last executing test programs: 5m17.256355168s ago: executing program 3 (id=4): pread64(0xffffffffffffffff, &(0x7f0000000140)=""/128, 0x80, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000001b40)='./file0\x00', 0x8, &(0x7f0000000200)=ANY=[], 0x4, 0x1503, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018012000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000240c00028005000100000000003c0003800c00028005000100000000002c00018014000300fe8000000000000000000000000000bb14000400ff0200000000000000000000000000013c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x1000}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) 5m16.019435486s ago: executing program 3 (id=9): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = io_uring_setup(0x3de3, 0x0) io_uring_setup(0x6538, &(0x7f00000003c0)={0x0, 0x35eb, 0x80, 0x0, 0x1f3, 0x0, r1}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x23, &(0x7f0000000280)=0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) io_submit(r7, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) ioctl$BINDER_WRITE_READ(r8, 0x40046208, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=@deltaction={0xb8, 0x31, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000100)=0x4583c57b, 0x4) 5m12.565911504s ago: executing program 3 (id=12): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580), 0x1, 0x5d8, &(0x7f0000000c00)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb1}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) fcntl$setpipe(r1, 0x407, 0x3a50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01f0ee7eabd8ddce58180000000000000089040000000000"]) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0xfffffffd}) setpriority(0x1, 0x0, 0x3) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) utimensat(r8, &(0x7f0000000140)='./bus\x00', &(0x7f0000000300)={{}, {0x77359400}}, 0x100) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r10}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x3, r10}, 0x38) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) 5m5.206422654s ago: executing program 3 (id=22): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRESHEX=r2, @ANYRESHEX=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6a, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pipe(&(0x7f00000000c0)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) io_getevents(r7, 0x1, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000300)={r8, r9+60000000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 4m50.094433046s ago: executing program 32 (id=22): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300", @ANYRESHEX=r2, @ANYRESHEX=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6a, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pipe(&(0x7f00000000c0)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) io_getevents(r7, 0x1, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000300)={r8, r9+60000000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 1m21.912865185s ago: executing program 2 (id=377): syz_read_part_table(0x405f, &(0x7f0000000000)="$eJzszj1KxFAUBeCTmEmiDmhhp4ViP8x0lm4iG3AN9gqzE8EmG3At7sNemRFmIkHwr1D5viJ57917Dzf8Bk/lu6Vq9PJcbI6nZ1nO5+OWlSJF6kUme22ZaZLr9WszjO367y4OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8GUWSyfa6/9G5q+OUSS6mSdvkZpN2lCazbVv7Jj3ZTaosUnf9D+wOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPx37acnDl9/1epzd55ls3N7MhvU7x8vx+EPycH6UA+juv4LGwMAAC/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCADAAAAIMzfOo/2AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBSAAAA//+Lbg3E") 1m19.448010393s ago: executing program 2 (id=391): keyctl$clear(0x3, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffb) 1m19.316859374s ago: executing program 2 (id=393): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) 1m19.262012158s ago: executing program 2 (id=396): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000002c0)=ANY=[@ANYBLOB="696f636861727365743d170ddbbba28854f76e642c756d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d63703934392c6572726f72733d72656d6f756e742d726f2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000003,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,discard,errors=continue,\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$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") mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x10000, 0x0) 1m19.018006978s ago: executing program 2 (id=400): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x2}}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r4, 0x4, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711215000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r2, @cgroup_sock_addr=0x1e, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) nanosleep(&(0x7f0000000380)={r6, r7+10000000}, &(0x7f00000003c0)) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "229b34", 0x44, 0x2f, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0x2, 0x0, 0x0, 0x3, 0x3, 0xc6}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x1, {{0x7, 0x2, 0x3, 0x3, 0x0, 0x2, 0x7}, 0x2, {0xe978, 0x7, 0x3, 0x9, 0x0, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r8, &(0x7f0000001840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x1ff}], 0x1, 0x40002000, 0x0) write$binfmt_misc(r8, &(0x7f0000000300), 0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000140)={[{@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@utf8}, {@utf8no}, {@uni_xlateno}, {@shortname_lower}, {@uni_xlateno}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@fat=@check_strict}, {@numtail}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 1m17.351424792s ago: executing program 2 (id=403): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x401}, {}, 0x8001}}, 0xb8}}, 0x0) 1m17.351385352s ago: executing program 33 (id=403): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x401}, {}, 0x8001}}, 0xb8}}, 0x0) 1m17.192085704s ago: executing program 4 (id=418): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000002700010000000000000000000a010100000000000000000000000000fe80000000000000000000000000bb000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x50}}, 0x0) 1m16.828477154s ago: executing program 4 (id=419): creat(&(0x7f00000001c0)='./file0\x00', 0x8) mount(&(0x7f00000001c0), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') 1m16.12462714s ago: executing program 4 (id=420): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000300)=[@hoplimit={{0x14, 0x29, 0x34, 0x809}}], 0x18}}], 0x1, 0x4000084) 1m16.124319551s ago: executing program 4 (id=421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) open(0x0, 0x14927e, 0x44) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000001a00000000000018112000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0xad5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, 0x3d0}) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m11.560791747s ago: executing program 4 (id=434): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1ce, &(0x7f0000000a00)="$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") mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) 1m10.428050478s ago: executing program 4 (id=442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff0300600d698cff9e14f086dd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 55.295013385s ago: executing program 34 (id=442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff0300600d698cff9e14f086dd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 5.576469591s ago: executing program 5 (id=988): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)="3ce2", 0x2, 0x805, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002f80)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200)=""/186, 0xba}, {0x0}], 0x2}, 0xffffffac}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x41, 0x0) 4.714677791s ago: executing program 5 (id=992): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f00000008c0)={0x20, 0x15, 0x6, "26dc946bb449"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x82, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="208402"], 0x0}) 3.882968138s ago: executing program 6 (id=1005): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x2238, &(0x7f0000001cc0)={0x0, 0x6cbe, 0x1000, 0x0, 0x210}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, 0x0, 0x0) 3.002861549s ago: executing program 6 (id=1010): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x80000003, 0x20000009}]}}}}}}}, 0x0) 3.002755929s ago: executing program 6 (id=1011): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16, @ANYRES8=r0], 0x0) 2.399888697s ago: executing program 5 (id=1017): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000440)) 2.249131319s ago: executing program 7 (id=1019): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a82, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x100) 1.659698587s ago: executing program 1 (id=1028): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061187b000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014008000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) listen(0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) 1.659497536s ago: executing program 6 (id=1029): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x4, 0x8}]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.071044414s ago: executing program 0 (id=1030): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000440)={0x1, 0x1, 0xeeee0000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 993.03584ms ago: executing program 0 (id=1031): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 843.242512ms ago: executing program 1 (id=1032): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='binder\x00', 0x208000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) 780.149687ms ago: executing program 0 (id=1033): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@noinit_itable}, {@orlov}]}, 0xfc, 0x575, &(0x7f0000000640)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55da2ybtC8dfxP18pPEa+17f9Hd7SSze9PjjXOh7HmWbHRX7eO/tap/V7Hn/X//s3jH01a79fWdt7Gj3v/STut2+35P5J81ig3k+BauV6fH48YST7e+PjEo32b9eb2Wfwnjm9+/Wt3/meTr8+3Gf+tI7c6btoP/T+9o/7feeHeR1/80Kn97fX/m43SifyR/PrXXn6ubPcAn/T5AwAAAAAAgH5SiIiDkRRKa+VCoVRafX/HkdhfqFRr9ZMXqwuXp6PxWdnRGC4073Qfank/xHh+a79Zn1hXn4yIwxHx7dC+Rr00Va1M9zp4AAAAAAAAAAAAAAAAAAAA6BMHOnz+P/P7UK+PDnjqGl9ssKfXRwH0wpZf+d+Nb3oC+tKW+Q88t+Q/DC75D4NL/sPgkv8wuOQ/DC75D4NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBXnT93LltWlh9en8rq01cXF2arV09Np7XZ0tzCVGmqOn+lNFOtzlTS0lR1bqu/V6lWr4xPxMK1sXpaq4/VFpcuzFUXLtcvXJorz6QX0uH/JSoAAAAAAAAAAAAAAAAAAAB4ttQWl2bLlUo6r9Cx8H70xWE8zQBX7Wr3Yr9EodChcDPv3p3t1cOLEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACs818AAAD///AKMoc=") chdir(&(0x7f0000000140)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 780.042127ms ago: executing program 0 (id=1034): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="d1"}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x80) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 779.910387ms ago: executing program 0 (id=1035): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000800)={[{@dioread_nolock}, {@abort}, {@nombcache}, {@noinit_itable}]}, 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x3920e, r1, 0x3, 0x1, 0x3, 0x6}) 774.890908ms ago: executing program 1 (id=1036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r2, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31", 0x3c, 0x2) 764.122319ms ago: executing program 0 (id=1037): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x404, &(0x7f0000002780)={[{0x55, 0x4e00, "4b26ded45a9b9dbacc78be13835b74cb26e16077131d1093465011d098a3ee89500bbf301b136f98813928662006333214d01a667d92ee1a7ecb486b38a351b185133cfa1ecb8a27eab4fac1bd2880c1b28cc67f9f"}, {0x395, 0x4e00, "9eb05543c3192f6b83720f1f89dce13b19d1906b713129003bc01b84584afe6fa8fcd407503ccd53a0b345adc771e4520c57454654609355724f4a067fb819f2a277a597beca23b10963748dcbba3526d0888096d442677757bde2d73f0bb6cdd6aae2323b541ef14072025125a8bbc0c24fb6551b15693da4fdd797803bf872beaa7576a010dedd8adf2adc1f49a522f8ee8005eeb250decb0b68543ccad74a3d326c0d175e34286ba0fe013dce87cae0bf64111b1063497bf1c7e84b4b8261e9c37a631d651169b36153b2b5f7d68aa9ba1f70699aa8956eda64a43cc0b6c0116cd87323f842a7e08617c1bf6d106162ea559906df0f3813b41adfcce6d46b62a697e1bfc217c4a15517248fd19a4a2d03fb72e10dcfb8441193ebbde587ff713eba3aeec56304731882f4ec736bce0a0d53cdd591af24a0ff1c776732db7ff6c681eced312d36678b388181853a0bc857240b67016cd0dc29891e829147ff40ea8a1e1366574110a4c2cb14760900b7d42f66a2824b33931d1965bea3ccbfd8d2cc5b19ac54d21ac7893cbbf5c2ee3144fd68d8c7dd33e9d7e65f83481e6b6e03c2fa88d3f9e27de9ce0f3bcc4b71abae93ee7b657f9892987fb49e6ce4a620aad211fe52a9f7403c7e0e4a5b44a361ff49a6a789dd8668f5d05d187db033c6b397e0c8e1a0192a5e41319855824744722265bc2c72630b2bacf5951a08ae1b2e6313ad8a3a84043a967b56df04e5ffa9f7a9b15766054df260d754abe40ae2af3c24d8021402ea58e1ae523a77761af00903a52768b4b6f82bbeee0b3ef5f5f4c24e8f92ba2fe6538ce3f606a7675d2c4a1119c0a9fc68c8147cd1c624d9bc1e9ae724976cf043eb4813fa63cc61d1d155fc503d6792022b291b1513e5b1fd8cdb7fa36fd5ebe7d9cbe1d7a2f6d9171e1820bcad02c62264cd08f4d5e86565d7dcbb32fb78e7965e64b11ab86eeef4ef9a963df04b509f60c10e1af19a221b8ee1ce439a56c00a94eaa55c592da6f6d7ffee2667904ef517d4fe4a42cd034dd775eab78567686693d1efa6bd9fa92246b9859219bf6b2593b27dfb6f9fbf79b17f39c4f155de040a2de9c31ce4e96d7f407e2411d3b676cc22e1c6d940eea8790d150fc3c11967a1a416ce2a358ec4021fa6be819783dd4ffc1e6f08fb89e2f2632dfbe7ce483bcebaea2bfe6ca0df4a8ec82d9ecbcde3003258c9cb710a0df50e09d431844a517feca44d6c1152ddb8907cf5f450b001d6d706f982633da08b0b44c1b341daaa851f158e80e1f0bf5059b011"}, {}, {0x2, 0x4e00, "0efd"}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000980)={[{}]}) 688.064355ms ago: executing program 6 (id=1038): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f00000021c0)={0x50, 0x0, 0x8, {0x7, 0x29, 0x9f53, 0x10000008, 0xc0f7, 0x48e, 0x8, 0x7fff, 0x0, 0x0, 0x80, 0x101}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)={0x20, 0x0, 0x7, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002300)="c25fe92f8abc969bed99d08f79b0419fc38464bde58fcd9ff2c66ee27597c3302dd9e543b48869a354ccac79c0a5f4c87c5051767e7b9494776086c67bdc10c1fc971bebab8cc66ad73bb04cfbda45ea7a49bcaf3178fa928268b9695b66e8368e4cc9c370a8cef624d1cf11171d4dc8f3ecf4189c03e9b21b40188b0110deca65acdc619e3c4a2c8b27755043cc59f366954e4b4dbc4b0c2f9753ad4ede00020b236bbd1890422f79da954873348832de23b031c13ecb9a793569982fdb7e7fe342f24564ad61a14215255ace0f509d958e05877fe4ed09519d85992b0cd58af95dfc3b4454869373ea7d8b53f1105d942e4b718f90d42354e7808098cb01e7189bbe69a0429bfb14ef0621b933ec890c020cdf916271d8d2cc5c8ba1c038fb4c272acfeb7c28d8bfdd9c2505bd2e9fd4b65769d28be67d983f08a094a42b3556e02bbfdc8474d4217fafa45d511601dff25446492cc6dce7f2e51de49de941b0e6572c50142c63bc132927a3f3a617172e8cca42435ddce7a39bed678dedaf79c33db5d28b6a27a83f55bcb7d3219e2dfbb632b5bf23adc6619f18fa6d3738dcb3bed93f9a4f28001781e2c101bd193b6394520a6525c3c1af17c5490e3498e14dbc2b3250be1af54d57047ded6efb0f934496612544922e0be0d7da4f9622756b6fff60a6de549a379ed4e2804ca8dd78e053e66ca2b04f0a780d655cd152133c6e6e002b0717541b96bc6a817cf847423038733367710ea72f195d59a18a5dd74c01a7fa7a88444a18c00bceeeac0482f2476eb38f6114c971d0eef126d2b19a1aa5ec61d61610c590ae30fcb13c8967c55a41cfd5138d98282be1b32dd961c821de02e0c8b475b8825ecd263cacc514a33cbc1db31f2a2af59fbe6624d4f1fc714053abe7b2a8941d5b925c556a00ca39bb306720e2872e06d098c8951e3649e762be7c2afae976ad9bf33f58b1819862f052392dd190ba80dd49a9384c65042604fbd85c4a9591c12fe296d62785d565592e1b02da5a0dd858145bb7d3a8ebf4e3d3ac51d0baa35b24a43343fcb7c3b7bdbcacb20eeceee5ecb2e28258cb4936f9e4289b1c8ae453ec42ed8faf75c46d2fadcbc5804cbeb4c598e9005f3b398794e6d5d4aa873301fd29aef63619635fcbe59503cc26cae343cce058e70a00bd379cf547024b9155c5c2fe4eba01fd0ba936c1852afe9046297a32e3c9d747d1659cddcaea0394b9e15ece3c3adb6da8b24174b99a80d243231e062188d4efe48fb8e4f673fcc650fb5cec06f88b486643cc392980f1b134b1ffbe91ab4b2b891540a53c416136d26421afca75108a8f318e845812edce949138dc800897d9c5b3047f9de9e4bae123d0f0c14f7af2cf684859b443ed307e28bcd0454febc38b38e49943ab19b0ca902c36f9e4ce5e1eaaa3f65a173159bc5592db6c1faf769df6570bd4b3256dd1a6ee6ffcbdbb5f9b405f09ec5dcba2a99cfa768670fd31ef9f806be5bacea3c231b206e410f27fd0e9b92b6802b5680bdc4dbfd06ca18863c071c3ea9e03c49ec5c318883660eb54a3a33fa5960dc49fba22935062f76f6b0cd43dd8d945944db0aaf62b2a0c07804598044fd89133ad173bff589a12276e50acbcfdfde498924ff20cb3260bc637524248450a3d6e973eec83bfb792a5ee52a4a2503a45825f65aeb0fa1a131085cbe516b8c9da8a62b4174f892b3e316992115639ceca6f2d62b77489451c3b1581d0b89ec713da59a08af5c4b34ceb3222142f0b5dd70b8c1185123a4619247fbca0057bcbda20806359c254302db6c1dd26cdf1438edff4af95ea8dedb81266f03084dd646ea54a1b4f26bb62c2e1649719bb5481ef8dd28c32d09e0c46638b1ebb834540c8a7fcd78c69d98cfce662a3950bfc22a6118caf0f90bb88305945206c24d1d68de9b151a84670547f96e538cc3f5b307a60b0e1a8b143c627659f19d79abe2597fa5ae59aab556664939c671a6daed60c9330d7c6323671fe71f354e6b08823c7c8dc5e2f4af4be26c8fdd4478a4a919c9233593d3b3ec0b49e4f25132acc4eca8bacda98927ad262e57622a8af00bb5e936bc08254896499e7e4aa06caf1b9a00e924c69d8fd5e3500cace65c72c9a8e64d5b68c91ed50fcb22ffe5b3eaffc0e0cbc8bcf16be8571a33abf61dc47dd02ac84a213243764babde850627fdfde1222702c8c15f324c77ec56b6fcd6dc11f50c91b0b11763554914aacf0cdfe41b26eb68f5d781f89cfd19c6fb7fe2e5ff19238290e864ea8eb1a900599ef222e7c62671f8a7bb06bfece509d2c40d8f7445e8fa0c0a4042cb41bd74442b99d27d224fcaa582f2240f816051f84bd548dc95a2b0ceb7ebc48e6357c56938270633e176f7e96969ed8fa61316518d04e8ce8668ea077b88155a97b6ca114ed2058553c4c56ec8d9e353020aa2462ec0312e3183c56d1c3bd86d9e32a0f27f78892ee0baba6c0dbef9c8c0837916604c8d652335d84581cfe08246d530d16abd2690825a2c2394c4880f5ea05d4a1ac78f47f6e716a3cca31d296f76e1fd519a6216764619cf29c4f76962450f9a79b4eaa4d3f8528a1155b1060dcff96240d95819c78f05310d0c4c22187b35fdcfb2bd64d3e7f3ba197be39ae4e8d3c7533ca087f71f691eb63b67c5facf7b7d38b33b00d7011fc0a1769687d65be802209a5469c8f7adec77c07c60e18b2f0ff963a8cb4a4b02f7bf63b69a48334c0a3cafe1d34c532b876c50ab82f48d812618fa51675cbc77f0e521fcf3140819d89e9a6dc759ab736e6e80c00ec8eb439e16f1d9bb8061ef4082f54c59ad03982be21119b0c3dfdd602272a211a764a447cd5ce94251fe371d8f74ded0d805c1d41ef27909f2e918dcf4dda25d122419b97613d6efb3c7edffe770dfd1e440f19fe6dfa43802b490afcb79c93b70c1a17cfd6d404b5d325e4f17c01e95d7acf57c49854efb8e08bee019f7390112bab655d50a723e5722e7de5fe20c07550860f9d8bf83ae209c94f515f1d30dde80eee19bc10ccb5041409b522c8713a47fc5936b36946d37d9d9d11fd3c31e642d02d4d90cbc49665aa86f03db25b5858c5a2befed8edfa6a340da89b800a3a40f3ecbfd129efb06cee403ec46df6d3c04e720284bd2178dcea52fbbebd1d9d81ddaede61e1ea3a043a78dbea14c01cc3d2f6f27e96efbfb5b076232a704cdc9ff0be4013aedaf6384ae954be6f105696cdddc7ec390dac959d790877cf474e3ee574ee907b0ff62dce094550a283a13ec45588b8b992ab48926b6d9cad3d1ec96972060280de5bbc821acdba3d7677e11b410f5768c3106079e6c0e0188ef1940b365b8d6fa6221665e40a00a898fe6538c2102fb9af48883468c92e7e16ab7b2527bb158077a9547406198231b4284c07e308c0dd783016a006a605985e968a41a4f4855db68559a53fb36c0e9d0de6d9f43be212673d87b9bb57b400d4e20cb8a19de9d4252b7aa6d5a566d52e59c87d681f8adaa961a6fed9a3f541cda3ca7721fd3534ca928ad8f46965273a825c0100b784a87d79b5e301f5e2b122d9ceb3d28d2d0a4b9470e52b6d5f9414d0116093893e30e2a028f0c1ae5f769e592fa92e6d6d03aed87314abcb27460087d0dc6e5e946cf1a9ae63b5f151518f125578a5c5a6537298c93c9a9ac262470d584b2793179d8c1c59938441f7db57ecc1269816ddec8de2f3d252dd0dcd250e4eb24d25821e0ed5b3a33432e5257abb4000d0234e9eb5ebc76833e0d62b9d5bba942395b65800a3f25e71bdb616e9c14264d6b9ddc4924b55fb9182a7eff5d865e1053c497416971147a6de27fd1fc8b94b3644e205f7d96c049fb977757525681c552c9524b72ff5c9f835c397b21767b7972430568fad75b0b4fc6b677b14a024aed4667b08483028e9f2a6960e7d53894f9083483fe3243bd33fa83e0a7b9e7171d0651a05b6c97e8dc7ee6acf55c3fd2064b22ee04f8f692e861c56495ea7a1abb22b8f7c8ac3c50f6a8945e481657fbad03f7fa7f5e4273fa005126d52e54b6a235c961328494060c50b0e3ee7fe168b3a41f294c46742e843b10732eeba9fed8550eb99227f6ddacaac551c64f3c3a0dda192153ba4bce885d569c6b87f968988dde04afd7e32d6d08d144a66c42d9a251595b3bc260c2c2bfa2c8dcadc83732e21a0d5f3c43bbb719a35e18ae49b3c93acf0962cfcf652a786c0fc84007b5c66fe924e800ed4cecd378e20f04a90d76aac0dcd0ba4fbe37a6777bfff1e4bc05701a886a64e7b56ba95cafd0555441933321d0161ee6fdc560043a4f45647c531a2ea86c69ddf92883f7c211633400e5ba58b457f5c9e23f49c1dc397d32b1daa3f5b8f874d690c24c7e9f914d6c99fe1e7f5220663b82f7492c3c7408365363e79bdf95cd9e61c215128eb3c06b7d8972da72b830d75aec05920df4f48919fc96b2493bcb528f147b94f606297e80d5b88ffc40d372b380211acdded406222354a923cc39f59ae3ad7647b1b30245b30dc5079133a18cd9832d422a2b1ecc0b2c3a2b10d50aa4e230752194ff1759a511baf82c8c51718c83fbf442f3d31c1beb1bac54acf312837cc007b3c85d09faa04b47e16e841b4a5f9d4eadb856d258ec3adb1c06a16b8999150380163f5049d1c94f3dca1dffefda98ba363e65b8162a848b413a9954e0354200c5d408d8ca7379ac4f2cb3c990afdb4a18a32896da47f5cba3a4954d4e78b4e342a4f6a4f4d01ce0905370265788b42fe9939859e055df03e522f4dabd60aa0411bcad2f6ba87b8a11e97ad25c4605ba48aad77883eb1325df4019a3c9c2a2875a24d69f652f84c732226e3af0e9e03ae0804439b38ea058988d34696c247f52e426cfb3262b5f18820eadef9b34d44b660679b48b7c6ef78c3549bded8a771bc20b93c2602a55767184f38eeff2b3a41d3efdffaeb3cb4d20236a0e2c51e5c2337f3de0f6351c6f66906b8b7fea093b9fbd20f597d8b4fb2fc48be1241b9433aae081f933a23766ad7cd9642b3c61f1b1585d624263df187b8185d5198338a1587fe23ee2d533e74b10afb3cd5c450a50cd99df38b3a861ad2c79a0ad1981da5ec1a0af41ab14d685f362ccf3b5f4a4e52750fc151f6877557818dbcfa42884753de52b9d0235f512cc20ba3ab1aaf9598628f0498a40e7f3ffe2a3564418171d8cbbbd32dc9f7b2ba92258ed8baedc048cd6a1435ae88d3c18b330876f8971885d1a324832e0c0ced4003bb28860f35b2a8a33aac1faf4e610707004bdc3980bc183f33765ff1738638025b37f986c005b15906922738141c414180a74f8c9dd9bcfc3a83ea01c2092d6fa2f371fb496499151359f58d8a95c3b4f38e621bafea202d3f35cd0562ed1516574416dbe5ec9ac9d256dcd584ba821bba4a06df6e0c8a20283fd6bfba4cd03126915877ba52b9c0e2a0e8188844e2333309d6408c2add7947f840b99c03147c3f03a682f82a5a3f99b7c7630dd275eec6608c974cb1487aacdde5ea6417367f8b6585e5eb2eae5fb56119d772fac2110ff8cc260cd525ef373b3368004b7b97343219e30ca4613860538a8332fb0f660c1a27ee1810b21db81504b78d0bc3f1ab93b9f631510a70a982736c5e3b3aebd9c6c8c72a00849e5dc164c1cde60f2ccc60a681c32d34a07de5a9bde57420759f85606e280d6ea7abfede9a5b3a00f0501eabfe95a11c5735248874899550c431eae8a03eb65fcc77c94b7eae7574bc6841d3197c168568e5052546c8b788f3effeb5d3fb9e28c1cc78ae44eed4f2701be68447b25eeb850b64f4a8c1f0ecb2f644ed7cafad30c8233366df828ffd9931d39c903b5e3a37f6d347f2b6e5c126bef846e131014aed7abc2e313ada69b7a28c80a7add2876ca1e9cf6da27c748817bff09b6dea519c8d089f8d897df6fee6d3497133e673187b71c14e3bc8e58668cd4fbfcf26af555212a1f2e36828dea26b6575418e1f746fae9c790e0e9980ecee1c01490fa3c340cce1c5992146de97f4755e5f8d8f893702cfe400cb1044910de1185a8ee908ce47dc5b77789aaf4d597320b7f67882dd5a86b25ce76d086748b5c383674441db63309461c9980becb7f91e52e659997897789ae0b57c7407457a54d69456b9de44f798cc00b9e42be88476d8acf82f53f3b0c260301572186a7322206f5b2508f665b6b1ef5f8fa5674037e048c3442219c1f1754544f02893ef4b7a5b8c796cc4d8aadfcbfb186ad4d42ccdccca1d435792b2ecbcf62402a86ceeb438f3b0ac77a989ba72ad9a197036aaee26ab333d752127d26bb02907bc14d59b115fba11bb2b5e514f4424890e5048e92966480d1a75aec55857ee3f2e03b2268909cc5255990191458d24e572d4082ff86e59245aa454c05b3256d6641a8234857dc7c46a6ad02f7c634576abf1eebdbbc7495c58cb0f5687dfa7ca75478b316a133097e11114be1fd8199c203fe6148ed7eec44ed08fcf9bb572d1b57e241fd785b75bdd594680efe249d4aec73e820b35d49e8702dc0ded75596a8b57ad834654a32e328e0cfd60206590c36808c33dc7904a906aee4b01b390798e087eed3f153a0e6e976f66e902ad31fbad6c6200c4717f920ba06168bfea1720a8d0caf68d9695f19b8086de2d110a86f01f4d9fbdff14a11f6b79a725a3df07ece5571fefcf67a355a3b7cf05e1fda44c4f34d648558e59aee1441375021dcfef82493317e0053b4baf892f10fa7bbfd6b184aef6aab621c23b7d06cea5e4d50e42f38195fb61c4e72dd1b65a182a1fd54d68a79ef83886b8a5981402cb13c66ac1146c11195bfd4bae777e6581122fea891a50df83df345b2022579fc407b82189f5b85118bba51469b116794d664713deb1ae60bcb92bc2591291337357b6c721cc6b13031b7ae27954a79dc3b2ddac0ea3fbc932fdb5e5eaf36a6988ae4687ec6f087ea2f37b25ccb8e40da04772ad5a6547d98ed286097725e35d0af2ac508300b8b9a2b6762ad7a11b4dead39c96807dc225e18945b4fbb09c51457b7ea8108ea8c5c5f57a57d15bd936cb0b1f3ecc2e1a6412e82895cae9fbbf2e75edf0c7abc050b51a66038dac3f2ce0d7f1fbbd4e13515a3897ed386c7f5312a2e8ae8ae9775ea32160aa7dae2aa0e7151a7ffc689eb5d27182ebb99981e062d53ef5715fc762afb364e509f5dd398bda630f53eb7bb41f34d0ab1107cf6da5b016e11113231d31d87835ed66b07c8537dcc05181641176725ffad4c5e36c50b180c948632e75252724fbf1d675d7aa1e48a484dd94b56f5ce6893900344e6738fa69dd79b72c60130fc9a30acb8405a8ed2d9c7a47f642f1c30af4676e56df55c697cc32eafe346c2ccd8a66072c31b9baead28e358d572ab85337c51775b7762a491ac6d16653141752b15cd101e209e4866c4d55380f566069a3d30f69af59139d2b0c445572817f98fbb3eba8f12a225952c76f32cf47250765f66c2a43007fc2c6b3dcaae64cd318731699905e999307fb2aa776734441cb2424d4ce80ef0100d71c586d1d76c626a3899f63dd06228e2947a71df0086145291d6adf565bcae55887025bba5a8080344018c9e96487c766c009cdd3529ab4b3f33455605b451eb3d3175f733a5a8dcb8a20fc976f87ce32ef0126aeacdfc99406d841ea708809b9f0efae116ca79501b866b561972384842e583b0b956f2fecfaaa908bbeca772254cb5fb1e8052dbc0be1bbbc2669a4497b92a7b7602e85df1b9a7a83e780dbb73ea139a8d20c32a8df62db28952239ed1590036409f902451cc65ab02890d0f674ccf82c8a7b2c2288e0afb122076e0372e6d328f98af7bddf10f69b9d7aa5590b8112e94671fda9814356fedf96ff3f89d9be332c00cfc90f68de0cdc42a396a4ef6c6cee9c1226fd5a9fd99f2dce2ff1806b55450b900f9e48cdd8caf6ea3aea975c37570ceff169494ab6485687336cd85d935148b8ecb4942b6cd11311b1de1eadef33fd1763de931c6b7bdb42875288e9d1f52614274d6a82d2d565f82dfa52b1da1391e9bf723f631b4d7fdcf434a50ee2e218b89cd1250b6678783497a74b8a1384cb5c959c7730c7687f1bf8876642d211e2d9f3a078316d3df0b10877f1b8cedb5c205b54f24499cc8c04b84bf411958f5c4633dc2eca1422fe00b3a541f11774d29d0c10a0cb029e552d4a3d6b0fe9f095709490debf0577bad4a0ed711b3f54c6145ec50c42af56874c338f98d93ca19aa9c2c1f6fbcc2829b0c610f02dd24b7eb22b9a114ae7f063aff1ecddffc3cc583fe635670af8ed3d58da7447f3edd5de0744fb473af8fa2349b2aa1d67a35d5f72e65d948d4b360a1d3b1016bea9676abbcf8544f2c4ffd90f3c585592f130ff213c37ac140b6d7cb25ee0bfa65f971bc99dc7b04789f5648f40d51742b93b58bb07295196bfe633d863f6905f6862624df9b49b0e70ed40dff4a1751fdcae387e4fcaf2d78b0d8633ef0fe7d97c2c9fae64139c0fa1f40c22a1099ea064aea5f1273495ddb522d545f5a7f9057e3d245efe9a92906137a6832e0ce04d8686a3be98b7a12c89cd157881169d1df8ef1e517b754c9be66e1c034f3295287b6edaa530f83f8f2a2f313e8bd5c941ab49d44289259c1e90ef6117c656145436cc4dc3cef1f4c27378c15923bee50a8a3ef87ac8c7e5192d005b40cbc0476fec78cd9be654f1e3d8729f7d5433bc06ae145a09f32ab4926de13549a714ce4aebaa3633cb376450cf07a36fb32cc5c1818d43261f97d686b3383baca4de4b15eb6b282b68e69488127fdf9e79d7314f9ac62b4a24507408df166e67453c5424b1b01a4f018ddf08e084fff1bd134e6453dac69b5ce3e65d53664f0e8577f9b8cfa240c6fbce956fe506ed3a1cf3ba79b3f59864636698b12b35feca799ab5dbe797f6c12f24a5f808da6c3e2a7a96f3d152e3395b0fe7699409e90effe8586f2fdac811f1f4a7bad8d620247b41ea6304d78f36fa233dd95cb634e9897fe75ed1088f071fb7f0b0418fef15bd08472cc8086a5ad46ebdf760c9a50b978fcdcffa20af8c0ba686ea90e7d4fb2e3cdc87c4b38d2b60f297a13960bfd30ded0cf9a848be1dcaea2581bb9692fc5a9741a095695c62cedd824b4132b6945c912c888ed9cd295b87a1cf74f0911620ebd139ebc9726c26b0208d8235c99148973fd4acf93811a7b9ddbf3eea33a9775bfbfd8b1b6ce9d44680a408b9933b4a12a63f9552fb02d209f7f1cacf19adee451d5950ea6cde8dac161e6449952d0f343674b50bb09f8eb5fd57975e0d62c109fa1e3d4ae4ef75cb3316e648b961dfa09973a209d033034de772761b3cd81ee6c1d59cce892d248e0349aee5f8c12e1ae24f12aac8b66a9000f2fb31fb29908384669bf6668ea1b14851e8e8121e219e55ceb36cc70211759a47c47641272234adc5be19722a0258426d59adea242ec36557f69e59bd24a082c1d06b9e4aa9d62eb8437d8b47426708b6711dae59526fec776de32c2a54c3a0f5c4028bda53419bb6c7875495f141a0cfcfcf315dd7685bbeb1b86558c11894f8ff22b31ec5059eede907032c3b5c4b4aa07433dabe45a6e6a7c14f382038964fabab2947680fd427cdd9781b99a890ab2a067bbd8c3a5b09c47816d4c42234289e44e70f044084d03be055d5f002bddc6d05c5539e152dabce5799e67d55d3139be53a77742d05ec4d68a52d16eaab3ad9c529c250179f9078dd9585fbbafee84f9b1f15b5e9939644aa0f2c1d02412b28f9fc75c3465e6cfd92b796b247aa502c55263d98b791272096a62212f8de2e50ae84410f7ba4dca0872a631faa121b437ad1656619276a2e85d553e1627ade77045428c9913500c0d285abff32184a4560326b619a9bb580d73d019811bb01bf690e226a201095d67614603c772b31b7a4cb5f9ab3ef1f713ee4c64b58b9ce58bef6c00bd2ff4735a724cd1661de06e133708e72ffe63c4f04241d16a384d781624085d8949862019a03d4a23b78049cbb1c9ca95e7346d337e53c84e4afb75e67d530a7441531ca73f2fd8ecdc1fcc6a1ae3cae9913b9c73b406e2cfef9dbcc2e2185891b6c9a3f496a77370edb760af27317076e71ef7be4bb233112d86232e5c92f49eb5d48a1f54a9de11a5ad88a365bbd7fbe649bb7e2812d61e65e9099e5b605de312b3431f1c9aa70f96b55498d86a228d15140ab2ab44ff222f3c1003c3bff8048683914f73c3fe3e1557510732ee5ab4ef7d1f62761265c47840032587e5309b7694e2247da4f76335980770191305717e6ceaf48a116b87ee585dea2c8fa22ff0ae6becafb0967cd198939f709a0973a8a42c4c1ee67341f174f238f8dc3fd5e77531f7c2e78e1b69949da0d3d93c6734a60e95530f415420b47d4cd18f304041c24ff3990a75419ddafda12869b364531fe38cda02d5ada186271fa7c6d81557fbb7a167361a7c34ea587f67689955e423974b8640420c7b9057c86b0ff526377366892b97f46663b77a71af5ce70cdbb9929f7cb3a9f9ff6c8de4f89f9d2ad6933f351c9ff8235f9f976d45d2b32e31e789cd61ee0941b34441b734fd6bac762c91d41afb009f00b435c2052f0e913deade323235942250d7d6e0ce9f22c0abbf463aebd146e0798b0555896160b9bdf89e5c86aec475561aa2efb42a0acfbf48756daacc0c0ca9929ffb0072e14496a396b931edd6be1ab918e8e20d331cd3a4b15496ced994d695daf55fbef5e9913f72b5d7dc78a9cb758b2e830a7b4d60921d7fdb66c6c4173c2eca02cb2a6f4238d63e4ffdb000ee7366ed1d2916d358d67a65c9bb68f38e1fa95e188ee6c6891cfbf9f348a042b9bd007c87b4e1e2dc043d4778d063f98cc55c19922595dc5a94b6d4dce3e64f61e99df7d4a9c1285fe860d1bf55a07609bbd698d8b3893e666316e34bff6fd7b11c6289759e6469f7e5ec1064e56ee70923f378e8b56442bb6deadd865e1c2e2533d28254f9cdc465b80a32dc104739dfd97b3cac968b090a673d7e5db1ffacd9832960c5e744836cf107aae73dae6b3abab37b49e6b72fd3ca0b10a299fe3b38c9a663bb087777d837e31a7d201bfc156bc05bc74cc22289e31727670c9351e4d9bb62ea904a6c7e7363f05acf4fae31c2f59441887bf9ba5b86a78146eeb51c65264b49b4fb2b1dae1585fed67a91a97202e77716acbf877512894c3d0d5a687048923a5864de4bcb14cee1715419d7475dd445b42c2698eaa99046ba3484ae0a122da8c275d7aeaa984fef5235742a6f9ac651881e243843753ad48503420c30db7e5fa0d8d13a1e047e29566b94b2198bc9e21ee4489d9f216250a6e1da8760fc5e78eddbabc611e706758ac48fd5afa571ef3bf6a97e085786f6760a36a65dbe73cc49c151ac399c4a0e45d54f4c60e06f337915766ae6be7998f08f61bf7c61f868a5832d4c65ae261ba3390eff7e8bbb82b999b552a67a254001526cc3ec5c8eeafa0d6dd1d02df308bdfd0cdcfa3f44c45b4a08651ccfea9f2f44a5c8d4a2a9ce4c583b322fb921639d539857ac6026ce3af991c", 0x2000, &(0x7f0000005240)={&(0x7f0000002140)={0x50, 0x0, 0xe, {0x7, 0x29, 0x0, 0x4f96568cbe55efdc, 0x6, 0xc, 0x5, 0x2, 0x0, 0x0, 0x80, 0xfaa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r1) 687.820895ms ago: executing program 1 (id=1039): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x11, &(0x7f00000002c0)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0xf4, 0xf0, "c1"}}}}}, 0x0) 662.059897ms ago: executing program 1 (id=1040): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0xd9, @empty, 0xff}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x80, 0x0, 0x0) 618.41013ms ago: executing program 1 (id=1041): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={0x0}, 0x18) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f0000003bf9e1e872936de26ff1d3c90b48dd"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x2, 0x3, 0x102a, 0x4, 0x7, 0x1, 0x4, 0x5, 0x9, 0x6, 0x7, 0x3ff, 0x1, 0x58}) 504.165019ms ago: executing program 6 (id=1042): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x3d, &(0x7f0000000b80)=ANY=[@ANYBLOB="12010000b19a3640d219751284000002030109022b000207000000090400010079319c0009040000000202ff0008"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 436.187635ms ago: executing program 7 (id=1043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x4, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x3, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x1}) 371.34908ms ago: executing program 5 (id=1044): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x18d}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44100}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) 371.09326ms ago: executing program 7 (id=1045): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 356.100521ms ago: executing program 5 (id=1046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)={0x38, r3, 0x1b, 0x0, 0x3, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}}, 0x4) 300.229446ms ago: executing program 5 (id=1047): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r0], 0x0) 263.228819ms ago: executing program 7 (id=1048): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143042, 0x2a0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$uinput_user_dev(r1, &(0x7f00000005c0)={'syz1\x00', {0xfff7, 0xf7, 0x8944, 0xfc2}, 0x3a, [0xfc, 0xa, 0x10, 0x6, 0x1, 0x6e3f, 0x8664, 0x8, 0x5, 0x800, 0x40, 0x1, 0x9b, 0x8, 0x55, 0x6, 0x9, 0xfd, 0x8, 0x400, 0xb61b, 0x7, 0x8, 0x5, 0x3, 0x8000, 0x8, 0x7, 0x80000000, 0x7, 0x6, 0x9, 0x0, 0x5, 0xde, 0xe, 0x4ba, 0xae75, 0xfffffffb, 0x3, 0xfffff800, 0xfffffffa, 0xffff0001, 0x4, 0x40, 0x8000fe, 0xff, 0x6, 0x4, 0x80000000, 0x400, 0x10, 0x8000, 0xa00000, 0x7, 0x0, 0x4, 0x1648, 0x9, 0x1, 0x2, 0xfffffffc, 0x8, 0xf62], [0xc3, 0x9, 0x8a, 0x0, 0x9, 0x80000000, 0x0, 0x6, 0x5, 0x18a3, 0x7, 0x0, 0x8001, 0x81, 0x101, 0xfffffffc, 0x2, 0x3ff, 0x5, 0x1, 0x6, 0x9, 0x4, 0x8, 0x4, 0x1, 0x3fb, 0x8, 0x7, 0x800, 0x2, 0x91, 0x81, 0x7, 0x8, 0x8, 0x7, 0x40800000, 0x400008, 0x80000000, 0x8001, 0x6b, 0x0, 0x8, 0x7, 0x8bd2, 0x2, 0x8, 0xff, 0x0, 0x4, 0x1732, 0x0, 0x75, 0x10, 0x0, 0x1, 0x1ff, 0x3, 0xffffff01, 0x1, 0x2, 0x4, 0x5], [0x1ff, 0x9, 0xffff, 0x80000001, 0x4, 0xf, 0x10001, 0xc9, 0x8, 0x7, 0x0, 0x5, 0xeb, 0x8, 0xd, 0xa, 0x2, 0x8, 0x5, 0x7, 0x49, 0x7fffffff, 0x8, 0x7ff, 0x596, 0x3, 0x4, 0x80000000, 0x5, 0x5, 0xa, 0x3, 0xc, 0x4, 0x8, 0x5025, 0x2, 0x0, 0x8, 0x8, 0x2, 0x5, 0x0, 0x80, 0x0, 0x6, 0x0, 0x1ff, 0x81, 0x2, 0x2, 0x2, 0x7fffffff, 0x1, 0xffff, 0x5, 0x5, 0x3, 0x9, 0x7ff, 0x2, 0x7, 0x5, 0x3fc8], [0x397, 0x7, 0x0, 0x508, 0x19, 0x0, 0x9ee, 0xffff, 0x3, 0x8, 0x5, 0xffff04, 0xfffffff2, 0x3, 0xb, 0x1, 0x5, 0x0, 0x3, 0x28, 0xd, 0x8, 0xfffffffe, 0x5, 0xf, 0xf, 0x3, 0x200, 0xe603, 0x2, 0x9, 0x5, 0x8001, 0x2, 0x40, 0x556, 0x101, 0x1, 0xa, 0x81, 0x104, 0xb5, 0x2, 0xd7c, 0x3, 0x1, 0x1, 0xfe, 0x400, 0x0, 0x1, 0x1, 0x1511, 0x4, 0x2, 0x21, 0xffff0000, 0x6, 0x9, 0x1, 0x3, 0x7, 0x0, 0x9]}, 0x45c) fallocate(r1, 0x0, 0x0, 0x8000c62) lseek(r0, 0x2, 0x4) 168.308036ms ago: executing program 7 (id=1049): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="5d8095", 0x3}], 0x1}}], 0x1, 0xc8000) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0, 0x45}, {&(0x7f0000000540)=""/216, 0xd8}], 0x2}, 0x8f}], 0x1, 0x40000020, 0x0) 0s ago: executing program 7 (id=1050): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)="c00f4113fd8be3b9022840335bae927ac0110f59720f4e1a1c0be9dfbeccdeecb8f0c07c96d77c76a0e66adaf304c7b52e9a396d7a1692af921269f2ef4cefe7455f9eb443aab0cf63761ab4fe7d7b91770a780eb8e7aaa0fd02f83ddbc38f6eac65b5ca0df74a5d44fa2cf6a10bd4f9e965ad4339fe7b4741c5eaf09179a36a834c91102f00cdfd64339cf24461dac95c5b6764f76ca42e737857e195eb33be4fab008c60f94084a2021dd24eba7a3d5e44e85a44ec1654655a3ee7f5febcb2bb6aad1082d333272c60ddcdddc0bf1c21452bda4bc40c62aef0b529023ff81628335ec79f94e7c0b5f7a59edb4bc89eeafeda419c8ed71e6f3fcac78a458739d7f8fec88c646f8e39007bcecdb15758aeee38145659f813e591d97c15a14c2dbdc1e1069819981403022db45c31bd79846e70616189dda99002982407e60b392197a1b39b89786965c3565beab541a53d1acb3595c0a795d821456c762934dbf5a348ad10f5c1e251fdcc931c407587c44fd7afb0e32c3af46c59147b32179a024defd39a0723e383acf932063c1a8282f3394536398baffa314cc12bfa91b5903dcc2754a6c56e8969c1af9ea4e4cefde8e13bf21dc5377309d39c887fd1aab8f0298d12203f773b2bfd1cb4b60c0e29d395ac5d597bc63cafb00a04752631d32cb1de2535d4c4431336a8d8b3ed33faa54d2e775336cf5dc62e3ad417e1df2911fe047c54aa3ce33cacdcc2779438bd5a68b06d82dfaddc582a11e9f1d8a26a3b4bfeef760f44efb015fc905b99632ebdc817b8b8b86cca9bdd00af0915f3e26fb1faf6ec708f1b549ebcff8ce46202796ff01e38f74a89e8c8ae22748a02b47e2ec9c1797aaabe1855a11b08a3f5ec05fcbbbd5e0fdded3bdc8a60fb2d2e7784cb6d862d59cd215f464c1942e745353bba69ea2db7b5f6ec9ee87ff5235fe121a87defe709ef2515e54b3ea78b08bf084b840fff47c37082a79d722e139034b3b3ef333c7a09329f0075a85d78ba106533638b8e67803c251b8f955721905bbae4c5ac2a56e0f9d9a1f56cde3e838d3a90a84bca64483c9af5cc940c713ddffb32ad28b7d7d8d27a997df54e543f24126c42f093a90f972124a2da7e2a4fa36b6aeb83a1aa0b0dba2508d2a90df9e8961597c2fbd8bd34a4d9183c8972c2978c8468aba0786d646f39b84c77a7fff2bdb14d89ce0bdfcee61c290186c5bc5a0042fc558dc6304b04b7955f79cc39f1ed938422b98c603c98946b42673561b6ce0b95d4567313df1bef39bc1d75b19ce8e62df663d6ead0b9834e32257b09ddd7ee56f363961c794c48889ec19b617aad563d3e977de1116b825b74728281ab08b65b79d0e199c03c16c4dee7b5d8df0b6363d360776f768bb47ba7bff77a07ff39ce6aaf71ea2c355822ccb0daa48394ff1aff38da5111469acdeffd93cfc05962e54f1138edb2fe49937178da6f25c13724cbedef4be2a61722fcc6f80d304d9f7e632f0ae43b943dd859e78c53223817c744ff67e7bbbec5297df9dae12599753acc97bf1cd16b4db1cb2abd6d67e4bbfcbbe16fd53493aa0dd02d57d111f0c12ea2330bee1c7bc2dea095bf8316c3b1b07e343ba3887516a087371b37753ceb82fb31fe7b10519524c6dccb641e7ee5c34d8cc33eaebc1b9f43d11157214de2dd1a66f2f23e6e7583db17877d834cc70c8eeaad1f0442fa6afd29c350df", 0x4c1}], 0x1}}], 0x1, 0x4000000) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) kernel console output (not intermixed with test programs): :sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 222.514044][ T28] audit: type=1400 audit(1755575816.755:818): avc: denied { bind } for pid=1892 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 222.535772][ T28] audit: type=1400 audit(1755575816.765:819): avc: denied { connect } for pid=1892 comm="syz.1.300" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 222.583808][ T28] audit: type=1400 audit(1755575816.765:820): avc: denied { setopt } for pid=1892 comm="syz.1.300" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 222.665682][ T28] audit: type=1400 audit(1755575816.765:821): avc: denied { write } for pid=1892 comm="syz.1.300" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 223.013018][ T1921] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 223.030898][ T1921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.305'. [ 223.050870][ T28] audit: type=1400 audit(1755575817.495:822): avc: denied { write } for pid=1910 comm="syz.4.303" path="socket:[20483]" dev="sockfs" ino=20483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 223.125203][ T28] audit: type=1400 audit(1755575817.505:823): avc: denied { read } for pid=1910 comm="syz.4.303" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 223.198909][ T1917] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.473634][ T1917] device veth0_vlan left promiscuous mode [ 223.490394][ T1917] device veth0_vlan entered promiscuous mode [ 224.895297][ T1922] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.902899][ T1922] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.938702][ T1922] device vlan2 left promiscuous mode [ 224.944560][ T1922] device syz_tun left promiscuous mode [ 224.963861][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.972187][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.990344][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.003536][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.011405][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.199453][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.278725][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.354024][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.361340][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.397275][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.406039][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 225.414929][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.423229][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 225.431957][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.440586][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.449612][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.458735][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.468004][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.476659][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.485043][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.494244][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.502772][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.511708][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.520235][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.528691][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.537718][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.546658][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.555555][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.565050][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.574324][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.582648][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.583422][ T1944] loop5: detected capacity change from 0 to 128 [ 225.591166][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.642753][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 225.650948][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 225.658907][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.719823][ T1947] tipc: Failed to remove unknown binding: 66,1,1/0:2308394097/2308394099 [ 225.765937][ T1947] tipc: Failed to remove unknown binding: 66,1,1/0:2308394097/2308394099 [ 226.615376][ T1958] loop1: detected capacity change from 0 to 1024 [ 226.630349][ T1958] EXT4-fs: Ignoring removed orlov option [ 226.662166][ T1958] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 228.700523][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 228.972091][ T28] audit: type=1400 audit(1755575823.141:837): avc: denied { mount } for pid=1965 comm="syz.4.315" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 229.059261][ T28] audit: type=1400 audit(1755575824.211:838): avc: denied { ioctl } for pid=1959 comm="syz.5.313" path="socket:[21631]" dev="sockfs" ino=21631 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 229.104873][ T1981] overlayfs: missing 'lowerdir' [ 229.143531][ T28] audit: type=1400 audit(1755575824.291:839): avc: denied { bpf } for pid=1959 comm="syz.5.313" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 229.149732][ T1982] loop5: detected capacity change from 0 to 256 [ 229.172131][ T28] audit: type=1400 audit(1755575824.291:840): avc: denied { prog_load } for pid=1959 comm="syz.5.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 229.195077][ T1982] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.251405][ T28] audit: type=1400 audit(1755575824.321:841): avc: denied { perfmon } for pid=1959 comm="syz.5.313" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 229.842828][ T429] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 229.852766][ T28] audit: type=1400 audit(1755575824.321:842): avc: denied { prog_run } for pid=1959 comm="syz.5.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 229.873177][ T429] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 229.880042][ T28] audit: type=1400 audit(1755575824.381:843): avc: denied { bpf } for pid=1960 comm="syz.0.314" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 229.938228][ T28] audit: type=1400 audit(1755575824.381:844): avc: denied { prog_load } for pid=1960 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 229.993341][ T28] audit: type=1400 audit(1755575824.381:845): avc: denied { perfmon } for pid=1960 comm="syz.0.314" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 230.017072][ T28] audit: type=1400 audit(1755575824.381:846): avc: denied { prog_run } for pid=1960 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 230.392856][ T1994] xt_socket: unknown flags 0x8 [ 230.687114][ T1997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.323'. [ 230.845334][ T1989] fido_id[1989]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 235.265694][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 235.265710][ T28] audit: type=1400 audit(1755575830.941:895): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 235.295821][ T286] EXT4-fs (loop1): unmounting filesystem. [ 235.426117][ T28] audit: type=1326 audit(1755575831.101:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cd8ebe9 code=0x7ffc0000 [ 235.471274][ T28] audit: type=1326 audit(1755575831.121:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff94cd8ebe9 code=0x7ffc0000 [ 236.351135][ T2021] loop2: detected capacity change from 0 to 16 [ 236.540145][ T2021] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 122700) [ 236.873764][ T28] audit: type=1326 audit(1755575831.121:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cd8ebe9 code=0x7ffc0000 [ 236.949419][ T2026] netlink: 'syz.5.329': attribute type 3 has an invalid length. [ 236.981511][ T28] audit: type=1326 audit(1755575831.121:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff94cd8ebe9 code=0x7ffc0000 [ 237.006700][ T28] audit: type=1326 audit(1755575831.121:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cd8ebe9 code=0x7ffc0000 [ 237.073215][ T28] audit: type=1326 audit(1755575831.121:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff94cd8ebe9 code=0x7ffc0000 [ 237.401155][ T28] audit: type=1326 audit(1755575831.121:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cd8ebe9 code=0x7ffc0000 [ 237.401756][ T2030] sch_tbf: burst 4393 is lower than device lo mtu (65550) ! [ 237.425966][ T28] audit: type=1326 audit(1755575831.121:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94cd8ebe9 code=0x7ffc0000 [ 237.461998][ T28] audit: type=1326 audit(1755575831.121:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2010 comm="syz.4.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff94cd8ebe9 code=0x7ffc0000 [ 240.124767][ T2064] loop1: detected capacity change from 0 to 512 [ 242.048320][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 242.048400][ T28] audit: type=1400 audit(1755575836.051:943): avc: denied { read } for pid=2061 comm="syz.4.336" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 242.880853][ T2064] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 243.449343][ T28] audit: type=1400 audit(1755575836.051:944): avc: denied { open } for pid=2061 comm="syz.4.336" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 243.475359][ T28] audit: type=1400 audit(1755575836.631:945): avc: denied { ioctl } for pid=2061 comm="syz.4.336" path="socket:[20817]" dev="sockfs" ino=20817 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 243.509119][ T28] audit: type=1400 audit(1755575836.661:946): avc: denied { unlink } for pid=2061 comm="syz.4.336" name="#2c" dev="tmpfs" ino=423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 243.539750][ T28] audit: type=1400 audit(1755575836.671:947): avc: denied { mount } for pid=2061 comm="syz.4.336" name="/" dev="overlay" ino=416 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 243.563064][ T28] audit: type=1400 audit(1755575838.791:948): avc: denied { create } for pid=2060 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.584603][ T28] audit: type=1400 audit(1755575838.841:949): avc: denied { listen } for pid=2060 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.605603][ T28] audit: type=1400 audit(1755575838.851:950): avc: denied { accept } for pid=2060 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.627375][ T28] audit: type=1400 audit(1755575838.911:951): avc: denied { nlmsg_write } for pid=2060 comm="syz.0.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 243.640419][ T2076] loop4: detected capacity change from 0 to 128 [ 243.668586][ T2076] EXT4-fs (loop4): Test dummy encryption mode enabled [ 243.820540][ T28] audit: type=1400 audit(1755575839.421:952): avc: denied { setopt } for pid=2072 comm="syz.1.338" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 246.553054][ T2076] EXT4-fs: error -4 creating inode table initialization thread [ 246.877515][ T2076] EXT4-fs (loop4): mount failed [ 249.233769][ T28] audit: type=1400 audit(1755575844.881:953): avc: denied { ioctl } for pid=2098 comm="syz.4.344" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20937 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 249.261286][ T2111] loop5: detected capacity change from 0 to 16 [ 249.268256][ T2112] loop1: detected capacity change from 0 to 128 [ 249.270980][ T2111] erofs: (device loop5): mounted with root inode @ nid 36. [ 249.282698][ T28] audit: type=1400 audit(1755575844.931:954): avc: denied { read } for pid=2106 comm="syz.1.355" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 249.398882][ T2115] loop2: detected capacity change from 0 to 128 [ 249.411713][ T2112] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 249.732210][ T2115] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 249.742685][ T2115] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.603179][ T2112] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 250.709303][ T28] audit: type=1400 audit(1755575844.931:955): avc: denied { open } for pid=2106 comm="syz.1.355" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 250.753880][ T284] EXT4-fs (loop2): unmounting filesystem. [ 250.812366][ T28] audit: type=1400 audit(1755575844.991:956): avc: denied { read } for pid=2110 comm="syz.5.346" name="file1" dev="loop5" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 250.843976][ T28] audit: type=1400 audit(1755575844.991:957): avc: denied { open } for pid=2110 comm="syz.5.346" path="/53/file3/file1" dev="loop5" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 251.463123][ T28] audit: type=1400 audit(1755575845.541:958): avc: denied { write } for pid=2105 comm="syz.2.345" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.493778][ T28] audit: type=1400 audit(1755575845.541:959): avc: denied { add_name } for pid=2105 comm="syz.2.345" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.616898][ T8] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 252.195647][ T28] audit: type=1400 audit(1755575845.541:960): avc: denied { create } for pid=2105 comm="syz.2.345" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 252.230978][ T28] audit: type=1400 audit(1755575845.541:961): avc: denied { read append open } for pid=2105 comm="syz.2.345" path="/67/file1/cpuacct.usage_sys" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 252.337065][ T28] audit: type=1400 audit(1755575845.561:962): avc: denied { lock } for pid=2105 comm="syz.2.345" path="/67/file1/cpuacct.usage_sys" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 255.264119][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 255.264188][ T28] audit: type=1400 audit(1755575850.741:969): avc: denied { mount } for pid=2166 comm="syz.5.357" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 255.532910][ T2178] netem: incorrect ge model size [ 255.563268][ T2178] netem: change failed [ 255.590052][ T28] audit: type=1400 audit(1755575851.261:970): avc: denied { bind } for pid=2180 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 255.706567][ T2192] loop2: detected capacity change from 0 to 512 [ 255.714856][ T2192] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 256.113313][ T2193] device bridge_slave_1 left promiscuous mode [ 256.121155][ T2193] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.153815][ T2193] device bridge_slave_0 left promiscuous mode [ 256.161948][ T2193] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.057550][ T2194] random: crng reseeded on system resumption [ 261.757595][ T28] audit: type=1400 audit(1755575851.281:971): avc: denied { connect } for pid=2180 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 261.797339][ T28] audit: type=1400 audit(1755575851.281:972): avc: denied { listen } for pid=2180 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 261.833126][ T28] audit: type=1400 audit(1755575851.471:973): avc: denied { mount } for pid=2179 comm="syz.4.361" name="/" dev="configfs" ino=14156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 261.863381][ T28] audit: type=1400 audit(1755575851.691:974): avc: denied { search } for pid=2179 comm="syz.4.361" name="/" dev="configfs" ino=14156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 263.020252][ T2224] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 263.222164][ T28] audit: type=1400 audit(1755575851.701:975): avc: denied { setattr } for pid=2179 comm="syz.4.361" name="/" dev="configfs" ino=14156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 263.258826][ T28] audit: type=1400 audit(1755575855.731:976): avc: denied { read } for pid=2182 comm="syz.2.362" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 263.329121][ T28] audit: type=1400 audit(1755575855.731:977): avc: denied { open } for pid=2182 comm="syz.2.362" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 263.423805][ T334] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 263.424761][ T28] audit: type=1400 audit(1755575855.731:978): avc: denied { read write } for pid=2182 comm="syz.2.362" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 263.545625][ T2231] loop2: detected capacity change from 0 to 256 [ 263.555842][ T2231] exfat: Unknown parameter '«' [ 263.723868][ T334] usb 6-1: Using ep0 maxpacket: 16 [ 263.829655][ T334] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 263.886651][ T2231] device wireguard0 entered promiscuous mode [ 264.052392][ T334] usb 6-1: config 0 has no interface number 0 [ 264.621459][ T28] audit: type=1400 audit(1755575855.731:979): avc: denied { ioctl open } for pid=2182 comm="syz.2.362" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 264.657258][ T2234] loop4: detected capacity change from 0 to 512 [ 264.674879][ T334] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 264.686294][ T334] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 264.700612][ T334] usb 6-1: config 0 interface 255 has no altsetting 0 [ 264.746580][ T28] audit: type=1400 audit(1755575855.771:980): avc: denied { ioctl } for pid=2182 comm="syz.2.362" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 264.776089][ T334] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 264.785047][ T334] usb 6-1: config 0 has no interface number 0 [ 264.791533][ T334] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 264.803574][ T334] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 264.816681][ T2234] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 264.818342][ T334] usb 6-1: config 0 interface 255 has no altsetting 0 [ 264.833283][ T2234] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 264.841895][ T2234] System zones: 1-12 [ 264.853512][ T334] usb 6-1: unable to read config index 2 descriptor/all [ 264.863985][ T334] usb 6-1: can't read configurations, error -71 [ 264.873537][ T2241] loop5: detected capacity change from 0 to 16 [ 264.874382][ T2234] EXT4-fs (loop4): Can't support bigalloc feature without extents feature [ 264.874382][ T2234] [ 264.891512][ T2241] erofs: (device loop5): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 264.928486][ T2241] erofs: (device loop5): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 264.969070][ T2234] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 264.978551][ T2241] erofs: (device loop5): mounted with root inode @ nid 36. [ 265.023470][ T2234] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 265.076056][ T2249] loop5: detected capacity change from 0 to 256 [ 265.092692][ T2249] exfat: Deprecated parameter 'namecase' [ 265.101577][ T285] EXT4-fs (loop4): unmounting filesystem. [ 265.114286][ T2249] exFAT-fs (loop5): invalid fs_name [ 265.150861][ T2249] exFAT-fs (loop5): failed to read boot sector [ 265.160007][ T2249] exFAT-fs (loop5): failed to recognize exfat type [ 266.602336][ T2253] loop4: detected capacity change from 0 to 40427 [ 266.610046][ T2253] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 266.640435][ T2253] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 266.796150][ T2268] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 266.974607][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 267.004301][ T2253] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(1) root(3) [ 267.012350][ T28] audit: type=1326 audit(1755575862.461:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2265 comm="syz.5.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4bb8ebe9 code=0x7ffc0000 [ 267.112467][ T2253] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 267.146891][ T28] audit: type=1326 audit(1755575862.461:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2265 comm="syz.5.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4bb8ebe9 code=0x7ffc0000 [ 267.179783][ T28] audit: type=1326 audit(1755575862.461:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2265 comm="syz.5.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8d4bb8ebe9 code=0x7ffc0000 [ 267.200727][ T2271] tipc: Failed to remove unknown binding: 66,1,1/0:3928527974/3928527976 [ 267.210347][ T28] audit: type=1326 audit(1755575862.461:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2265 comm="syz.5.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4bb8ebe9 code=0x7ffc0000 [ 267.255499][ T2271] tipc: Failed to remove unknown binding: 66,1,1/0:3928527974/3928527976 [ 267.269487][ T2278] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 267.331535][ T28] audit: type=1326 audit(1755575862.461:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2265 comm="syz.5.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4bb8ebe9 code=0x7ffc0000 [ 267.359185][ T2285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 267.376315][ T2286] loop2: detected capacity change from 0 to 256 [ 267.388609][ T28] audit: type=1326 audit(1755575862.471:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2265 comm="syz.5.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f8d4bb8ebe9 code=0x7ffc0000 [ 267.400757][ T2285] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 267.415820][ T28] audit: type=1400 audit(1755575862.491:1022): avc: denied { relabelto } for pid=2265 comm="syz.5.388" name="63" dev="tmpfs" ino=382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 267.474719][ T2286] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 267.476842][ T2285] audit: backlog limit exceeded [ 267.945309][ T2300] loop4: detected capacity change from 0 to 512 [ 267.975819][ T2300] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 268.598172][ T2300] EXT4-fs (loop4): orphan cleanup on readonly fs [ 268.606652][ T2300] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.399: Failed to acquire dquot type 1 [ 268.621081][ T2300] EXT4-fs (loop4): 1 truncate cleaned up [ 268.627522][ T2300] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 268.965794][ T2311] loop5: detected capacity change from 0 to 256 [ 269.013291][ T2311] exfat: Deprecated parameter 'namecase' [ 269.049711][ T2311] exfat: Deprecated parameter 'utf8' [ 269.090965][ T2311] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 269.157002][ T2311] overlayfs: filesystem on './file0' not supported [ 269.262423][ T285] EXT4-fs (loop4): unmounting filesystem. [ 269.292201][ T2324] netlink: 12 bytes leftover after parsing attributes in process `syz.5.413'. [ 269.301376][ T2324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.413'. [ 269.311844][ T2324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.413'. [ 269.337867][ T2329] tipc: Failed to remove unknown binding: 66,1,1/2886997007:444599628/444599630 [ 269.344791][ T2327] netlink: 176 bytes leftover after parsing attributes in process `syz.0.415'. [ 269.349577][ T2329] tipc: Failed to remove unknown binding: 66,1,1/2886997007:444599628/444599630 [ 269.503946][ T2336] netlink: 60 bytes leftover after parsing attributes in process `syz.4.418'. [ 269.647922][ T2337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.417'. [ 269.814920][ T2337] netlink: 20 bytes leftover after parsing attributes in process `syz.0.417'. [ 270.268618][ T2323] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.296260][ T2323] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.319024][ T2323] device bridge_slave_0 entered promiscuous mode [ 270.331286][ T2323] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.338702][ T2323] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.346764][ T2323] device bridge_slave_1 entered promiscuous mode [ 270.429349][ T2323] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.436668][ T2323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.444455][ T2323] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.451699][ T2323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.483405][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.492541][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.503641][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.898797][ T2373] loop5: detected capacity change from 0 to 256 [ 270.905975][ T2373] exfat: Unknown parameter '«' [ 272.616688][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 273.474021][ T2372] loop4: detected capacity change from 0 to 512 [ 273.481763][ T28] audit: type=1400 audit(1755575868.191:1118): avc: denied { setopt } for pid=2366 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 273.537998][ T2372] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.342500][ T2372] EXT4-fs (loop4): orphan cleanup on readonly fs [ 274.351417][ T2372] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 274.361190][ T2372] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 274.371290][ T2372] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.421: Failed to acquire dquot type 1 [ 274.386413][ T2372] EXT4-fs (loop4): 1 truncate cleaned up [ 274.393055][ T2372] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 274.599679][ T28] audit: type=1400 audit(1755575868.191:1119): avc: denied { write } for pid=2366 comm="syz.1.428" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 274.674869][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.683547][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.690685][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.698304][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.712253][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.719363][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.016971][ T285] EXT4-fs (loop4): unmounting filesystem. [ 275.307503][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.350853][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.385575][ T28] audit: type=1400 audit(1755575871.061:1120): avc: denied { write } for pid=2393 comm="syz.0.435" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 275.446931][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.458271][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.576645][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.586077][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.599320][ T2323] device veth0_vlan entered promiscuous mode [ 275.606486][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.615108][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.631124][ T2323] device veth1_macvtap entered promiscuous mode [ 275.638790][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.647277][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.655953][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.665328][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.674820][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 275.690344][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.699294][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.708319][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.717629][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.785328][ T28] audit: type=1400 audit(1755575871.461:1121): avc: denied { ioctl } for pid=2393 comm="syz.0.435" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 275.794279][ T2396] loop4: detected capacity change from 0 to 16 [ 275.852783][ T2396] erofs: (device loop4): mounted with root inode @ nid 36. [ 275.896423][ T2396] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 275.949000][ T2404] tipc: Failed to remove unknown binding: 66,1,1/0:3632970933/3632970935 [ 275.957875][ T28] audit: type=1400 audit(1755575871.461:1122): avc: denied { mounton } for pid=2323 comm="syz-executor" path="/root/syzkaller.WHOgcK/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 275.957929][ T28] audit: type=1400 audit(1755575871.461:1123): avc: denied { mount } for pid=2323 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 275.957957][ T28] audit: type=1400 audit(1755575871.461:1124): avc: denied { mounton } for pid=2323 comm="syz-executor" path="/root/syzkaller.WHOgcK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 275.987224][ T2396] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=46 [ 276.016974][ T28] audit: type=1400 audit(1755575871.461:1125): avc: denied { mounton } for pid=2323 comm="syz-executor" path="/root/syzkaller.WHOgcK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=21368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 276.080543][ T2404] tipc: Failed to remove unknown binding: 66,1,1/0:3632970933/3632970935 [ 276.108780][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 276.119406][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 276.876742][ T2419] loop5: detected capacity change from 0 to 512 [ 277.146246][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 277.228953][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 277.302765][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 277.381220][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 277.457287][ T2419] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.531678][ T2419] EXT4-fs (loop5): orphan cleanup on readonly fs [ 277.540745][ T2419] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.440: Failed to acquire dquot type 1 [ 277.555941][ T2419] EXT4-fs (loop5): 1 truncate cleaned up [ 277.562871][ T2419] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 277.646726][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 277.674656][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 277.674680][ T28] audit: type=1400 audit(1755575873.351:1131): avc: denied { bind } for pid=2427 comm="syz.0.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.787026][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 277.848826][ T28] audit: type=1400 audit(1755575873.481:1132): avc: denied { create } for pid=2429 comm="syz.0.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 277.880478][ T2435] netlink: 'syz.6.451': attribute type 1 has an invalid length. [ 277.888432][ T28] audit: type=1400 audit(1755575873.481:1133): avc: denied { write } for pid=2429 comm="syz.0.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 277.909628][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 278.086417][ T527] EXT4-fs (loop5): unmounting filesystem. [ 278.131859][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 278.347059][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 278.355960][ T28] audit: type=1400 audit(1755575874.011:1135): avc: denied { sqpoll } for pid=2430 comm="syz.1.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 278.628114][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 278.774085][ T28] audit: type=1400 audit(1755575874.011:1134): avc: denied { setopt } for pid=2442 comm="syz.5.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.775339][ T2451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.455'. [ 278.834693][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 278.843514][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 278.875570][ T2447] loop6: detected capacity change from 0 to 8192 [ 279.000979][ T2447] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 279.025271][ T28] audit: type=1400 audit(1755575874.701:1136): avc: denied { mount } for pid=2446 comm="syz.6.454" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 279.040574][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 280.736964][ T2457] loop5: detected capacity change from 0 to 16 [ 281.790811][ T2457] erofs: (device loop5): mounted with root inode @ nid 36. [ 281.961592][ T28] audit: type=1400 audit(1755575876.271:1137): avc: denied { listen } for pid=2452 comm="syz.5.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 281.982550][ T28] audit: type=1400 audit(1755575876.281:1138): avc: denied { accept } for pid=2452 comm="syz.5.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 282.011515][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 282.043982][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 282.060161][ T28] audit: type=1400 audit(1755575876.371:1139): avc: denied { nlmsg_write } for pid=2452 comm="syz.5.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 282.081749][ T28] audit: type=1400 audit(1755575877.701:1140): avc: denied { unmount } for pid=2323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 282.110221][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 282.131150][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 282.151088][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 282.159918][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 282.171139][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 282.183255][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 282.191718][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 282.204215][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 282.228422][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 283.237623][ T2472] device veth3 entered promiscuous mode [ 283.885452][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 283.898109][ T2484] netlink: 16 bytes leftover after parsing attributes in process `syz.6.464'. [ 283.928224][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 283.993980][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.061903][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.089990][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.098636][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.106972][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.116121][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.124598][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.133067][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.141504][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.149793][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.158409][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.166661][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.175037][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.183729][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.192574][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.201558][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.210179][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.218678][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.227110][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.312249][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.339169][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.350476][ T2509] netlink: 16 bytes leftover after parsing attributes in process `syz.6.475'. [ 284.361675][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.457011][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.466757][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.476335][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.486619][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.510554][ T2512] loop5: detected capacity change from 0 to 512 [ 284.518429][ T2512] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 284.529858][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.553183][ T2512] EXT4-fs (loop5): orphan cleanup on readonly fs [ 284.570220][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.570914][ T2512] __quota_error: 3 callbacks suppressed [ 284.570931][ T2512] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 284.595527][ T2512] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 284.605276][ T2512] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.472: Failed to acquire dquot type 1 [ 284.618131][ T2512] EXT4-fs (loop5): 1 truncate cleaned up [ 284.625064][ T2512] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 284.642831][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.649953][ T2518] loop6: detected capacity change from 0 to 256 [ 284.659599][ T2518] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 284.674651][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.692930][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.704323][ T2518] FAT-fs (loop6): Directory bread(block 64) failed [ 284.707895][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.720529][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.720822][ T2518] FAT-fs (loop6): Directory bread(block 65) failed [ 284.758159][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.760478][ T2518] FAT-fs (loop6): Directory bread(block 66) failed [ 284.795058][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.799502][ T2518] FAT-fs (loop6): Directory bread(block 67) failed [ 284.816764][ T2518] FAT-fs (loop6): Directory bread(block 68) failed [ 284.817870][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.832571][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.842419][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.851066][ T2518] FAT-fs (loop6): Directory bread(block 69) failed [ 284.851438][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.868015][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.869398][ T2518] FAT-fs (loop6): Directory bread(block 70) failed [ 284.883538][ T2518] FAT-fs (loop6): Directory bread(block 71) failed [ 284.890608][ T2518] FAT-fs (loop6): Directory bread(block 72) failed [ 284.890916][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 284.897587][ T2518] FAT-fs (loop6): Directory bread(block 73) failed [ 285.106140][ T28] audit: type=1400 audit(1755575880.781:1144): avc: denied { write } for pid=2522 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 285.145476][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 285.232665][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 285.252384][ T28] audit: type=1400 audit(1755575880.861:1145): avc: denied { connect } for pid=2528 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 285.320715][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 285.333465][ T2544] loop6: detected capacity change from 0 to 256 [ 285.372031][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 285.407125][ T2544] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 285.433751][ T28] audit: type=1400 audit(1755575880.921:1146): avc: denied { read append } for pid=2534 comm="syz.1.486" name="ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 285.467423][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 285.593899][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 285.630131][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 285.638714][ T28] audit: type=1400 audit(1755575880.921:1147): avc: denied { open } for pid=2534 comm="syz.1.486" path="/dev/ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 285.647945][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 285.665148][ T28] audit: type=1400 audit(1755575880.921:1148): avc: denied { ioctl } for pid=2534 comm="syz.1.486" path="/dev/ppp" dev="devtmpfs" ino=157 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 285.673137][ T2560] incfs: Options parsing error. -22 [ 285.698285][ T28] audit: type=1400 audit(1755575881.181:1149): avc: denied { create } for pid=2541 comm="syz.6.489" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 286.752915][ T527] EXT4-fs (loop5): unmounting filesystem. [ 286.773131][ T28] audit: type=1400 audit(1755575881.181:1150): avc: denied { write open } for pid=2541 comm="syz.6.489" path="/14/file1/bus" dev="loop6" ino=1048659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 286.779720][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 286.816613][ T2560] incfs: mount failed -22 [ 286.886339][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 286.899051][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 286.909720][ T28] audit: type=1400 audit(1755575881.341:1151): avc: denied { mounton } for pid=2558 comm="syz.0.497" path="/110/file0" dev="tmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 286.934836][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 286.943779][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 286.952194][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 286.976923][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 286.994974][ T2579] binder: 2577:2579 ioctl c00c620f 0 returned -14 [ 287.001771][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 287.012041][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 287.045554][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 287.097752][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 287.305001][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 287.374944][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.192463][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.342714][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.493994][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.546282][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.581395][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.603946][ T2613] loop5: detected capacity change from 0 to 256 [ 288.614390][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.656201][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.667624][ T2613] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 288.694178][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.760719][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.770061][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.778863][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.788121][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.796945][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.805327][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.814419][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.822940][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.831670][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.940623][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.971990][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 288.986467][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 290.641977][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 290.663959][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 290.664002][ T28] audit: type=1400 audit(1755575886.311:1161): avc: denied { setopt } for pid=2624 comm="syz.1.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 290.709021][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 290.740770][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 290.775851][ T28] audit: type=1400 audit(1755575886.401:1162): avc: denied { create } for pid=2636 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.814059][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 290.844686][ T28] audit: type=1400 audit(1755575886.401:1163): avc: denied { setopt } for pid=2636 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.865673][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 290.874712][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 290.884295][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 290.932567][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 290.941606][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 290.950200][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 290.964283][ T2654] binder: 2653:2654 ioctl 40046205 0 returned -22 [ 290.987717][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 290.999114][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 291.009029][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 291.021446][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 291.108863][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 291.119225][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 291.129313][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 291.139509][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 291.150279][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 291.218052][ T285] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36 [ 291.294859][ T28] audit: type=1400 audit(1755575886.951:1164): avc: denied { map } for pid=2662 comm="syz.5.539" path="socket:[23987]" dev="sockfs" ino=23987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 291.309130][ T2668] 9p: Unknown Cache mode readahead [ 291.318509][ T28] audit: type=1400 audit(1755575886.951:1165): avc: denied { read accept } for pid=2662 comm="syz.5.539" path="socket:[23987]" dev="sockfs" ino=23987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 291.393384][ T2677] loop5: detected capacity change from 0 to 512 [ 291.422693][ T2677] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 291.443112][ T28] audit: type=1400 audit(1755575887.111:1166): avc: denied { write } for pid=2675 comm="syz.5.545" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 291.584337][ T28] audit: type=1400 audit(1755575887.261:1167): avc: denied { write } for pid=2686 comm="syz.0.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 291.851863][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 292.020641][ T2697] usb usb8: usbfs: process 2697 (syz.0.549) did not claim interface 0 before use [ 292.054474][ T2702] tipc: Can't bind to reserved service type 0 [ 292.091044][ T2682] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.101868][ T2682] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.109934][ T2682] device bridge_slave_0 entered promiscuous mode [ 292.121902][ T2682] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.129901][ T2682] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.139800][ T2682] device bridge_slave_1 entered promiscuous mode [ 293.027283][ T24] usb 6-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 293.037627][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.055310][ T24] ums-cypress 6-1:1.0: USB Mass Storage device detected [ 294.318249][ T28] audit: type=1400 audit(1755575889.031:1168): avc: denied { setopt } for pid=2732 comm="syz.1.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 294.344747][ T859] usb 6-1: USB disconnect, device number 7 [ 294.361962][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.371684][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.381194][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.389956][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.399505][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.408226][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.416892][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.424343][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.432387][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.441342][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.451093][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.453791][ T221] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 294.458852][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.477197][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.616544][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 294.626376][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.638433][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.645194][ T221] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.647464][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.657823][ T221] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.667018][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.683091][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.685128][ T221] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.693133][ T2682] device veth0_vlan entered promiscuous mode [ 294.700892][ T221] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.715089][ T221] usb 7-1: Product: syz [ 294.715549][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.719743][ T221] usb 7-1: Manufacturer: syz [ 294.730884][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.733655][ T221] usb 7-1: SerialNumber: syz [ 294.747946][ T2682] device veth1_macvtap entered promiscuous mode [ 294.759876][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 294.767856][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 294.777285][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.788704][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 294.797483][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 294.865945][ T2782] No source specified [ 294.885794][ T2786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.581'. [ 295.009905][ T221] usb 7-1: 0:2 : does not exist [ 297.475060][ T527] EXT4-fs (loop5): unmounting filesystem. [ 297.493617][ T28] audit: type=1400 audit(1755575893.161:1169): avc: denied { read write } for pid=2797 comm="syz.0.584" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 297.547594][ T28] audit: type=1400 audit(1755575893.201:1170): avc: denied { open } for pid=2797 comm="syz.0.584" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 297.766599][ T221] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 297.779657][ T2810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'. [ 297.783796][ T221] usb 7-1: USB disconnect, device number 2 [ 298.004860][ T1833] udevd[1833]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 298.024379][ T2824] netlink: 'syz.7.598': attribute type 1 has an invalid length. [ 298.090814][ T28] audit: type=1400 audit(1755575893.761:1171): avc: denied { name_bind } for pid=2833 comm="syz.5.603" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 298.141529][ T28] audit: type=1400 audit(1755575893.811:1172): avc: denied { connect } for pid=2835 comm="syz.7.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 298.201265][ T2844] loop6: detected capacity change from 0 to 256 [ 298.291177][ T2846] 9pnet_fd: Insufficient options for proto=fd [ 298.375266][ T2848] loop5: detected capacity change from 0 to 512 [ 298.388891][ T2848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.483633][ T2848] EXT4-fs (loop5): orphan cleanup on readonly fs [ 298.492727][ T2848] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 298.502783][ T2848] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 298.512613][ T2848] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.606: Failed to acquire dquot type 1 [ 298.527797][ T2848] EXT4-fs (loop5): 1 truncate cleaned up [ 298.535606][ T2848] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 301.249185][ T527] EXT4-fs (loop5): unmounting filesystem. [ 301.276984][ T28] audit: type=1400 audit(1755575896.951:1173): avc: denied { getopt } for pid=2869 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 301.348066][ T28] audit: type=1400 audit(1755575897.021:1174): avc: denied { read } for pid=2879 comm="syz.5.621" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=23423 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 301.629561][ T2898] 9pnet_fd: Insufficient options for proto=fd [ 304.144918][ T28] audit: type=1400 audit(1755575899.821:1175): avc: denied { append } for pid=2918 comm="syz.5.636" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 304.221067][ T2927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'. [ 304.328228][ T2938] loop7: detected capacity change from 0 to 1024 [ 304.349513][ T2938] EXT4-fs: Ignoring removed bh option [ 304.373892][ T2938] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 304.404718][ T28] audit: type=1400 audit(1755575900.071:1176): avc: denied { ioctl } for pid=2941 comm="syz.5.647" path="socket:[24561]" dev="sockfs" ino=24561 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 304.419582][ T2947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.649'. [ 304.477830][ T2938] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 304.639529][ T2964] loop6: detected capacity change from 0 to 512 [ 304.695149][ T2964] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 304.762593][ T2682] EXT4-fs (loop7): unmounting filesystem. [ 304.786272][ T2964] EXT4-fs (loop6): orphan cleanup on readonly fs [ 304.795840][ T2964] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 304.806017][ T2964] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 304.816149][ T2964] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.651: Failed to acquire dquot type 1 [ 304.830993][ T2964] EXT4-fs (loop6): 1 truncate cleaned up [ 304.839088][ T2964] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 305.080786][ T2967] netlink: 12 bytes leftover after parsing attributes in process `syz.5.656'. [ 305.413980][ T28] audit: type=1400 audit(1755575901.091:1177): avc: denied { bind } for pid=2968 comm="syz.5.657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 305.728083][ T2323] EXT4-fs (loop6): unmounting filesystem. [ 305.783128][ T28] audit: type=1400 audit(1755575901.451:1178): avc: denied { bind } for pid=2977 comm="syz.0.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 305.861076][ T2983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'. [ 306.014240][ T28] audit: type=1400 audit(1755575901.451:1179): avc: denied { connect } for pid=2977 comm="syz.0.661" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 306.073347][ T28] audit: type=1400 audit(1755575901.741:1180): avc: denied { getopt } for pid=2991 comm="syz.6.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.179460][ T28] audit: type=1400 audit(1755575901.851:1181): avc: denied { setopt } for pid=3005 comm="syz.1.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 306.243391][ T3016] usb usb8: usbfs: process 3016 (syz.6.677) did not claim interface 0 before use [ 306.265959][ T3021] netlink: 92 bytes leftover after parsing attributes in process `syz.7.679'. [ 306.283838][ T3021] netlink: 12 bytes leftover after parsing attributes in process `syz.7.679'. [ 306.293026][ T3021] netlink: 20 bytes leftover after parsing attributes in process `syz.7.679'. [ 306.302638][ T3021] netlink: 20 bytes leftover after parsing attributes in process `syz.7.679'. [ 306.349496][ T3026] loop6: detected capacity change from 0 to 512 [ 306.356900][ T3026] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 306.370052][ T3026] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 306.378457][ T3026] System zones: 1-12 [ 306.383019][ T3026] EXT4-fs (loop6): orphan cleanup on readonly fs [ 306.389650][ T3026] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.681: invalid indirect mapped block 12 (level 1) [ 306.409191][ T3025] 9pnet_fd: Insufficient options for proto=fd [ 306.422642][ T3026] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.681: invalid indirect mapped block 2 (level 2) [ 306.448301][ T3026] EXT4-fs (loop6): 1 truncate cleaned up [ 306.454416][ T3026] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 306.470644][ T3026] EXT4-fs warning (device loop6): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 306.487967][ T28] audit: type=1326 audit(1755575902.161:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3029 comm="syz.7.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60958ebe9 code=0x7ffc0000 [ 306.515097][ T2323] EXT4-fs (loop6): unmounting filesystem. [ 308.113232][ T3044] loop6: detected capacity change from 0 to 40427 [ 308.202589][ T334] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 308.227355][ T3044] F2FS-fs (loop6): Image doesn't support compression [ 308.246983][ T3044] F2FS-fs (loop6): invalid crc value [ 308.546407][ T334] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.568375][ T3044] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 308.580266][ T334] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.594113][ T334] usb 8-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 308.604400][ T334] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.605717][ T3044] F2FS-fs (loop6): Start checkpoint disabled! [ 308.613559][ T334] usb 8-1: config 0 descriptor?? [ 308.624899][ T3044] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 308.833781][ T336] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 309.014827][ T336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.033750][ T336] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 309.053324][ T336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.079211][ T334] usbhid 8-1:0.0: can't add hid device: -71 [ 309.081624][ T336] usb 6-1: config 0 descriptor?? [ 309.086888][ T334] usbhid: probe of 8-1:0.0 failed with error -71 [ 309.098683][ T334] usb 8-1: USB disconnect, device number 2 [ 309.130984][ T3090] 9pnet_fd: Insufficient options for proto=fd [ 309.494047][ T336] pantherlord 0003:0810:0001.0002: item fetching failed at offset 5/7 [ 309.502785][ T336] pantherlord 0003:0810:0001.0002: parse failed [ 309.509346][ T336] pantherlord: probe of 0003:0810:0001.0002 failed with error -22 [ 309.608312][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 309.608329][ T28] audit: type=1400 audit(1755575905.281:1188): avc: denied { write } for pid=3091 comm="syz.7.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 309.645924][ T3096] netlink: 16 bytes leftover after parsing attributes in process `syz.6.709'. [ 309.696966][ T24] usb 6-1: USB disconnect, device number 8 [ 309.762392][ T28] audit: type=1400 audit(1755575905.431:1189): avc: denied { read write } for pid=3111 comm="syz.7.718" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 309.786931][ T28] audit: type=1400 audit(1755575905.431:1190): avc: denied { open } for pid=3111 comm="syz.7.718" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 309.970344][ T28] audit: type=1400 audit(1755575905.641:1191): avc: denied { ioctl } for pid=3131 comm="syz.1.727" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 310.152515][ T3145] 9pnet_fd: Insufficient options for proto=fd [ 310.173770][ T3150] netlink: 'syz.1.734': attribute type 1 has an invalid length. [ 310.196087][ T28] audit: type=1400 audit(1755575905.871:1192): avc: denied { read } for pid=3151 comm="syz.1.735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 310.250548][ T3154] loop5: detected capacity change from 0 to 256 [ 310.451213][ T3159] loop5: detected capacity change from 0 to 512 [ 310.481914][ T3159] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 310.515636][ T3159] EXT4-fs (loop5): orphan cleanup on readonly fs [ 310.526450][ T3159] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 310.536550][ T3159] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 310.546557][ T3159] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.737: Failed to acquire dquot type 1 [ 310.561163][ T3159] EXT4-fs (loop5): 1 truncate cleaned up [ 310.567966][ T3159] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 311.308794][ T28] audit: type=1400 audit(1755575906.981:1193): avc: denied { connect } for pid=3169 comm="syz.1.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 313.604144][ T527] EXT4-fs (loop5): unmounting filesystem. [ 313.929550][ T3199] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.937862][ T3199] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.096103][ T28] audit: type=1400 audit(1755575910.774:1194): avc: denied { mount } for pid=3209 comm="syz.0.758" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 314.229063][ T3217] loop5: detected capacity change from 0 to 512 [ 314.239491][ T3217] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 314.316345][ T3217] EXT4-fs (loop5): orphan cleanup on readonly fs [ 314.325711][ T3217] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 314.335596][ T3217] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.747: Failed to acquire dquot type 1 [ 314.350089][ T3217] EXT4-fs (loop5): 1 truncate cleaned up [ 314.356327][ T3217] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 317.256363][ T527] EXT4-fs (loop5): unmounting filesystem. [ 317.284730][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 317.284745][ T28] audit: type=1400 audit(1755575913.964:1196): avc: denied { mount } for pid=3239 comm="syz.1.767" name="/" dev="configfs" ino=14156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 317.722381][ T3261] loop6: detected capacity change from 0 to 512 [ 317.732435][ T3261] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 317.813201][ T3261] EXT4-fs (loop6): orphan cleanup on readonly fs [ 317.821201][ T19] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 317.830779][ T3261] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 317.841047][ T3261] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 317.850928][ T3261] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.774: Failed to acquire dquot type 1 [ 317.865186][ T3261] EXT4-fs (loop6): 1 truncate cleaned up [ 317.892075][ T3261] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 318.103760][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 318.110922][ T19] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 318.148288][ T3266] netlink: 'syz.0.777': attribute type 3 has an invalid length. [ 318.168686][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.240916][ T19] usb 2-1: config 0 has no interface number 0 [ 318.309132][ T19] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 318.442957][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.469265][ T19] usb 2-1: Product: syz [ 318.483539][ T19] usb 2-1: Manufacturer: syz [ 318.503970][ T19] usb 2-1: SerialNumber: syz [ 318.530244][ T19] usb 2-1: config 0 descriptor?? [ 318.719903][ T2323] EXT4-fs (loop6): unmounting filesystem. [ 318.733622][ T3275] loop7: detected capacity change from 0 to 256 [ 318.779342][ T19] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 318.795171][ T3275] FAT-fs (loop7): Directory bread(block 64) failed [ 318.806023][ T19] usb 2-1: No valid video chain found. [ 318.823397][ T19] usb 2-1: USB disconnect, device number 5 [ 318.832485][ T3275] FAT-fs (loop7): Directory bread(block 65) failed [ 318.844541][ T3275] FAT-fs (loop7): Directory bread(block 66) failed [ 318.851294][ T3275] FAT-fs (loop7): Directory bread(block 67) failed [ 318.859904][ T3275] FAT-fs (loop7): Directory bread(block 68) failed [ 318.867063][ T3275] FAT-fs (loop7): Directory bread(block 69) failed [ 318.874446][ T3275] FAT-fs (loop7): Directory bread(block 70) failed [ 318.881976][ T3275] FAT-fs (loop7): Directory bread(block 71) failed [ 318.889178][ T3275] FAT-fs (loop7): Directory bread(block 72) failed [ 318.903104][ T3275] FAT-fs (loop7): Directory bread(block 73) failed [ 318.970780][ T3290] device veth3 left promiscuous mode [ 319.084063][ T334] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 319.102116][ T3295] loop7: detected capacity change from 0 to 1024 [ 319.130659][ T3295] EXT4-fs: Ignoring removed oldalloc option [ 319.185195][ T3295] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 319.240754][ T28] audit: type=1400 audit(1755575916.916:1197): avc: denied { write } for pid=3294 comm="syz.7.788" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.268158][ T28] audit: type=1400 audit(1755575916.916:1198): avc: denied { add_name } for pid=3294 comm="syz.7.788" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 319.274555][ T334] usb 7-1: not running at top speed; connect to a high speed hub [ 319.313801][ T28] audit: type=1400 audit(1755575916.916:1199): avc: denied { read write } for pid=3294 comm="syz.7.788" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 319.314682][ T2682] EXT4-fs (loop7): unmounting filesystem. [ 319.358154][ T28] audit: type=1400 audit(1755575916.916:1200): avc: denied { open } for pid=3294 comm="syz.7.788" path="/37/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 319.388652][ T28] audit: type=1400 audit(1755575916.916:1201): avc: denied { ioctl } for pid=3294 comm="syz.7.788" path="/37/file1/file1" dev="loop7" ino=15 ioctlcmd=0x5839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 319.432518][ T334] usb 7-1: config 2 has an invalid interface number: 79 but max is 0 [ 319.487357][ T334] usb 7-1: config 2 has an invalid interface association descriptor of length 2, skipping [ 319.541715][ T334] usb 7-1: config 2 has no interface number 0 [ 319.544511][ T3304] loop7: detected capacity change from 0 to 2048 [ 319.596681][ T334] usb 7-1: config 2 interface 79 has no altsetting 0 [ 319.613599][ T3304] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 319.619056][ T334] usb 7-1: New USB device found, idVendor=3277, idProduct=0072, bcdDevice=38.06 [ 319.700465][ T28] audit: type=1400 audit(1755575917.376:1202): avc: denied { read append open } for pid=3302 comm="syz.7.789" path="/38/file2/memory.numa_stat" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 319.831855][ T2682] EXT4-fs (loop7): unmounting filesystem. [ 319.869594][ T334] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.880032][ T334] usb 7-1: Product: syz [ 319.884377][ T334] usb 7-1: Manufacturer: syz [ 319.888996][ T334] usb 7-1: SerialNumber: syz [ 320.069850][ T3322] loop7: detected capacity change from 0 to 512 [ 320.080315][ T3322] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 320.203161][ T3322] EXT4-fs (loop7): orphan cleanup on readonly fs [ 320.211799][ T3322] Quota error (device loop7): do_check_range: Getting block 196613 out of range 1-5 [ 320.222332][ T3322] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.792: Failed to acquire dquot type 1 [ 320.238325][ T3322] EXT4-fs (loop7): 1 truncate cleaned up [ 320.244803][ T3322] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 320.648748][ T3333] loop5: detected capacity change from 0 to 1024 [ 320.804367][ T3333] EXT4-fs: Ignoring removed oldalloc option [ 320.855175][ T3333] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 320.913151][ T527] EXT4-fs (loop5): unmounting filesystem. [ 320.944124][ T3335] loop6: detected capacity change from 0 to 8192 [ 321.123162][ T2682] EXT4-fs (loop7): unmounting filesystem. [ 321.125478][ T334] usb 7-1: Found UVC 0.00 device syz (3277:0072) [ 321.143735][ T334] usb 7-1: No valid video chain found. [ 321.161006][ T334] usb 7-1: USB disconnect, device number 3 [ 321.194430][ T3343] can0: slcan on ptm0. [ 321.264521][ T3341] can0 (unregistered): slcan off ptm0. [ 321.444299][ T19] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 321.597576][ T3387] tipc: Started in network mode [ 321.609380][ T3387] tipc: Node identity 2d000000000000000000000000000001, cluster identity 4711 [ 321.628260][ T3387] tipc: Enabling of bearer rejected, failed to enable media [ 321.643730][ T19] usb 6-1: Using ep0 maxpacket: 32 [ 321.650519][ T19] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.687045][ T19] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 321.703416][ T3392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.812'. [ 321.718283][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.733137][ T3392] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 321.745262][ T19] usb 6-1: Product: syz [ 321.757566][ T19] usb 6-1: Manufacturer: syz [ 321.776967][ T19] usb 6-1: SerialNumber: syz [ 321.792700][ T19] usb 6-1: config 0 descriptor?? [ 321.807548][ T19] usb 6-1: bad CDC descriptors [ 321.823095][ T19] usb 6-1: unsupported MDLM descriptors [ 322.010246][ T19] usb 6-1: USB disconnect, device number 9 [ 322.910219][ T3406] loop5: detected capacity change from 0 to 256 [ 323.010980][ T3414] loop7: detected capacity change from 0 to 128 [ 323.017716][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 323.017732][ T28] audit: type=1400 audit(1755575921.617:1219): avc: denied { remount } for pid=3405 comm="syz.5.817" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 323.256356][ T3418] loop5: detected capacity change from 0 to 512 [ 323.267903][ T3418] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 323.322988][ T3418] EXT4-fs (loop5): orphan cleanup on readonly fs [ 323.332190][ T3418] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 323.342301][ T3418] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 323.352060][ T3418] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.820: Failed to acquire dquot type 1 [ 323.367550][ T3418] EXT4-fs (loop5): 1 truncate cleaned up [ 323.374619][ T3418] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 323.408132][ T3414] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 323.445910][ T3414] System zones: 1-3, 19-19, 35-36 [ 323.534389][ T3414] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 323.659228][ T3414] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 323.758642][ T28] audit: type=1400 audit(1755575922.437:1220): avc: denied { setattr } for pid=3413 comm="syz.7.821" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 323.788089][ T2682] EXT4-fs (loop7): unmounting filesystem. [ 323.953725][ T28] audit: type=1400 audit(1755575922.497:1221): avc: denied { connect } for pid=3427 comm="syz.0.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 324.031581][ T28] audit: type=1400 audit(1755575922.577:1222): avc: denied { write } for pid=3427 comm="syz.0.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 324.153352][ T28] audit: type=1400 audit(1755575922.827:1223): avc: denied { ioctl } for pid=3437 comm="syz.1.830" path="socket:[24924]" dev="sockfs" ino=24924 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 324.271443][ T28] audit: type=1400 audit(1755575922.857:1224): avc: denied { bind } for pid=3437 comm="syz.1.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 324.292146][ T527] EXT4-fs (loop5): unmounting filesystem. [ 324.442675][ T3454] loop5: detected capacity change from 0 to 128 [ 324.466466][ T3454] FAT-fs (loop5): Directory bread(block 162) failed [ 324.481872][ T3454] FAT-fs (loop5): Directory bread(block 163) failed [ 324.510052][ T3454] FAT-fs (loop5): Directory bread(block 164) failed [ 324.520135][ T3454] FAT-fs (loop5): Directory bread(block 165) failed [ 324.527216][ T28] audit: type=1400 audit(1755575923.207:1225): avc: denied { write } for pid=3457 comm="syz.0.838" name="ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 324.533739][ T334] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 324.560671][ T3454] FAT-fs (loop5): Directory bread(block 166) failed [ 324.578465][ T3454] FAT-fs (loop5): Directory bread(block 167) failed [ 324.593546][ T3454] FAT-fs (loop5): Directory bread(block 168) failed [ 324.603727][ T3454] FAT-fs (loop5): Directory bread(block 169) failed [ 324.638068][ T3454] FAT-fs (loop5): Directory bread(block 162) failed [ 324.651450][ T3454] FAT-fs (loop5): Directory bread(block 163) failed [ 324.664236][ T3454] syz.5.836: attempt to access beyond end of device [ 324.664236][ T3454] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 324.694054][ T3454] syz.5.836: attempt to access beyond end of device [ 324.694054][ T3454] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 324.775419][ T334] usb 8-1: Using ep0 maxpacket: 32 [ 325.053631][ T334] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.135585][ T334] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 325.149371][ T334] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.004707][ T3475] loop5: detected capacity change from 0 to 512 [ 326.016597][ T3475] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.089118][ T3475] EXT4-fs (loop5): orphan cleanup on readonly fs [ 326.097752][ T3475] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 326.107628][ T3475] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.843: Failed to acquire dquot type 1 [ 326.123095][ T3475] EXT4-fs (loop5): 1 truncate cleaned up [ 326.129802][ T3475] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 327.214641][ T3493] syz.1.851[3493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.214726][ T3493] syz.1.851[3493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.222218][ T334] usb 8-1: Product: syz [ 327.243003][ T334] usb 8-1: Manufacturer: syz [ 327.247920][ T334] usb 8-1: SerialNumber: syz [ 327.248597][ T527] EXT4-fs (loop5): unmounting filesystem. [ 327.289962][ T334] usb 8-1: config 0 descriptor?? [ 327.318979][ T334] usb 8-1: can't set config #0, error -71 [ 327.346578][ T334] usb 8-1: USB disconnect, device number 3 [ 327.583022][ T3514] loop6: detected capacity change from 0 to 512 [ 327.598242][ T3514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 327.667932][ T3514] EXT4-fs (loop6): orphan cleanup on readonly fs [ 327.676759][ T3514] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.856: Failed to acquire dquot type 1 [ 327.692115][ T3514] EXT4-fs (loop6): 1 truncate cleaned up [ 327.698539][ T3514] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 328.439302][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 328.439317][ T28] audit: type=1400 audit(1755838327.116:1229): avc: denied { remount } for pid=3524 comm="syz.7.863" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 328.546900][ T3531] loop7: detected capacity change from 0 to 256 [ 328.604515][ T3531] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 328.622991][ T2323] EXT4-fs (loop6): unmounting filesystem. [ 328.771323][ T28] audit: type=1400 audit(1755838327.446:1230): avc: denied { validate_trans } for pid=3541 comm="syz.1.870" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 329.031938][ T3552] loop6: detected capacity change from 0 to 256 [ 330.399521][ T336] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 330.445616][ T3571] device bridge0 entered promiscuous mode [ 330.451591][ T3571] device macsec0 entered promiscuous mode [ 330.459838][ T3571] bridge0: port 3(macsec0) entered blocking state [ 330.466900][ T3571] bridge0: port 3(macsec0) entered disabled state [ 330.475811][ T28] audit: type=1400 audit(1755838329.156:1231): avc: denied { write } for pid=3572 comm="syz.1.883" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 330.503921][ T3571] device bridge0 left promiscuous mode [ 330.603722][ T336] usb 8-1: Using ep0 maxpacket: 16 [ 330.610445][ T336] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 330.648209][ T336] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.653623][ T3584] xt_hashlimit: size too large, truncated to 1048576 [ 330.665984][ T336] usb 8-1: config 0 has no interface number 0 [ 330.688330][ T336] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 330.698029][ T336] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.706586][ T336] usb 8-1: Product: syz [ 330.711022][ T336] usb 8-1: Manufacturer: syz [ 330.716192][ T336] usb 8-1: SerialNumber: syz [ 330.722086][ T336] usb 8-1: config 0 descriptor?? [ 330.729898][ T336] usb 8-1: Found UVC 0.00 device syz (046d:08f3) [ 330.743198][ T336] usb 8-1: No valid video chain found. [ 332.000065][ T221] usb 8-1: USB disconnect, device number 4 [ 332.045126][ T3594] loop7: detected capacity change from 0 to 512 [ 332.093834][ T3594] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 332.107001][ T3594] EXT4-fs (loop7): invalid journal inode [ 332.112708][ T3594] EXT4-fs (loop7): can't get journal size [ 332.154975][ T3594] EXT4-fs (loop7): 1 truncate cleaned up [ 332.186326][ T3594] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 332.224160][ T2682] EXT4-fs (loop7): unmounting filesystem. [ 332.519216][ T334] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 332.542228][ T3612] loop7: detected capacity change from 0 to 1024 [ 332.549716][ T3612] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 332.561657][ T3612] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 332.572218][ T3612] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 332.580835][ T3612] System zones: 0-1, 3-36 [ 332.586823][ T3612] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 332.614701][ T28] audit: type=1400 audit(1755838331.296:1232): avc: denied { write } for pid=3611 comm="syz.7.894" name="mnt" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 332.638661][ T28] audit: type=1400 audit(1755838331.296:1233): avc: denied { add_name } for pid=3611 comm="syz.7.894" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 332.661616][ T2682] EXT4-fs (loop7): unmounting filesystem. [ 332.679450][ T28] audit: type=1400 audit(1755838331.356:1234): avc: denied { read } for pid=3616 comm="syz.7.898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 332.705086][ T334] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 332.716304][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.727956][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.744558][ T334] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 332.767265][ T334] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 332.783825][ T334] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 332.792136][ T334] usb 2-1: Manufacturer: syz [ 332.804849][ T334] usb 2-1: config 0 descriptor?? [ 332.830109][ T3624] xt_hashlimit: size too large, truncated to 1048576 [ 333.141205][ T28] audit: type=1400 audit(1755838331.816:1235): avc: denied { ioctl } for pid=3635 comm="syz.0.902" path="socket:[25175]" dev="sockfs" ino=25175 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 333.280842][ T334] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 333.296602][ T3642] loop6: detected capacity change from 0 to 512 [ 333.305001][ T3642] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 333.458633][ T3642] EXT4-fs (loop6): orphan cleanup on readonly fs [ 333.468019][ T3642] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 333.478384][ T3642] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 333.488268][ T3642] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.905: Failed to acquire dquot type 1 [ 333.503893][ T3642] EXT4-fs (loop6): 1 truncate cleaned up [ 333.510329][ T3642] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 333.738289][ T28] audit: type=1400 audit(1755838332.416:1236): avc: denied { read } for pid=3648 comm="syz.5.910" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 334.074681][ T28] audit: type=1400 audit(1755838332.436:1237): avc: denied { open } for pid=3648 comm="syz.5.910" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 334.213042][ T3670] fuse: Invalid rootmode [ 334.313873][ T28] audit: type=1400 audit(1755838332.996:1238): avc: denied { mounton } for pid=3671 comm="syz.0.919" path="/proc/679/task/680/net" dev="proc" ino=27470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 334.341278][ T334] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 334.345252][ T2323] EXT4-fs (loop6): unmounting filesystem. [ 334.351088][ T334] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 334.355483][ T334] usb 2-1: USB disconnect, device number 6 [ 334.434895][ T3676] fido_id[3676]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 335.157411][ T28] audit: type=1400 audit(1755838333.836:1239): avc: denied { compute_member } for pid=3711 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 335.253828][ T19] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 335.317323][ T3715] loop5: detected capacity change from 0 to 512 [ 335.344875][ T3715] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 335.414788][ T3715] EXT4-fs (loop5): orphan cleanup on readonly fs [ 335.424957][ T3715] Quota error (device loop5): do_check_range: Getting block 196613 out of range 1-5 [ 335.434698][ T3715] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 335.444353][ T3715] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.932: Failed to acquire dquot type 1 [ 335.460045][ T3715] EXT4-fs (loop5): 1 truncate cleaned up [ 335.466362][ T3715] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 335.556323][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 335.693365][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.717523][ T19] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 335.728088][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.761737][ T19] usb 8-1: config 0 descriptor?? [ 336.252714][ T527] EXT4-fs (loop5): unmounting filesystem. [ 336.471678][ T3740] loop6: detected capacity change from 0 to 16 [ 336.498845][ T3740] erofs: (device loop6): mounted with root inode @ nid 36. [ 336.522014][ T19] savu 0003:1E7D:2D5A.0004: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 336.544094][ T3740] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 36 [ 336.546720][ T28] audit: type=1400 audit(1755838335.216:1240): avc: denied { mounton } for pid=3739 comm="syz.6.945" path="/98/file0" dev="loop6" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 336.600319][ T3742] loop5: detected capacity change from 0 to 4096 [ 336.617406][ T3742] EXT4-fs: Ignoring removed mblk_io_submit option [ 336.630779][ T28] audit: type=1400 audit(1755838335.306:1241): avc: denied { append } for pid=3743 comm="syz.6.946" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 336.655053][ T3742] EXT4-fs (loop5): Test dummy encryption mode enabled [ 336.681334][ T3742] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 336.719094][ T527] EXT4-fs (loop5): unmounting filesystem. [ 336.786936][ T10] tipc: Left network mode [ 336.796955][ T336] usb 8-1: USB disconnect, device number 5 [ 336.990832][ T3763] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.996475][ T3762] loop6: detected capacity change from 0 to 40427 [ 336.998208][ T3763] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.013503][ T3763] device bridge_slave_0 entered promiscuous mode [ 337.014102][ T3762] F2FS-fs (loop6): Mismatch start address, segment0(0) cp_blkaddr(512) [ 337.021729][ T3763] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.035959][ T19] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 337.038616][ T3762] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 337.044479][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.052795][ T3762] F2FS-fs (loop6): heap/no_heap options were deprecated [ 337.060469][ T3763] device bridge_slave_1 entered promiscuous mode [ 337.069728][ T3762] F2FS-fs (loop6): invalid crc value [ 337.080135][ T3762] F2FS-fs (loop6): Found nat_bits in checkpoint [ 337.151747][ T3762] F2FS-fs (loop6): Start checkpoint disabled! [ 337.163569][ T3762] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 337.171190][ T3762] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 337.209252][ T447] kworker/u4:7: attempt to access beyond end of device [ 337.209252][ T447] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 337.214541][ T3763] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.224238][ T447] kworker/u4:7: attempt to access beyond end of device [ 337.224238][ T447] loop6: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 337.231155][ T3763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.253499][ T3763] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.254312][ T3780] syz.6.955: attempt to access beyond end of device [ 337.254312][ T3780] loop6: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 337.260779][ T3763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.275844][ T3780] syz.6.955: attempt to access beyond end of device [ 337.275844][ T3780] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 337.296350][ T3762] VFS:Filesystem freeze failed [ 337.306707][ T19] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 337.318100][ T19] usb 6-1: config 0 has no interface number 0 [ 337.326975][ T19] usb 6-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 337.340602][ T19] usb 6-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 337.352732][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 337.357535][ T3782] loop7: detected capacity change from 0 to 256 [ 337.361234][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 337.371769][ T3782] exfat: Deprecated parameter 'utf8' [ 337.381803][ T3782] exfat: Deprecated parameter 'utf8' [ 337.390500][ T19] usb 6-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.404201][ T3782] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 337.404975][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 337.425361][ T19] usb 6-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 337.433819][ T429] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 337.440275][ T19] usb 6-1: config 0 interface 230 has no altsetting 0 [ 337.455755][ T19] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 337.459644][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 337.493852][ T19] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.499574][ T3784] SELinux: policydb version -322855173 does not match my version range 15-33 [ 337.509084][ T19] usb 6-1: config 0 descriptor?? [ 337.517221][ T447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 337.520796][ T3784] SELinux: failed to load policy [ 337.543315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.558359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.593055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 337.610186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 337.625445][ T3763] device veth0_vlan entered promiscuous mode [ 337.641919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.653884][ T429] usb 2-1: Using ep0 maxpacket: 8 [ 337.660724][ T429] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 337.662804][ T3763] device veth1_macvtap entered promiscuous mode [ 337.673930][ T429] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.694157][ T429] usb 2-1: config 0 has no interface number 0 [ 337.696660][ T10] device bridge_slave_1 left promiscuous mode [ 337.707371][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.722286][ T429] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 337.732973][ T429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.733162][ T10] device bridge_slave_0 left promiscuous mode [ 337.748135][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.751128][ T429] usb 2-1: config 0 descriptor?? [ 337.767145][ T10] device veth0_vlan left promiscuous mode [ 337.993163][ T3805] loop6: detected capacity change from 0 to 256 [ 339.234253][ T19] uclogic 0003:5543:0781.0005: item fetching failed at offset 2/5 [ 339.242589][ T19] uclogic 0003:5543:0781.0005: parse failed [ 339.316291][ T19] uclogic: probe of 0003:5543:0781.0005 failed with error -22 [ 339.360341][ T19] usb 6-1: USB disconnect, device number 10 [ 339.415805][ T221] usb 2-1: USB disconnect, device number 7 [ 339.679107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.698048][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.769058][ T3822] loop7: detected capacity change from 0 to 1024 [ 339.786488][ T3822] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 339.795551][ T3822] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.832866][ T2682] EXT4-fs (loop7): unmounting filesystem. [ 340.086887][ T3845] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=2618529509 (2618529509 ns) > initial count (196906625 ns). Using initial count to start timer. [ 340.105532][ T3845] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 340.133753][ T19] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 340.313703][ T19] usb 8-1: Using ep0 maxpacket: 32 [ 340.334566][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.346809][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.357927][ T19] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 340.368322][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.380761][ T19] usb 8-1: config 0 descriptor?? [ 340.455602][ T221] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 340.640306][ T3855] loop6: detected capacity change from 0 to 512 [ 340.645019][ T221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.658453][ T221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.668681][ T221] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 340.682307][ T3855] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 340.691252][ T221] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 340.696545][ T3855] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 340.700932][ T221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.717048][ T3855] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.720475][ T221] usb 2-1: config 0 descriptor?? [ 340.741934][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 340.741950][ T28] audit: type=1400 audit(1755838339.416:1246): avc: denied { setattr } for pid=3854 comm="syz.6.985" path="/110/file0/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 340.774368][ T3855] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #18: comm syz.6.985: corrupted inode contents [ 340.786701][ T3855] EXT4-fs error (device loop6): ext4_dirty_inode:6121: inode #18: comm syz.6.985: mark_inode_dirty error [ 340.799716][ T3855] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #18: comm syz.6.985: corrupted inode contents [ 340.802145][ T19] savu 0003:1E7D:2D5A.0006: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 340.824312][ T3855] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2963: inode #18: comm syz.6.985: mark_inode_dirty error [ 340.837340][ T3855] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2966: inode #18: comm syz.6.985: mark inode dirty (error -117) [ 340.850680][ T3855] EXT4-fs warning (device loop6): ext4_evict_inode:299: xattr delete (err -117) [ 340.869547][ T2323] EXT4-fs (loop6): unmounting filesystem. [ 340.957334][ T3862] loop5: detected capacity change from 0 to 1024 [ 340.976352][ T3862] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 340.989214][ T3862] syz.5.987[3862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.989308][ T3862] syz.5.987[3862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.002853][ T28] audit: type=1400 audit(1755838339.686:1247): avc: denied { append } for pid=3861 comm="syz.5.987" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 341.039385][ T527] EXT4-fs (loop5): unmounting filesystem. [ 341.085074][ T19] usb 8-1: USB disconnect, device number 6 [ 341.137742][ T221] plantronics 0003:047F:FFFF.0007: item 0 4 0 8 parsing failed [ 341.145981][ T221] plantronics 0003:047F:FFFF.0007: parse failed [ 341.152373][ T221] plantronics: probe of 0003:047F:FFFF.0007 failed with error -22 [ 341.203782][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 341.341615][ T19] usb 2-1: USB disconnect, device number 8 [ 341.384004][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 341.390743][ T24] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.402033][ T24] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.412592][ T24] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 341.426468][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 341.433368][ T24] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 341.442922][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.451999][ T24] usb 7-1: config 0 descriptor?? [ 341.659162][ T28] audit: type=1400 audit(1755838340.336:1248): avc: denied { bind } for pid=3872 comm="syz.7.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 341.679903][ T28] audit: type=1400 audit(1755838340.336:1249): avc: denied { connect } for pid=3872 comm="syz.7.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 341.862426][ T24] hid (null): report_id 0 is invalid [ 341.927554][ T28] audit: type=1400 audit(1755838340.606:1250): avc: denied { append } for pid=3878 comm="syz.1.993" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 342.006725][ T3885] kvm: emulating exchange as write [ 342.061521][ T3860] loop6: detected capacity change from 0 to 16 [ 342.068657][ T3860] erofs: Unexpected value for 'acl' [ 342.075593][ T429] usb 7-1: USB disconnect, device number 4 [ 342.183766][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 342.363758][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 342.370880][ T24] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 342.380384][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.390893][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.401814][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.411229][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.419586][ T24] usb 6-1: Product: syz [ 342.424096][ T24] usb 6-1: Manufacturer: syz [ 342.429061][ T24] usb 6-1: SerialNumber: syz [ 342.515920][ T3893] Falling back ldisc for ttyS3. [ 342.609102][ T28] audit: type=1400 audit(1755838342.286:1251): avc: denied { ioctl } for pid=3900 comm="syz.6.1002" path="/dev/usbmon7" dev="devtmpfs" ino=180 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 342.669765][ T28] audit: type=1400 audit(1755838342.346:1252): avc: denied { read } for pid=3903 comm="syz.7.1003" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 342.695052][ T28] audit: type=1400 audit(1755838342.346:1253): avc: denied { ioctl } for pid=3903 comm="syz.7.1003" path="/73/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 342.735120][ T28] audit: type=1400 audit(1755838342.416:1254): avc: denied { create } for pid=3906 comm="syz.7.1004" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 342.798667][ T28] audit: type=1400 audit(1755838342.466:1255): avc: denied { execute } for pid=3906 comm="syz.7.1004" path="/74/cpu.stat" dev="tmpfs" ino=411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 342.839206][ T24] usb 6-1: 0:2 : does not exist [ 342.994644][ T3921] loop7: detected capacity change from 0 to 512 [ 343.003559][ T3921] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.014081][ T3921] EXT4-fs (loop7): orphan cleanup on readonly fs [ 343.021682][ T3921] EXT4-fs error (device loop7): ext4_acquire_dquot:6801: comm syz.7.1008: Failed to acquire dquot type 1 [ 343.034627][ T3921] EXT4-fs (loop7): 1 truncate cleaned up [ 343.040453][ T3921] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 343.193732][ T334] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 343.373725][ T334] usb 2-1: Using ep0 maxpacket: 16 [ 343.380011][ T334] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.391450][ T334] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.401766][ T334] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 343.415509][ T334] usb 2-1: config 0 interface 0 has no altsetting 0 [ 343.422263][ T334] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 343.431473][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.440287][ T334] usb 2-1: config 0 descriptor?? [ 343.653905][ T24] usb 6-1: USB disconnect, device number 11 [ 343.726070][ T2682] EXT4-fs (loop7): unmounting filesystem. [ 343.849696][ T334] hid (null): unknown global tag 0x9d [ 343.855361][ T334] hid (null): unknown global tag 0xe [ 343.860826][ T334] hid (null): unknown global tag 0xe [ 343.866644][ T334] hid (null): unknown global tag 0xc [ 343.867238][ T1833] udevd[1833]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 343.872286][ T334] hid (null): unknown global tag 0xd [ 343.893565][ T429] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 343.901458][ T334] hid (null): unknown global tag 0x65 [ 343.922946][ T3934] loop7: detected capacity change from 0 to 128 [ 343.935198][ T3934] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 343.944950][ T3934] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.966429][ T2682] EXT4-fs (loop7): unmounting filesystem. [ 344.027220][ T3938] loop7: detected capacity change from 0 to 1024 [ 344.045074][ T3938] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 344.055237][ T3938] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.061244][ T334] usb 2-1: USB disconnect, device number 9 [ 344.074509][ T3938] EXT4-fs error (device loop7): ext4_map_blocks:745: inode #15: comm syz.7.1015: lblock 0 mapped to illegal pblock 0 (length 6) [ 344.088873][ T3938] EXT4-fs error (device loop7): ext4_ext_remove_space:2930: inode #15: comm syz.7.1015: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 344.090490][ T429] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.108977][ T3938] EXT4-fs error (device loop7): ext4_map_blocks:745: inode #15: comm syz.7.1015: lblock 0 mapped to illegal pblock 0 (length 1) [ 344.124388][ T429] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 344.133112][ T3938] EXT4-fs error (device loop7): ext4_ext_remove_space:2930: inode #15: comm syz.7.1015: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 344.142594][ T429] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 344.171950][ T429] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 344.186164][ T429] usb 7-1: SerialNumber: syz [ 344.186261][ T2682] EXT4-fs (loop7): unmounting filesystem. [ 344.198629][ T447] Bluetooth: hci0: Frame reassembly failed (-84) [ 344.222096][ T3944] loop7: detected capacity change from 0 to 512 [ 344.233451][ T3944] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.1016: casefold flag without casefold feature [ 344.247620][ T3944] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1016: couldn't read orphan inode 15 (err -117) [ 344.260761][ T3944] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 344.339143][ T2682] EXT4-fs (loop7): unmounting filesystem. [ 344.397205][ T429] usb 7-1: 0:2 : does not exist [ 344.402713][ T429] usb 7-1: unit 1 not found! [ 344.412163][ T429] usb 7-1: USB disconnect, device number 5 [ 344.643790][ T19] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 344.825160][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 344.836770][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.847012][ T19] usb 8-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 344.856514][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.865831][ T19] usb 8-1: config 0 descriptor?? [ 345.444731][ T19] isku 0003:1E7D:319C.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.7-1/input0 [ 345.643945][ T19] isku 0003:1E7D:319C.000A: couldn't init struct isku_device [ 345.651595][ T19] isku 0003:1E7D:319C.000A: couldn't install keyboard [ 345.659637][ T19] isku: probe of 0003:1E7D:319C.000A failed with error -71 [ 345.668484][ T19] usb 8-1: USB disconnect, device number 7 [ 345.696437][ T3979] fido_id[3979]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 345.771720][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 345.771736][ T28] audit: type=1400 audit(1755838345.446:1283): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 345.806895][ T28] audit: type=1400 audit(1755838345.486:1284): avc: denied { mount } for pid=3983 comm="syz.1.1032" name="/" dev="ramfs" ino=28645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 345.845404][ T28] audit: type=1400 audit(1755838345.506:1285): avc: denied { remount } for pid=3983 comm="syz.1.1032" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 345.868541][ T28] audit: type=1400 audit(1755838345.506:1286): avc: denied { mounton } for pid=3983 comm="syz.1.1032" path="/269/file0" dev="ramfs" ino=28645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 345.891873][ T28] audit: type=1400 audit(1755838345.506:1287): avc: denied { mount } for pid=3983 comm="syz.1.1032" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 345.919599][ T28] audit: type=1400 audit(1755838345.516:1288): avc: denied { mounton } for pid=3983 comm="syz.1.1032" path="/269/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.944143][ T28] audit: type=1400 audit(1755838345.516:1289): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 345.965311][ T28] audit: type=1400 audit(1755838345.516:1290): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 345.986691][ T28] audit: type=1400 audit(1755838345.596:1291): avc: denied { read write } for pid=3993 comm="syz.6.1038" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 346.011339][ T28] audit: type=1400 audit(1755838345.596:1292): avc: denied { open } for pid=3993 comm="syz.6.1038" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 346.213799][ T455] Bluetooth: hci0: command 0x1003 tx timeout [ 346.213836][ T1498] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 346.227994][ T3942] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 346.273753][ T334] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 346.343807][ T429] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 346.359976][ T4017] loop7: detected capacity change from 0 to 1024 [ 346.385252][ T4017] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 346.394839][ T4017] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.410853][ T4017] EXT4-fs error (device loop7): ext4_map_blocks:745: inode #15: block 1: comm syz.7.1048: lblock 1 mapped to illegal pblock 1 (length 1) [ 346.432079][ T10] EXT4-fs error (device loop7): ext4_map_blocks:745: inode #15: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 346.447095][ T10] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 117 [ 346.460297][ T10] EXT4-fs (loop7): This should not happen!! Data will be lost [ 346.460297][ T10] [ 346.471060][ T2682] EXT4-fs (loop7): unmounting filesystem. [ 346.478457][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.490098][ T334] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.500627][ T334] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.513979][ T334] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.523996][ T334] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.532866][ T334] usb 2-1: config 0 descriptor?? [ 346.553769][ T503] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 346.562626][ T429] usb 7-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 346.573811][ T429] usb 7-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 346.584457][ T429] usb 7-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 346.593843][ T429] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 346.602430][ T429] usb 7-1: Product: syz [ 346.607134][ T429] usb 7-1: SerialNumber: syz [ 346.621113][ T429] rndis_host 7-1:7.0: skipping garbage [ 346.626746][ T429] usb 7-1: bad CDC descriptors [ 346.754953][ T503] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.765360][ T503] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.775329][ T503] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 346.784593][ T503] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 346.792953][ T503] usb 6-1: SerialNumber: syz [ 346.835675][ T429] usb 7-1: USB disconnect, device number 6 [ 346.883768][ T19] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 346.941225][ T334] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 346.949119][ T334] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 346.959210][ T334] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 347.005904][ T503] usb 6-1: 0:2 : does not exist [ 347.016218][ T503] usb 6-1: USB disconnect, device number 12 [ 347.064984][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.076433][ T19] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.086508][ T19] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 347.099449][ T19] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 347.108710][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.117719][ T19] usb 8-1: config 0 descriptor?? [ 347.224463][ T221] ================================================================== [ 347.224467][ T1833] udevd[1833]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 347.249332][ T221] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 347.256811][ T221] Write of size 8 at addr ffff88811ee54a00 by task kworker/0:2/221 [ 347.265251][ T221] [ 347.267784][ T221] CPU: 0 PID: 221 Comm: kworker/0:2 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 347.278001][ T221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.288328][ T221] Workqueue: usb_hub_wq hub_event [ 347.293492][ T221] Call Trace: [ 347.296808][ T221] [ 347.299768][ T221] __dump_stack+0x21/0x24 [ 347.304203][ T221] dump_stack_lvl+0xee/0x150 [ 347.309004][ T221] ? __cfi_dump_stack_lvl+0x8/0x8 [ 347.314171][ T221] ? enqueue_timer+0xae/0x480 [ 347.319138][ T221] print_address_description+0x71/0x210 [ 347.325052][ T221] print_report+0x4a/0x60 [ 347.329414][ T221] kasan_report+0x122/0x150 [ 347.334033][ T221] ? enqueue_timer+0xae/0x480 [ 347.338857][ T221] __asan_report_store8_noabort+0x17/0x20 [ 347.345135][ T221] enqueue_timer+0xae/0x480 [ 347.350054][ T221] __mod_timer+0x79f/0xb30 [ 347.354679][ T221] schedule_timeout+0x127/0x2e0 [ 347.359722][ T221] ? __cfi_schedule_timeout+0x10/0x10 [ 347.365124][ T221] ? __cfi_process_timeout+0x10/0x10 [ 347.370522][ T221] ? __cfi__raw_spin_lock+0x10/0x10 [ 347.376125][ T221] ? _raw_spin_lock+0x8e/0xe0 [ 347.380968][ T221] wait_for_common+0x354/0x620 [ 347.386207][ T221] ? usb_hcd_giveback_urb+0x351/0x410 [ 347.391697][ T221] ? wait_for_completion+0x20/0x20 [ 347.397011][ T221] ? usb_submit_urb+0x122d/0x1900 [ 347.402228][ T221] wait_for_completion_timeout+0xe/0x10 [ 347.407882][ T221] usb_start_wait_urb+0x166/0x2f0 [ 347.413075][ T221] ? usb_api_blocking_completion+0xb0/0xb0 [ 347.419016][ T221] ? usb_alloc_urb+0x44/0x140 [ 347.424060][ T221] ? __kasan_check_write+0x14/0x20 [ 347.429388][ T221] usb_control_msg+0x241/0x3f0 [ 347.434203][ T221] hub_ext_port_status+0x100/0x6b0 [ 347.439625][ T221] hub_event+0x7e6/0x4680 [ 347.444157][ T221] ? sched_clock+0x9/0x10 [ 347.448711][ T221] ? __cfi___switch_to+0x10/0x10 [ 347.454189][ T221] ? _raw_spin_unlock+0x4c/0x70 [ 347.459508][ T221] ? __cfi_hub_event+0x10/0x10 [ 347.464656][ T221] ? __schedule+0xb8f/0x14e0 [ 347.469633][ T221] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 347.475292][ T221] process_one_work+0x71f/0xc40 [ 347.480683][ T221] worker_thread+0xa29/0x11f0 [ 347.485670][ T221] kthread+0x281/0x320 [ 347.490138][ T221] ? __cfi_worker_thread+0x10/0x10 [ 347.495360][ T221] ? __cfi_kthread+0x10/0x10 [ 347.500310][ T221] ret_from_fork+0x1f/0x30 [ 347.504931][ T221] [ 347.508048][ T221] [ 347.510368][ T221] Allocated by task 3942: [ 347.514799][ T221] kasan_set_track+0x4b/0x70 [ 347.519655][ T221] kasan_save_alloc_info+0x25/0x30 [ 347.524994][ T221] __kasan_kmalloc+0x95/0xb0 [ 347.529873][ T221] __kmalloc+0xb1/0x1e0 [ 347.534348][ T221] hci_alloc_dev_priv+0x27/0x1bd0 [ 347.539544][ T221] hci_uart_tty_ioctl+0x3d6/0xa20 [ 347.544854][ T221] tty_ioctl+0x8ef/0xc60 [ 347.549233][ T221] __se_sys_ioctl+0x12f/0x1b0 [ 347.554372][ T221] __x64_sys_ioctl+0x7b/0x90 [ 347.559713][ T221] x64_sys_call+0x58b/0x9a0 [ 347.564520][ T221] do_syscall_64+0x4c/0xa0 [ 347.569133][ T221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.576148][ T221] [ 347.578675][ T221] Freed by task 3942: [ 347.582688][ T221] kasan_set_track+0x4b/0x70 [ 347.587336][ T221] kasan_save_free_info+0x31/0x50 [ 347.592564][ T221] ____kasan_slab_free+0x132/0x180 [ 347.597864][ T221] __kasan_slab_free+0x11/0x20 [ 347.602650][ T221] slab_free_freelist_hook+0xc2/0x190 [ 347.608559][ T221] __kmem_cache_free+0xb7/0x1b0 [ 347.613542][ T221] kfree+0x6f/0xf0 [ 347.617409][ T221] hci_release_dev+0x12a3/0x13b0 [ 347.622704][ T221] bt_host_release+0x82/0x90 [ 347.627399][ T221] device_release+0xa4/0x1d0 [ 347.632018][ T221] kobject_put+0x19d/0x280 [ 347.636794][ T221] put_device+0x1f/0x30 [ 347.641229][ T221] hci_dev_cmd+0x265/0x720 [ 347.645965][ T221] hci_sock_ioctl+0x41e/0x7f0 [ 347.650924][ T221] sock_do_ioctl+0x101/0x310 [ 347.656003][ T221] sock_ioctl+0x4d8/0x6e0 [ 347.660565][ T221] __se_sys_ioctl+0x12f/0x1b0 [ 347.665498][ T221] __x64_sys_ioctl+0x7b/0x90 [ 347.670287][ T221] x64_sys_call+0x58b/0x9a0 [ 347.675156][ T221] do_syscall_64+0x4c/0xa0 [ 347.679802][ T221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.686013][ T221] [ 347.688468][ T221] Last potentially related work creation: [ 347.694368][ T221] kasan_save_stack+0x3a/0x60 [ 347.699250][ T221] __kasan_record_aux_stack+0xb6/0xc0 [ 347.705257][ T221] kasan_record_aux_stack_noalloc+0xb/0x10 [ 347.711376][ T221] insert_work+0x51/0x300 [ 347.715846][ T221] __queue_work+0x9b1/0xd30 [ 347.720637][ T221] queue_work_on+0xd2/0x140 [ 347.725604][ T221] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 347.730908][ T221] hci_cmd_sync_status+0x53/0x120 [ 347.736109][ T221] hci_dev_cmd+0x628/0x720 [ 347.740739][ T221] hci_sock_ioctl+0x41e/0x7f0 [ 347.745694][ T221] sock_do_ioctl+0x101/0x310 [ 347.750847][ T221] sock_ioctl+0x4d8/0x6e0 [ 347.755644][ T221] __se_sys_ioctl+0x12f/0x1b0 [ 347.760797][ T221] __x64_sys_ioctl+0x7b/0x90 [ 347.765495][ T221] x64_sys_call+0x58b/0x9a0 [ 347.770002][ T221] do_syscall_64+0x4c/0xa0 [ 347.774513][ T221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.780666][ T221] [ 347.782998][ T221] Second to last potentially related work creation: [ 347.789572][ T221] kasan_save_stack+0x3a/0x60 [ 347.794516][ T221] __kasan_record_aux_stack+0xb6/0xc0 [ 347.800139][ T221] kasan_record_aux_stack_noalloc+0xb/0x10 [ 347.806158][ T221] insert_work+0x51/0x300 [ 347.810722][ T221] __queue_work+0x9b1/0xd30 [ 347.815421][ T221] queue_work_on+0xd2/0x140 [ 347.820112][ T221] hci_cmd_timeout+0x191/0x200 [ 347.825159][ T221] process_one_work+0x71f/0xc40 [ 347.830462][ T221] worker_thread+0xa29/0x11f0 [ 347.835370][ T221] kthread+0x281/0x320 [ 347.839460][ T221] ret_from_fork+0x1f/0x30 [ 347.844067][ T221] [ 347.846579][ T221] The buggy address belongs to the object at ffff88811ee54000 [ 347.846579][ T221] which belongs to the cache kmalloc-8k of size 8192 [ 347.860819][ T221] The buggy address is located 2560 bytes inside of [ 347.860819][ T221] 8192-byte region [ffff88811ee54000, ffff88811ee56000) [ 347.874689][ T221] [ 347.877504][ T221] The buggy address belongs to the physical page: [ 347.884459][ T221] page:ffffea00047b9400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11ee50 [ 347.894996][ T221] head:ffffea00047b9400 order:3 compound_mapcount:0 compound_pincount:0 [ 347.903510][ T221] flags: 0x4000000000010200(slab|head|zone=1) [ 347.909996][ T221] raw: 4000000000010200 ffffea00047d4c00 dead000000000004 ffff888100043500 [ 347.918668][ T221] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 347.927770][ T221] page dumped because: kasan: bad access detected [ 347.934291][ T221] page_owner tracks the page as allocated [ 347.940366][ T221] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1109, tgid 1099 (syz.0.145), ts 118788891499, free_ts 116540344048 [ 347.963843][ T221] post_alloc_hook+0x1f5/0x210 [ 347.968705][ T221] prep_new_page+0x1c/0x110 [ 347.973331][ T221] get_page_from_freelist+0x2c7b/0x2cf0 [ 347.979246][ T221] __alloc_pages+0x1c3/0x450 [ 347.984577][ T221] alloc_slab_page+0x6e/0xf0 [ 347.989281][ T221] new_slab+0x98/0x3d0 [ 347.993380][ T221] ___slab_alloc+0x6f6/0xb50 [ 347.998361][ T221] __slab_alloc+0x5e/0xa0 [ 348.003098][ T221] __kmem_cache_alloc_node+0x203/0x2c0 [ 348.009007][ T221] __kmalloc+0xa1/0x1e0 [ 348.013342][ T221] ops_init+0x89/0x4a0 [ 348.017427][ T221] setup_net+0x4ab/0xcb0 [ 348.021679][ T221] copy_net_ns+0x355/0x5c0 [ 348.026272][ T221] create_new_namespaces+0x3a2/0x660 [ 348.032265][ T221] copy_namespaces+0x1d1/0x220 [ 348.037252][ T221] copy_process+0x12e0/0x3420 [ 348.042046][ T221] page last free stack trace: [ 348.046730][ T221] free_unref_page_prepare+0x742/0x750 [ 348.052727][ T221] free_unref_page+0x8f/0x530 [ 348.057682][ T221] free_compound_page+0x99/0xd0 [ 348.062730][ T221] destroy_large_folio+0x68/0xa0 [ 348.067864][ T221] __folio_put+0xd1/0xe0 [ 348.072134][ T221] skb_release_data+0x47f/0x890 [ 348.077013][ T221] __kfree_skb+0x50/0x70 [ 348.081481][ T221] tcp_rtx_queue_unlink_and_free+0x400/0x640 [ 348.087738][ T221] tcp_ack+0x1e6f/0x5cd0 [ 348.092370][ T221] tcp_rcv_established+0x72d/0x1a20 [ 348.097667][ T221] tcp_v4_do_rcv+0x446/0xa10 [ 348.102527][ T221] tcp_v4_rcv+0x233c/0x2a80 [ 348.107263][ T221] ip_protocol_deliver_rcu+0x325/0x6e0 [ 348.112955][ T221] ip_local_deliver_finish+0x24e/0x410 [ 348.118975][ T221] ip_local_deliver+0x1d8/0x320 [ 348.123923][ T221] ip_sublist_rcv+0x773/0x880 [ 348.128720][ T221] [ 348.131135][ T221] Memory state around the buggy address: [ 348.137026][ T221] ffff88811ee54900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 348.145687][ T221] ffff88811ee54980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 348.154371][ T221] >ffff88811ee54a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 348.162727][ T221] ^ [ 348.167063][ T221] ffff88811ee54a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 348.175313][ T221] ffff88811ee54b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 348.183483][ T221] ================================================================== [ 348.191976][ T221] Disabling lock debugging due to kernel taint [ 348.202446][ T221] usb 2-1: USB disconnect, device number 10 [ 348.209467][ T19] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 348.222355][ T19] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 348.232448][ T19] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 348.303726][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 348.315506][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 348.324063][ C0] CPU: 0 PID: 4001 Comm: syz.1.1041 Tainted: G B 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 348.335531][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 348.346154][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 348.351557][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 38 dc 28 00 4c 89 ff e8 b0 30 ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 fc 38 6d 00 49 8b 7d 00 e8 93 2c [ 348.371520][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 348.377769][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888121d38000 [ 348.386294][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 348.394538][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 348.402519][ C0] R10: ffffed1023dca939 R11: 1ffff11023dca939 R12: dffffc0000000000 [ 348.410957][ C0] R13: 0000000000000000 R14: ffff88811ee549c8 R15: 0000000000000008 [ 348.419212][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 348.428273][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.435040][ C0] CR2: 00007f45111ffe9c CR3: 0000000006e0f000 CR4: 00000000003506b0 [ 348.443114][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 348.451267][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 348.459276][ C0] Call Trace: [ 348.462739][ C0] [ 348.466247][ C0] delayed_work_timer_fn+0x61/0x80 [ 348.471479][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 348.474460][ T503] usb 8-1: USB disconnect, device number 8 [ 348.477523][ C0] call_timer_fn+0x46/0x2a0 [ 348.488673][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 348.494790][ C0] __run_timers+0x667/0x9a0 [ 348.499611][ C0] ? calc_index+0x200/0x200 [ 348.504240][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 348.509484][ C0] run_timer_softirq+0x6a/0xf0 [ 348.514433][ C0] handle_softirqs+0x1d7/0x600 [ 348.519467][ C0] ? irqtime_account_irq+0xc4/0x240 [ 348.524945][ C0] __irq_exit_rcu+0x52/0xf0 [ 348.529867][ C0] irq_exit_rcu+0x9/0x10 [ 348.534125][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 348.540043][ C0] [ 348.543076][ C0] [ 348.546243][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 348.552440][ C0] RIP: 0010:__kasan_check_read+0x11/0x20 [ 348.558264][ C0] Code: 34 03 45 31 ff eb d1 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 f1 16 b4 ef 55 48 89 e5 89 f6 48 8b 4d 08 31 d2 e8 df e7 ff ff <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 [ 348.578400][ C0] RSP: 0018:ffffc9000230f430 EFLAGS: 00000256 [ 348.584745][ C0] RAX: ffffffff81a8c801 RBX: ffffea0004badf00 RCX: ffffffff81a8c827 [ 348.593042][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0004badf00 [ 348.601309][ C0] RBP: ffffc9000230f430 R08: dffffc0000000000 R09: fffff94000975be1 [ 348.609677][ C0] R10: fffff94000975be1 R11: 1ffffd4000975be0 R12: ffffea0004badf08 [ 348.617955][ C0] R13: 1ffffd4000975be1 R14: ffffea0004badf00 R15: dffffc0000000000 [ 348.626403][ C0] ? unmap_page_range+0x1191/0x2310 [ 348.632840][ C0] ? unmap_page_range+0x11b7/0x2310 [ 348.638144][ C0] unmap_page_range+0x11b7/0x2310 [ 348.643291][ C0] ? __cfi_unmap_page_range+0x10/0x10 [ 348.649304][ C0] ? mas_find+0x155/0x370 [ 348.653973][ C0] unmap_vmas+0x31c/0x430 [ 348.658606][ C0] ? __cfi_unmap_vmas+0x10/0x10 [ 348.663676][ C0] ? __cfi_lru_add_drain_cpu+0x10/0x10 [ 348.669351][ C0] ? __kasan_check_write+0x14/0x20 [ 348.674674][ C0] exit_mmap+0x263/0xa40 [ 348.679284][ C0] ? __cfi_exit_mmap+0x10/0x10 [ 348.684151][ C0] ? __cfi_exit_aio+0x10/0x10 [ 348.688935][ C0] ? uprobe_clear_state+0x2c1/0x320 [ 348.694172][ C0] __mmput+0x93/0x320 [ 348.698189][ C0] ? mmput+0x43/0x150 [ 348.702528][ C0] mmput+0x4b/0x150 [ 348.706374][ C0] do_exit+0x981/0x2650 [ 348.710544][ C0] ? __cfi_do_exit+0x10/0x10 [ 348.715362][ C0] ? plist_del+0x3df/0x3f0 [ 348.719792][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 348.724856][ C0] ? futex_unqueue+0x126/0x160 [ 348.729888][ C0] ? __kasan_check_write+0x14/0x20 [ 348.735301][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 348.740433][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 348.746343][ C0] do_group_exit+0x210/0x2d0 [ 348.750985][ C0] ? __kasan_check_write+0x14/0x20 [ 348.756220][ C0] get_signal+0x13b5/0x1520 [ 348.760860][ C0] arch_do_signal_or_restart+0xb0/0x1030 [ 348.766782][ C0] ? do_futex+0x2dc/0x420 [ 348.771159][ C0] ? __cfi_do_futex+0x10/0x10 [ 348.776122][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 348.781694][ C0] ? sched_clock+0x9/0x10 [ 348.786333][ C0] ? sched_clock_cpu+0x6e/0x250 [ 348.791377][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 348.797952][ C0] ? __se_sys_futex+0x273/0x2e0 [ 348.803026][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 348.808530][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 348.814271][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 348.819864][ C0] do_syscall_64+0x58/0xa0 [ 348.824480][ C0] ? clear_bhb_loop+0x30/0x80 [ 348.829352][ C0] ? clear_bhb_loop+0x30/0x80 [ 348.834310][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.840486][ C0] RIP: 0033:0x7f66b978ebe9 [ 348.845121][ C0] Code: Unable to access opcode bytes at 0x7f66b978ebbf. [ 348.852317][ C0] RSP: 002b:00007f66ba6570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 348.861349][ C0] RAX: fffffffffffffe00 RBX: 00007f66b99b5fa8 RCX: 00007f66b978ebe9 [ 348.869338][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f66b99b5fa8 [ 348.877887][ C0] RBP: 00007f66b99b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 348.885957][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.894126][ C0] R13: 00007f66b99b6038 R14: 00007ffea9b19aa0 R15: 00007ffea9b19b88 [ 348.902140][ C0] [ 348.905404][ C0] Modules linked in: [ 348.909330][ C0] ---[ end trace 0000000000000000 ]--- [ 348.914877][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 348.920357][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 38 dc 28 00 4c 89 ff e8 b0 30 ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 fc 38 6d 00 49 8b 7d 00 e8 93 2c [ 348.940617][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010046 [ 348.948532][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888121d38000 [ 348.956731][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 348.965153][ C0] RBP: ffffc90000007d08 R08: fffffffffffffffb R09: 0000000000000007 [ 348.973317][ C0] R10: ffffed1023dca939 R11: 1ffff11023dca939 R12: dffffc0000000000 [ 348.981653][ C0] R13: 0000000000000000 R14: ffff88811ee549c8 R15: 0000000000000008 [ 348.990034][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 348.999164][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.005866][ C0] CR2: 00007f45111ffe9c CR3: 0000000006e0f000 CR4: 00000000003506b0 [ 349.013941][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 349.021938][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 349.030028][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 349.037741][ C0] Kernel Offset: disabled [ 349.042270][ C0] Rebooting in 86400 seconds..