_SELF={0x4}]}, 0x40}}, 0x8084) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 14.685250][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 14.685265][ T28] audit: type=1400 audit(1786411195.776:59): avc: denied { transition } for pid=225 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.689993][ T28] audit: type=1400 audit(1786411195.776:60): avc: denied { noatsecure } for pid=225 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.693673][ T28] audit: type=1400 audit(1786411195.786:61): avc: denied { write } for pid=225 comm="sh" path="pipe:[14446]" dev="pipefs" ino=14446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.697118][ T28] audit: type=1400 audit(1786411195.786:62): avc: denied { rlimitinh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.701054][ T28] audit: type=1400 audit(1786411195.786:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 22.428928][ T28] audit: type=1400 audit(1786411203.526:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.432224][ T279] cgroup: Unknown subsys name 'net' [ 22.451920][ T28] audit: type=1400 audit(1786411203.526:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.479019][ T28] audit: type=1400 audit(1786411203.556:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.479535][ T279] cgroup: Unknown subsys name 'devices' [ 22.590679][ T279] cgroup: Unknown subsys name 'hugetlb' [ 22.596308][ T279] cgroup: Unknown subsys name 'rlimit' [ 22.730438][ T28] audit: type=1400 audit(1786411203.826:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.753720][ T28] audit: type=1400 audit(1786411203.826:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.778574][ T28] audit: type=1400 audit(1786411203.826:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.802129][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.810958][ T28] audit: type=1400 audit(1786411203.906:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.836417][ T28] audit: type=1400 audit(1786411203.906:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.870954][ T28] audit: type=1400 audit(1786411203.966:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.896503][ T28] audit: type=1400 audit(1786411203.966:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.896585][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.802257][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.809485][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.817033][ T287] device bridge_slave_0 entered promiscuous mode [ 23.834873][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.842075][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.849759][ T287] device bridge_slave_1 entered promiscuous mode [ 23.897885][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.905068][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.912686][ T291] device bridge_slave_0 entered promiscuous mode [ 23.919571][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.926632][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.934112][ T289] device bridge_slave_0 entered promiscuous mode [ 23.944318][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.951421][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.958987][ T289] device bridge_slave_1 entered promiscuous mode [ 23.971266][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.978505][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.985869][ T291] device bridge_slave_1 entered promiscuous mode [ 24.019497][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.026777][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.034360][ T290] device bridge_slave_0 entered promiscuous mode [ 24.041511][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.048612][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.056133][ T290] device bridge_slave_1 entered promiscuous mode [ 24.100658][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.107739][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.115468][ T288] device bridge_slave_0 entered promiscuous mode [ 24.125869][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.133018][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.140549][ T288] device bridge_slave_1 entered promiscuous mode [ 24.300954][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.308077][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.315417][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.322480][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.334047][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.341160][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.348488][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.355526][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.393335][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.400492][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.407781][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.414903][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.426388][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.433516][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.440829][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.447862][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.473842][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.481529][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.489097][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.496317][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.503857][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.511323][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.518909][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.526382][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.535588][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.543360][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.566486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.574441][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.582970][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.590111][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.597682][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.606588][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.613701][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.621162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.643600][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.651658][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.659982][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.667007][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.691308][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.699468][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.707664][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.714758][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.722420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.731069][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.738109][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.745727][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.753987][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.761057][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.770065][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.778251][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.787988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.796149][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.811840][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.819540][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.840480][ T287] device veth0_vlan entered promiscuous mode [ 24.847906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.856488][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.864631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.873147][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.881742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.889829][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.897882][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.905486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.913041][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.920737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.935995][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.944231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.952495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.961135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.969791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.977711][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.986179][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.993896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.008320][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.017001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.025584][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.032648][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.040347][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.049143][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.057325][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.064420][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.071843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.080226][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.089198][ T290] device veth0_vlan entered promiscuous mode [ 25.107935][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.116292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.124847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.133395][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.141867][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.148972][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.156659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.165222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.173632][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.180716][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.188175][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.196359][ T287] device veth1_macvtap entered promiscuous mode [ 25.206225][ T290] device veth1_macvtap entered promiscuous mode [ 25.218893][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.226669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.235260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.243461][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.251796][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.260383][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.268686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.276623][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.284808][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.311076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.319612][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.328047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.336681][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.345647][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.354160][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.362862][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.371282][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.379719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.388024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.401592][ T289] device veth0_vlan entered promiscuous mode [ 25.415546][ T288] device veth0_vlan entered promiscuous mode [ 25.422923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.431163][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.438881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.446316][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.454451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.462812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.470971][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.479287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.486813][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.494510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.502268][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.513175][ T291] device veth0_vlan entered promiscuous mode [ 25.528512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.536819][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.545313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.554057][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.572706][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 25.583256][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.593507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.609924][ T288] device veth1_macvtap entered promiscuous mode [ 25.620246][ T289] device veth1_macvtap entered promiscuous mode [ 25.630242][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.665546][ T314] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.736258][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.745043][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.763659][ T291] device veth1_macvtap entered promiscuous mode [ 25.774632][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.789524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.843308][ T317] 9pnet_fd: Insufficient options for proto=fd [ 26.020820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.071425][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.081961][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.092055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.102771][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.113655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.125615][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.136270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.854365][ T323] loop1: detected capacity change from 0 to 256 [ 26.971710][ T323] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xa7bc3a1f, utbl_chksum : 0xe619d30d) [ 27.003753][ T323] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 2199023255554) [ 27.875484][ T333] 9pnet_fd: Insufficient options for proto=fd [ 30.784640][ T331] loop2: detected capacity change from 0 to 256 [ 30.798710][ T331] ======================================================= [ 30.798710][ T331] WARNING: The mand mount option has been deprecated and [ 30.798710][ T331] and is ignored by this kernel. Remove the mand [ 30.798710][ T331] option from the mount to silence this warning. [ 30.798710][ T331] ======================================================= [ 30.864100][ T336] loop0: detected capacity change from 0 to 512 [ 30.909819][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 30.909842][ T28] audit: type=1400 audit(1786411212.006:112): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 31.639421][ T338] usb usb8: usbfs: process 338 (syz.3.8) did not claim interface 0 before use [ 32.030557][ T346] loop1: detected capacity change from 0 to 512 [ 32.341253][ T348] loop3: detected capacity change from 0 to 256 [ 33.024891][ T28] audit: type=1400 audit(1786411212.056:113): avc: denied { mount } for pid=327 comm="syz.0.6" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 33.053549][ T353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 33.109751][ T354] 9pnet_fd: Insufficient options for proto=fd [ 33.148183][ C0] sched: RT throttling activated [ 33.150805][ T28] audit: type=1400 audit(1786411212.116:114): avc: denied { wake_alarm } for pid=327 comm="syz.0.6" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.638318][ T318] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 34.128834][ T28] audit: type=1400 audit(1786411212.116:115): avc: denied { create } for pid=327 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.147972][ T28] audit: type=1400 audit(1786411212.136:116): avc: denied { map_create } for pid=327 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.168771][ T360] loop3: detected capacity change from 0 to 512 [ 34.197377][ T360] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 34.209310][ T318] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.231068][ T318] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 34.240662][ T360] EXT4-fs (loop3): invalid journal inode [ 34.246388][ T360] EXT4-fs (loop3): can't get journal size [ 34.258240][ T28] audit: type=1400 audit(1786411212.136:117): avc: denied { map_read map_write } for pid=327 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.278848][ T318] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 34.300117][ T360] EXT4-fs (loop3): 1 truncate cleaned up [ 34.305870][ T360] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 34.314694][ T320] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 34.322359][ T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 34.338263][ T28] audit: type=1400 audit(1786411212.146:118): avc: denied { setopt } for pid=327 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.379272][ T318] usb 2-1: SerialNumber: syz [ 34.413886][ T28] audit: type=1400 audit(1786411212.146:119): avc: denied { name_bind } for pid=327 comm="syz.0.6" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.443188][ T28] audit: type=1400 audit(1786411212.146:120): avc: denied { node_bind } for pid=327 comm="syz.0.6" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 34.465129][ T28] audit: type=1400 audit(1786411212.706:121): avc: denied { create } for pid=330 comm="syz.2.7" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.492197][ T291] EXT4-fs (loop3): unmounting filesystem. [ 34.510137][ T359] loop2: detected capacity change from 0 to 40427 [ 34.515250][ T320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.518757][ T359] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 34.535006][ T359] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 34.544096][ T359] F2FS-fs (loop2): invalid crc value [ 34.551745][ T359] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 34.572935][ T320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.601140][ T359] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 34.608319][ T359] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 34.609989][ T318] usb 2-1: 0:2 : does not exist [ 34.646707][ T320] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 34.672089][ T318] usb 2-1: USB disconnect, device number 2 [ 34.684328][ T320] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.694204][ T320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.705223][ T320] usb 5-1: config 0 descriptor?? [ 34.919550][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.021439][ T380] 9pnet_fd: Insufficient options for proto=fd [ 35.295972][ T320] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 35.390200][ T320] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 35.613295][ T320] usb 5-1: USB disconnect, device number 2 [ 36.089581][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 36.089596][ T28] audit: type=1400 audit(1786411217.186:160): avc: denied { create } for pid=386 comm="syz.1.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.117691][ T297] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 36.148446][ T387] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.155761][ T387] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.169504][ T385] fido_id[385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 36.213999][ T28] audit: type=1400 audit(1786411217.306:161): avc: denied { write } for pid=388 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 36.262030][ T364] loop0: detected capacity change from 0 to 131072 [ 36.274248][ T364] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945) [ 36.282947][ T364] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 36.293041][ T364] F2FS-fs (loop0): invalid crc value [ 36.303085][ T364] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.321301][ T391] usb usb8: usbfs: process 391 (syz.3.21) did not claim interface 0 before use [ 36.339573][ T297] usb 3-1: unable to get BOS descriptor or descriptor too short [ 36.357757][ T297] usb 3-1: not running at top speed; connect to a high speed hub [ 36.368316][ T297] usb 3-1: config 228 has an invalid interface number: 88 but max is 0 [ 36.376643][ T297] usb 3-1: config 228 has no interface number 0 [ 36.391476][ T387] syz.1.19 (387) used greatest stack depth: 21784 bytes left [ 36.399344][ T297] usb 3-1: config 228 interface 88 has no altsetting 0 [ 36.411071][ T297] usb 3-1: language id specifier not provided by device, defaulting to English [ 36.488785][ T297] usb 3-1: New USB device found, idVendor=0fce, idProduct=d0e1, bcdDevice= 0.00 [ 36.508033][ T297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.563806][ T364] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 36.570958][ T297] usb 3-1: Product: syz [ 36.575246][ T364] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 36.583519][ T297] usb 3-1: Manufacturer: syz [ 36.583839][ T28] audit: type=1400 audit(1786411217.676:162): avc: denied { read } for pid=390 comm="syz.3.21" dev="nsfs" ino=4026532633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 36.608264][ T297] usb 3-1: SerialNumber: syz [ 36.784555][ T391] loop3: detected capacity change from 0 to 256 [ 37.083167][ T402] 9pnet_fd: Insufficient options for proto=fd [ 37.991726][ T290] syz-executor: attempt to access beyond end of device [ 37.991726][ T290] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 37.997840][ T297] usb 3-1: can't set config #228, error -71 [ 38.132052][ T28] audit: type=1400 audit(1786411217.676:163): avc: denied { open } for pid=390 comm="syz.3.21" path="net:[4026532633]" dev="nsfs" ino=4026532633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.177839][ T408] loop0: detected capacity change from 0 to 512 [ 38.299729][ T412] loop1: detected capacity change from 0 to 16 [ 38.456833][ T412] erofs: (device loop1): mounted with root inode @ nid 36. [ 38.743635][ T415] netlink: 108 bytes leftover after parsing attributes in process `syz.3.27'. [ 39.003910][ T297] usb 3-1: USB disconnect, device number 2 [ 39.049169][ T28] audit: type=1400 audit(1786411217.676:164): avc: denied { mount } for pid=363 comm="syz.0.15" name="/" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.142610][ T28] audit: type=1400 audit(1786411218.216:165): avc: denied { unlink } for pid=396 comm="syz.1.22" name="#9" dev="tmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 39.164695][ T28] audit: type=1400 audit(1786411218.916:166): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.191627][ T28] audit: type=1400 audit(1786411219.386:167): avc: denied { write } for pid=410 comm="syz.3.27" name="dev_mcast" dev="proc" ino=4026532643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 39.263225][ T419] loop0: detected capacity change from 0 to 256 [ 39.278253][ T28] audit: type=1400 audit(1786411220.106:168): avc: denied { watch watch_reads } for pid=409 comm="syz.1.26" path="/6/file3" dev="loop1" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.321334][ T419] exfat: Deprecated parameter 'namecase' [ 39.343045][ T419] exfat: Deprecated parameter 'utf8' [ 39.388227][ T28] audit: type=1400 audit(1786411220.106:169): avc: denied { create } for pid=409 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 39.410599][ T419] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 39.487018][ T424] 9pnet_fd: Insufficient options for proto=fd [ 40.824923][ T422] loop2: detected capacity change from 0 to 40427 [ 40.889117][ T422] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 40.927849][ T422] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 41.137858][ T422] F2FS-fs (loop2): invalid crc value [ 41.385611][ T422] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 41.859236][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 41.859251][ T28] audit: type=1400 audit(1786411222.956:181): avc: denied { map } for pid=441 comm="syz.0.32" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.004468][ T28] audit: type=1400 audit(1786411223.006:182): avc: denied { read write } for pid=441 comm="syz.0.32" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16680 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.032306][ T28] audit: type=1400 audit(1786411223.006:183): avc: denied { override_creds } for pid=441 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 42.078916][ T422] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 42.088776][ T422] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 42.132886][ T28] audit: type=1400 audit(1786411223.216:184): avc: denied { ioctl } for pid=421 comm="syz.2.25" path="/3/file0/file0" dev="loop2" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.159676][ T426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'. [ 42.241602][ T449] 9pnet_fd: Insufficient options for proto=fd [ 42.371254][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 42.419241][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.332220][ T448] loop4: detected capacity change from 0 to 40427 [ 43.399175][ T448] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 43.407413][ T448] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 43.510502][ T455] loop1: detected capacity change from 0 to 512 [ 43.678368][ T28] audit: type=1400 audit(1786411224.716:185): avc: denied { create } for pid=452 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.976442][ T28] audit: type=1400 audit(1786411224.736:186): avc: denied { ioctl } for pid=452 comm="syz.1.35" path="socket:[16704]" dev="sockfs" ino=16704 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.053923][ T442] loop0: detected capacity change from 0 to 40427 [ 44.479400][ T290] syz-executor: attempt to access beyond end of device [ 44.479400][ T290] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 44.539177][ T448] F2FS-fs (loop4): invalid crc value [ 44.568302][ T28] audit: type=1400 audit(1786411225.656:187): avc: denied { relabelfrom } for pid=456 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 44.620058][ T461] device syzkaller0 entered promiscuous mode [ 44.626410][ T448] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 44.658654][ T448] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 44.665783][ T448] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 44.711601][ T28] audit: type=1400 audit(1786411225.656:188): avc: denied { relabelto } for pid=456 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 44.845596][ T471] 9pnet_fd: Insufficient options for proto=fd [ 45.068311][ T39] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 45.260510][ T39] usb 5-1: unable to get BOS descriptor or descriptor too short [ 45.276361][ T39] usb 5-1: not running at top speed; connect to a high speed hub [ 45.318594][ T39] usb 5-1: config 228 has an invalid interface number: 88 but max is 0 [ 45.406025][ T39] usb 5-1: config 228 has no interface number 0 [ 45.817228][ T39] usb 5-1: config 228 interface 88 has no altsetting 0 [ 45.843738][ T39] usb 5-1: string descriptor 0 read error: -71 [ 45.860370][ T39] usb 5-1: New USB device found, idVendor=0fce, idProduct=d0e1, bcdDevice= 0.00 [ 45.967924][ T289] syz-executor: attempt to access beyond end of device [ 45.967924][ T289] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 45.989332][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.018233][ T39] usb 5-1: can't set config #228, error -71 [ 46.044788][ T39] usb 5-1: USB disconnect, device number 3 [ 46.077193][ T478] 9pnet_fd: Insufficient options for proto=fd [ 46.665881][ T479] device syzkaller0 entered promiscuous mode [ 47.121164][ T469] loop0: detected capacity change from 0 to 40427 [ 47.132174][ T469] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 47.139997][ T475] loop2: detected capacity change from 0 to 4096 [ 47.146384][ T28] audit: type=1400 audit(1786411228.236:189): avc: denied { ioctl } for pid=480 comm="syz.4.40" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16755 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 47.232780][ T469] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 47.246529][ T297] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 47.254575][ T469] F2FS-fs (loop0): invalid crc value [ 47.267978][ T28] audit: type=1400 audit(1786411228.296:190): avc: denied { execute } for pid=480 comm="syz.4.40" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 47.318563][ T475] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.337446][ T475] EXT4-fs (loop2): Test dummy encryption mode enabled [ 47.355546][ T469] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 47.367351][ T475] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 47.375903][ T475] System zones: 0-5 [ 47.429130][ T475] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 47.439291][ T297] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.452993][ T297] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.484386][ T469] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 47.522145][ T492] 9pnet_fd: Insufficient options for proto=fd [ 47.647438][ T469] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 48.765990][ T297] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 48.843576][ T502] loop1: detected capacity change from 0 to 512 [ 48.948859][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 49.157430][ T297] usb 2-1: can't set config #1, error -71 [ 49.901044][ T505] loop4: detected capacity change from 0 to 512 [ 50.118764][ T297] usb 2-1: USB disconnect, device number 3 [ 50.838338][ T28] audit: type=1400 audit(1786411231.906:191): avc: denied { read write } for pid=506 comm="syz.1.49" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 50.926791][ T290] EXT4-fs (loop2): unmounting filesystem. [ 50.935566][ T511] loop0: detected capacity change from 0 to 2048 [ 50.942151][ T28] audit: type=1400 audit(1786411231.906:192): avc: denied { open } for pid=506 comm="syz.1.49" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 51.035257][ T514] usb usb8: usbfs: process 514 (syz.4.51) did not claim interface 0 before use [ 51.048702][ T28] audit: type=1400 audit(1786411232.146:193): avc: denied { create } for pid=510 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.083098][ T28] audit: type=1400 audit(1786411232.166:194): avc: denied { bind } for pid=510 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.112402][ T28] audit: type=1400 audit(1786411232.166:195): avc: denied { listen } for pid=510 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.177143][ T28] audit: type=1400 audit(1786411232.236:196): avc: denied { accept } for pid=510 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.204829][ T28] audit: type=1400 audit(1786411232.296:197): avc: denied { write } for pid=510 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.318635][ T524] loop4: detected capacity change from 0 to 256 [ 52.357728][ T28] audit: type=1400 audit(1786411233.446:198): avc: denied { write } for pid=527 comm="syz.0.55" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 52.408141][ T531] netlink: 80 bytes leftover after parsing attributes in process `syz.4.56'. [ 52.434255][ T531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.56'. [ 52.448251][ T28] audit: type=1400 audit(1786411233.486:199): avc: denied { create } for pid=530 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.486243][ T531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.56'. [ 52.496328][ T531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.56'. [ 52.499179][ T523] loop1: detected capacity change from 0 to 40427 [ 52.511648][ T28] audit: type=1400 audit(1786411233.496:200): avc: denied { write } for pid=530 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.521945][ T523] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 52.555769][ T523] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 52.571060][ T523] F2FS-fs (loop1): invalid crc value [ 52.581339][ T28] audit: type=1400 audit(1786411233.576:201): avc: denied { remount } for pid=530 comm="syz.4.56" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.610598][ T523] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 52.631285][ T28] audit: type=1400 audit(1786411233.676:202): avc: denied { mount } for pid=525 comm="syz.2.54" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 52.663990][ T519] loop3: detected capacity change from 0 to 40427 [ 52.722548][ T519] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 52.740472][ T28] audit: type=1400 audit(1786411233.806:203): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 52.742989][ T519] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 52.764409][ T529] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 52.788200][ T28] audit: type=1400 audit(1786411233.876:204): avc: denied { name_bind } for pid=543 comm="syz.2.59" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 52.812715][ T523] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 52.820403][ T519] F2FS-fs (loop3): invalid crc value [ 52.830723][ T523] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 52.842173][ T519] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 52.864095][ T28] audit: type=1400 audit(1786411233.956:205): avc: denied { write } for pid=543 comm="syz.2.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.945143][ T549] loop4: detected capacity change from 0 to 512 [ 53.217352][ T519] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 53.263486][ T519] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 54.145504][ T557] 9pnet_fd: Insufficient options for proto=fd [ 54.468298][ T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 54.670440][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 54.695260][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 55.089837][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 55.098145][ T291] syz-executor: attempt to access beyond end of device [ 55.098145][ T291] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 55.121305][ T24] usb 4-1: can't read configurations, error -71 [ 55.128834][ T288] syz-executor: attempt to access beyond end of device [ 55.128834][ T288] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 55.149559][ T529] usb 1-1: unable to get BOS descriptor or descriptor too short [ 55.205178][ T556] loop4: detected capacity change from 0 to 40427 [ 55.235956][ T556] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 55.250993][ T556] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 55.259507][ T529] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 55.289827][ T529] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 55.299003][ T529] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.301382][ T556] F2FS-fs (loop4): invalid crc value [ 55.307004][ T529] usb 1-1: Product: syz [ 55.316485][ T529] usb 1-1: Manufacturer: syz [ 55.329927][ T529] usb 1-1: SerialNumber: syz [ 55.370096][ T556] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 55.412519][ T565] loop3: detected capacity change from 0 to 2048 [ 55.437396][ T556] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 55.486032][ T529] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 55.505230][ T529] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 55.520652][ T556] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 55.562898][ T529] usb 1-1: USB disconnect, device number 2 [ 58.306276][ T565] loop3: p1 < > p3 [ 58.317879][ T565] loop3: p3 size 134217728 extends beyond EOD, truncated [ 58.495152][ T577] loop0: detected capacity change from 0 to 512 [ 59.278301][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 59.453726][ T372] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 59.510949][ T28] audit: type=1400 audit(1786411240.606:206): avc: denied { read write } for pid=583 comm="syz.0.71" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 59.543394][ T311] udevd[311]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 59.557163][ T372] udevd[372]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 59.579290][ T590] loop4: detected capacity change from 0 to 512 [ 59.595733][ T28] audit: type=1400 audit(1786411240.636:207): avc: denied { open } for pid=583 comm="syz.0.71" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 59.601319][ T579] loop1: detected capacity change from 0 to 40427 [ 59.637806][ T28] audit: type=1400 audit(1786411240.636:208): avc: denied { ioctl } for pid=583 comm="syz.0.71" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 59.663394][ T579] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 59.675807][ T590] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.676555][ T579] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 59.693586][ T579] F2FS-fs (loop1): invalid crc value [ 59.699053][ T381] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 59.708503][ T590] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.751203][ T579] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 59.770563][ T28] audit: type=1400 audit(1786411240.866:209): avc: denied { setattr } for pid=589 comm="syz.4.67" name="dev" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 59.793139][ T590] syz.4.67 (590) used greatest stack depth: 20160 bytes left [ 59.802154][ T289] EXT4-fs (loop4): unmounting filesystem. [ 59.858494][ T579] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 59.867817][ T579] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 59.888214][ T381] usb 3-1: Using ep0 maxpacket: 16 [ 59.894482][ T381] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 59.928229][ T381] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 59.958217][ T381] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 59.977445][ T381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.998234][ T529] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 60.000209][ T381] usb 3-1: config 0 descriptor?? [ 60.083004][ T599] loop4: detected capacity change from 0 to 40427 [ 60.098035][ T599] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 60.117502][ T599] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 60.132560][ T599] F2FS-fs (loop4): invalid crc value [ 60.143912][ T288] syz-executor: attempt to access beyond end of device [ 60.143912][ T288] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 60.159186][ T599] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 60.188194][ T529] usb 1-1: Using ep0 maxpacket: 8 [ 60.359571][ T599] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 60.366681][ T599] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 60.426125][ T381] dragonrise 0003:0079:0011.0002: collection stack underflow [ 60.438230][ T381] dragonrise 0003:0079:0011.0002: item 0 2 0 12 parsing failed [ 60.446137][ T381] dragonrise 0003:0079:0011.0002: parse failed [ 60.488703][ T381] dragonrise: probe of 0003:0079:0011.0002 failed with error -22 [ 60.515025][ T610] loop1: detected capacity change from 0 to 512 [ 61.021666][ T381] usb 3-1: USB disconnect, device number 3 [ 61.377145][ T614] 9pnet_fd: Insufficient options for proto=fd [ 63.738898][ T289] syz-executor: attempt to access beyond end of device [ 63.738898][ T289] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 63.868933][ T619] usb usb8: usbfs: process 619 (syz.2.76) did not claim interface 0 before use [ 63.882517][ T529] usb 1-1: unable to get BOS descriptor or descriptor too short [ 63.897833][ T529] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 64.303216][ T623] 9pnet_fd: Insufficient options for proto=fd [ 66.376332][ T624] loop1: detected capacity change from 0 to 128 [ 66.702530][ T627] loop0: detected capacity change from 0 to 512 [ 67.542969][ T628] loop2: detected capacity change from 0 to 256 [ 68.422485][ T633] loop0: detected capacity change from 0 to 2048 [ 68.446574][ T630] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.453849][ T630] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.479233][ T635] Non-string source [ 68.496351][ T633] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 68.527879][ T529] usb 1-1: can't read configurations, error -71 [ 68.540561][ T372] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.920943][ T644] loop3: detected capacity change from 0 to 40427 [ 68.935461][ T644] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 68.951742][ T644] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 68.961535][ T644] F2FS-fs (loop3): invalid crc value [ 68.968372][ T644] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 69.004545][ T644] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 69.031713][ T644] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 69.080978][ T653] loop1: detected capacity change from 0 to 1024 [ 69.105968][ T653] EXT4-fs: Ignoring removed bh option [ 69.130016][ T653] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 69.153818][ T28] audit: type=1400 audit(1786411250.246:210): avc: denied { setopt } for pid=652 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.168573][ T39] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 69.204910][ T288] EXT4-fs (loop1): unmounting filesystem. [ 69.222566][ T658] loop1: detected capacity change from 0 to 512 [ 69.244974][ T28] audit: type=1400 audit(1786411250.336:211): avc: denied { write } for pid=632 comm="syz.0.81" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.267171][ T28] audit: type=1400 audit(1786411250.336:212): avc: denied { open } for pid=632 comm="syz.0.81" path="/14/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.290112][ T28] audit: type=1400 audit(1786411250.356:213): avc: denied { read } for pid=632 comm="syz.0.81" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.290361][ T633] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 69.313053][ T28] audit: type=1400 audit(1786411250.386:214): avc: denied { ioctl } for pid=632 comm="syz.0.81" path="/14/file1/file1" dev="loop0" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.339189][ T633] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 69.362439][ T633] EXT4-fs (loop0): This should not happen!! Data will be lost [ 69.362439][ T633] [ 69.372125][ T633] EXT4-fs (loop0): Total free blocks count 0 [ 69.378135][ T633] EXT4-fs (loop0): Free/Dirty block details [ 69.384092][ T633] EXT4-fs (loop0): free_blocks=4096 [ 69.389336][ T633] EXT4-fs (loop0): dirty_blocks=16 [ 69.394461][ T633] EXT4-fs (loop0): Block reservation details [ 69.400339][ T39] usb 3-1: unable to get BOS descriptor or descriptor too short [ 69.400508][ T633] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 69.420343][ T633] EXT4-fs warning (device loop0): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 69.442162][ T287] EXT4-fs (loop0): unmounting filesystem. [ 69.473501][ T662] loop0: detected capacity change from 0 to 256 [ 69.495342][ T662] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xa7bc3a1f, utbl_chksum : 0xe619d30d) [ 69.505779][ T381] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 69.515653][ T662] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 2199023255554) [ 69.527571][ T39] usb 3-1: config 0 has no interfaces? [ 69.533899][ T39] usb 3-1: language id specifier not provided by device, defaulting to English [ 69.559122][ T28] audit: type=1400 audit(1786411250.656:215): avc: denied { read write } for pid=661 comm="syz.0.88" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 69.582723][ T28] audit: type=1400 audit(1786411250.656:216): avc: denied { open } for pid=661 comm="syz.0.88" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 69.588511][ T297] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 69.607707][ T28] audit: type=1400 audit(1786411250.656:217): avc: denied { write } for pid=661 comm="syz.0.88" name="file0" dev="loop0" ino=1048617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.659512][ T39] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.698876][ T664] loop4: detected capacity change from 0 to 512 [ 69.711247][ T381] usb 4-1: unable to get BOS descriptor or descriptor too short [ 69.841446][ T381] usb 4-1: not running at top speed; connect to a high speed hub [ 69.883147][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.924992][ T666] loop0: detected capacity change from 0 to 512 [ 69.943110][ T381] usb 4-1: config 228 has an invalid interface number: 88 but max is 0 [ 69.957696][ T39] usb 3-1: Product: syz [ 70.014959][ T666] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 70.032022][ T39] usb 3-1: SerialNumber: syz [ 70.058957][ T381] usb 4-1: config 228 has no interface number 0 [ 70.082657][ T39] usb 3-1: config 0 descriptor?? [ 70.090407][ T381] usb 4-1: config 228 interface 88 has no altsetting 0 [ 70.104471][ T666] EXT4-fs (loop0): 1 truncate cleaned up [ 70.110900][ T666] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 70.149201][ T381] usb 4-1: language id specifier not provided by device, defaulting to English [ 70.227586][ T381] usb 4-1: New USB device found, idVendor=0fce, idProduct=d0e1, bcdDevice= 0.00 [ 70.641946][ T381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.650357][ T381] usb 4-1: Product: syz [ 70.654543][ T381] usb 4-1: Manufacturer: syz [ 70.659356][ T381] usb 4-1: SerialNumber: syz [ 70.677540][ T28] audit: type=1400 audit(1786411251.766:218): avc: denied { append } for pid=665 comm="syz.0.89" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.707175][ T24] usb 3-1: USB disconnect, device number 4 [ 70.726530][ T28] audit: type=1400 audit(1786411251.796:219): avc: denied { map } for pid=665 comm="syz.0.89" path="/newroot/dev/loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.918214][ T297] usb 2-1: Using ep0 maxpacket: 32 [ 70.924700][ T297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 121, changing to 10 [ 70.937302][ T297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25388, setting to 1024 [ 70.948796][ T297] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 70.957910][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.969877][ T669] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 70.978006][ T297] usb 2-1: config 0 descriptor?? [ 70.983150][ T669] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 70.992312][ T297] hub 2-1:0.0: USB hub found [ 70.997560][ T669] F2FS-fs (loop4): invalid crc value [ 71.005015][ T669] F2FS-fs (loop4): Found nat_bits in checkpoint [ 71.048268][ T669] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 71.055380][ T669] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 71.118231][ T529] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 71.193014][ T297] hub 2-1:0.0: 1 port detected [ 71.308999][ T529] usb 1-1: not running at top speed; connect to a high speed hub [ 71.317668][ T529] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.328417][ T529] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 71.337530][ T529] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.358255][ T529] uvcvideo 1-1:1.1: Unknown video format 00000059-0000-0000-0000-000000000000 [ 71.367296][ T529] usb 1-1: Found UVC 1.00 device (046d:0825) [ 71.374418][ T529] uvcvideo 1-1:1.1: No supported video formats found. [ 71.381344][ T529] uvcvideo 1-1:1.1: Failed to initialize the device (-22). [ 71.390722][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 71.501597][ T678] set_capacity_and_notify: 1 callbacks suppressed [ 71.501630][ T678] loop2: detected capacity change from 0 to 40427 [ 71.515292][ T678] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 71.522564][ T678] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 71.531435][ T678] F2FS-fs (loop2): invalid crc value [ 71.538377][ T678] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 71.581378][ T666] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5954: Out of memory [ 71.594255][ T666] EXT4-fs error (device loop0): ext4_setattr:5636: inode #15: comm syz.0.89: mark_inode_dirty error [ 71.597042][ T678] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 71.610175][ T666] EXT4-fs error (device loop0) in ext4_setattr:5697: Out of memory [ 71.621494][ T678] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 71.753147][ T685] loop4: detected capacity change from 0 to 512 [ 71.760058][ T685] EXT4-fs: Ignoring removed oldalloc option [ 71.769112][ T685] EXT4-fs (loop4): Test dummy encryption mode enabled [ 71.780713][ T685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 71.793592][ T685] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 4294967295 (only 1 groups) [ 71.809113][ T685] Zero length message leads to an empty skb [ 71.824055][ T289] EXT4-fs (loop4): unmounting filesystem. [ 71.842975][ T689] capability: warning: `syz.4.94' uses deprecated v2 capabilities in a way that may be insecure [ 71.914236][ T381] usb-storage 4-1:228.88: USB Mass Storage device detected [ 71.923947][ T291] syz-executor: attempt to access beyond end of device [ 71.923947][ T291] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 71.938624][ T381] usb-storage 4-1:228.88: device ignored [ 71.978272][ T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 71.991310][ T381] usb 4-1: USB disconnect, device number 5 [ 72.045843][ T691] loop4: detected capacity change from 0 to 40427 [ 72.058754][ T691] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 72.065150][ T691] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 72.074215][ T691] F2FS-fs (loop4): invalid crc value [ 72.081089][ T691] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 72.114036][ T691] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 72.121180][ T691] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 72.145416][ T529] usb 1-1: USB disconnect, device number 4 [ 72.154405][ T696] f2fs_ckpt-7:4: attempt to access beyond end of device [ 72.154405][ T696] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 72.174794][ T287] EXT4-fs (loop0): unmounting filesystem. [ 72.189437][ T691] xt_TCPMSS: Only works on TCP SYN packets [ 72.199569][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 72.211506][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 72.226512][ T24] usb 3-1: config 228 has an invalid interface number: 88 but max is 0 [ 72.235439][ T24] usb 3-1: config 228 has no interface number 0 [ 72.241878][ T24] usb 3-1: config 228 interface 88 has no altsetting 0 [ 72.269130][ T24] usb 3-1: language id specifier not provided by device, defaulting to English [ 72.279079][ T582] usb 2-1: USB disconnect, device number 4 [ 72.293563][ T24] usb 3-1: New USB device found, idVendor=0fce, idProduct=d0e1, bcdDevice= 0.00 [ 72.296685][ T704] netlink: 52 bytes leftover after parsing attributes in process `syz.0.98'. [ 72.307478][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.320129][ T24] usb 3-1: Product: syz [ 72.324367][ T24] usb 3-1: Manufacturer: syz [ 72.329544][ T24] usb 3-1: SerialNumber: syz [ 72.332195][ T704] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.341397][ T704] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.351366][ T706] netlink: 76 bytes leftover after parsing attributes in process `syz.0.98'. [ 72.360297][ T706] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.367344][ T706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.374730][ T706] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.381793][ T706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.389869][ T706] netlink: 52 bytes leftover after parsing attributes in process `syz.0.98'. [ 72.398906][ T706] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.406065][ T706] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.491112][ T708] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 72.501947][ T710] loop0: detected capacity change from 0 to 512 [ 72.510519][ T708] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 72.522399][ T710] EXT4-fs (loop0): 1 truncate cleaned up [ 72.529459][ T710] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 72.558754][ T287] EXT4-fs (loop0): unmounting filesystem. [ 72.621238][ T713] loop4: detected capacity change from 0 to 256 [ 72.810900][ T720] loop0: detected capacity change from 0 to 512 [ 73.850203][ T724] usb usb8: usbfs: process 724 (syz.3.104) did not claim interface 0 before use [ 73.861878][ T726] loop1: detected capacity change from 0 to 512 [ 73.877884][ T726] EXT4-fs: Ignoring removed oldalloc option [ 73.913666][ T726] EXT4-fs (loop1): Test dummy encryption mode enabled [ 73.930789][ T726] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 73.969892][ T726] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 4294967295 (only 1 groups) [ 73.992995][ T288] EXT4-fs (loop1): unmounting filesystem. [ 74.029854][ T735] loop1: detected capacity change from 0 to 512 [ 74.039578][ T735] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 74.049371][ T735] EXT4-fs (loop1): 1 truncate cleaned up [ 74.055182][ T735] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 74.131257][ T737] loop3: detected capacity change from 0 to 256 [ 74.643061][ T24] usb-storage 3-1:228.88: USB Mass Storage device detected [ 75.063965][ T290] syz-executor: attempt to access beyond end of device [ 75.063965][ T290] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 75.090206][ T24] usb-storage 3-1:228.88: device ignored [ 75.130008][ T24] usb 3-1: USB disconnect, device number 5 [ 75.218821][ T529] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 75.230846][ T407] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 75.261153][ T748] netlink: 52 bytes leftover after parsing attributes in process `syz.3.111'. [ 75.270853][ T748] netlink: 76 bytes leftover after parsing attributes in process `syz.3.111'. [ 75.280526][ T748] netlink: 52 bytes leftover after parsing attributes in process `syz.3.111'. [ 75.326035][ T753] loop2: detected capacity change from 0 to 512 [ 75.343029][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 75.343044][ T28] audit: type=1400 audit(1786411256.436:239): avc: denied { read write } for pid=754 comm="syz.0.113" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.354640][ T753] EXT4-fs (loop2): 1 truncate cleaned up [ 75.380000][ T753] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 75.389867][ T28] audit: type=1400 audit(1786411256.486:240): avc: denied { open } for pid=754 comm="syz.0.113" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.415407][ T755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=755 comm=syz.0.113 [ 75.427807][ T28] audit: type=1400 audit(1786411256.516:241): avc: denied { ioctl } for pid=754 comm="syz.0.113" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x556d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.439371][ T407] usb 2-1: not running at top speed; connect to a high speed hub [ 75.458998][ T529] usb 5-1: unable to get BOS descriptor or descriptor too short [ 75.472039][ T407] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.486049][ T529] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.496863][ T529] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 75.515773][ T407] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 75.519084][ T529] usb 5-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 75.535234][ T529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.542315][ T407] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.543385][ T529] usb 5-1: Product: syz [ 75.555438][ T529] usb 5-1: Manufacturer: syz [ 75.560198][ T529] usb 5-1: SerialNumber: syz [ 75.563735][ T760] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.570718][ T290] EXT4-fs (loop2): unmounting filesystem. [ 75.582492][ T761] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 75.598035][ T760] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 75.606735][ T28] audit: type=1400 audit(1786411256.696:242): avc: denied { create } for pid=759 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.610760][ T407] uvcvideo 2-1:1.1: Unknown video format 00000059-0000-0000-0000-000000000000 [ 75.653931][ T28] audit: type=1400 audit(1786411256.736:243): avc: denied { bind } for pid=759 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.667010][ T407] usb 2-1: Found UVC 1.00 device (046d:0825) [ 75.677026][ T763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'. [ 75.690043][ T760] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 75.698377][ T407] uvcvideo 2-1:1.1: No supported video formats found. [ 75.705080][ T763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.116'. [ 75.717786][ T28] audit: type=1400 audit(1786411256.736:244): avc: denied { setopt } for pid=759 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.718241][ T407] uvcvideo 2-1:1.1: Failed to initialize the device (-22). [ 75.748554][ T28] audit: type=1400 audit(1786411256.736:245): avc: denied { bind } for pid=762 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.789074][ T28] audit: type=1400 audit(1786411256.866:246): avc: denied { associate } for pid=758 comm="syz.0.114" name="current" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.868216][ T28] audit: type=1400 audit(1786411256.946:247): avc: denied { add_name } for pid=758 comm="syz.0.114" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.961116][ T28] audit: type=1400 audit(1786411256.946:248): avc: denied { associate } for pid=758 comm="syz.0.114" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 76.028138][ T735] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5954: Out of memory [ 76.058445][ T735] EXT4-fs error (device loop1): ext4_setattr:5636: inode #15: comm syz.1.108: mark_inode_dirty error [ 76.122776][ T735] EXT4-fs error (device loop1) in ext4_setattr:5697: Out of memory [ 76.135904][ T773] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 76.157157][ T773] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.300977][ T529] usb 5-1: unit 4 not found! [ 76.313149][ T529] usb 5-1: USB disconnect, device number 4 [ 76.518249][ T730] EXT4-fs warning (device loop1): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 2162070236 [ 76.540964][ T786] set_capacity_and_notify: 2 callbacks suppressed [ 76.540980][ T786] loop0: detected capacity change from 0 to 512 [ 76.557265][ T372] udevd[372]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 76.583139][ T730] EXT4-fs error (device loop1): ext4_init_inode_table:1577: comm ext4lazyinit: Something is wrong with group 0: used itable blocks: -12532; itable unused count: 50160 [ 76.646309][ T786] EXT4-fs: Ignoring removed i_version option [ 76.661645][ T786] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.678260][ T786] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.693400][ T582] usb 2-1: USB disconnect, device number 5 [ 76.699704][ T786] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 76.716165][ T288] EXT4-fs (loop1): unmounting filesystem. [ 76.786591][ T782] loop4: detected capacity change from 0 to 40427 [ 76.800286][ T782] F2FS-fs (loop4): fault_injection options not supported [ 76.816122][ T782] F2FS-fs (loop4): fault_type options not supported [ 76.843116][ T782] F2FS-fs (loop4): invalid crc value [ 76.853747][ T798] netlink: 52 bytes leftover after parsing attributes in process `syz.1.128'. [ 76.863267][ T782] F2FS-fs (loop4): Found nat_bits in checkpoint [ 76.908399][ T782] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 76.955108][ T290] EXT4-fs (loop2): unmounting filesystem. [ 77.159722][ T820] loop1: detected capacity change from 0 to 512 [ 77.608336][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 77.907356][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 77.950020][ T24] usb 3-1: config 0 has no interfaces? [ 77.968343][ T24] usb 3-1: language id specifier not provided by device, defaulting to English [ 77.985618][ T823] loop4: detected capacity change from 0 to 4096 [ 78.039223][ T823] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.058809][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.080267][ T829] netlink: 27 bytes leftover after parsing attributes in process `syz.3.136'. [ 78.245480][ T823] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802e018, mo2=0002] [ 78.260053][ T823] System zones: 0-5 [ 78.279079][ T823] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 78.360116][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.368638][ T24] usb 3-1: Product: syz [ 78.372868][ T24] usb 3-1: SerialNumber: syz [ 78.397242][ T838] netlink: 52 bytes leftover after parsing attributes in process `syz.3.140'. [ 78.417028][ T840] loop1: detected capacity change from 0 to 16 [ 78.446764][ T840] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16300) [ 78.465595][ T24] usb 3-1: config 0 descriptor?? [ 78.562020][ T840] loop1: detected capacity change from 0 to 8192 [ 78.588834][ T840] FAULT_INJECTION: forcing a failure. [ 78.588834][ T840] name failslab, interval 1, probability 0, space 0, times 1 [ 78.612022][ T840] CPU: 0 PID: 840 Comm: syz.1.139 Not tainted syzkaller #0 [ 78.619395][ T840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 78.629495][ T840] Call Trace: [ 78.632804][ T840] [ 78.635754][ T840] __dump_stack+0x21/0x24 [ 78.640132][ T840] dump_stack_lvl+0x110/0x170 [ 78.644842][ T840] ? __cfi_dump_stack_lvl+0x8/0x8 [ 78.649901][ T840] dump_stack+0x15/0x24 [ 78.654097][ T840] should_fail_ex+0x3bf/0x510 [ 78.658804][ T840] __should_failslab+0xac/0xf0 [ 78.663607][ T840] should_failslab+0x9/0x20 [ 78.668142][ T840] slab_pre_alloc_hook+0x30/0x1d0 [ 78.673208][ T840] kmem_cache_alloc_lru+0x49/0x280 [ 78.678359][ T840] ? __d_alloc+0x34/0x6d0 [ 78.682735][ T840] __d_alloc+0x34/0x6d0 [ 78.686932][ T840] d_alloc_parallel+0xe2/0x1280 [ 78.691814][ T840] ? memcpy+0x56/0x70 [ 78.695834][ T840] ? avc_has_perm_noaudit+0x30a/0x490 [ 78.701246][ T840] ? __cfi_d_alloc_parallel+0x10/0x10 [ 78.706651][ T840] ? 0xffffffffa0000988 [ 78.710849][ T840] ? __kasan_check_write+0x14/0x20 [ 78.715993][ T840] ? rwsem_read_trylock+0x2af/0x640 [ 78.721229][ T840] ? msdos_format_name+0xcde/0xe10 [ 78.726375][ T840] __lookup_slow+0x14f/0x410 [ 78.730999][ T840] ? lookup_one_len+0x2e0/0x2e0 [ 78.733755][ T381] usb 3-1: USB disconnect, device number 6 [ 78.735882][ T840] ? down_read+0xa6/0xf0 [ 78.746200][ T840] ? __cfi_down_read+0x10/0x10 [ 78.751289][ T840] lookup_slow+0x57/0x70 [ 78.755562][ T840] link_path_walk+0x984/0xeb0 [ 78.760272][ T840] ? handle_lookup_down+0x130/0x130 [ 78.765513][ T840] path_lookupat+0x8d/0x430 [ 78.770039][ T840] filename_lookup+0x229/0x580 [ 78.774831][ T840] ? __cfi_filename_lookup+0x10/0x10 [ 78.780143][ T840] ? strncpy_from_user+0x172/0x2c0 [ 78.785275][ T840] ? getname_flags+0x205/0x510 [ 78.790057][ T840] user_path_at_empty+0x46/0x1c0 [ 78.795012][ T840] __se_sys_mount+0x2eb/0x390 [ 78.799708][ T840] ? __x64_sys_mount+0xd0/0xd0 [ 78.804482][ T840] ? __cfi_ksys_write+0x10/0x10 [ 78.809405][ T840] __x64_sys_mount+0xbf/0xd0 [ 78.814017][ T840] x64_sys_call+0x65d/0x9a0 [ 78.818539][ T840] do_syscall_64+0x4c/0xa0 [ 78.822975][ T840] ? clear_bhb_loop+0x30/0x80 [ 78.827667][ T840] ? clear_bhb_loop+0x30/0x80 [ 78.832358][ T840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.838287][ T840] RIP: 0033:0x7f4866b9e0d9 [ 78.842802][ T840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.862433][ T840] RSP: 002b:00007f4867b5a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 78.870884][ T840] RAX: ffffffffffffffda RBX: 00007f4866e25fa0 RCX: 00007f4866b9e0d9 [ 78.878883][ T840] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000000 [ 78.886873][ T840] RBP: 00007f4867b5a090 R08: 0000000000000000 R09: 0000000000000000 [ 78.894885][ T840] R10: 0000000000101091 R11: 0000000000000246 R12: 0000000000000001 [ 78.902874][ T840] R13: 00007f4866e26038 R14: 00007f4866e25fa0 R15: 00007ffdeff20f08 [ 78.910866][ T840] [ 78.913945][ T24] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 78.958547][ T289] EXT4-fs (loop4): unmounting filesystem. [ 78.967512][ T848] device syzkaller0 entered promiscuous mode [ 79.006011][ T848] tipc: Started in network mode [ 79.019496][ T848] tipc: Node identity 7eafdae45968, cluster identity 4711 [ 79.027621][ T848] tipc: Enabled bearer , priority 0 [ 79.036587][ T848] syzkaller0: MTU too low for tipc bearer [ 79.042585][ T848] tipc: Disabling bearer [ 79.053403][ T850] usb usb8: usbfs: process 850 (syz.4.144) did not claim interface 0 before use [ 79.146869][ T807] loop0: detected capacity change from 0 to 131072 [ 79.155421][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.165977][ T807] F2FS-fs (loop0): Unrecognized mount option "" or missing value [ 79.174084][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 79.185398][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 79.197248][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 79.208291][ T24] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 79.230175][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.256778][ T853] loop4: detected capacity change from 0 to 256 [ 79.290214][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.313956][ T24] usb 4-1: Product: syz [ 79.319201][ T24] usb 4-1: Manufacturer: syz [ 79.323890][ T24] usb 4-1: SerialNumber: syz [ 79.428731][ T856] loop1: detected capacity change from 0 to 16 [ 79.498845][ T846] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 79.522379][ T24] cdc_mbim 4-1:1.0: skipping garbage [ 79.551428][ T856] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16300) [ 79.729336][ T845] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 80.081161][ T856] loop1: detected capacity change from 0 to 8192 [ 80.147222][ T858] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.181314][ T856] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 80.189425][ T845] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 80.208253][ T858] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 80.216854][ T856] FAT-fs (loop1): Filesystem has been set read-only [ 80.232334][ T858] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 80.373918][ T24] cdc_mbim 4-1:1.0: bind() failure [ 80.380108][ T24] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 80.386923][ T24] cdc_ncm 4-1:1.1: bind() failure [ 80.746864][ T868] erofs: (device loop1): z_erofs_parse_cfgs: unidentified algorithms fffc, please upgrade kernel [ 81.009916][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 81.009939][ T28] audit: type=1400 audit(1786411262.106:262): avc: denied { connect } for pid=867 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.212678][ T407] usb 4-1: USB disconnect, device number 6 [ 81.798086][ T877] netlink: 52 bytes leftover after parsing attributes in process `syz.4.151'. [ 81.852139][ T877] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.859453][ T877] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.877132][ T28] audit: type=1400 audit(1786411262.166:263): avc: denied { create } for pid=844 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.977325][ T894] binder: BINDER_SET_CONTEXT_MGR already set [ 81.985667][ T894] binder: 887:894 ioctl 4018620d 200000004a80 returned -16 [ 82.210360][ T900] set_capacity_and_notify: 3 callbacks suppressed [ 82.210380][ T900] loop4: detected capacity change from 0 to 256 [ 82.403524][ T407] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 82.451025][ T907] loop0: detected capacity change from 0 to 8192 [ 82.534685][ T909] loop1: detected capacity change from 0 to 512 [ 82.588265][ T407] usb 4-1: Using ep0 maxpacket: 32 [ 82.626499][ T407] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 82.732722][ T407] usb 4-1: config 0 has no interface number 0 [ 82.801984][ T407] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 82.960727][ T407] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 83.010367][ T407] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 83.059940][ T407] usb 4-1: config 0 interface 196 has no altsetting 0 [ 83.102240][ T407] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 83.147303][ T407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.264501][ T407] usb 4-1: Product: syz [ 83.268908][ T407] usb 4-1: Manufacturer: syz [ 83.273530][ T407] usb 4-1: SerialNumber: syz [ 83.292612][ T407] usb 4-1: config 0 descriptor?? [ 83.297885][ T886] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 83.598220][ T582] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 83.630886][ T911] loop1: detected capacity change from 0 to 512 [ 83.647275][ T911] ext3: Bad value for 'journal_dev' [ 83.714457][ T407] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 83.724313][ T28] audit: type=1400 audit(1786411264.816:264): avc: denied { setopt } for pid=906 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.782517][ T28] audit: type=1400 audit(1786411264.816:265): avc: denied { bind } for pid=906 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.803536][ T582] usb 3-1: unable to get BOS descriptor or descriptor too short [ 83.819503][ T582] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 83.859452][ T28] audit: type=1400 audit(1786411264.866:266): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 83.880862][ T582] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 83.902415][ T582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.934264][ T582] usb 3-1: Product: syz [ 83.944350][ T582] usb 3-1: Manufacturer: syz [ 83.965320][ T582] usb 3-1: SerialNumber: syz [ 83.971687][ T28] audit: type=1400 audit(1786411264.876:267): avc: denied { search } for pid=141 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.045495][ T28] audit: type=1400 audit(1786411264.876:268): avc: denied { read } for pid=141 comm="dhcpcd" name="n15" dev="tmpfs" ino=2518 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.117918][ T28] audit: type=1400 audit(1786411264.876:269): avc: denied { open } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2518 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.190437][ T28] audit: type=1400 audit(1786411264.876:270): avc: denied { getattr } for pid=141 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2518 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.268390][ T28] audit: type=1400 audit(1786411265.126:271): avc: denied { read } for pid=921 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.337562][ T141] ipheth 4-1:0.196: ipheth_rx_submit: usb_submit_urb: -90 [ 84.434627][ T582] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 84.452127][ T939] loop4: detected capacity change from 0 to 1024 [ 84.470069][ T939] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.500231][ T939] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 84.509057][ T939] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.542895][ T938] EXT4-fs (loop4): Online defrag not supported with bigalloc [ 84.566283][ T946] netlink: 52 bytes leftover after parsing attributes in process `syz.0.169'. [ 84.620978][ T289] EXT4-fs (loop4): unmounting filesystem. [ 84.644322][ T582] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 84.661651][ T954] 8021q: VLANs not supported on lo [ 85.049046][ T582] usb 3-1: USB disconnect, device number 7 [ 85.168330][ T407] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.291846][ T969] usb usb8: usbfs: process 969 (syz.1.178) did not claim interface 0 before use [ 85.378228][ T407] usb 1-1: Using ep0 maxpacket: 16 [ 85.384483][ T407] usb 1-1: config 0 interface 0 altsetting 88 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.395535][ T407] usb 1-1: config 0 interface 0 altsetting 88 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.405695][ T407] usb 1-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 85.418722][ T407] usb 1-1: config 0 interface 0 has no altsetting 0 [ 85.425505][ T407] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 85.434707][ T407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.494845][ T971] loop1: detected capacity change from 0 to 256 [ 85.676492][ T407] usb 1-1: config 0 descriptor?? [ 86.263569][ T24] usb 4-1: USB disconnect, device number 7 [ 86.496696][ T982] netlink: 'syz.3.183': attribute type 1 has an invalid length. [ 86.538072][ T989] loop2: detected capacity change from 0 to 512 [ 86.588372][ T24] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 86.611779][ T985] binder: BINDER_SET_CONTEXT_MGR already set [ 86.630332][ T985] binder: 984:985 ioctl 4018620d 200000004a80 returned -16 [ 86.651055][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 86.651101][ T28] audit: type=1400 audit(1786411267.746:285): avc: denied { listen } for pid=996 comm="syz.4.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.803818][ T28] audit: type=1400 audit(1786411267.896:286): avc: denied { map } for pid=1016 comm="syz.3.190" path="socket:[18014]" dev="sockfs" ino=18014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.818730][ T965] loop0: detected capacity change from 0 to 40427 [ 86.864624][ T965] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 86.870144][ T28] audit: type=1400 audit(1786411267.926:287): avc: denied { read } for pid=1016 comm="syz.3.190" path="socket:[18014]" dev="sockfs" ino=18014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.882917][ T965] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 86.939725][ T965] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.006627][ T965] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 87.013984][ T965] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 87.092945][ T965] netlink: 180 bytes leftover after parsing attributes in process `syz.0.176'. [ 87.106576][ T28] audit: type=1400 audit(1786411268.196:288): avc: denied { setopt } for pid=964 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.108495][ T24] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 87.329093][ T1028] loop2: detected capacity change from 0 to 512 [ 87.340666][ T24] usb 4-1: config 0 interface 0 altsetting 72 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 87.362457][ T1028] EXT4-fs (loop2): 1 truncate cleaned up [ 87.368494][ T24] usb 4-1: config 0 interface 0 altsetting 72 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 87.381539][ T1028] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.396625][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 87.403598][ T24] usb 4-1: New USB device found, idVendor=04ea, idProduct=0023, bcdDevice= 0.00 [ 87.412894][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.421886][ T24] usb 4-1: config 0 descriptor?? [ 87.428371][ T1017] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 87.443686][ T290] EXT4-fs (loop2): unmounting filesystem. [ 87.499761][ T1036] usb usb8: usbfs: process 1036 (syz.2.194) did not claim interface 0 before use [ 87.692833][ T1039] loop2: detected capacity change from 0 to 256 [ 88.560688][ T24] hid-generic 0003:04EA:0023.0003: unknown main item tag 0x0 [ 88.578759][ T24] hid-generic 0003:04EA:0023.0003: unknown main item tag 0x0 [ 88.586503][ T24] hid-generic 0003:04EA:0023.0003: unknown main item tag 0x0 [ 88.643692][ T24] hid-generic 0003:04EA:0023.0003: unknown main item tag 0x0 [ 88.738804][ T24] hid-generic 0003:04EA:0023.0003: unknown main item tag 0x0 [ 88.746727][ T24] hid-generic 0003:04EA:0023.0003: unknown main item tag 0x0 [ 88.747021][ T407] usbhid 1-1:0.0: can't add hid device: -71 [ 88.764712][ T1017] loop3: detected capacity change from 0 to 1024 [ 88.771999][ T24] hid-generic 0003:04EA:0023.0003: hidraw0: USB HID v80.00 Device [HID 04ea:0023] on usb-dummy_hcd.3-1/input0 [ 88.781335][ T1017] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.784501][ T407] usbhid: probe of 1-1:0.0 failed with error -71 [ 88.801390][ T28] audit: type=1400 audit(1786411269.896:289): avc: denied { ioctl } for pid=1046 comm="syz.4.198" path="socket:[19471]" dev="sockfs" ino=19471 ioctlcmd=0xf506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.826023][ T1017] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 88.856282][ T1017] EXT4-fs (loop3): barriers disabled [ 88.856674][ T407] usb 1-1: USB disconnect, device number 5 [ 88.893108][ T1017] JBD2: no valid journal superblock found [ 88.905165][ T1017] EXT4-fs (loop3): error loading journal [ 88.932046][ T1051] binder: BINDER_SET_CONTEXT_MGR already set [ 88.943209][ T1051] binder: 1050:1051 ioctl 4018620d 200000004a80 returned -16 [ 88.961815][ T1056] loop0: detected capacity change from 0 to 256 [ 88.983986][ T1056] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xa7bc3a1f, utbl_chksum : 0xe619d30d) [ 88.996632][ T1056] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 2199023255554) [ 89.011112][ T381] usb 4-1: USB disconnect, device number 8 [ 89.074429][ T28] audit: type=1400 audit(1786411270.156:290): avc: denied { mounton } for pid=1055 comm="syz.0.200" path="/43/file1/file0" dev="loop0" ino=1048646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.162510][ T1060] loop2: detected capacity change from 0 to 512 [ 89.244183][ T28] audit: type=1400 audit(1786411270.336:291): avc: denied { mount } for pid=1063 comm="syz.0.203" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 89.267622][ T1064] /dev/nullb0: Can't open blockdev [ 89.296575][ T28] audit: type=1400 audit(1786411270.356:292): avc: denied { remount } for pid=1063 comm="syz.0.203" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 89.351276][ T28] audit: type=1400 audit(1786411270.356:293): avc: denied { mounton } for pid=1063 comm="syz.0.203" path="/45/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 89.436452][ T1075] usb usb8: usbfs: process 1075 (syz.0.207) did not claim interface 0 before use [ 89.463566][ T28] audit: type=1400 audit(1786411270.376:294): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 89.739473][ T1086] binder: BINDER_SET_CONTEXT_MGR already set [ 89.793441][ T1086] binder: 1085:1086 ioctl 4018620d 200000004a80 returned -16 [ 89.807000][ T1084] loop0: detected capacity change from 0 to 256 [ 90.042074][ T1108] loop4: detected capacity change from 0 to 256 [ 90.238249][ T582] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 90.283754][ T1113] netlink: 'syz.4.219': attribute type 16 has an invalid length. [ 90.293770][ T1113] netlink: 'syz.4.219': attribute type 17 has an invalid length. [ 90.428258][ T529] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 90.437176][ T582] usb 3-1: unable to get BOS descriptor or descriptor too short [ 90.445884][ T582] usb 3-1: config 0 has no interfaces? [ 90.452025][ T582] usb 3-1: language id specifier not provided by device, defaulting to English [ 90.462403][ T582] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.471712][ T582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.479853][ T582] usb 3-1: Product: syz [ 90.484131][ T582] usb 3-1: SerialNumber: syz [ 90.497488][ T582] usb 3-1: config 0 descriptor?? [ 90.568244][ T19] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 90.609407][ T529] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.619719][ T529] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.630710][ T529] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.638370][ T381] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 90.640668][ T529] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.655642][ T529] usb 4-1: Product: syz [ 90.659966][ T529] usb 4-1: Manufacturer: syz [ 90.664598][ T529] usb 4-1: SerialNumber: syz [ 90.708391][ T582] usb 3-1: USB disconnect, device number 8 [ 90.759664][ T19] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.768435][ T19] usb 2-1: config 0 has no interfaces? [ 90.774310][ T19] usb 2-1: language id specifier not provided by device, defaulting to English [ 90.784921][ T19] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.794279][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.802496][ T19] usb 2-1: Product: syz [ 90.806786][ T19] usb 2-1: SerialNumber: syz [ 90.808272][ T381] usb 5-1: device descriptor read/64, error -71 [ 90.831200][ T19] usb 2-1: config 0 descriptor?? [ 90.875687][ T1120] loop0: detected capacity change from 0 to 1024 [ 90.890609][ T529] usb 4-1: 0:2 : does not exist [ 90.897541][ T529] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 90.911197][ T529] usb 4-1: USB disconnect, device number 9 [ 90.920142][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.078309][ T381] usb 5-1: device descriptor read/64, error -71 [ 91.356839][ T1124] loop2: detected capacity change from 0 to 512 [ 91.668857][ T1139] binder: BINDER_SET_CONTEXT_MGR already set [ 91.675114][ T1139] binder: 1138:1139 ioctl 4018620d 200000004a80 returned -16 [ 91.759557][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 91.759573][ T28] audit: type=1400 audit(1786411272.856:303): avc: denied { ioctl } for pid=1144 comm="syz.0.230" path="socket:[20907]" dev="sockfs" ino=20907 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.802215][ T381] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 91.819382][ T1147] usb usb8: usbfs: process 1147 (syz.0.231) did not claim interface 0 before use [ 91.887468][ T1149] netlink: 44 bytes leftover after parsing attributes in process `syz.2.232'. [ 91.902848][ T1149] loop2: detected capacity change from 0 to 1024 [ 91.914934][ T1149] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 2: comm syz.2.232: lblock 2 mapped to illegal pblock 2 (length 1) [ 91.929139][ T1149] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 91.937261][ T1149] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.232: lblock 0 mapped to illegal pblock 48 (length 1) [ 91.951488][ T1149] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 91.960862][ T381] usb 5-1: device descriptor read/64, error -71 [ 91.961975][ T1149] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.232: Failed to acquire dquot type 0 [ 91.979398][ T1149] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 91.990739][ T1149] EXT4-fs error (device loop2): ext4_evict_inode:281: inode #11: comm syz.2.232: mark_inode_dirty error [ 92.003437][ T1149] EXT4-fs warning (device loop2): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 92.015540][ T1149] EXT4-fs (loop2): 1 orphan inode deleted [ 92.025853][ T1149] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.228843][ T381] usb 5-1: device descriptor read/64, error -71 [ 92.337867][ T1149] EXT4-fs: Ignoring removed bh option [ 92.358842][ T381] usb usb5-port1: attempt power cycle [ 92.798209][ T381] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 92.829349][ T381] usb 5-1: device descriptor read/8, error -71 [ 92.907223][ T403] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 92.930902][ T403] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 92.941647][ T529] usb 2-1: USB disconnect, device number 6 [ 92.981291][ T403] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:7: Failed to release dquot type 0 [ 93.019692][ T1149] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 48: comm syz.2.232: lblock 0 mapped to illegal pblock 48 (length 1) [ 93.036325][ T1149] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 93.049649][ T1161] set_capacity_and_notify: 1 callbacks suppressed [ 93.049667][ T1161] loop3: detected capacity change from 0 to 512 [ 93.075901][ T290] EXT4-fs (loop2): unmounting filesystem. [ 94.382024][ T1163] 9pnet_fd: Insufficient options for proto=fd [ 95.487536][ T1165] 9pnet_fd: Insufficient options for proto=fd [ 95.502323][ T381] usb 5-1: device descriptor read/8, error -71 [ 97.336702][ T1161] EXT4-fs: error -4 creating inode table initialization thread [ 97.456625][ T1161] EXT4-fs (loop3): mount failed [ 97.502468][ T1173] netlink: 52 bytes leftover after parsing attributes in process `syz.4.239'. [ 97.569428][ T1176] 9pnet_fd: Insufficient options for proto=fd [ 97.964430][ T1182] loop1: detected capacity change from 0 to 128 [ 98.721535][ T28] audit: type=1400 audit(1786411279.816:304): avc: denied { mount } for pid=1188 comm="syz.2.236" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 98.774048][ T1189] loop2: detected capacity change from 0 to 512 [ 98.780935][ T1189] FAT-fs (loop2): Unrecognized mount option "017777777777777777777770xffffffffffffffff" or missing value [ 98.788412][ T28] audit: type=1400 audit(1786411279.866:305): avc: denied { search } for pid=1188 comm="syz.2.236" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 98.834048][ T1193] usb usb8: usbfs: process 1193 (syz.3.243) did not claim interface 0 before use [ 98.843662][ T374] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.852641][ T1189] 9pnet_fd: Insufficient options for proto=fd [ 98.861530][ T1197] loop0: detected capacity change from 0 to 512 [ 98.932885][ T1197] ext3: Bad value for 'sb' [ 98.937811][ T28] audit: type=1400 audit(1786411279.866:306): avc: denied { read } for pid=1188 comm="syz.2.236" name="trace" dev="tracefs" ino=12937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 98.960330][ T28] audit: type=1400 audit(1786411279.866:307): avc: denied { open } for pid=1188 comm="syz.2.236" path="/39/trace/trace" dev="tracefs" ino=12937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 98.988288][ T28] audit: type=1400 audit(1786411279.946:308): avc: denied { mounton } for pid=1188 comm="syz.2.236" path="/39/file0" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.013218][ T1198] loop4: detected capacity change from 0 to 512 [ 99.036490][ T1202] binder: BINDER_SET_CONTEXT_MGR already set [ 99.044701][ T1202] binder: 1200:1202 ioctl 4018620d 200000004a80 returned -16 [ 99.056552][ T28] audit: type=1400 audit(1786411279.976:309): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 99.085165][ T374] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.097136][ T1197] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 99.157577][ T1205] loop3: detected capacity change from 0 to 256 [ 99.406875][ T1207] netlink: 'syz.0.245': attribute type 12 has an invalid length. [ 99.598154][ C0] hrtimer: interrupt took 21656 ns [ 99.807810][ T1219] loop3: detected capacity change from 0 to 128 [ 99.842621][ T1222] device bridge_slave_1 left promiscuous mode [ 99.853023][ T1222] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.874584][ T1222] device bridge_slave_0 left promiscuous mode [ 99.883593][ T1222] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.896191][ T1219] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 99.904896][ T1219] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.938399][ T529] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 99.957955][ T1228] loop2: detected capacity change from 0 to 512 [ 99.996933][ T1228] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 100.033148][ T28] audit: type=1400 audit(1786411281.126:310): avc: denied { create } for pid=1218 comm="syz.3.249" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 100.080672][ T1231] loop0: detected capacity change from 0 to 512 [ 100.089535][ T1231] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.102686][ T1231] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.148299][ T28] audit: type=1400 audit(1786411281.166:311): avc: denied { rename } for pid=1218 comm="syz.3.249" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 100.192602][ T1231] EXT4-fs (loop0): 1 truncate cleaned up [ 100.198988][ T1231] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 100.209534][ T1231] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.250: Logical block already allocated [ 100.224903][ T529] usb 2-1: unable to get BOS descriptor or descriptor too short [ 100.235604][ T529] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 100.250107][ T529] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 100.262013][ T1234] device lo entered promiscuous mode [ 100.267963][ T1234] device tunl0 entered promiscuous mode [ 100.274052][ T1234] device gre0 entered promiscuous mode [ 100.280559][ T1234] device gretap0 entered promiscuous mode [ 100.286814][ T1234] device erspan0 entered promiscuous mode [ 100.293064][ T1234] device ip_vti0 entered promiscuous mode [ 100.299270][ T1234] device ip6_vti0 entered promiscuous mode [ 100.305652][ T1234] device sit0 entered promiscuous mode [ 100.313089][ T1234] device ip6tnl0 entered promiscuous mode [ 100.319383][ T1234] device ip6gre0 entered promiscuous mode [ 100.325709][ T1234] device syz_tun entered promiscuous mode [ 100.331969][ T1234] device ip6gretap0 entered promiscuous mode [ 100.338477][ T1234] device vcan0 entered promiscuous mode [ 100.344231][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.351554][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 100.360274][ T1234] device dummy0 entered promiscuous mode [ 100.366560][ T1234] device veth0 entered promiscuous mode [ 100.372558][ T1234] device veth1 entered promiscuous mode [ 100.378935][ T1234] device wg0 entered promiscuous mode [ 100.385088][ T1234] device wg1 entered promiscuous mode [ 100.391503][ T1234] device wg2 entered promiscuous mode [ 100.397419][ T1234] device veth0_to_bridge entered promiscuous mode [ 100.404336][ T1234] device bridge_slave_0 entered promiscuous mode [ 100.411009][ T1234] device veth1_to_bridge entered promiscuous mode [ 100.417872][ T1234] device bridge_slave_1 entered promiscuous mode [ 100.424490][ T1234] device veth0_to_bond entered promiscuous mode [ 100.431252][ T1234] device bond_slave_0 entered promiscuous mode [ 100.437624][ T1234] device veth1_to_bond entered promiscuous mode [ 100.444353][ T1234] device bond_slave_1 entered promiscuous mode [ 100.450731][ T1234] device veth0_to_team entered promiscuous mode [ 100.457429][ T1234] device team_slave_0 entered promiscuous mode [ 100.463894][ T1234] device veth1_to_team entered promiscuous mode [ 100.470689][ T1234] device team_slave_1 entered promiscuous mode [ 100.477052][ T1234] device veth0_to_batadv entered promiscuous mode [ 100.484017][ T1234] device batadv_slave_0 entered promiscuous mode [ 100.490719][ T1234] device veth1_to_batadv entered promiscuous mode [ 100.497545][ T1234] device batadv_slave_1 entered promiscuous mode [ 100.504408][ T1234] device xfrm0 entered promiscuous mode [ 100.510604][ T1234] device veth0_to_hsr entered promiscuous mode [ 100.517189][ T1234] device hsr_slave_0 entered promiscuous mode [ 100.523479][ T1234] device veth1_to_hsr entered promiscuous mode [ 100.530121][ T1234] device hsr_slave_1 entered promiscuous mode [ 100.536397][ T1234] device veth1_virt_wifi entered promiscuous mode [ 100.543250][ T1234] device veth0_virt_wifi entered promiscuous mode [ 100.550392][ T1234] device veth1_vlan entered promiscuous mode [ 100.556784][ T1234] device veth0_vlan left promiscuous mode [ 100.562578][ T1234] device veth0_vlan entered promiscuous mode [ 100.569784][ T1234] device vlan0 entered promiscuous mode [ 100.575564][ T1234] device vlan1 entered promiscuous mode [ 100.581367][ T1234] device veth1_macvtap left promiscuous mode [ 100.587365][ T1234] device veth1_macvtap entered promiscuous mode [ 100.594069][ T1234] device veth0_macvtap entered promiscuous mode [ 100.600721][ T1234] device macsec0 entered promiscuous mode [ 100.606966][ T1234] device ip6erspan0 entered promiscuous mode [ 100.623009][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.632553][ T1231] EXT4-fs (loop0): Remounting filesystem read-only [ 100.644365][ T529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.672180][ T529] usb 2-1: Product: syz [ 100.686183][ T28] audit: type=1400 audit(1786411281.306:312): avc: denied { create } for pid=1221 comm="syz.0.250" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 100.709480][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.716978][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.725370][ T529] usb 2-1: Manufacturer: syz [ 100.730454][ T529] usb 2-1: SerialNumber: syz [ 100.746499][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.755222][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.763955][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.772575][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 100.792965][ T291] EXT4-fs (loop3): unmounting filesystem. [ 100.799520][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.833004][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 100.841845][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.850275][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.858679][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.866987][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.876356][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.884919][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.893811][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.902418][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.911037][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.919750][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.927977][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.936382][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.945718][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.954030][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.962655][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.971224][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.979649][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.987626][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.995517][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.003229][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.011711][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.020161][ T1208] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.120270][ T529] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 101.121721][ T1238] loop2: detected capacity change from 0 to 512 [ 101.141253][ T287] EXT4-fs (loop0): unmounting filesystem. [ 101.148347][ T1241] netlink: 52 bytes leftover after parsing attributes in process `syz.3.255'. [ 101.165633][ T28] audit: type=1400 audit(1786411282.256:313): avc: denied { setattr } for pid=1237 comm="syz.4.254" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 101.174898][ T1238] EXT4-fs (loop2): 1 truncate cleaned up [ 101.193793][ T1238] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 101.214572][ T290] EXT4-fs (loop2): unmounting filesystem. [ 101.304460][ T1251] xt_hashlimit: size too large, truncated to 1048576 [ 101.368935][ T529] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 101.395838][ T1259] usb usb8: usbfs: process 1259 (syz.0.260) did not claim interface 0 before use [ 101.518245][ T1260] 9pnet_fd: Insufficient options for proto=fd [ 101.826304][ T1261] 9pnet_fd: Insufficient options for proto=fd [ 102.637475][ T1264] loop0: detected capacity change from 0 to 256 [ 102.935332][ T1267] loop3: detected capacity change from 0 to 512 [ 103.070610][ T1267] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 103.088940][ T1267] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.134491][ T1267] EXT4-fs error (device loop3): ext4_get_first_dir_block:3583: inode #12: comm syz.3.261: Directory hole found for htree leaf block 0 [ 103.322478][ T529] usb 2-1: USB disconnect, device number 7 [ 103.332705][ T1274] binder: BINDER_SET_CONTEXT_MGR already set [ 103.339290][ T1274] binder: 1273:1274 ioctl 4018620d 200000004a80 returned -16 [ 103.361605][ T1279] fuse: Invalid rootmode [ 103.381048][ T1281] tun0: tun_chr_ioctl cmd 35108 [ 103.386705][ T1281] overlayfs: missing 'lowerdir' [ 103.427090][ T1284] EXT4-fs (loop0): 1 truncate cleaned up [ 103.432921][ T1284] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 103.450355][ T287] EXT4-fs (loop0): unmounting filesystem. [ 103.498006][ T1291] netlink: 52 bytes leftover after parsing attributes in process `syz.1.270'. [ 103.598610][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 103.785560][ T1299] 9pnet_fd: Insufficient options for proto=fd [ 104.680301][ T1300] set_capacity_and_notify: 2 callbacks suppressed [ 104.680324][ T1300] loop0: detected capacity change from 0 to 512 [ 106.866156][ T1305] usb usb8: usbfs: process 1305 (syz.1.274) did not claim interface 0 before use [ 106.957164][ T291] EXT4-fs (loop3): unmounting filesystem. [ 107.093361][ T1308] loop1: detected capacity change from 0 to 256 [ 107.326159][ T1310] loop0: detected capacity change from 0 to 512 [ 107.668270][ T381] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.918207][ T381] usb 1-1: device descriptor read/64, error -71 [ 107.968057][ T1312] xt_hashlimit: size too large, truncated to 1048576 [ 107.993981][ T1318] loop4: detected capacity change from 0 to 512 [ 108.031875][ T1318] EXT4-fs (loop4): 1 truncate cleaned up [ 108.037610][ T1318] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.067052][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 108.067066][ T28] audit: type=1400 audit(1786411289.156:317): avc: denied { setopt } for pid=1313 comm="syz.1.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.133979][ T289] EXT4-fs (loop4): unmounting filesystem. [ 108.143135][ T28] audit: type=1400 audit(1786411289.186:318): avc: denied { ioctl } for pid=1313 comm="syz.1.277" path="socket:[20305]" dev="sockfs" ino=20305 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.198238][ T381] usb 1-1: device descriptor read/64, error -71 [ 108.298398][ T1333] netlink: 52 bytes leftover after parsing attributes in process `syz.3.282'. [ 108.319448][ T1325] loop2: detected capacity change from 0 to 40427 [ 108.329302][ T1325] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 108.339805][ T1325] F2FS-fs (loop2): invalid crc value [ 108.352126][ T1325] F2FS-fs (loop2): invalid crc value [ 108.361615][ T1325] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 108.467524][ T1343] loop2: detected capacity change from 0 to 512 [ 108.474286][ T1343] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.485509][ T1343] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 108.498939][ T1343] ------------[ cut here ]------------ [ 108.504634][ T1343] EA inode 11 i_nlink=2 [ 108.504797][ T1343] WARNING: CPU: 1 PID: 1343 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4f9/0x560 [ 108.519179][ T1343] Modules linked in: [ 108.523095][ T1343] CPU: 1 PID: 1343 Comm: syz.2.286 Not tainted syzkaller #0 [ 108.530456][ T1343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.540550][ T1343] RIP: 0010:ext4_xattr_inode_update_ref+0x4f9/0x560 [ 108.547153][ T1343] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 3a 32 ba ff 49 8b 34 24 48 c7 c7 80 4c b5 85 44 89 fa e8 17 36 45 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 108.566824][ T1343] RSP: 0018:ffffc90000d071e0 EFLAGS: 00010246 [ 108.572930][ T1343] RAX: ea290fb266cfcf00 RBX: ffff8881336419a8 RCX: 0000000000080000 [ 108.580944][ T1343] RDX: ffffc900022ad000 RSI: 000000000000e0be RDI: 000000000000e0bf [ 108.588987][ T1343] RBP: ffffc90000d072d0 R08: ffff8881f6f2759b R09: 1ffff1103ede4eb3 [ 108.596966][ T1343] R10: dffffc0000000000 R11: ffffed103ede4eb4 R12: ffff888133641888 [ 108.604984][ T1343] R13: dffffc0000000000 R14: ffff888133641848 R15: 0000000000000002 [ 108.612995][ T1343] FS: 00007f22373f76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 108.621985][ T1343] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.628676][ T1343] CR2: 00007f2238a4de08 CR3: 000000011df0e000 CR4: 00000000003506a0 [ 108.636707][ T1343] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.644716][ T1343] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.652731][ T1343] Call Trace: [ 108.656006][ T1343] [ 108.658988][ T1343] ? ext4_xattr_block_csum+0x560/0x560 [ 108.664471][ T1343] ? kasan_save_alloc_info+0x1f/0x30 [ 108.669801][ T1343] ? __kasan_kmalloc+0x95/0xb0 [ 108.674602][ T1343] ? __ext4_journal_ensure_credits+0x30/0x470 [ 108.680843][ T1343] ? ext4_xattr_inode_dec_ref_all+0x4a5/0x1040 [ 108.687017][ T1343] ? kmalloc_trace+0x40/0xb0 [ 108.691658][ T1343] ext4_xattr_inode_dec_ref_all+0xae5/0x1040 [ 108.697683][ T1343] ? errseq_check+0x41/0x80 [ 108.702229][ T1343] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 108.707931][ T1343] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 108.714647][ T1343] ? ext4_mark_iloc_dirty+0x1771/0x19c0 [ 108.720246][ T1343] ext4_xattr_delete_inode+0xada/0xca0 [ 108.725726][ T1343] ? ext4_truncate+0xc1b/0x1000 [ 108.730618][ T1343] ? __cfi_ext4_xattr_delete_inode+0x10/0x10 [ 108.736672][ T1343] ext4_evict_inode+0xe48/0x1450 [ 108.741682][ T1343] ? __cfi_ext4_evict_inode+0x10/0x10 [ 108.747094][ T1343] ? __ext4_iget+0x2dae/0x3e70 [ 108.751906][ T1343] ? __cfi_ext4_evict_inode+0x10/0x10 [ 108.757305][ T1343] evict+0x4c4/0x8c0 [ 108.761257][ T1343] ? memset+0x35/0x40 [ 108.765262][ T1343] ? proc_nr_inodes+0x2f0/0x2f0 [ 108.770164][ T1343] ? _raw_spin_lock+0x94/0xf0 [ 108.774875][ T1343] ? __cfi__raw_spin_lock+0x10/0x10 [ 108.780130][ T1343] ? __kasan_check_write+0x14/0x20 [ 108.785269][ T1343] iput+0x633/0x690 [ 108.789122][ T1343] ext4_process_orphan+0x298/0x300 [ 108.794278][ T1343] ext4_orphan_cleanup+0xb5d/0x1270 [ 108.799528][ T1343] ? __cfi_ext4_orphan_cleanup+0x10/0x10 [ 108.805222][ T1343] ? errseq_check_and_advance+0x66/0x130 [ 108.810928][ T1343] ext4_fill_super+0x6a53/0x73e0 [ 108.815907][ T1343] ? __cfi_ext4_fill_super+0x10/0x10 [ 108.821261][ T1343] ? set_blocksize+0x1cc/0x470 [ 108.826063][ T1343] ? sb_set_blocksize+0xaa/0xf0 [ 108.830973][ T1343] get_tree_bdev+0x450/0x6a0 [ 108.835612][ T1343] ? __cfi_ext4_fill_super+0x10/0x10 [ 108.840996][ T1343] ext4_get_tree+0x1c/0x20 [ 108.845447][ T1343] vfs_get_tree+0x9a/0x270 [ 108.849935][ T1343] do_new_mount+0x251/0xb40 [ 108.854494][ T1343] ? security_capable+0x99/0xc0 [ 108.859392][ T1343] path_mount+0x640/0xfd0 [ 108.863874][ T1343] __se_sys_mount+0x320/0x390 [ 108.868618][ T1343] ? __x64_sys_mount+0xd0/0xd0 [ 108.873413][ T1343] ? do_user_addr_fault+0x9a5/0x1030 [ 108.878774][ T1343] __x64_sys_mount+0xbf/0xd0 [ 108.883401][ T1343] x64_sys_call+0x65d/0x9a0 [ 108.887939][ T1343] do_syscall_64+0x4c/0xa0 [ 108.892402][ T1343] ? clear_bhb_loop+0x30/0x80 [ 108.897105][ T1343] ? clear_bhb_loop+0x30/0x80 [ 108.901824][ T1343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.907769][ T1343] RIP: 0033:0x7f223899f34a [ 108.912287][ T1343] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.931999][ T1343] RSP: 002b:00007f22373f6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 108.940490][ T1343] RAX: ffffffffffffffda RBX: 00007f22373f6ee0 RCX: 00007f223899f34a [ 108.948502][ T1343] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f22373f6ea0 [ 108.956475][ T1343] RBP: 00002000000009c0 R08: 00007f22373f6ee0 R09: 0000000000800718 [ 108.964485][ T1343] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 108.972518][ T1343] R13: 00007f22373f6ea0 R14: 000000000000048d R15: 0000200000000340 [ 108.980525][ T1343] [ 108.983562][ T1343] ---[ end trace 0000000000000000 ]--- [ 108.989294][ T1343] EXT4-fs (loop2): 1 orphan inode deleted [ 108.994820][ T1341] loop3: detected capacity change from 0 to 512 [ 108.995786][ T1343] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 109.002718][ T381] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 109.017302][ T39] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 109.056417][ T1346] usb usb8: usbfs: process 1346 (syz.4.287) did not claim interface 0 before use [ 109.060760][ T290] EXT4-fs (loop2): unmounting filesystem. [ 109.147612][ T1350] loop2: detected capacity change from 0 to 256 [ 109.157391][ T1350] 9pnet_fd: Insufficient options for proto=fd [ 109.164239][ T1350] binder: 1349:1350 ioctl c0306201 200000000080 returned -14 [ 109.188324][ T381] usb 1-1: device descriptor read/64, error -71 [ 109.220151][ T39] usb 2-1: unable to get BOS descriptor or descriptor too short [ 109.299356][ T1352] loop4: detected capacity change from 0 to 256 [ 109.601557][ T39] usb 2-1: not running at top speed; connect to a high speed hub [ 109.669362][ T39] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 109.798325][ T381] usb 1-1: device descriptor read/64, error -71 [ 109.976089][ T381] usb usb1-port1: attempt power cycle [ 109.991783][ T28] audit: type=1326 audit(1786411291.086:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1354 comm="syz.3.291" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dc19e0d9 code=0x7ffc0000 [ 110.029518][ T39] usb 2-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 110.043512][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.051924][ T28] audit: type=1326 audit(1786411291.116:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1354 comm="syz.3.291" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dc19e0d9 code=0x7ffc0000 [ 110.076903][ T39] usb 2-1: Product: syz [ 110.081936][ T39] usb 2-1: Manufacturer: syz [ 110.086600][ T39] usb 2-1: SerialNumber: syz [ 110.093289][ T28] audit: type=1326 audit(1786411291.116:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1354 comm="syz.3.291" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f25dc19e0d9 code=0x7ffc0000 [ 110.118422][ T28] audit: type=1400 audit(1786411291.116:322): avc: denied { getattr } for pid=1354 comm="syz.3.291" name="/" dev="dax" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 110.142566][ T28] audit: type=1326 audit(1786411291.116:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1354 comm="syz.3.291" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dc19e0d9 code=0x7ffc0000 [ 110.167989][ T28] audit: type=1326 audit(1786411291.116:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1354 comm="syz.3.291" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dc19e0d9 code=0x7ffc0000 [ 110.192945][ T28] audit: type=1326 audit(1786411291.116:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1354 comm="syz.3.291" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f25dc19e0d9 code=0x7ffc0000 [ 110.217997][ T28] audit: type=1326 audit(1786411291.136:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1354 comm="syz.3.291" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25dc19e0d9 code=0x7ffc0000 [ 110.318225][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 110.358201][ T407] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 110.369078][ T1361] netlink: 52 bytes leftover after parsing attributes in process `syz.4.293'. [ 110.385379][ T1363] binder: BINDER_SET_CONTEXT_MGR already set [ 110.394085][ T1363] binder: 1357:1363 ioctl 4018620d 200000004a80 returned -16 [ 110.415250][ T39] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 110.429192][ T39] usb 2-1: USB disconnect, device number 8 [ 110.519537][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 110.527903][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 110.540499][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 110.549633][ T407] usb 4-1: Using ep0 maxpacket: 8 [ 110.554732][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.563310][ T24] usb 3-1: Product: syz [ 110.567821][ T24] usb 3-1: Manufacturer: syz [ 110.572654][ T407] usb 4-1: config 3 has an invalid interface number: 45 but max is 0 [ 110.581018][ T24] usb 3-1: SerialNumber: syz [ 110.586093][ T407] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 110.595252][ T407] usb 4-1: config 3 has no interface number 0 [ 110.601496][ T407] usb 4-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.614984][ T407] usb 4-1: config 3 interface 45 has no altsetting 0 [ 110.623942][ T407] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 110.633069][ T407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.641149][ T407] usb 4-1: Product: syz [ 110.645322][ T407] usb 4-1: Manufacturer: syz [ 110.649977][ T407] usb 4-1: SerialNumber: syz [ 110.658891][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 110.728255][ T297] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 110.804026][ T24] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 110.908482][ T381] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 110.919537][ T297] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 110.927739][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.938837][ T381] usb 1-1: Using ep0 maxpacket: 8 [ 110.939186][ T297] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.947477][ T381] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 70, changing to 7 [ 110.954506][ T297] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.967821][ T381] usb 1-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 110.977479][ T297] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.977508][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.988518][ T297] usb 5-1: config 0 descriptor?? [ 110.995824][ T381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.017373][ T24] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 111.024177][ T381] usb 1-1: Product: syz [ 111.028420][ T381] usb 1-1: Manufacturer: syz [ 111.033052][ T381] usb 1-1: SerialNumber: syz [ 111.208966][ T1365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.217629][ T1365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.243922][ T407] usb 4-1: USB disconnect, device number 10 [ 111.250810][ T1367] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ [ 111.271520][ T381] usb 1-1: 1:1 : no UAC_FORMAT_TYPE desc [ 111.281695][ T381] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 111.297327][ T381] usb 1-1: USB disconnect, device number 8 [ 111.431051][ T1365] loop4: detected capacity change from 0 to 1024 [ 111.434975][ T24] usb 3-1: USB disconnect, device number 9 [ 111.447060][ T1365] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #3: block 1: comm syz.4.294: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.463567][ T1365] EXT4-fs (loop4): Remounting filesystem read-only [ 111.472795][ T1365] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.294: Failed to acquire dquot type 0 [ 111.484640][ T1365] EXT4-fs (loop4): Remounting filesystem read-only [ 111.492521][ T1365] EXT4-fs error (device loop4): ext4_free_blocks:6220: comm syz.4.294: Freeing blocks not in datazone - block = 0, count = 4096 [ 111.506162][ T1365] EXT4-fs (loop4): Remounting filesystem read-only [ 111.513758][ T1365] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.294: Invalid inode bitmap blk 0 in block_group 0 [ 111.514820][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 111.527763][ T1365] EXT4-fs (loop4): Remounting filesystem read-only [ 111.545387][ T1208] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 111.549323][ T1365] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 111.565650][ T1208] EXT4-fs (loop4): Remounting filesystem read-only [ 111.572562][ T1365] EXT4-fs (loop4): Remounting filesystem read-only [ 111.578535][ T1208] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:8: Failed to release dquot type 0 [ 111.591435][ T1365] EXT4-fs (loop4): 1 orphan inode deleted [ 111.597140][ T1208] EXT4-fs (loop4): Remounting filesystem read-only [ 111.602321][ T1365] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 111.621539][ T1365] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.294: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 111.639993][ T1365] EXT4-fs (loop4): Remounting filesystem read-only [ 111.647963][ T297] usbhid 5-1:0.0: can't add hid device: -71 [ 111.654162][ T297] usbhid: probe of 5-1:0.0 failed with error -71 [ 111.661562][ T297] usb 5-1: USB disconnect, device number 9 [ 111.768197][ T407] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 111.816399][ T1378] loop0: detected capacity change from 0 to 512 [ 111.827459][ T1378] EXT4-fs (loop0): 1 truncate cleaned up [ 111.833365][ T1378] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 111.850692][ T287] EXT4-fs (loop0): unmounting filesystem. [ 111.919057][ T1382] loop0: detected capacity change from 0 to 512 [ 112.151966][ T1385] loop2: detected capacity change from 0 to 512 [ 112.367121][ T289] EXT4-fs (loop4): unmounting filesystem. [ 112.406995][ T407] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.426098][ T407] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 112.443775][ T407] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 112.453194][ T407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.461578][ T407] usb 4-1: Product: syz [ 112.465865][ T407] usb 4-1: Manufacturer: syz [ 112.470813][ T407] usb 4-1: SerialNumber: syz [ 112.600467][ T1408] loop4: detected capacity change from 0 to 256 [ 112.614439][ T1408] FAT-fs (loop4): Directory bread(block 64) failed [ 112.621129][ T1408] FAT-fs (loop4): Directory bread(block 65) failed [ 112.629338][ T1408] FAT-fs (loop4): Directory bread(block 66) failed [ 112.636029][ T1408] FAT-fs (loop4): Directory bread(block 67) failed [ 112.643199][ T1408] FAT-fs (loop4): Directory bread(block 68) failed [ 112.649840][ T1408] FAT-fs (loop4): Directory bread(block 69) failed [ 112.656428][ T1408] FAT-fs (loop4): Directory bread(block 70) failed [ 112.663086][ T1408] FAT-fs (loop4): Directory bread(block 71) failed [ 112.669780][ T1408] FAT-fs (loop4): Directory bread(block 72) failed [ 112.676386][ T1408] FAT-fs (loop4): Directory bread(block 73) failed [ 112.685734][ T407] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 112.701937][ T1410] loop0: detected capacity change from 0 to 512 [ 112.893432][ T407] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 112.982817][ T1424] loop2: detected capacity change from 0 to 512 [ 113.505423][ T1156] udevd[1156]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.45/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 113.521650][ T407] usb 4-1: USB disconnect, device number 11 [ 113.585454][ T1438] loop2: detected capacity change from 0 to 256 [ 113.594542][ T1438] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.606606][ T1438] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 113.623990][ T1438] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 113.758667][ T374] udevd[374]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.023793][ T1447] tipc: Enabled bearer , priority 4 [ 114.085837][ T1453] loop4: detected capacity change from 0 to 256 [ 114.160792][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 114.161100][ T28] audit: type=1400 audit(1786411295.256:364): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 114.238428][ T1440] loop0: detected capacity change from 0 to 131072 [ 114.254170][ T1440] F2FS-fs (loop0): Invalid log sectors per block(570425347) log sectorsize(9) [ 114.254199][ T1440] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 114.255058][ T1440] F2FS-fs (loop0): invalid crc value [ 114.256877][ T1445] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 114.256902][ T1445] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 114.257197][ T1445] F2FS-fs (loop3): Image doesn't support compression [ 114.257222][ T1445] F2FS-fs (loop3): Image doesn't support compression [ 114.258029][ T1445] F2FS-fs (loop3): invalid crc value [ 114.260338][ T1445] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 114.270668][ T1440] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 114.339780][ T1461] xt_hashlimit: size too large, truncated to 1048576 [ 114.343137][ T1445] F2FS-fs (loop3): Start checkpoint disabled! [ 114.343474][ T1445] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 114.349423][ T1445] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 114.459418][ T1440] F2FS-fs (loop0): Try to recover 2th superblock, ret: -30 [ 114.466685][ T1440] F2FS-fs (loop0): Mounted with checkpoint version = 753bd00b [ 114.493391][ T1445] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 114.539911][ T28] audit: type=1400 audit(1786411295.636:365): avc: denied { mount } for pid=1458 comm="syz.4.329" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 114.609042][ T1468] binder: BINDER_SET_CONTEXT_MGR already set [ 114.616203][ T1468] binder: 1467:1468 ioctl 4018620d 200000004a80 returned -16 [ 114.720245][ T28] audit: type=1400 audit(1786411295.816:366): avc: denied { read write } for pid=1470 comm="syz.2.333" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.747083][ T1471] udc dummy_udc.0: soft-connect without a gadget driver [ 114.796446][ T28] audit: type=1400 audit(1786411295.816:367): avc: denied { open } for pid=1470 comm="syz.2.333" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 114.870995][ T1473] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.915671][ T1473] EXT4-fs: failed to create workqueue [ 114.930386][ T1473] EXT4-fs (loop2): mount failed [ 115.005421][ T28] audit: type=1400 audit(1786411296.096:368): avc: denied { append } for pid=1478 comm="syz.2.335" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 115.078177][ T28] audit: type=1400 audit(1786411296.126:369): avc: denied { read } for pid=1478 comm="syz.2.335" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 115.119751][ T28] audit: type=1400 audit(1786411296.126:370): avc: denied { open } for pid=1478 comm="syz.2.335" path="/dev/usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 115.143570][ T381] tipc: Node number set to 667409124 [ 115.198205][ T28] audit: type=1400 audit(1786411296.286:371): avc: denied { block_suspend } for pid=1485 comm="syz.0.332" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 115.321374][ T1489] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.328628][ T1489] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.409972][ T1499] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 115.433504][ T1505] binder: BINDER_SET_CONTEXT_MGR already set [ 115.437436][ T28] audit: type=1400 audit(1786411296.526:372): avc: denied { create } for pid=1498 comm="syz.0.342" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 115.459917][ T1499] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 115.468491][ T1505] binder: 1497:1505 ioctl 4018620d 200000004a80 returned -16 [ 115.482008][ T1499] EXT4-fs warning (device loop0): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 115.529261][ T287] EXT4-fs (loop0): unmounting filesystem. [ 115.931601][ T1509] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 116.034179][ T1509] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 116.068777][ T1509] F2FS-fs (loop2): invalid crc value [ 116.121333][ T1509] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 116.282496][ T1509] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 116.298262][ T1509] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 116.339919][ T28] audit: type=1400 audit(1786411297.436:373): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 116.585935][ T1445] syz.3.322: attempt to access beyond end of device [ 116.585935][ T1445] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.668237][ T1526] F2FS-fs (loop3): Inconsistent error blkaddr:5633, sit bitmap:0 [ 116.732909][ T1526] CPU: 1 PID: 1526 Comm: syz.3.322 Tainted: G W syzkaller #0 [ 116.741749][ T1526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.751825][ T1526] Call Trace: [ 116.755129][ T1526] [ 116.758081][ T1526] __dump_stack+0x21/0x24 [ 116.762464][ T1526] dump_stack_lvl+0x110/0x170 [ 116.767174][ T1526] ? __cfi_dump_stack_lvl+0x8/0x8 [ 116.772240][ T1526] ? irqentry_exit+0x37/0x40 [ 116.776858][ T1526] dump_stack+0x15/0x24 [ 116.781053][ T1526] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 116.786644][ T1526] f2fs_is_valid_blkaddr+0x23/0x30 [ 116.791798][ T1526] f2fs_map_blocks+0xc37/0x3c20 [ 116.796690][ T1526] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 116.802005][ T1526] ? preempt_schedule_irq+0xca/0x120 [ 116.807333][ T1526] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 116.813090][ T1526] ? __kasan_check_write+0x14/0x20 [ 116.818234][ T1526] ? __switch_to+0x56f/0x1070 [ 116.822943][ T1526] ? sysvec_reschedule_ipi+0x78/0x80 [ 116.828262][ T1526] ? f2fs_mpage_readpages+0x73f/0x1b20 [ 116.833746][ T1526] f2fs_mpage_readpages+0xa46/0x1b20 [ 116.839076][ T1526] ? dquot_release_reservation_block+0xa0/0xa0 [ 116.845251][ T1526] ? preempt_schedule_irq+0xca/0x120 [ 116.850561][ T1526] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 116.856243][ T1526] f2fs_readahead+0xfc/0x240 [ 116.860854][ T1526] ? __cfi_f2fs_readahead+0x10/0x10 [ 116.866073][ T1526] read_pages+0x1bf/0xe10 [ 116.870421][ T1526] ? page_cache_ra_unbounded+0x850/0x850 [ 116.876077][ T1526] ? filemap_add_folio+0x113/0x260 [ 116.881200][ T1526] page_cache_ra_unbounded+0x6ff/0x850 [ 116.886688][ T1526] ? __cfi_page_cache_ra_unbounded+0x10/0x10 [ 116.892696][ T1526] page_cache_ra_order+0xb0c/0xe50 [ 116.897833][ T1526] ? __cfi_page_cache_ra_order+0x10/0x10 [ 116.903491][ T1526] ? __schedule+0xbea/0x14b0 [ 116.908107][ T1526] ondemand_readahead+0x821/0xda0 [ 116.913156][ T1526] ? release_firmware_map_entry+0x190/0x190 [ 116.919067][ T1526] ? page_cache_sync_ra+0x4a0/0x4a0 [ 116.924297][ T1526] page_cache_sync_ra+0x427/0x4a0 [ 116.929387][ T1526] f2fs_readdir+0x473/0x990 [ 116.934094][ T1526] ? __cfi_f2fs_readdir+0x10/0x10 [ 116.939138][ T1526] ? down_read_killable+0xbc/0x110 [ 116.944270][ T1526] ? __cfi_down_read_killable+0x10/0x10 [ 116.949867][ T1526] ? security_file_permission+0x94/0xb0 [ 116.955441][ T1526] iterate_dir+0x26d/0x610 [ 116.959889][ T1526] ? __cfi_f2fs_readdir+0x10/0x10 [ 116.964935][ T1526] __se_sys_getdents64+0xf2/0x250 [ 116.969986][ T1526] ? __x64_sys_getdents64+0x90/0x90 [ 116.975192][ T1526] ? xfd_validate_state+0x70/0x150 [ 116.980333][ T1526] ? __cfi_filldir64+0x10/0x10 [ 116.985112][ T1526] ? fpregs_restore_userregs+0x128/0x260 [ 116.990768][ T1526] __x64_sys_getdents64+0x7b/0x90 [ 116.995799][ T1526] x64_sys_call+0x15c/0x9a0 [ 117.000314][ T1526] do_syscall_64+0x4c/0xa0 [ 117.004744][ T1526] ? clear_bhb_loop+0x30/0x80 [ 117.009432][ T1526] ? clear_bhb_loop+0x30/0x80 [ 117.014148][ T1526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.020056][ T1526] RIP: 0033:0x7f25dc19e0d9 [ 117.024480][ T1526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.044098][ T1526] RSP: 002b:00007f25dabf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 117.052525][ T1526] RAX: ffffffffffffffda RBX: 00007f25dc426090 RCX: 00007f25dc19e0d9 [ 117.060508][ T1526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 117.068490][ T1526] RBP: 00007f25dc235024 R08: 0000000000000000 R09: 0000000000000000 [ 117.076485][ T1526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.084467][ T1526] R13: 00007f25dc426128 R14: 00007f25dc426090 R15: 00007ffc7a67fb68 [ 117.092462][ T1526] [ 117.115347][ T297] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 117.163925][ T1526] F2FS-fs (loop3): Inconsistent error blkaddr:5633, sit bitmap:0 [ 117.276481][ T1536] set_capacity_and_notify: 5 callbacks suppressed [ 117.276501][ T1536] loop4: detected capacity change from 0 to 512 [ 117.292261][ T1536] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.313861][ T1536] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 117.325169][ T1536] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 117.339748][ T1536] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 117.350413][ T1536] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 117.363357][ T1536] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 117.488192][ T1526] CPU: 1 PID: 1526 Comm: syz.3.322 Tainted: G W syzkaller #0 [ 117.497025][ T1526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.507104][ T1526] Call Trace: [ 117.510407][ T1526] [ 117.513363][ T1526] __dump_stack+0x21/0x24 [ 117.517723][ T1526] dump_stack_lvl+0x110/0x170 [ 117.522428][ T1526] ? __cfi_dump_stack_lvl+0x8/0x8 [ 117.527479][ T1526] ? f2fs_lookup_read_extent_cache_block+0x22d/0x420 [ 117.534186][ T1526] dump_stack+0x15/0x24 [ 117.538369][ T1526] __f2fs_is_valid_blkaddr+0xcd2/0x1400 [ 117.543949][ T1526] f2fs_is_valid_blkaddr+0x23/0x30 [ 117.549096][ T1526] f2fs_get_read_data_page+0x4ef/0x850 [ 117.554595][ T1526] ? __cfi_f2fs_get_read_data_page+0x10/0x10 [ 117.557571][ T297] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.560618][ T1526] f2fs_find_data_page+0x198/0x3a0 [ 117.568817][ T297] usb 3-1: not running at top speed; connect to a high speed hub [ 117.573374][ T1526] f2fs_readdir+0x4a2/0x990 [ 117.585602][ T1526] ? __cfi_f2fs_readdir+0x10/0x10 [ 117.588075][ T1543] 9pnet_fd: Insufficient options for proto=fd [ 117.590709][ T1526] ? down_read_killable+0xbc/0x110 [ 117.590755][ T1526] ? __cfi_down_read_killable+0x10/0x10 [ 117.607182][ T297] usb 3-1: config 228 has an invalid interface number: 88 but max is 0 [ 117.607508][ T1526] ? security_file_permission+0x94/0xb0 [ 117.615962][ T297] usb 3-1: config 228 has no interface number 0 [ 117.621291][ T1526] iterate_dir+0x26d/0x610 [ 117.621319][ T1526] ? __cfi_f2fs_readdir+0x10/0x10 [ 117.628364][ T297] usb 3-1: config 228 interface 88 has no altsetting 0 [ 117.631998][ T1526] __se_sys_getdents64+0xf2/0x250 [ 117.640525][ T297] usb 3-1: language id specifier not provided by device, defaulting to English [ 117.643911][ T1526] ? __x64_sys_getdents64+0x90/0x90 [ 117.663064][ T1526] ? xfd_validate_state+0x70/0x150 [ 117.668196][ T1526] ? __cfi_filldir64+0x10/0x10 [ 117.672987][ T1526] ? fpregs_restore_userregs+0x128/0x260 [ 117.678628][ T1526] __x64_sys_getdents64+0x7b/0x90 [ 117.683667][ T1526] x64_sys_call+0x15c/0x9a0 [ 117.688212][ T1526] do_syscall_64+0x4c/0xa0 [ 117.692663][ T1526] ? clear_bhb_loop+0x30/0x80 [ 117.697350][ T1526] ? clear_bhb_loop+0x30/0x80 [ 117.702040][ T1526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.707957][ T1526] RIP: 0033:0x7f25dc19e0d9 [ 117.712402][ T1526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.732026][ T1526] RSP: 002b:00007f25dabf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 117.740447][ T1526] RAX: ffffffffffffffda RBX: 00007f25dc426090 RCX: 00007f25dc19e0d9 [ 117.748434][ T1526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 117.756423][ T1526] RBP: 00007f25dc235024 R08: 0000000000000000 R09: 0000000000000000 [ 117.764444][ T1526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.772447][ T1526] R13: 00007f25dc426128 R14: 00007f25dc426090 R15: 00007ffc7a67fb68 [ 117.780456][ T1526] [ 117.801807][ T1210] kworker/u4:10: attempt to access beyond end of device [ 117.801807][ T1210] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 117.817164][ T297] usb 3-1: New USB device found, idVendor=0fce, idProduct=d0e1, bcdDevice= 0.00 [ 117.836650][ T297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.853986][ T297] usb 3-1: Product: syz [ 117.862367][ T297] usb 3-1: Manufacturer: syz [ 117.873163][ T297] usb 3-1: SerialNumber: syz [ 117.959471][ T1545] loop3: detected capacity change from 0 to 2048 [ 117.990190][ T1545] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 118.022021][ T1545] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 118.037243][ T1545] EXT4-fs warning (device loop3): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 118.061327][ T291] EXT4-fs (loop3): unmounting filesystem. [ 118.163515][ T1554] FAULT_INJECTION: forcing a failure. [ 118.163515][ T1554] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.176754][ T1554] CPU: 1 PID: 1554 Comm: syz.3.358 Tainted: G W syzkaller #0 [ 118.185552][ T1554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.195630][ T1554] Call Trace: [ 118.198923][ T1554] [ 118.201869][ T1554] __dump_stack+0x21/0x24 [ 118.206245][ T1554] dump_stack_lvl+0x110/0x170 [ 118.210943][ T1554] ? __cfi_dump_stack_lvl+0x8/0x8 [ 118.215987][ T1554] ? __sys_recvmsg_sock+0x50/0x50 [ 118.221037][ T1554] dump_stack+0x15/0x24 [ 118.225205][ T1554] should_fail_ex+0x3bf/0x510 [ 118.229891][ T1554] should_fail+0xb/0x10 [ 118.234052][ T1554] should_fail_usercopy+0x1a/0x20 [ 118.239080][ T1554] _copy_from_user+0x1e/0xc0 [ 118.243693][ T1554] ___sys_recvmsg+0x170/0x590 [ 118.248387][ T1554] ? kstrtoull+0x137/0x1d0 [ 118.252834][ T1554] ? __sys_recvmsg+0x290/0x290 [ 118.257629][ T1554] ? kstrtouint_from_user+0x113/0x170 [ 118.263026][ T1554] ? __fget_files+0x2d1/0x330 [ 118.267761][ T1554] ? __fdget+0x19c/0x220 [ 118.272019][ T1554] ? do_recvmmsg+0x19e/0x7e0 [ 118.276623][ T1554] do_recvmmsg+0x370/0x7e0 [ 118.281060][ T1554] ? __sys_recvmmsg+0x290/0x290 [ 118.285929][ T1554] ? __cfi_mutex_unlock+0x10/0x10 [ 118.290969][ T1554] ? __kasan_check_write+0x14/0x20 [ 118.296095][ T1554] __x64_sys_recvmmsg+0x195/0x250 [ 118.301144][ T1554] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 118.306707][ T1554] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 118.312796][ T1554] x64_sys_call+0x3e7/0x9a0 [ 118.317321][ T1554] do_syscall_64+0x4c/0xa0 [ 118.321759][ T1554] ? clear_bhb_loop+0x30/0x80 [ 118.326448][ T1554] ? clear_bhb_loop+0x30/0x80 [ 118.331162][ T1554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.337103][ T1554] RIP: 0033:0x7f25dc19e0d9 [ 118.341534][ T1554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.361150][ T1554] RSP: 002b:00007f25dcf9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 118.369576][ T1554] RAX: ffffffffffffffda RBX: 00007f25dc425fa0 RCX: 00007f25dc19e0d9 [ 118.377562][ T1554] RDX: 040000000000049e RSI: 0000200000000300 RDI: 0000000000000003 [ 118.385549][ T1554] RBP: 00007f25dcf9b090 R08: 0000000000000000 R09: 0000000000000000 [ 118.393532][ T1554] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000002 [ 118.401512][ T1554] R13: 00007f25dc426038 R14: 00007f25dc425fa0 R15: 00007ffc7a67fb68 [ 118.409497][ T1554] [ 118.447196][ T381] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 118.677843][ T1571] loop3: detected capacity change from 0 to 512 [ 118.688197][ T381] usb 1-1: Using ep0 maxpacket: 16 [ 118.695684][ T1571] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.697789][ T381] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 165, changing to 11 [ 118.729431][ T1572] loop1: detected capacity change from 0 to 512 [ 118.741023][ T381] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.751135][ T381] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.764665][ T381] usb 1-1: config 0 interface 0 has no altsetting 0 [ 118.771786][ T381] usb 1-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 118.785296][ T381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.797813][ T1571] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 118.811175][ T1571] FAULT_INJECTION: forcing a failure. [ 118.811175][ T1571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.814646][ T381] usb 1-1: config 0 descriptor?? [ 118.829493][ T1571] CPU: 0 PID: 1571 Comm: syz.3.364 Tainted: G W syzkaller #0 [ 118.838282][ T1571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.848353][ T1571] Call Trace: [ 118.851650][ T1571] [ 118.854597][ T1571] __dump_stack+0x21/0x24 [ 118.858968][ T1571] dump_stack_lvl+0x110/0x170 [ 118.863672][ T1571] ? __cfi_dump_stack_lvl+0x8/0x8 [ 118.868744][ T1571] dump_stack+0x15/0x24 [ 118.872940][ T1571] should_fail_ex+0x3bf/0x510 [ 118.877639][ T1571] should_fail+0xb/0x10 [ 118.881844][ T1571] should_fail_usercopy+0x1a/0x20 [ 118.886891][ T1571] _copy_to_user+0x1e/0x90 [ 118.891342][ T1571] simple_read_from_buffer+0xe9/0x160 [ 118.896741][ T1571] proc_fail_nth_read+0x1a6/0x220 [ 118.901792][ T1571] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 118.907363][ T1571] ? security_file_permission+0x94/0xb0 [ 118.912946][ T1571] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 118.918609][ T1571] vfs_read+0x286/0x930 [ 118.922799][ T1571] ? __cfi_vfs_read+0x10/0x10 [ 118.927500][ T1571] ? __kasan_check_write+0x14/0x20 [ 118.932637][ T1571] ? mutex_lock+0x93/0x1b0 [ 118.937083][ T1571] ? __cfi_mutex_lock+0x10/0x10 [ 118.941968][ T1571] ? __fdget_pos+0x2cd/0x380 [ 118.946582][ T1571] ? ksys_read+0x70/0x260 [ 118.950936][ T1571] ksys_read+0x14a/0x260 [ 118.955197][ T1571] ? __cfi_ksys_read+0x10/0x10 [ 118.959990][ T1571] ? fpregs_restore_userregs+0x128/0x260 [ 118.965665][ T1571] __x64_sys_read+0x7b/0x90 [ 118.970194][ T1571] x64_sys_call+0x2f/0x9a0 [ 118.974652][ T1571] do_syscall_64+0x4c/0xa0 [ 118.979098][ T1571] ? clear_bhb_loop+0x30/0x80 [ 118.983791][ T1571] ? clear_bhb_loop+0x30/0x80 [ 118.988492][ T1571] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.994445][ T1571] RIP: 0033:0x7f25dc15e90e [ 118.998900][ T1571] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 119.018554][ T1571] RSP: 002b:00007f25dcf9afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 119.026990][ T1571] RAX: ffffffffffffffda RBX: 00007f25dcf9b6c0 RCX: 00007f25dc15e90e [ 119.035039][ T1571] RDX: 000000000000000f RSI: 00007f25dcf9b0a0 RDI: 0000000000000004 [ 119.043032][ T1571] RBP: 00007f25dcf9b090 R08: 0000000000000000 R09: 0000000000000000 [ 119.051030][ T1571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.059036][ T1571] R13: 00007f25dc426038 R14: 00007f25dc425fa0 R15: 00007ffc7a67fb68 [ 119.067128][ T1571] [ 119.103798][ T297] usb-storage 3-1:228.88: USB Mass Storage device detected [ 119.116210][ T290] syz-executor: attempt to access beyond end of device [ 119.116210][ T290] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 119.134435][ T297] usb-storage 3-1:228.88: device ignored [ 119.184300][ T297] usb 3-1: USB disconnect, device number 10 [ 119.268269][ T1538] netlink: 'syz.0.351': attribute type 1 has an invalid length. [ 119.293494][ T1579] loop2: detected capacity change from 0 to 2048 [ 119.305226][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.315573][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.334829][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.354329][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.376560][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.392723][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.408943][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.419262][ T1579] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 119.424540][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.437336][ T1579] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 119.454016][ T1574] loop4: detected capacity change from 0 to 40427 [ 119.509997][ T1574] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 119.523825][ T1574] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 119.537126][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.544243][ T1574] F2FS-fs (loop4): invalid crc value [ 119.550513][ T1579] EXT4-fs warning (device loop2): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 119.573676][ T1574] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 119.579433][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.592626][ T290] EXT4-fs (loop2): unmounting filesystem. [ 119.602121][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.618197][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.631534][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.639939][ T1574] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 119.646382][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.647002][ T1574] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 119.661836][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.676655][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.690137][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.697260][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.704431][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.711568][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.718662][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.725712][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.732949][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.740103][ T381] elecom 0003:056E:00FC.0004: unknown main item tag 0x0 [ 119.762144][ T381] elecom 0003:056E:00FC.0004: hidraw0: USB HID v0.00 Device [HID 056e:00fc] on usb-dummy_hcd.0-1/input0 [ 119.791267][ T381] usb 1-1: USB disconnect, device number 9 [ 119.818341][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 119.818355][ T28] audit: type=1400 audit(1786411300.916:378): avc: denied { nlmsg_read } for pid=1590 comm="syz.2.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 119.844953][ T1591] netlink: 104 bytes leftover after parsing attributes in process `syz.2.368'. [ 119.883796][ T1592] fido_id[1592]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 120.093653][ T1603] 9pnet_fd: Insufficient options for proto=fd [ 120.257811][ T1604] loop4: detected capacity change from 0 to 512 [ 120.338252][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 120.638416][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 120.660140][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 120.867288][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 96, changing to 7 [ 120.898220][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 120.916474][ T1609] binder: BINDER_SET_CONTEXT_MGR already set [ 120.928185][ T1609] binder: 1607:1609 ioctl 4018620d 200000004a80 returned -16 [ 120.949867][ T24] usb 3-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 120.980493][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.008185][ T24] usb 3-1: Product: syz [ 121.018972][ T24] usb 3-1: Manufacturer: syz [ 121.038182][ T24] usb 3-1: SerialNumber: syz [ 121.245297][ T1619] loop0: detected capacity change from 0 to 512 [ 121.298934][ T1619] EXT4-fs (loop0): Test dummy encryption mode enabled [ 121.311303][ T1594] tipc: Started in network mode [ 121.316214][ T1594] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 121.323843][ T1619] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.340116][ T1594] tipc: Enabled bearer , priority 4 [ 121.348781][ T1619] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.376: bad orphan inode 131083 [ 121.363527][ T1625] tipc: Enabled bearer , priority 10 [ 121.373154][ T24] usb 3-1: Fast Track Pro switching to config #2 [ 121.382360][ T1626] loop3: detected capacity change from 0 to 512 [ 121.392807][ T24] usb 3-1: USB disconnect, device number 11 [ 121.399269][ T1619] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 121.426868][ T1625] loop1: detected capacity change from 0 to 512 [ 121.444474][ T1625] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.446204][ T1626] EXT4-fs (loop3): Test dummy encryption mode enabled [ 121.462729][ T1619] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 121.473776][ T1626] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.479238][ T1625] EXT4-fs (loop1): 1 truncate cleaned up [ 121.510170][ T1626] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 121.516052][ T1625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.535376][ T1619] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 121.552430][ T28] audit: type=1400 audit(1786411302.646:379): avc: denied { override_creds } for pid=1622 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 121.552751][ T1619] FAULT_INJECTION: forcing a failure. [ 121.552751][ T1619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.586305][ T1619] CPU: 0 PID: 1619 Comm: syz.0.376 Tainted: G W syzkaller #0 [ 121.595096][ T1619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.605187][ T1619] Call Trace: [ 121.608482][ T1619] [ 121.611438][ T1619] __dump_stack+0x21/0x24 [ 121.611508][ T28] audit: type=1400 audit(1786411302.706:380): avc: denied { read } for pid=1622 comm="syz.1.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.615822][ T1619] dump_stack_lvl+0x110/0x170 [ 121.615849][ T1619] ? __cfi_dump_stack_lvl+0x8/0x8 [ 121.644725][ T1619] dump_stack+0x15/0x24 [ 121.648915][ T1619] should_fail_ex+0x3bf/0x510 [ 121.653615][ T1619] should_fail+0xb/0x10 [ 121.656183][ T28] audit: type=1400 audit(1786411302.736:381): avc: denied { ioctl } for pid=1622 comm="syz.1.378" path="socket:[23320]" dev="sockfs" ino=23320 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 121.657785][ T1619] should_fail_usercopy+0x1a/0x20 [ 121.687374][ T1619] _copy_to_user+0x1e/0x90 [ 121.691824][ T1619] simple_read_from_buffer+0xe9/0x160 [ 121.697222][ T1619] proc_fail_nth_read+0x1a6/0x220 [ 121.702355][ T1619] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 121.707919][ T1619] ? security_file_permission+0x94/0xb0 [ 121.713502][ T1619] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 121.719077][ T1619] vfs_read+0x286/0x930 [ 121.723343][ T1619] ? __cfi_vfs_read+0x10/0x10 [ 121.728039][ T1619] ? __kasan_check_write+0x14/0x20 [ 121.733172][ T1619] ? mutex_lock+0x93/0x1b0 [ 121.737702][ T1619] ? __cfi_mutex_lock+0x10/0x10 [ 121.742589][ T1619] ? __fdget_pos+0x2cd/0x380 [ 121.747225][ T1619] ? ksys_read+0x70/0x260 [ 121.751566][ T1619] ksys_read+0x14a/0x260 [ 121.755816][ T1619] ? __cfi_ksys_read+0x10/0x10 [ 121.760673][ T1619] ? debug_smp_processor_id+0x17/0x20 [ 121.766055][ T1619] __x64_sys_read+0x7b/0x90 [ 121.770584][ T1619] x64_sys_call+0x2f/0x9a0 [ 121.775207][ T1619] do_syscall_64+0x4c/0xa0 [ 121.779639][ T1619] ? clear_bhb_loop+0x30/0x80 [ 121.784346][ T1619] ? clear_bhb_loop+0x30/0x80 [ 121.789035][ T1619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.794944][ T1619] RIP: 0033:0x7fd72e55e90e [ 121.799369][ T1619] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.818980][ T1619] RSP: 002b:00007fd72f500fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.827413][ T1619] RAX: ffffffffffffffda RBX: 00007fd72f5016c0 RCX: 00007fd72e55e90e [ 121.835397][ T1619] RDX: 000000000000000f RSI: 00007fd72f5010a0 RDI: 0000000000000005 [ 121.843378][ T1619] RBP: 00007fd72f501090 R08: 0000000000000000 R09: 0000000000000000 [ 121.851368][ T1619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.859346][ T1619] R13: 00007fd72e826038 R14: 00007fd72e825fa0 R15: 00007ffe7f49fae8 [ 121.867334][ T1619] [ 121.870973][ T1622] tipc: Resetting bearer [ 121.877783][ T1622] tipc: Disabling bearer [ 121.904427][ T287] EXT4-fs (loop0): unmounting filesystem. [ 121.950805][ T1621] EXT4-fs: Ignoring removed bh option [ 121.980157][ T288] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 122.009473][ T288] EXT4-fs (loop1): unmounting filesystem. [ 122.019755][ T1621] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 122.068792][ T291] EXT4-fs (loop3): unmounting filesystem. [ 122.099612][ T1639] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.146562][ T1642] xt_hashlimit: size too large, truncated to 1048576 [ 122.147729][ T1639] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 122.179454][ T1639] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 122.209038][ T28] audit: type=1400 audit(1786411303.306:382): avc: denied { compute_member } for pid=1638 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 122.268657][ T28] audit: type=1400 audit(1786411303.336:383): avc: denied { ioctl } for pid=1641 comm="syz.2.383" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 122.308183][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 122.468190][ T24] usb 2-1: device descriptor read/64, error -71 [ 122.477320][ T407] tipc: Node number set to 10005162 [ 122.639076][ T1655] binder: BINDER_SET_CONTEXT_MGR already set [ 122.646206][ T1655] binder: 1654:1655 ioctl 4018620d 200000004a80 returned -16 [ 122.738169][ T24] usb 2-1: device descriptor read/64, error -71 [ 122.801755][ T1633] set_capacity_and_notify: 2 callbacks suppressed [ 122.801773][ T1633] loop0: detected capacity change from 0 to 131072 [ 123.008205][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 123.033589][ T1669] loop2: detected capacity change from 0 to 512 [ 123.168236][ T24] usb 2-1: device descriptor read/64, error -71 [ 123.250877][ T1675] tmpfs: Bad value for 'huge' [ 123.273273][ T28] audit: type=1400 audit(1786411304.366:384): avc: denied { bind } for pid=1674 comm="syz.3.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.343771][ T28] audit: type=1400 audit(1786411304.436:385): avc: denied { ioctl } for pid=1674 comm="syz.3.392" path="socket:[23375]" dev="sockfs" ino=23375 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 123.388430][ T1678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25061 sclass=netlink_route_socket pid=1678 comm=syz.4.393 [ 123.427613][ T1680] support for the xor transformation has been removed. [ 123.438287][ T24] usb 2-1: device descriptor read/64, error -71 [ 123.558252][ T24] usb usb2-port1: attempt power cycle [ 123.698199][ T381] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 123.879993][ T381] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 2047, setting to 64 [ 123.894207][ T381] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1023 [ 123.913895][ T381] usb 5-1: New USB device found, idVendor=0582, idProduct=002f, bcdDevice= 0.40 [ 123.923286][ T381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.931547][ T381] usb 5-1: Product: У [ 123.935784][ T381] usb 5-1: Manufacturer: 倊 [ 123.940783][ T381] usb 5-1: SerialNumber: І [ 123.951498][ T1680] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 123.968180][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 124.009873][ T24] usb 2-1: device descriptor read/8, error -71 [ 124.161089][ T24] usb 2-1: device descriptor read/8, error -71 [ 124.172189][ T381] usb 5-1: invalid MIDI in EP 0 [ 124.181621][ T381] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 124.202774][ T1156] udevd[1156]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 124.206088][ T28] audit: type=1400 audit(1786411305.296:386): avc: denied { map } for pid=1691 comm="syz.2.399" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 124.225781][ T381] usb 5-1: USB disconnect, device number 10 [ 124.305115][ T1706] usb usb8: usbfs: process 1706 (syz.3.405) did not claim interface 0 before use [ 124.448255][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 124.481456][ T24] usb 2-1: device descriptor read/8, error -71 [ 124.508644][ T1710] loop3: detected capacity change from 0 to 256 [ 124.699706][ T24] usb 2-1: device descriptor read/8, error -71 [ 124.838479][ T24] usb usb2-port1: unable to enumerate USB device [ 125.099571][ T1713] loop4: detected capacity change from 0 to 512 [ 125.248874][ T1713] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.275663][ T1718] loop1: detected capacity change from 0 to 256 [ 125.304192][ T1718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'. [ 125.314372][ T1718] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 125.323361][ T1718] FAT-fs (loop1): Filesystem has been set read-only [ 125.330771][ T1718] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 125.350887][ T1713] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.406: Allocating blocks 41-42 which overlap fs metadata [ 125.364800][ T1713] Quota error (device loop4): write_blk: dquota write failed [ 125.372389][ T1713] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 125.381680][ T1713] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.406: Allocating blocks 41-42 which overlap fs metadata [ 125.403252][ T1713] Quota error (device loop4): write_blk: dquota write failed [ 125.485216][ T1713] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 125.496807][ T1713] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.406: Failed to acquire dquot type 1 [ 125.514223][ T1713] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 125.529410][ T1713] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #12: comm syz.4.406: corrupted inode contents [ 125.546017][ T1713] EXT4-fs error (device loop4): ext4_dirty_inode:6158: inode #12: comm syz.4.406: mark_inode_dirty error [ 125.568886][ T1713] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #12: comm syz.4.406: corrupted inode contents [ 125.583177][ T1713] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.406: mark_inode_dirty error [ 125.613666][ T1730] loop1: detected capacity change from 0 to 512 [ 125.633437][ T1713] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #12: comm syz.4.406: corrupted inode contents [ 125.710017][ T1713] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 125.734987][ T1733] loop0: detected capacity change from 0 to 1024 [ 125.747495][ T1713] EXT4-fs error (device loop4): ext4_do_update_inode:5281: inode #12: comm syz.4.406: corrupted inode contents [ 125.773294][ T1713] EXT4-fs error (device loop4): ext4_truncate:4327: inode #12: comm syz.4.406: mark_inode_dirty error [ 125.815443][ T28] audit: type=1400 audit(1786411306.906:387): avc: denied { remount } for pid=1739 comm="syz.2.415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 125.815783][ T1733] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.846593][ T1713] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 125.858024][ T1713] EXT4-fs (loop4): 1 truncate cleaned up [ 125.865443][ T1713] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 125.935236][ T28] audit: type=1400 audit(1786411307.026:388): avc: denied { read } for pid=1731 comm="syz.3.412" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 126.538715][ T289] EXT4-fs (loop4): unmounting filesystem. [ 126.567706][ T28] audit: type=1400 audit(1786411307.026:389): avc: denied { open } for pid=1731 comm="syz.3.412" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 126.608389][ T28] audit: type=1400 audit(1786411307.096:390): avc: denied { bind } for pid=1731 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.630114][ T28] audit: type=1400 audit(1786411307.116:391): avc: denied { setopt } for pid=1731 comm="syz.3.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.651496][ T28] audit: type=1400 audit(1786411307.636:392): avc: denied { ioctl } for pid=1732 comm="syz.0.413" path="socket:[23908]" dev="sockfs" ino=23908 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 126.699416][ T1752] tipc: Started in network mode [ 126.704498][ T1752] tipc: Node identity 0a5f67ccf186, cluster identity 4711 [ 126.712008][ T1752] tipc: Enabled bearer , priority 10 [ 126.722087][ T1752] loop3: detected capacity change from 0 to 512 [ 126.747183][ T1752] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.864243][ T1752] EXT4-fs (loop3): 1 truncate cleaned up [ 126.873139][ T1752] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 126.912751][ T1751] tipc: Resetting bearer [ 126.926012][ T1751] tipc: Disabling bearer [ 126.998521][ T291] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 127.014395][ T291] EXT4-fs (loop3): unmounting filesystem. [ 127.388919][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 127.411211][ T287] EXT4-fs (loop0): unmounting filesystem. [ 127.599741][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 127.608366][ T24] usb 5-1: config 0 has no interfaces? [ 127.614335][ T24] usb 5-1: language id specifier not provided by device, defaulting to English [ 127.624722][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.633979][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.642235][ T24] usb 5-1: Product: syz [ 127.646521][ T24] usb 5-1: SerialNumber: syz [ 127.655485][ T24] usb 5-1: config 0 descriptor?? [ 127.741927][ T1771] usb usb8: usbfs: process 1771 (syz.0.422) did not claim interface 0 before use [ 127.952938][ T1773] loop0: detected capacity change from 0 to 256 [ 128.977441][ T1777] loop1: detected capacity change from 0 to 1024 [ 129.001185][ T1777] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.015486][ T1777] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.030081][ T1777] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 129.067170][ T1777] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 129.080225][ T1777] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.113433][ T1777] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.426: Freeing blocks not in datazone - block = 0, count = 16 [ 129.141929][ T1777] EXT4-fs (loop1): Remounting filesystem read-only [ 129.276290][ T288] EXT4-fs (loop1): unmounting filesystem. [ 130.206649][ T1792] overlayfs: failed to resolve './file0': -2 [ 130.798720][ T24] usb 5-1: USB disconnect, device number 11 [ 131.442121][ T1797] loop0: detected capacity change from 0 to 512 [ 131.449129][ T1798] loop2: detected capacity change from 0 to 512 [ 131.559264][ T1801] loop1: detected capacity change from 0 to 1024 [ 131.567153][ T1801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.688336][ T1801] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.712643][ T1801] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.756485][ T1805] xt_hashlimit: size too large, truncated to 1048576 [ 131.776753][ T1801] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 131.790389][ T1801] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.824331][ T1801] FAULT_INJECTION: forcing a failure. [ 131.824331][ T1801] name failslab, interval 1, probability 0, space 0, times 0 [ 131.852582][ T1801] CPU: 1 PID: 1801 Comm: syz.1.431 Tainted: G W syzkaller #0 [ 131.861383][ T1801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.871465][ T1801] Call Trace: [ 131.874768][ T1801] [ 131.877718][ T1801] __dump_stack+0x21/0x24 [ 131.882076][ T1801] dump_stack_lvl+0x110/0x170 [ 131.886785][ T1801] ? __cfi_dump_stack_lvl+0x8/0x8 [ 131.891839][ T1801] dump_stack+0x15/0x24 [ 131.896028][ T1801] should_fail_ex+0x3bf/0x510 [ 131.900725][ T1801] ? getname_flags+0xba/0x510 [ 131.905443][ T1801] __should_failslab+0xac/0xf0 [ 131.910234][ T1801] should_failslab+0x9/0x20 [ 131.914755][ T1801] kmem_cache_alloc+0x3b/0x320 [ 131.919550][ T1801] getname_flags+0xba/0x510 [ 131.924084][ T1801] getname+0x19/0x20 [ 131.928004][ T1801] do_sys_openat2+0xeb/0x820 [ 131.932649][ T1801] ? __kasan_check_write+0x14/0x20 [ 131.937808][ T1801] ? do_sys_open+0xe0/0xe0 [ 131.942258][ T1801] ? ksys_write+0x1fa/0x260 [ 131.946798][ T1801] ? __cfi_ksys_write+0x10/0x10 [ 131.951670][ T1801] __x64_sys_open+0x11c/0x140 [ 131.956382][ T1801] x64_sys_call+0x97b/0x9a0 [ 131.960915][ T1801] do_syscall_64+0x4c/0xa0 [ 131.965363][ T1801] ? clear_bhb_loop+0x30/0x80 [ 131.970056][ T1801] ? clear_bhb_loop+0x30/0x80 [ 131.974764][ T1801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.980703][ T1801] RIP: 0033:0x7f4866b9e0d9 [ 131.985133][ T1801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.004775][ T1801] RSP: 002b:00007f4867b5a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 132.013203][ T1801] RAX: ffffffffffffffda RBX: 00007f4866e25fa0 RCX: 00007f4866b9e0d9 [ 132.021194][ T1801] RDX: 0000000000000020 RSI: 000000000004827e RDI: 0000200000000200 [ 132.029183][ T1801] RBP: 00007f4867b5a090 R08: 0000000000000000 R09: 0000000000000000 [ 132.037175][ T1801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.045169][ T1801] R13: 00007f4866e26038 R14: 00007f4866e25fa0 R15: 00007ffdeff20f08 [ 132.053164][ T1801] [ 132.057020][ T1808] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 132.082655][ T1808] EXT4-fs (loop1): Remounting filesystem read-only [ 132.138193][ T24] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 132.330399][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.361934][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 132.361948][ T28] audit: type=1400 audit(1786411313.456:396): avc: denied { mounton } for pid=1813 comm="syz.0.435" path="/103/file0" dev="tmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 132.405254][ T288] EXT4-fs (loop1): unmounting filesystem. [ 132.412006][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 132.425189][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 132.436293][ T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 132.463746][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.463786][ T1812] loop2: detected capacity change from 0 to 512 [ 132.480519][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.488928][ T24] usb 4-1: Product: syz [ 132.498906][ T1812] EXT4-fs error (device loop2): __ext4_iget:5104: inode #11: block 1: comm syz.2.433: invalid block [ 132.510014][ T1812] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.433: couldn't read orphan inode 11 (err -117) [ 132.522426][ T1812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 132.542301][ T1812] EXT4-fs (loop2): shut down requested (2) [ 132.559082][ T28] audit: type=1400 audit(1786411313.656:397): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 132.586040][ T28] audit: type=1400 audit(1786411313.656:398): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.597847][ T24] usb 4-1: Manufacturer: syz [ 132.612237][ T24] usb 4-1: SerialNumber: syz [ 132.617931][ T28] audit: type=1400 audit(1786411313.656:399): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.639504][ T1803] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 132.652572][ T28] audit: type=1400 audit(1786411313.656:400): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.653360][ T24] cdc_mbim 4-1:1.0: skipping garbage [ 132.679506][ T28] audit: type=1400 audit(1786411313.656:401): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.859760][ T1803] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 132.868501][ T1803] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 132.876390][ T28] audit: type=1400 audit(1786411313.656:402): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.452326][ T28] audit: type=1400 audit(1786411313.656:403): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 133.485237][ T1836] loop0: detected capacity change from 0 to 128 [ 133.493402][ T28] audit: type=1400 audit(1786411314.576:404): avc: denied { read } for pid=1802 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.513112][ T582] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 133.546319][ T1836] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 133.578229][ T1836] System zones: 1-3, 19-19, 35-36 [ 133.593948][ T1836] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 133.614132][ T1836] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.693570][ T28] audit: type=1400 audit(1786411314.786:405): avc: denied { setattr } for pid=1835 comm="syz.0.441" path="/105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 133.738769][ T582] usb 3-1: Using ep0 maxpacket: 16 [ 133.748371][ T582] usb 3-1: config 32 has an invalid interface number: 64 but max is 0 [ 133.776870][ T582] usb 3-1: config 32 has an invalid descriptor of length 162, skipping remainder of the config [ 133.789050][ T287] EXT4-fs (loop0): unmounting filesystem. [ 133.805651][ T582] usb 3-1: config 32 has no interface number 0 [ 133.818190][ T582] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b [ 133.837435][ T582] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.918893][ T582] usb 3-1: Found UVC 0.00 device (0bd3:0569) [ 133.936177][ T582] usb 3-1: No valid video chain found. [ 133.982136][ T1850] loop0: detected capacity change from 0 to 8192 [ 134.008518][ T1850] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.089328][ T1837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 134.105628][ T1837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.432'. [ 134.134121][ T1803] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 134.142715][ T1803] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 134.171838][ T1862] loop0: detected capacity change from 0 to 128 [ 134.179969][ T24] cdc_mbim 4-1:1.0: setting rx_max = 16384 [ 134.197836][ T1862] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 134.207067][ T1862] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 134.252206][ T287] EXT4-fs (loop0): unmounting filesystem. [ 134.282191][ T582] usb 3-1: USB disconnect, device number 12 [ 134.297712][ T1866] loop0: detected capacity change from 0 to 1024 [ 134.317197][ T1866] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 134.320415][ T1868] loop4: detected capacity change from 0 to 128 [ 134.343770][ T1866] EXT4-fs error (device loop0): ext4_get_journal_inode:5749: inode #32: comm syz.0.452: iget: special inode unallocated [ 134.374300][ T1866] EXT4-fs (loop0): no journal found [ 134.381211][ T24] cdc_mbim 4-1:1.0: setting tx_max = 28 [ 134.389842][ T24] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 134.399842][ T1866] EXT4-fs (loop0): can't get journal size [ 134.414701][ T24] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 9e:82:d6:1c:3b:18 [ 134.432179][ T24] usb 4-1: USB disconnect, device number 12 [ 134.441844][ T1866] EXT4-fs (loop0): filesystem is read-only [ 134.447856][ T24] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 134.456751][ T1866] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 134.545246][ T287] EXT4-fs (loop0): unmounting filesystem. [ 134.582139][ T1875] loop0: detected capacity change from 0 to 256 [ 134.601230][ T1875] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 134.715898][ T290] EXT4-fs (loop2): unmounting filesystem. [ 136.608651][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 136.798232][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 136.811579][ T24] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 136.838295][ T24] usb 2-1: config 0 has no interface number 0 [ 136.854597][ T24] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 136.874816][ T24] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 136.907076][ T24] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 137.071339][ T1912] loop4: detected capacity change from 0 to 512 [ 137.122020][ T1912] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.263982][ T1912] EXT4-fs (loop4): 1 truncate cleaned up [ 137.269777][ T1912] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 137.410546][ T1912] ip_tables: iptables: counters copy to user failed while replacing table [ 137.451799][ T289] EXT4-fs (loop4): unmounting filesystem. [ 137.468279][ T582] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 137.557249][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.567775][ T24] usb 2-1: Product: syz [ 137.572718][ T24] usb 2-1: Manufacturer: syz [ 137.577353][ T24] usb 2-1: SerialNumber: syz [ 137.583141][ T24] usb 2-1: config 0 descriptor?? [ 137.628505][ T1906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.635761][ T1906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.725782][ T1939] loop0: detected capacity change from 0 to 256 [ 137.750711][ T1939] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 137.764575][ T1940] fuse: root generation should be zero [ 137.864090][ T1945] binder: BINDER_SET_CONTEXT_MGR already set [ 137.873573][ T1906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.888834][ T1945] binder: 1941:1945 ioctl 4018620d 200000004a80 returned -16 [ 137.896356][ T1906] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.927816][ T1948] loop0: detected capacity change from 0 to 512 [ 137.970987][ T1948] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 137.980198][ T1948] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.016444][ T287] EXT4-fs (loop0): unmounting filesystem. [ 138.119501][ T24] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 138.202240][ T1952] loop0: detected capacity change from 0 to 256 [ 138.216417][ T582] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.228644][ T1952] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4b8d9fb, utbl_chksum : 0xe619d30d) [ 138.247257][ T582] usb 3-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=a0.27 [ 138.266730][ T582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.278187][ T582] usb 3-1: Product: syz [ 138.282479][ T582] usb 3-1: Manufacturer: syz [ 138.287131][ T582] usb 3-1: SerialNumber: syz [ 138.294372][ T1952] exFAT-fs (loop0): error, invalid size(size(1) > aligned(9223372036854777344) [ 138.294372][ T1952] [ 138.306169][ T582] usb 3-1: config 0 descriptor?? [ 138.311390][ T1952] exFAT-fs (loop0): Filesystem has been set read-only [ 138.322867][ T1952] exFAT-fs (loop0): error, invalid size(size(2) > aligned(9223372036854777344) [ 138.322867][ T1952] [ 138.371258][ T1956] device dummy0 left promiscuous mode [ 138.376833][ T1956] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 138.608193][ T582] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 138.628280][ T1968] loop4: detected capacity change from 0 to 512 [ 138.643393][ T1968] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 138.652253][ T1968] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 138.802989][ T582] usb 4-1: unable to get BOS descriptor or descriptor too short [ 138.819042][ T582] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.839494][ T582] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.859401][ T582] usb 4-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 138.868520][ T582] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.876950][ T582] usb 4-1: Product: syz [ 138.881415][ T582] usb 4-1: Manufacturer: syz [ 138.886037][ T582] usb 4-1: SerialNumber: syz [ 138.987479][ T1977] netlink: 72 bytes leftover after parsing attributes in process `syz.0.492'. [ 139.108213][ T381] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 139.133275][ T24] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 139.143501][ T24] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 139.153871][ T24] asix: probe of 2-1:0.34 failed with error -71 [ 139.161078][ T24] usb 2-1: USB disconnect, device number 13 [ 139.288193][ T529] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 139.289957][ T381] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 139.307227][ T381] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 139.316329][ T381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.324474][ T381] usb 5-1: Product: syz [ 139.328665][ T381] usb 5-1: Manufacturer: syz [ 139.333275][ T381] usb 5-1: SerialNumber: syz [ 139.338825][ T381] usb 5-1: config 0 descriptor?? [ 139.344702][ T381] hub 5-1:0.0: bad descriptor, ignoring hub [ 139.350816][ T381] hub: probe of 5-1:0.0 failed with error -5 [ 139.479326][ T529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.490437][ T529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.500257][ T529] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.513233][ T529] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.522315][ T529] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.531323][ T529] usb 1-1: config 0 descriptor?? [ 139.618414][ T582] usb 4-1: unit 4 not found! [ 139.625414][ T582] usb 4-1: USB disconnect, device number 13 [ 139.660400][ T297] usb 5-1: USB disconnect, device number 12 [ 139.667482][ T1983] loop1: detected capacity change from 0 to 256 [ 139.683431][ T1983] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 139.705538][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 139.705551][ T28] audit: type=1400 audit(1786411320.796:410): avc: denied { map } for pid=1982 comm="syz.1.495" path="/91/file2/file1" dev="loop1" ino=1048697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.716352][ T1983] syz.1.495: attempt to access beyond end of device [ 139.716352][ T1983] loop1: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 139.761201][ T1983] syz.1.495: attempt to access beyond end of device [ 139.761201][ T1983] loop1: rw=524288, sector=696, nr_sectors = 256 limit=256 [ 139.775243][ T28] audit: type=1400 audit(1786411320.796:411): avc: denied { execute } for pid=1982 comm="syz.1.495" path="/91/file2/file1" dev="loop1" ino=1048697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 139.792917][ T1983] syz.1.495: attempt to access beyond end of device [ 139.792917][ T1983] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 139.812130][ T1983] syz.1.495: attempt to access beyond end of device [ 139.812130][ T1983] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 139.825458][ T1983] syz.1.495: attempt to access beyond end of device [ 139.825458][ T1983] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 139.841192][ T28] audit: type=1404 audit(1786411320.936:412): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 139.853195][ T1983] syz.1.495: attempt to access beyond end of device [ 139.853195][ T1983] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 139.870074][ T1156] udevd[1156]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 139.888456][ T1983] syz.1.495: attempt to access beyond end of device [ 139.888456][ T1983] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 139.896968][ T28] audit: type=1400 audit(1786411320.986:413): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 139.902932][ T1983] syz.1.495: attempt to access beyond end of device [ 139.902932][ T1983] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 139.938978][ T1983] syz.1.495: attempt to access beyond end of device [ 139.938978][ T1983] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 139.952296][ T1983] syz.1.495: attempt to access beyond end of device [ 139.952296][ T1983] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 139.956947][ T28] audit: type=1400 audit(1786411321.046:414): avc: denied { ioctl } for pid=1978 comm="syz.0.493" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 139.990835][ T529] usbhid 1-1:0.0: can't add hid device: -71 [ 139.997462][ T529] usbhid: probe of 1-1:0.0 failed with error -71 [ 140.004707][ T529] usb 1-1: USB disconnect, device number 10 [ 140.011061][ T28] audit: type=1400 audit(1786411321.046:415): avc: denied { bpf } for pid=1978 comm="syz.0.493" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 140.040845][ T28] audit: type=1400 audit(1786411321.136:416): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 140.095635][ T28] audit: type=1400 audit(1786411321.166:417): avc: denied { read write } for pid=289 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 140.120147][ T28] audit: type=1400 audit(1786411321.176:418): avc: denied { name_bind } for pid=1995 comm="syz.3.501" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 140.153873][ T28] audit: type=1400 audit(1786411321.176:419): avc: denied { create } for pid=1995 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 140.189874][ T582] usb 3-1: USB disconnect, device number 13 [ 140.689836][ T8] tipc: Disabling bearer [ 140.695275][ T8] tipc: Left network mode [ 141.198929][ T8] device bridge_slave_1 left promiscuous mode [ 141.205131][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.239942][ T8] device bridge_slave_0 left promiscuous mode [ 141.246107][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.890882][ T2035] tun0: tun_chr_ioctl cmd 35108 [ 141.905602][ T2035] overlayfs: missing 'lowerdir' [ 144.764782][ T28] kauditd_printk_skb: 189 callbacks suppressed [ 144.764797][ T28] audit: type=1400 audit(1786411325.856:609): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 144.795242][ T28] audit: type=1400 audit(1786411325.866:610): avc: denied { read write } for pid=290 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 144.843262][ T28] audit: type=1400 audit(1786411325.936:611): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 144.983133][ T28] audit: type=1400 audit(1786411326.076:612): avc: denied { bpf } for pid=2069 comm="syz.2.532" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 145.022583][ T28] audit: type=1400 audit(1786411326.096:613): avc: denied { bpf } for pid=2069 comm="syz.2.532" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 145.043214][ T28] audit: type=1400 audit(1786411326.096:614): avc: denied { create } for pid=2069 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 145.063227][ T28] audit: type=1400 audit(1786411326.096:615): avc: denied { create } for pid=2069 comm="syz.2.532" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 145.087292][ T28] audit: type=1400 audit(1786411326.096:616): avc: denied { read write } for pid=2069 comm="syz.2.532" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 145.110623][ T28] audit: type=1400 audit(1786411326.096:617): avc: denied { bpf } for pid=2069 comm="syz.2.532" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 145.131205][ T28] audit: type=1400 audit(1786411326.096:618): avc: denied { map_create } for pid=2069 comm="syz.2.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 149.993017][ T28] kauditd_printk_skb: 124 callbacks suppressed [ 149.993033][ T28] audit: type=1400 audit(1786411331.086:743): avc: denied { read write } for pid=2121 comm="syz.3.549" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 150.123514][ T28] audit: type=1400 audit(1786411331.216:744): avc: denied { read append } for pid=2121 comm="syz.3.549" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 150.146666][ T28] audit: type=1400 audit(1786411331.216:745): avc: denied { read write } for pid=2121 comm="syz.3.549" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 150.169892][ T28] audit: type=1400 audit(1786411331.216:746): avc: denied { mounton } for pid=2121 comm="syz.3.549" path="/109/file0" dev="tmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 150.192396][ T28] audit: type=1400 audit(1786411331.216:747): avc: denied { bpf } for pid=2121 comm="syz.3.549" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 150.212793][ T28] audit: type=1400 audit(1786411331.216:748): avc: denied { prog_load } for pid=2121 comm="syz.3.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 150.231859][ T28] audit: type=1400 audit(1786411331.246:749): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 150.532423][ T28] audit: type=1400 audit(1786411331.626:750): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 151.135070][ T28] audit: type=1400 audit(1786411332.216:751): avc: denied { read write } for pid=2132 comm="syz.0.551" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 151.171858][ T28] audit: type=1400 audit(1786411332.216:752): avc: denied { execmem } for pid=2131 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 155.149132][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 155.149147][ T28] audit: type=1400 audit(1786411336.246:843): avc: denied { read write } for pid=287 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 156.008131][ T28] audit: type=1400 audit(1786411337.096:844): avc: denied { bpf } for pid=2167 comm="syz.2.564" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 156.030032][ T2171] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 156.056556][ T28] audit: type=1400 audit(1786411337.106:845): avc: denied { execmem } for pid=2170 comm="syz.4.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 156.083119][ T28] audit: type=1400 audit(1786411337.106:846): avc: denied { name_bind } for pid=2168 comm="syz.3.565" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 156.104703][ T28] audit: type=1400 audit(1786411337.126:847): avc: denied { prog_load } for pid=2167 comm="syz.2.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 156.124021][ T28] audit: type=1400 audit(1786411337.126:848): avc: denied { create } for pid=2167 comm="syz.2.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 156.144471][ T28] audit: type=1400 audit(1786411337.136:849): avc: denied { read write } for pid=2173 comm="syz.0.563" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 156.168838][ T28] audit: type=1400 audit(1786411337.146:850): avc: denied { execmem } for pid=2166 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 156.188416][ T28] audit: type=1400 audit(1786411337.146:851): avc: denied { bpf } for pid=2173 comm="syz.0.563" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 156.235027][ T28] audit: type=1400 audit(1786411337.146:852): avc: denied { bpf } for pid=2173 comm="syz.0.563" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 161.789232][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 161.789247][ T28] audit: type=1400 audit(1786411342.886:912): avc: denied { bpf } for pid=2205 comm="syz.2.575" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 161.850385][ T2215] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 161.877447][ T28] audit: type=1400 audit(1786411342.916:913): avc: denied { create } for pid=2206 comm="syz.3.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=0 [ 161.941243][ T28] audit: type=1400 audit(1786411342.916:914): avc: denied { map_create } for pid=2205 comm="syz.2.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 161.968360][ T28] audit: type=1400 audit(1786411342.916:915): avc: denied { bpf } for pid=2205 comm="syz.2.575" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 162.018193][ T28] audit: type=1400 audit(1786411342.916:916): avc: denied { bpf } for pid=2205 comm="syz.2.575" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 162.095128][ T28] audit: type=1400 audit(1786411342.916:917): avc: denied { bpf } for pid=2211 comm="syz.0.574" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 162.115651][ T28] audit: type=1400 audit(1786411342.916:918): avc: denied { bpf } for pid=2211 comm="syz.0.574" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 162.136131][ T28] audit: type=1400 audit(1786411342.916:919): avc: denied { map_create } for pid=2211 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 162.156190][ T28] audit: type=1400 audit(1786411342.916:920): avc: denied { bpf } for pid=2211 comm="syz.0.574" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 162.176809][ T28] audit: type=1400 audit(1786411342.916:921): avc: denied { prog_load } for pid=2211 comm="syz.0.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 162.211027][ T43] tipc: Left network mode [ 162.748845][ T43] device bridge_slave_1 left promiscuous mode [ 162.754972][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.762452][ T43] device bridge_slave_0 left promiscuous mode [ 162.768638][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.079950][ T43] tipc: Disabling bearer [ 163.085303][ T43] tipc: Left network mode [ 163.519445][ T43] device bridge_slave_1 left promiscuous mode [ 163.525584][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.533092][ T43] device bridge_slave_0 left promiscuous mode [ 163.539284][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.547331][ T43] device bridge_slave_1 left promiscuous mode [ 163.553521][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.560990][ T43] device bridge_slave_0 left promiscuous mode [ 163.567104][ T43] bridge0: port 1(bridge_slave_0) entered disabled state