last executing test programs: 59.821858323s ago: executing program 1 (id=17): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 59.4893702s ago: executing program 1 (id=25): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r2 = dup2(r1, r0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000240), 0x4) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200000d1) sendmmsg$inet6(r2, &(0x7f000000b380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f000000ac00)=[{&(0x7f0000009800)="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", 0x5df}], 0x1}}], 0x6, 0x10004000) 59.376346979s ago: executing program 1 (id=28): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) 59.349339512s ago: executing program 32 (id=28): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) 43.600494813s ago: executing program 33 (id=317): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010471bc30b00000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00f0"], 0x54}}, 0x0) 43.282004739s ago: executing program 34 (id=325): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 42.486002353s ago: executing program 35 (id=63): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername(r1, 0x0, &(0x7f0000000040)) 38.688842479s ago: executing program 36 (id=413): r0 = socket$key(0xf, 0x3, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf2a, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 34.143791995s ago: executing program 9 (id=543): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000064000000070000000c0000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001800010028bd7000000000000a800000000200000000000018001600140001000200000000000000000010000050000008000400", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x60004000}, 0x40094) 34.070867551s ago: executing program 9 (id=546): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='rss_stat\x00', r0}, 0x18) syz_clone(0x22023500, 0x0, 0x408, 0x0, 0x0, 0x0) 33.987588388s ago: executing program 9 (id=549): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x2c, r3, 0x301, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) 33.929700562s ago: executing program 9 (id=552): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") truncate(&(0x7f0000000000)='./file1\x00', 0x8000) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$exfat(0x0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1044022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mkdir(&(0x7f0000000080)='./file0\x00', 0x80) 33.751410297s ago: executing program 9 (id=561): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x59, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000240)={{0x1, 0x0, 0xfffffffffffffea8, {0x0, 0x8080000}}, "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", "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"}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000480)={{0x0, 0x0, 0xffffffffffffffca, {0x0, 0x3000}}, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffe700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fe00", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f56900000000000000000000000000000000000000000000000000000000f3ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a8c285400"}) 33.674969783s ago: executing program 9 (id=565): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 33.611901658s ago: executing program 37 (id=565): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 32.556236943s ago: executing program 1 (id=567): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031302c646973636172642c666d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d6575632d6a702c6572726f72733d636f6e74696e75652c616c6c6f775f7574696d653d30303030303030303030303030303030303134373037302c0092803b831534d131135366249e8a045ee656058ddf6f41400b01a0870e4c656ef6f11325a20c319fd81269acc3b77200feb4294a821f553876d64b4a41390c44492e6f79c4b09bbe8e5cb02585b919505651c34f3e21f9532204a0c936a1da6422edb1108cf73536e8fbe241e030f5b5e1d081994fbe8a093c44b63f3da6a8a46706b47fa3"], 0x1, 0x1528, &(0x7f00000037c0)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+p/M7/XKe37yf59mP9X73ftd+9/f9XvbeZubbrkNrNaldvRERwX8EL/yTBACxADAQAPICQAAA5ePKx2Wtzykx6T/bCftzPZh6pStgVxL3P3vj/mdv3P/sjfufvXH/szfuf/bG/c/euP+MZWebphW6hpfsu/D9/+yMv///D8ksM/bLNWWu6wYQ80dTuP/ZG/f//6zgj2zE/c/euP/ZVeyVLoD9F+D3f3aQ45+u4f5nb9x/xrKzK33/+UovEPkvew6O5LzQmL/q+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsb/AaX+ZAoBL4ytdF2OMMcYYY4wxxv48PseVroAxxhhjjDHGGGP/+xAESFAQQAzkgFjICblAAMDVkAfyQgSugTi4FvLBdZAfCkBBKATxUBiKgAYDFghCKArFIArXQ3G4AUpASSgFpcFBGUiAG6Es3ATl4GYoD7dABbgVKkIlqAxV4DaoCrdDNbgDqsOdUANqQi2oDXdBHbgb6sI9UA/uhfpwHzSA+6EhPACN4EFoDA9BE3gYmsIj0AyaQwtoCa3+R/nPQ094AXpBb0iCPtAXXoR+0B8GwEswEF6GQfAKDIZXIRmGwFB4DYbB6zAc3oARMBJGwZswGt6CMTAWxsF4SIEJMBHehknwDkyGd2EKTIVUmAbT4T2YATNhFrwPs+EDmANzYR7MhzT4EBbAQkiHj2ARfAwZsBiWwFJYBsthBayEVbAa1sBaWAfrYQNshE2wGbbAVtgG22EHfAI74VPYBbthD3wGe+HzfzP/1D/kd0NAQIECFSqMwRiMxVjMhbkwN+bGPJgHIxjBOIzDfJgP82N+LIgFMR7jsQgWQYMGCQmLYlGMYhSLY3EsgSWwFJZChw4TMAHL4k1YDstheSyPFbACVsRKWAmrYBWsilWxGlbD6lgda2ANrIW18C68C/tgXayL9bAe1sf6l25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YCImYkfsiJ2wE3bGztgFu2BX7IrdsDt2z3w+B+AL+AL2xhqiD/bFvtgPk3MMwJfwJXwZB+Er+Aq+isk4BIfia/gavo7D8SSOwJE4CkdhVfEWjsGxSGI8pmAKTsSJOAknYVah7+JUTMVpOB2n4wyciTPxfZyNH+AHOBfn4nxMwzRcgAsxHdNxEZ7CDFyMS3ApLsPluAxX4ipciWtwLa7B9bgeN+JG3IybcStuxe24HT9BBYCf4m7cjcm4F/fiPtyH+3E/HsADmImZeBAP4iE8hIfxMB7BI3gUj+FxPIYn8ASexFN4Gk/jWTyL5/DZ+K8bf1JydTKILEooESNiRKyIFblELpFb5BZ5RB4RERERJ+JEPpFP5Bf5RUFRUMSLeFFEFBFGGEEijAEAERVRUVwUFyVECVFKlBJOOJEgEkRZUVaUE+VEeXGLqCBuFRVFJdHWVRFVRFXRzlUTd4jqorqoIWqKWqK2qC3qiDqirqgr6ol6or6oLxqI+0VD0QcH4IMiqzNNxBBsKoZiM9FcyIufYK3FcGwj2op24nExEkdgB9HaJYqnREcxBjuJv4mx+IzoIsZjV/Gc6Ca6ix7iedFTtHG9RG8xGfuIvmIq9hP9xQDxkpiBNcX7ODtnLfGqSBZDxFDxmpiPr4vh4g0xQowUo8SbYrR4S4wRY8U4MV6kiAlionhbTBLviMniXTFFTBWpYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4sMsVgsEUvFMrFcrBArxSqxWqwRa8U6sV5sEBvFJrFZbBFbxTaxXewQn4id4lOxS+wWe8RnYq/4XOwTX4j94ktxQHwlMsXX4qD4RhwS34rD4jtxRHwvjopj4rj4QZwQP4qT4pQ4Lc6Is+IncU78LM4LL0CiFFJKJQMZI3PIWJlT5pJXydwyuPjsXiPj5LUyn7xO5pcFZEFZSMbLwrKI1NJIK0mGsqgsJqPyellc3iBLyJKylCwtnSwjE+SNsqy8SZaTN8vy8hZZQd4qK8pKsrKsIm+TVeXtEiIX9lFD1pS1ZG15l0yCu2VdeY+sJ++V9eV9soG8XzaUD8hG8kHZWD4km8iHZVP5iGwmm8sWsqVsJR+VreVjso1sK9vJx2V7+YTsIJ+UifIp2VH6iy+RZ2QX+azsKp+T3WR32UP+LM9LL3vJ3hL6gOwrX5T9ZH85IBYA5MtykHxFDpavymQ5RA6Vr8lh8nU5XL4hR8iRcpR8U46Wb8kxcqwcJ8fLFDlBTpRvy0nyHTlZviunyKkyVU6TA+TAX2aaJeW/zH/7d/IH/7L3jXKT3Cy3yK1ym9wud8hP5E65U+6Su+QeuUfulXvlPrlP7pf75QF5QGbKTHlQHpSH5CF5WB6WR+QReVQek2fkD/KE/FGelKfkKXlGnpVn5bmLzwEoVEJJpVSgYlQOFatyqlzqKpVbXa3yqLwqoq5RcepalU9dp/KrAqqgKqTiVWFVRGlllFWkQlVUFVNRdT1efMGoUqq0cqqMSlA3/jv5qri6QZVQJX+Vf6m+pH9SXyvVSrVWrVUb1Ua1U+1Ue9VedVAdVKJKVB1VR9VJdVKdVWfVRXVRXVVX1U11Uz1UD9VT9VS9VC+VpJJUX/Wi6qf6qwHqJTVQvawGqUFqsBqsklWyGqqGqmFqmBquhqsRaoQapUap0Wq0GqPGqHFqnEpRKWqimqgmqUlqspqspqgpKlWlqulqupqhZqhZapaarWarOWqOmqfmqTSVphaoBSpdpatFapHKUIvVYrVULVXL1XK1Uq1Uq9VqtVatVevVepWhNqlNaovaorapbWqH2qF2qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqU2Wqg+qgOqQOqcPqsDqijqij6qg6ro6rE+qEOqlOqtPqtDqrzqpz6pw6r85nnfYFIhCBClQQE8QEsUFskCvIFeQOcgd5gjxBJIgEcUFckC+4LsgfFAgKBoWC+KBwUCTQgQlsIC42PRpcHxQPbghKBCWDUkHpwAVlgoTgxqBscFNQLrg5KB/cElQIbg0qBpWCykGV4LaganB7UC24I6ge3BnUCGoGtYLawV1BneDuoG5wT1AvuDeoH9wXNAjuDxoGDwSNggeDxsFDQZPg4aBp8EjQLGgetAhaBq3+1Pm9P1ngMddL99ZJuo/uq1/U/XR/PUC/pAfql/Ug/YoerF/VyXqIHqpf08P063q4fkOP0CP1KP2mHq3f0mP0WD1Oj9cpeoKeqN/Wk/Q7erJ+V0/RU3Wqnqan6/f0DD1Tz9Lv69n6Az1Hz9Xz9Hydpj/UC/RCna4/0ov0xzpDL9ZL9FK9TC/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1v1zv0J3qn/lTv0rv1Hv2Z3qs/1/v0F3q//lIf0F/pTP21Pqi/0Yf0t/qw/k4f0d/ro/qYPq5/0Cf0j/qkPqVP6zP6rP5Jn9M/6/PaZ53cZ329G2WUiTExJtbEmlwml8ltcps8Jo+JmIiJM3Emn8ln8pv8pqApaOJNvCliipgsZMgUNUVN1ERNcVPclDAlTClTyjjjTIJJMGVNWVPOlDPlTXlTwVQwFU1FU9lUNreZ28zt5nZzh7nD3GnuNDVNTVPb1DZ1TB1T19Q19Uw9U9/UNw1MA9PQNDSNTCPT2DQ2TUwT09Q0Nc1MM9PCtDCtTCvT2rQ2bUwb0860M+1Ne9PBdDCJJtF0NB1NJ9PJdDadTRfTxXQ1XU030830MD1MT9PT9DK9TJJJMn1NX9PP9DMDzAAz0Aw0g8wgM9gMNskm2Qw1Q80wM8wMN8PNCDPSjMo6UTVvmTFmrBlnxpsUk2ImmolmkplkJpvJZoqZYlJNqpluppsZZoaZZWaZ2Wa2mWPmmHlmnkkzaWaBWWDSTbpZZBaZDJNhlpglZplZZlaYFWaVWWXWmDVmHawzG8wGs8lsMlvMFrPNbDM7zA6z0+w0u8wus8fsMXvNXrPP7DP7zX5zwBwwmSbTHDQHzSFzyBw2h80Rc8QcNUfNcXPcnDAnzElz0pw2p81ZU+Di96U3sTanzWWvsrnt1TaPzWv/MS5oC9l4W9gWsdrmtwV+FRtrbQlb0paypa2zZWyCvfE3cUVbyVa2Vexttqq93Vb7TVzH3m3r2ntsPXuvrW3v+lVc395nG9iHbUNEANvcNrYtbRP7sG1qH7HNbHPbwra07e0TtoN90ibap2xH+/Rv4gV2oV1lV9s1dq3dZXfb0/aMPWS/tWftT7aX7W0H2pftIPuKHWxftcl2yG/iUfZNO9q+ZcfYsXacHf+beIqdalPtNDvdvmdn2Jm/idPsh3a2Tbdz7Fw7z87/Jc6qKd1+ZBfZj22GDWCJXWqX2eV2hV15qVaf1663G+xGu9N+arfYrXab3W53XDoRtrvtHvuZ3Ws/twftN3a//dIesIdtpv36lzjr+A7b7+wR+709ao/Z4/YHe8L+qC5lZx37D/Zne956C4QEJElRQDGUg2IpJ+Wiqyg3XU15KC9F6BqKo2spH11H+akAFaRCFE+FqQhpMmSJKKSiVIyidD1dKq8UlSZHZSiBbqSydBOVo5upPN1CFehWqkiVqDJVoduoKt1O1egOqk53Ug2qSbWoNt1Fdehuqkv3UD26l+rTfdSA7qeG9AA1ogepMT1ETehhakqPUDNqTi2oJbWiR6k1PUZtqC21o8epPT1BHehJSqSnqCM9TZ3ob9SZnqEu9Cx1peeoG3WnHvQ89aQXqBf1piTqQ33pRepH/WkAvUQD6WUaRK/QYHqVkmkIDaXXaBi9TsPpDRpBI2kUvUmj6S0aQ2NpHI2nFJpAE+ltmkTv0GR6l6bQVEqlaTSd3qMZNJNm0fs0mz6gOTSX5tF8SqMPaQEtpHT6iBbRx5RBi2kJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQJ7STPqVdtJv20Ge0lz6nffQF7acv6QB9RZn0NR2kb+gQfUuH6Tvfm76no3SMjtMPdIJ+pJN0ik7TGTpLP9E5+pnOkycIMRShDFUYhDFhjjA2zBnmCq8Kc4dXh3nCvGEkvCaMC68N84XXhfnDAmHBsFAYHxYOi4Q6NKENKQzDomGxMBpeHxYPbwhLhCXDUmHp0IVlwoTwxrBseFNYLrw5LB/eElYIbw0rhpXCh++tEt4WVg1vD6uFd4TVwzvDGmHNsFZYO7wrrBPeHdYN7wnrhfeG5cL7wgbh/WHD8IGwUfhg2Dh8KGwSPhw2DR8Jm4XNwxZhy7BV+GjYOnwsbBO2DduFj4ftwyfCDuGTYWL4VNgxfPqX9fct/Ofrk8I+Yd/wxfDF0Pt75Lzo/Gha9MPogujCaHr0o+ii6MfRjOji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iboxqj3tXOAQyecdMoFLsblcLEup8vlrnK53dUuj8vrIu4aF+eudfncdS6/K+AKukIu3hV2RZx2xllHLnRFXTEXdde74u4GV8KVdKVcaedcGZfgWrpWrpVr7R5zbVxb18497h53T7gn3JPuSfeU6+iedp3c31xn94zr4p51z7rnXDfX3fVwz7uebkKeC+/JJNfX9XX9XD83wA1wA91AN8gNcoPdYJfskt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NciktxE91EN8lNcpPdZDfFTXGpLtVNd9PdDDfDVZ15YS9z3Bw3z81zaS7NLXBZ54zpbpFb5DJchlvilrhlbplb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+F2uJ1up9vl816Y1O11+9w+t9/tdwfcVy7Tfe0Oum/cIfetO+y+c0fc9+6oO+aOux/cCfejO+lOudPujDvrfnLn3M/uvPMuJTIhMjHydmRS5J3I5Mi7kSmRqZHUyLTI9Mh7kRmRmZFZkfcjsyMfROZE5kbmReZH0iIfRhZEFkbSIx9FFkU+jmREFkeWRJZGlkWWR7wvvCX0RX0xH/XX++L+Bl/Cl/SlfGnvfBmf4G/0Zf1Nvpy/2Zf3t/gK/lZf0Vfylf0jvplv7lv4lr6Vf9S39o/5Nr6tb+cf9+39E76Df9In+qd8R/+07+T/5jv7Z3wX/6zv6p/z3Xx338M/73v6F3wv39sn+T6+r3/R9/P9/QD/kh/oX/aD/Ct+sH/VJ/shfqh/zQ/zr/vh/g0/wo/0o2Le9KMvXSLDeJ/iJ/iJ/m0/yb/jJ/t3/RQ/1af6aX66f8/P8DP9LP++n+0/8HP8XD/Pz/dp/kO/wC/06f4jv8h/7DP84ks3lf0Kv9Kv8qv9Gr/Wr/Pr/Qa/0W/ym/0Wv9Vv89v9Dv+J3+k/9bv8br/Hf+b3+s/9Pv+F3++/9Af8Vz7Tf+0P+m/8If+tP+y/80f89/6oP+aP+x/8Cf+jP+lP+dP+jD/rf/Ln/M/+PP/OGmOMMcbYHzLh8lD8es2F2/l9fidH/N3GfQHg6q2FMv9+fdYZ5br8F8b9RXz7CAA81bvrg5eWGjWSkpIubpshISg2F+DS/wRliYHL8WJoB09AIrSFsr9bf3/R/Sz9i/mjtwDk+rucWLgcX57/CwBM+p35H3181IIK4em4/8/8cwFKFLuckxMux4uh3S/3V9pCuX9Sf4HW/6L+nF+mALT5u5zccDm+XH8CPAZPQ+KvtmSMMcYYY4wxxi7oLyp3vnT9eeknPn/v+jxeXc7JAZfjf3V9zhhjjDHGGGOMsSvvme49nnw0MbFt539/UO1/lPWHB03hf2tmHvzuwHuAS48oAPgPJwTIGsi/8ig2/yX7Sr741vnHVcvO+AD+O1r5Zwyu8AcTY4wxxhhj7E93+aT/14+rK1UQY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWDf0Vf07sSh8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//kfb+pw==") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) open(&(0x7f0000000200)='./file0/file0\x00', 0x2000000, 0x0) 32.429279824s ago: executing program 1 (id=594): syz_clone3(&(0x7f00000001c0)={0xad021080, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000400)={'lo\x00', {0x2, 0x4e23, @remote}}) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000890) 32.23626657s ago: executing program 1 (id=595): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x02\x00\x00\x006w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\xf0\x8f\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r1, &(0x7f0000002140)="6963e65843ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000019240)=""/102393, 0x18ff9) 32.195807803s ago: executing program 38 (id=595): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x02\x00\x00\x006w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\xf0\x8f\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r1, &(0x7f0000002140)="6963e65843ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000019240)=""/102393, 0x18ff9) 30.226488901s ago: executing program 6 (id=643): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000140)={&(0x7f0000000180), 0x0, 0xffa2}) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000000c0)={&(0x7f00000012c0), &(0x7f0000002340)=""/4118, 0x1016}) 30.012751828s ago: executing program 6 (id=648): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getpriority(0x0, 0x0) 30.00068286s ago: executing program 6 (id=650): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) 29.859748561s ago: executing program 6 (id=653): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3420029, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x125) getdents64(r0, 0xfffffffffffffffe, 0x53) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) 29.74293823s ago: executing program 6 (id=654): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000020000202505a1a440000e02030109025c0002010000000904000001020d0000052406000105240000800d240f0105000000010000000006241a00002809058103ff030000000904010000020d00000904010102020d0000090582022000000101090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x209, 0x8, 0x1000, 0x3, 0x10, 0x8, 0x810, 0x14, 0x0, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 29.112373281s ago: executing program 6 (id=657): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029300030100000009040000000101"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0003de000000de03"]}, 0x0) mkdir(0x0, 0x0) 29.112220411s ago: executing program 39 (id=657): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029300030100000009040000000101"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0003de000000de03"]}, 0x0) mkdir(0x0, 0x0) 9.465720197s ago: executing program 0 (id=1062): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xfdff) 9.450147568s ago: executing program 2 (id=1053): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002064070000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x0, 0x0, 0x0) 9.438846128s ago: executing program 0 (id=1054): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000180)=ANY=[@ANYBLOB='fmask=00000000000000000000343,sys_immutable,usefree,tz=UTC,check=n\x00\x00\x00\x00\x00\x00\x00'], 0x2, 0x1de, &(0x7f0000000dc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x1a) truncate(&(0x7f0000010fc0)='./file1\x00', 0x5) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000080)=0x1) 9.4250586s ago: executing program 0 (id=1055): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x3f00, 0x7) 9.41924035s ago: executing program 2 (id=1056): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x1000, 0x3, 0x1, 0xeffffe01, 0x0, [{0x9, 0xff, 0x0, '\x00', 0x5}, {0x15, 0x0, 0x5}, {0x8, 0x7}, {0x0, 0x0, 0x7d, '\x00', 0x1}, {0xa}, {0x81, 0x2, 0x7}, {0xb, 0x8, 0x30, '\x00', 0x3}, {}, {0x0, 0x32, 0xfa, '\x00', 0x8}, {0xf, 0x5}, {0xff, 0x5}, {0x0, 0x8, 0xff, '\x00', 0xf8}, {0x0, 0x4}, {0x3, 0x0, 0xff, '\x00', 0xc2}, {0xfc, 0xa, 0x0, '\x00', 0x3}, {0x0, 0x86, 0x80, '\x00', 0x5}, {0x7, 0x2, 0x7f}, {0x5, 0x0, 0x0, '\x00', 0x10}, {0x20, 0xfd, 0x19, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x26}, {0x3, 0x7}, {0x0, 0x0, 0x41}, {0x4, 0x0, 0x6}, {0x8, 0x80, 0x6}]}}) 9.398815112s ago: executing program 0 (id=1057): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000500)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 9.380112903s ago: executing program 0 (id=1058): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000004c0)=""/174, 0xae}], 0x1}, 0xffffffff}], 0x1, 0x102, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000280)) sendto$inet(r0, &(0x7f0000000380)="d7", 0x1, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 9.320310088s ago: executing program 0 (id=1059): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000070000002800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 9.289353981s ago: executing program 40 (id=1059): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000070000002800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 9.189245009s ago: executing program 2 (id=1061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xfff7fffffffffffe, 0xeeee0000, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) 9.033638901s ago: executing program 2 (id=1063): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x450, &(0x7f0000001000)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1DW9rClJbC9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SU4vrFm4g3Px9q44CBqlar1S2dD5+rAhtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT9ZWApKI2BkRu3qs49izP+zpdOzm8XfRh3Wm6vcRz9Sv/7loib+QdF+fnP1fVJb2zRZ3xY1++/3CO53qv634+yC7/v9ve/+vxT+ZNK7Xrqy/jgt/fdlxTtPr/T+evFdLj+f7PplfXT01FzGeHK43unH//uvnFvmifBb/9N72/X97rL0SY7sjIruJH42IxyLi8bztT0TEkxGxt0v8v77+1Ie9xz9YWfyL67r+1xPj0bqnfaJ0/JcfmyqdvCH+a92v/8Faajrfcyvvf7fSrt7uZgAAALj3pBGxNZJ0Zi2dpjMz9e/L74hIK8srq88dWf745GL9NwKTEWnxpGui4XnoXD6tr+fPR0T9qwXF8QP5c+NvS5tr+ZmF5crisIOHEbelQ//P/F0aduuAgfN7LRhd+j+MLv0fRpf+D6OrTf/fPIx2AHdeu8//z4bQDuDOa+n/lv1ghJj/w+jq2P89BYANz+c/jKSVzXHzH8l3TRR/qcfTN2wiyndFMwaWiPSuaMZdmyjf4/1ieO9JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fRfAAAA//8vPt14") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x40a8, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x1200009, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x400, 0x30) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="00ff00000000000036406b"]) 8.903353472s ago: executing program 2 (id=1064): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x7fe2, 0x3}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) socket$packet(0x11, 0x3, 0x300) 8.731544446s ago: executing program 2 (id=1067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000003c0), &(0x7f0000000500)='%pB \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r2}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) 8.725452416s ago: executing program 41 (id=1067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000003c0), &(0x7f0000000500)='%pB \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r2}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) 4.877401466s ago: executing program 4 (id=1135): io_submit(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc22d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x81657b94fb2d95c8, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0xfc, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x0, "d25e6fa6"}, @global=@item_012={0x1, 0x1, 0x0, "1c"}]}}, 0x0}, 0x0) 4.226158739s ago: executing program 7 (id=1141): r0 = socket$inet6(0xa, 0x3, 0x26) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xae}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1, 0x4000, 0x0, 0x0, 0x0, 0x9}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 4.085454631s ago: executing program 7 (id=1145): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x850, 0x31, 0x1, 0x0, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xb1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400044, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xd, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28aa9480, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xe44, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x6, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x8, 0xfffffffd, 0x0, 0xbdd6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8b]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x850}}, 0x0) 4.065771682s ago: executing program 7 (id=1146): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 4.051726173s ago: executing program 7 (id=1147): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000440)) 3.150760486s ago: executing program 4 (id=1168): r0 = syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') getdents64(r0, &(0x7f0000000000)=""/77, 0x2a) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) getdents64(r0, &(0x7f0000000140)=""/69, 0x45) 3.116117198s ago: executing program 4 (id=1170): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.002133738s ago: executing program 7 (id=1171): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "835ae5da"}]}}, 0x0}, 0x0) syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x9, 0xa0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x4}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x100, 0x2, 0x7, 0x6715, 0x8, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xe6, 0x6, 0x3, {0x7, 0x25, 0x1, 0x1, 0x6, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xd, 0xf9, 0x8, {0x7, 0x25, 0x1, 0x1, 0x55, 0x6}}}}}}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0xac, &(0x7f0000000700)=@string={0xac, 0x3, "1d61868b29ea6ee35eefa2713489343b0853cdc8412f3b4a13ee390075ac930adf225fe154944ef7e92e882bbc4a45aceb61f5583ed332ea1c3c1b1a3ef9f22b638cb671390c21a87e2b9ad291fc618701d2ffc5dcd412037656913b69d0e1355e7a5a56f39a92817b3f0bd06165b8c9b25afd7b131fb13b9809ff88d6acb992f452ef28803dc207d1180fbf672c0225e550f75934010c58053806b6b84c2eca4a52db6bdaf3435dc745"}}, {0x68, &(0x7f0000000800)=@string={0x68, 0x3, "f7011d52a8667a0860d99cac36aaab21b1f1eedd6556575c372d683f8d59e7f840ea1e19b5b8d1405ca9dc75ab6cd5a4b041b48e8c2f61a5ebc00c2646f40c0ef6668b221e50675e7f97aa8cde93dbcb13d365f7321ff7e2ce05ee4b4e8f3a73733bfa2208d5"}}]}) io_uring_enter(0xffffffffffffffff, 0x627, 0xc1040000, 0x43, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 2.002030508s ago: executing program 4 (id=1172): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000100)="ea3b0b", 0x3) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 245.69219ms ago: executing program 3 (id=1192): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x3b, &(0x7f0000000580)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x3, 0x0, 0x19, 0x0, @wg=@data={0x220, 0x4, 0x80000000000003ff, ' '}}}}}}, 0x0) 241.30334ms ago: executing program 5 (id=1202): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0x0) 197.897234ms ago: executing program 5 (id=1193): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 974.56µs ago: executing program 3 (id=1198): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 854.22µs ago: executing program 8 (id=1200): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xd0100, 0xf4) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 0s ago: executing program 7 (id=1201): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff1f000000", @ANYRES32=r2, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r2, @ANYBLOB="08000c0000ff"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {0xfffffffffffffffd}], 0x2}}], 0x2, 0x0) kernel console output (not intermixed with test programs): p7: detected capacity change from 0 to 128 [ 42.939958][ T1276] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 42.965887][ T1276] EXT4-fs (loop0): shut down requested (1) [ 42.967040][ T1290] EXT4-fs: Ignoring removed nobh option [ 42.982825][ T285] EXT4-fs (loop0): unmounting filesystem. [ 43.001671][ T1290] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 43.016283][ T1290] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.062856][ T1138] EXT4-fs (loop7): unmounting filesystem. [ 43.067841][ T1298] netlink: 12 bytes leftover after parsing attributes in process `syz.8.379'. [ 43.142663][ T1306] loop7: detected capacity change from 0 to 128 [ 43.164836][ T1306] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 43.176430][ T1306] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.239962][ T1138] EXT4-fs (loop7): unmounting filesystem. [ 43.313998][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 43.373092][ T1327] netlink: 8 bytes leftover after parsing attributes in process `syz.8.393'. [ 43.433862][ T1335] syz.6.397[1335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.434778][ T1335] syz.6.397[1335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.450386][ T1335] syz.6.397[1335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.463747][ T1335] syz.6.397[1335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.504016][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 43.523890][ T1321] loop7: detected capacity change from 0 to 40427 [ 43.544235][ T6] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 43.554018][ T6] usb 1-1: config 0 has no interface number 0 [ 43.560145][ T6] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 43.581211][ T1321] F2FS-fs (loop7): invalid crc value [ 43.586809][ T6] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 43.603763][ T1321] F2FS-fs (loop7): Found nat_bits in checkpoint [ 43.620092][ T6] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 43.636399][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.662026][ T6] usb 1-1: Product: syz [ 43.666605][ T6] usb 1-1: Manufacturer: syz [ 43.669782][ T1321] F2FS-fs (loop7): Start checkpoint disabled! [ 43.671749][ T6] usb 1-1: SerialNumber: syz [ 43.691528][ T6] usb 1-1: config 0 descriptor?? [ 43.697340][ T1321] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 43.705587][ T1297] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 43.712771][ T1297] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 43.815309][ T1138] syz-executor: attempt to access beyond end of device [ 43.815309][ T1138] loop7: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 43.830006][ T1138] syz-executor: attempt to access beyond end of device [ 43.830006][ T1138] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 43.863761][ T424] kworker/u4:5: attempt to access beyond end of device [ 43.863761][ T424] loop7: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 43.927517][ T1297] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 43.941078][ T1297] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 44.158825][ T6] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 44.175916][ T6] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 44.186355][ T6] asix: probe of 1-1:0.251 failed with error -5 [ 44.190842][ T1385] loop6: detected capacity change from 0 to 512 [ 44.204835][ T1385] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 44.221826][ T1385] EXT4-fs (loop6): orphan cleanup on readonly fs [ 44.233162][ T1385] EXT4-fs error (device loop6): ext4_acquire_dquot:6801: comm syz.6.418: Failed to acquire dquot type 1 [ 44.247043][ T1385] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.418: bg 0: block 40: padding at end of block bitmap is not set [ 44.262339][ T1385] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 44.271206][ T19] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 44.273321][ T1385] EXT4-fs (loop6): 1 truncate cleaned up [ 44.284736][ T1385] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 44.294509][ T1384] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.301653][ T1384] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.309228][ T1384] device bridge_slave_0 entered promiscuous mode [ 44.316689][ T1384] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.323839][ T1384] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.331229][ T1384] device bridge_slave_1 entered promiscuous mode [ 44.380601][ T1122] EXT4-fs (loop6): unmounting filesystem. [ 44.398711][ T1384] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.405819][ T1384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.413122][ T1384] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.420211][ T1384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.451679][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.459766][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.469966][ T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.475953][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.480931][ T19] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.497964][ T19] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 44.509210][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.517305][ T19] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.520840][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.532426][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.546576][ T19] usb 9-1: config 0 descriptor?? [ 44.588501][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.597527][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.604607][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.612532][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.623548][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.648592][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.675890][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.684172][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.691721][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.699552][ T1384] device veth0_vlan entered promiscuous mode [ 44.718511][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.728179][ T1384] device veth1_macvtap entered promiscuous mode [ 44.738291][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.748502][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.805934][ T444] device bridge_slave_1 left promiscuous mode [ 44.812143][ T444] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.831100][ T444] device bridge_slave_0 left promiscuous mode [ 44.854660][ T444] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.878094][ T444] device veth1_macvtap left promiscuous mode [ 44.884885][ T444] device veth0_vlan left promiscuous mode [ 44.966130][ T19] cp2112 0003:10C4:EA90.0006: item fetching failed at offset 4/7 [ 44.977910][ T19] cp2112 0003:10C4:EA90.0006: parse failed [ 44.985432][ T19] cp2112: probe of 0003:10C4:EA90.0006 failed with error -22 [ 45.187908][ T24] usb 9-1: USB disconnect, device number 2 [ 45.224041][ T334] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 45.233704][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 45.233721][ T28] audit: type=1400 audit(2000000012.180:359): avc: denied { mount } for pid=1448 comm="syz.6.440" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 45.262121][ T28] audit: type=1400 audit(2000000012.180:360): avc: denied { watch } for pid=1448 comm="syz.6.440" path="/28/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 45.285824][ T28] audit: type=1400 audit(2000000012.240:361): avc: denied { unmount } for pid=1122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 45.396168][ T1458] loop6: detected capacity change from 0 to 512 [ 45.404008][ T334] usb 10-1: Using ep0 maxpacket: 32 [ 45.409544][ T1458] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.444: casefold flag without casefold feature [ 45.422378][ T1458] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.444: couldn't read orphan inode 15 (err -117) [ 45.422900][ T334] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 45.434905][ T1458] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 45.442540][ T334] usb 10-1: config 0 has no interface number 0 [ 45.458065][ T334] usb 10-1: config 0 interface 184 has no altsetting 0 [ 45.471321][ T334] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 45.480738][ T334] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.488856][ T334] usb 10-1: Product: syz [ 45.493133][ T334] usb 10-1: Manufacturer: syz [ 45.497848][ T334] usb 10-1: SerialNumber: syz [ 45.502919][ T334] usb 10-1: config 0 descriptor?? [ 45.508694][ T334] smsc75xx v1.0.0 [ 45.580061][ T1122] EXT4-fs (loop6): unmounting filesystem. [ 45.730965][ T1472] loop6: detected capacity change from 0 to 256 [ 45.731742][ T28] audit: type=1400 audit(2000000012.680:362): avc: denied { mount } for pid=1471 comm="syz.8.451" name="/" dev="configfs" ino=13942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.775693][ T28] audit: type=1400 audit(2000000012.710:363): avc: denied { read } for pid=1471 comm="syz.8.451" name="/" dev="configfs" ino=13942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.777419][ T1472] FAT-fs (loop6): Directory bread(block 64) failed [ 45.799314][ T28] audit: type=1400 audit(2000000012.710:364): avc: denied { open } for pid=1471 comm="syz.8.451" path="/20/file0" dev="configfs" ino=13942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.827055][ T1472] FAT-fs (loop6): Directory bread(block 65) failed [ 45.832051][ T28] audit: type=1400 audit(2000000012.720:365): avc: denied { unmount } for pid=1173 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.853738][ T1472] FAT-fs (loop6): Directory bread(block 66) failed [ 45.871921][ T1472] FAT-fs (loop6): Directory bread(block 67) failed [ 45.882321][ T1472] FAT-fs (loop6): Directory bread(block 68) failed [ 45.889144][ T1472] FAT-fs (loop6): Directory bread(block 69) failed [ 45.896781][ T1472] FAT-fs (loop6): Directory bread(block 70) failed [ 45.903395][ T1472] FAT-fs (loop6): Directory bread(block 71) failed [ 45.910514][ T1472] FAT-fs (loop6): Directory bread(block 72) failed [ 45.917523][ T1472] FAT-fs (loop6): Directory bread(block 73) failed [ 45.919256][ T1481] loop2: detected capacity change from 0 to 128 [ 45.927777][ T28] audit: type=1400 audit(2000000012.880:366): avc: denied { mount } for pid=1470 comm="syz.6.450" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.997283][ T1481] syz.2.455: attempt to access beyond end of device [ 45.997283][ T1481] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 46.008529][ T28] audit: type=1400 audit(2000000012.950:367): avc: denied { unmount } for pid=1122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 46.030624][ T353] kworker/u4:4: attempt to access beyond end of device [ 46.030624][ T353] loop6: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 46.060942][ T24] usb 1-1: USB disconnect, device number 3 [ 46.129274][ T1494] loop2: detected capacity change from 0 to 512 [ 46.136301][ T1494] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 46.147651][ T1494] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 46.153972][ T19] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 46.156383][ T1494] System zones: 1-12 [ 46.168611][ T1494] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.175132][ T1494] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.461: Inode bitmap for bg 0 marked uninitialized [ 46.192579][ T1494] EXT4-fs (loop2): Remounting filesystem read-only [ 46.199406][ T1494] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 46.223706][ T287] EXT4-fs (loop2): unmounting filesystem. [ 46.306291][ T1508] bridge0: port 3(vlan2) entered blocking state [ 46.312705][ T1508] bridge0: port 3(vlan2) entered disabled state [ 46.319902][ T1508] device vlan2 entered promiscuous mode [ 46.333517][ T1508] bridge0: mtu less than device minimum [ 46.344700][ T19] usb 9-1: Using ep0 maxpacket: 16 [ 46.359500][ T19] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.371408][ T19] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 46.407185][ T19] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 46.422555][ T19] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.446188][ T19] usb 9-1: Product: syz [ 46.450537][ T19] usb 9-1: Manufacturer: syz [ 46.455938][ T19] usb 9-1: SerialNumber: syz [ 46.533137][ T334] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 46.592698][ T28] audit: type=1400 audit(2000000013.540:368): avc: denied { read } for pid=1518 comm="syz.0.471" name="file0" dev="tmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 46.670011][ T19] usb 9-1: 0:2 : does not exist [ 46.684901][ T19] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 46.713442][ T19] usb 9-1: USB disconnect, device number 3 [ 46.746528][ T334] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 46.760642][ T334] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 46.782853][ T334] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 46.794228][ T334] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 46.803888][ T334] smsc75xx: probe of 10-1:0.184 failed with error -71 [ 46.812904][ T334] usb 10-1: USB disconnect, device number 2 [ 47.410237][ T1545] loop6: detected capacity change from 0 to 40427 [ 47.425264][ T1545] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 47.433112][ T1545] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 47.468836][ T1545] F2FS-fs (loop6): Found nat_bits in checkpoint [ 47.546232][ T1545] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 47.566861][ T1545] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 47.591061][ T1596] serio: Serial port ttyS3 [ 47.623723][ T1545] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 47.623748][ T1545] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 47.631522][ T1545] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 47.639602][ T1545] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 47.651820][ T1545] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 47.666179][ T1545] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 47.674421][ T1545] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 48.054990][ T1545] F2FS-fs (loop6): Start checkpoint disabled! [ 48.147953][ T1649] loop2: detected capacity change from 0 to 256 [ 48.164059][ T1651] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 48.177059][ T1649] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 48.190261][ T1651] SELinux: failed to load policy [ 48.245440][ T1655] loop9: detected capacity change from 0 to 128 [ 48.258654][ T1657] hub 9-0:1.0: USB hub found [ 48.258778][ T1657] hub 9-0:1.0: 1 port detected [ 48.265030][ T1655] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 48.265242][ T1655] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 48.299968][ T1384] EXT4-fs (loop9): unmounting filesystem. [ 48.430458][ T1666] loop9: detected capacity change from 0 to 256 [ 48.448267][ T1668] loop8: detected capacity change from 0 to 512 [ 48.448645][ T1668] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.495873][ T1666] FAT-fs (loop9): Directory bread(block 64) failed [ 48.495904][ T1666] FAT-fs (loop9): Directory bread(block 65) failed [ 48.495945][ T1666] FAT-fs (loop9): Directory bread(block 66) failed [ 48.495969][ T1666] FAT-fs (loop9): Directory bread(block 67) failed [ 48.496001][ T1666] FAT-fs (loop9): Directory bread(block 68) failed [ 48.496019][ T1666] FAT-fs (loop9): Directory bread(block 69) failed [ 48.496052][ T1666] FAT-fs (loop9): Directory bread(block 70) failed [ 48.496069][ T1666] FAT-fs (loop9): Directory bread(block 71) failed [ 48.496101][ T1666] FAT-fs (loop9): Directory bread(block 72) failed [ 48.496118][ T1666] FAT-fs (loop9): Directory bread(block 73) failed [ 48.664262][ T1687] netlink: 8 bytes leftover after parsing attributes in process `syz.9.543'. [ 48.717679][ T1691] netlink: 96 bytes leftover after parsing attributes in process `syz.2.545'. [ 48.734017][ T19] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 48.836712][ T1703] loop9: detected capacity change from 0 to 256 [ 48.872809][ T1703] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.903061][ T1703] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 48.913987][ T19] usb 7-1: Using ep0 maxpacket: 16 [ 48.920312][ T19] usb 7-1: config 0 interface 0 has no altsetting 0 [ 48.930455][ T19] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 48.941522][ T1703] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 48.953702][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.968238][ T19] usb 7-1: config 0 descriptor?? [ 48.974258][ T1703] exFAT-fs (loop9): hint_cluster is invalid (17) [ 48.997301][ T1703] exFAT-fs (loop9): error, found bogus dentry(6) beyond unused empty group(0) (start_clu : 6, cur_clu : 6) [ 49.009611][ T1703] exFAT-fs (loop9): Filesystem has been set read-only [ 49.041472][ T1725] syz.2.562[1725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.041521][ T1725] syz.2.562[1725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.252281][ T1744] loop2: detected capacity change from 0 to 512 [ 49.286187][ T1744] EXT4-fs: Ignoring removed bh option [ 49.293486][ T1744] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 49.317981][ T1744] EXT4-fs (loop2): 1 truncate cleaned up [ 49.323987][ T1744] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 49.361037][ T287] EXT4-fs (loop2): unmounting filesystem. [ 49.367816][ T1745] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.376417][ T1745] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.384154][ T1745] device bridge_slave_0 entered promiscuous mode [ 49.391152][ T19] hid (null): global environment stack underflow [ 49.397786][ T1755] netlink: 32 bytes leftover after parsing attributes in process `syz.0.576'. [ 49.407923][ T19] hid (null): global environment stack underflow [ 49.411532][ T1745] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.420662][ T19] hid (null): report_id 3899690137 is invalid [ 49.421537][ T1745] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.428987][ T19] hid (null): report_id 1862125167 is invalid [ 49.448047][ T1745] device bridge_slave_1 entered promiscuous mode [ 49.454629][ T1386] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 49.469828][ T1755] netlink: 75 bytes leftover after parsing attributes in process `syz.0.576'. [ 49.600363][ T301] usb 7-1: USB disconnect, device number 3 [ 49.650463][ T1386] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.671806][ T1386] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 49.685739][ T1745] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.692848][ T1745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.700287][ T1745] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.707348][ T1745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.715117][ T1386] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.724247][ T1386] usb 9-1: config 0 descriptor?? [ 49.731797][ T353] device bridge_slave_1 left promiscuous mode [ 49.741276][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.750061][ T353] device bridge_slave_0 left promiscuous mode [ 49.756805][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.766041][ T353] device veth1_macvtap left promiscuous mode [ 49.772155][ T353] device veth0_vlan left promiscuous mode [ 49.903973][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.912420][ T424] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.930330][ T424] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.947171][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.960346][ T424] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.967539][ T424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.968211][ T1794] input: syz0 as /devices/virtual/input/input6 [ 49.982571][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.991570][ T424] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.998645][ T424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.018486][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.028528][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.042087][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.050628][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.063192][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.071269][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.080360][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.088507][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.096412][ T1745] device veth0_vlan entered promiscuous mode [ 50.107048][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.115328][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.125472][ T1745] device veth1_macvtap entered promiscuous mode [ 50.132732][ T1386] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 50.151160][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.156172][ T1386] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0008/input/input7 [ 50.170807][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.179311][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.196200][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.204822][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.235514][ T301] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 50.244316][ T1386] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 50.272709][ T1803] loop1: detected capacity change from 0 to 256 [ 50.285469][ T1803] exfat: Deprecated parameter 'namecase' [ 50.294104][ T334] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 50.315714][ T1803] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 50.349644][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 50.349679][ T28] audit: type=1400 audit(2000000017.300:394): avc: denied { remove_name } for pid=1745 comm="syz-executor" name=".index" dev="loop1" ino=1048638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.357039][ T1738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.379230][ T28] audit: type=1400 audit(2000000017.300:395): avc: denied { rmdir } for pid=1745 comm="syz-executor" name=".index" dev="loop1" ino=1048638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.390024][ T1738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.410642][ T28] audit: type=1400 audit(2000000017.300:396): avc: denied { unlink } for pid=1745 comm="syz-executor" name="file0" dev="loop1" ino=1048640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.454046][ T19] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 50.475563][ T301] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.485859][ T301] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.515444][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.525450][ T301] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 50.534479][ T334] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 50.545305][ T301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 50.553397][ T301] usb 1-1: SerialNumber: syz [ 50.553989][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.569837][ T334] usb 3-1: config 0 descriptor?? [ 50.634252][ T19] usb 7-1: Using ep0 maxpacket: 16 [ 50.640754][ T19] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.651961][ T19] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 50.665091][ T19] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 50.674494][ T19] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.687650][ T19] usb 7-1: config 0 descriptor?? [ 50.703091][ T1806] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.710209][ T1806] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.717892][ T1806] device bridge_slave_0 entered promiscuous mode [ 50.725028][ T1806] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.732087][ T1806] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.739734][ T1806] device bridge_slave_1 entered promiscuous mode [ 50.773229][ T301] usb 1-1: 0:2 : does not exist [ 50.782530][ T301] usb 1-1: USB disconnect, device number 4 [ 50.835459][ T1806] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.837611][ T1386] usb 9-1: USB disconnect, device number 4 [ 50.842558][ T1806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.855714][ T1806] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.862900][ T1806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.899747][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.907640][ T444] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.915425][ T444] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.934826][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.943160][ T444] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.950238][ T444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.957831][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.966415][ T444] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.973466][ T444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.980632][ T334] dragonrise 0003:0079:0006.0009: item fetching failed at offset 4/5 [ 50.989298][ T334] dragonrise 0003:0079:0006.0009: parse failed [ 50.995995][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.999236][ T334] dragonrise: probe of 0003:0079:0006.0009 failed with error -22 [ 51.004456][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.024631][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 51.047192][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.057526][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.065618][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.075438][ T1806] device veth0_vlan entered promiscuous mode [ 51.084555][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.092023][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.101038][ T19] HID 045e:07da: Invalid code 65791 type 1 [ 51.106681][ T1806] device veth1_macvtap entered promiscuous mode [ 51.116264][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.117388][ T19] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.000A/input/input8 [ 51.124947][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.137156][ T19] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 51.145004][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.169365][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.177958][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.186616][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.197419][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.212606][ T60] usb 3-1: USB disconnect, device number 5 [ 51.322370][ T1825] loop0: detected capacity change from 0 to 512 [ 51.330420][ T28] audit: type=1400 audit(2000000018.280:397): avc: denied { remount } for pid=1824 comm="syz.0.599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 51.341870][ T1827] syz.0.600 uses obsolete (PF_INET,SOCK_PACKET) [ 51.451166][ T1837] loop0: detected capacity change from 0 to 16 [ 51.477829][ T1837] erofs: (device loop0): mounted with root inode @ nid 36. [ 51.524985][ T353] device bridge_slave_1 left promiscuous mode [ 51.527057][ T1846] loop0: detected capacity change from 0 to 128 [ 51.533696][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.551174][ T353] device bridge_slave_0 left promiscuous mode [ 51.565297][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.571761][ T24] usb 7-1: USB disconnect, device number 4 [ 51.625182][ T1846] mmap: syz.0.608 (1846) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.641772][ T353] device veth1_macvtap left promiscuous mode [ 51.670143][ T353] device veth0_vlan left promiscuous mode [ 51.756061][ T1862] syz.2.616[1862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.756136][ T1862] syz.2.616[1862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.796212][ T1862] syz.2.616[1862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.807762][ T1862] syz.2.616[1862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.889483][ T1877] loop8: detected capacity change from 0 to 128 [ 51.934376][ T1880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'. [ 51.963795][ T1882] netlink: 'syz.2.625': attribute type 3 has an invalid length. [ 51.971169][ T1885] loop8: detected capacity change from 0 to 2048 [ 51.971663][ T1882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 52.008647][ T1885] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 52.037659][ T1173] EXT4-fs (loop8): unmounting filesystem. [ 52.061782][ T1895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.630'. [ 52.124023][ T1386] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 52.324101][ T1386] usb 4-1: Using ep0 maxpacket: 16 [ 52.344741][ T1386] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 52.355863][ T1386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.364010][ T1386] usb 4-1: Product: syz [ 52.368300][ T1386] usb 4-1: Manufacturer: syz [ 52.372948][ T1386] usb 4-1: SerialNumber: syz [ 52.382897][ T1386] r8152-cfgselector 4-1: config 0 descriptor?? [ 52.794227][ T1386] r8152-cfgselector 4-1: Unknown version 0x0000 [ 52.800583][ T1386] r8152-cfgselector 4-1: bad CDC descriptors [ 52.813674][ T1386] r8152-cfgselector 4-1: Unknown version 0x0000 [ 52.823590][ T28] audit: type=1400 audit(2000000019.770:398): avc: denied { setopt } for pid=1948 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.828586][ T1386] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 52.924036][ T6] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 52.926820][ T1951] loop6: detected capacity change from 0 to 1024 [ 52.938358][ T1951] EXT4-fs: Ignoring removed bh option [ 52.955400][ T1951] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 52.973431][ T1951] EXT4-fs error (device loop6): ext4_read_inline_dir:1593: inode #12: block 7: comm syz.6.653: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 52.994863][ T1951] EXT4-fs (loop6): Remounting filesystem read-only [ 53.001488][ T1951] EXT4-fs error (device loop6): ext4_read_inline_dir:1593: inode #12: block 7: comm syz.6.653: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 53.022473][ T1951] EXT4-fs (loop6): Remounting filesystem read-only [ 53.036454][ T1122] EXT4-fs error (device loop6): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /54/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 53.058652][ T1122] EXT4-fs (loop6): Remounting filesystem read-only [ 53.065593][ T1122] EXT4-fs error (device loop6): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /54/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 53.088029][ T334] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 53.095490][ T1122] EXT4-fs (loop6): Remounting filesystem read-only [ 53.095685][ T1122] EXT4-fs error (device loop6): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 53.122350][ T1122] EXT4-fs (loop6): Remounting filesystem read-only [ 53.128888][ T1122] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 53.143346][ T1122] EXT4-fs error (device loop6): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /54/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 53.165307][ T6] usb 9-1: Using ep0 maxpacket: 16 [ 53.165515][ T1122] EXT4-fs (loop6): Remounting filesystem read-only [ 53.171483][ T6] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.177388][ T1122] EXT4-fs error (device loop6): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /54/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 53.188036][ T6] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 53.210379][ T1122] EXT4-fs (loop6): Remounting filesystem read-only [ 53.223094][ T6] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 53.229572][ T1122] EXT4-fs error (device loop6): empty_inline_dir:1877: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 53.238635][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.258586][ T1122] EXT4-fs (loop6): Remounting filesystem read-only [ 53.267097][ T6] usb 9-1: config 0 descriptor?? [ 53.274011][ T1122] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 53.292154][ T1122] EXT4-fs error (device loop6): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /54/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 53.314138][ T334] usb 1-1: Using ep0 maxpacket: 16 [ 53.314851][ T1122] EXT4-fs (loop6): Remounting filesystem read-only [ 53.320427][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.326252][ T1122] EXT4-fs error (device loop6): ext4_read_inline_dir:1593: inode #12: block 7: comm syz-executor: path /54/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 53.341452][ T334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 53.368032][ T1122] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 53.378574][ T334] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 53.384778][ T1122] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 53.406467][ T334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.415183][ T1122] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 53.430098][ T334] usb 1-1: config 0 descriptor?? [ 53.436668][ T1122] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 53.451864][ T1122] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 53.467110][ T1122] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 53.482215][ T1122] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 53.497445][ T1122] EXT4-fs warning (device loop6): empty_inline_dir:1884: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 53.685235][ T6] HID 045e:07da: Invalid code 65791 type 1 [ 53.695265][ T6] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.000B/input/input9 [ 53.708176][ T6] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 53.802568][ T1962] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.809801][ T1962] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.817377][ T1962] device bridge_slave_0 entered promiscuous mode [ 53.824475][ T1962] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.831517][ T1962] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.838630][ T19] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 53.840201][ T334] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.000C/input/input10 [ 53.846688][ T1962] device bridge_slave_1 entered promiscuous mode [ 53.927254][ T334] appleir 0003:05AC:8241.000C: input,hiddev96,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 53.930089][ T1962] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.946883][ T1962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.954185][ T1962] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.961315][ T1962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.995883][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.003636][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.011383][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.022321][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.030656][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.037714][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.046919][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.055522][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.062731][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.075499][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 54.088894][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 54.102189][ T19] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 54.111496][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.120467][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.133790][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.135398][ T19] usb 4-1: config 0 descriptor?? [ 54.150233][ T1959] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 54.153287][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.170116][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.178622][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.186257][ T338] usb 9-1: USB disconnect, device number 5 [ 54.188351][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.201676][ T1962] device veth0_vlan entered promiscuous mode [ 54.228251][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.238604][ T1962] device veth1_macvtap entered promiscuous mode [ 54.252541][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.270509][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.295219][ T353] device bridge_slave_1 left promiscuous mode [ 54.301536][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.315493][ T353] device bridge_slave_0 left promiscuous mode [ 54.321830][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.330674][ T353] device veth1_macvtap left promiscuous mode [ 54.337061][ T353] device veth0_vlan left promiscuous mode [ 54.368713][ T1959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.387448][ T1959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.409525][ T19] usbhid 4-1:0.0: can't add hid device: -71 [ 54.416000][ T19] usbhid: probe of 4-1:0.0 failed with error -71 [ 54.438968][ T19] usb 4-1: USB disconnect, device number 5 [ 54.501127][ T1982] loop4: detected capacity change from 0 to 512 [ 54.508010][ T1982] EXT4-fs: Ignoring removed bh option [ 54.514989][ T1982] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 54.525600][ T1982] EXT4-fs (loop4): 1 truncate cleaned up [ 54.531377][ T1982] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 54.552687][ T1962] EXT4-fs (loop4): unmounting filesystem. [ 54.571816][ T28] audit: type=1326 audit(2000000021.520:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1985 comm="syz.4.662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8f938ebe9 code=0x0 [ 54.707439][ T28] audit: type=1400 audit(2000000021.660:400): avc: denied { search } for pid=1989 comm="syz.8.663" name="/" dev="configfs" ino=13942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.924327][ T1176] Bluetooth: hci0: command 0x1003 tx timeout [ 54.924374][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.972648][ T28] audit: type=1400 audit(2000000021.920:401): avc: denied { write } for pid=1997 comm="syz.2.667" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 55.004019][ T19] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 55.023947][ T338] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 55.183958][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 55.190140][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 55.201325][ T19] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 55.205077][ T338] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 55.214325][ T19] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 55.224697][ T338] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1 [ 55.233480][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.243618][ T338] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 55.254880][ T19] usb 4-1: config 0 descriptor?? [ 55.264448][ T338] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 55.271556][ T19] hub 4-1:0.0: bad descriptor, ignoring hub [ 55.278469][ T338] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.284169][ T19] hub: probe of 4-1:0.0 failed with error -5 [ 55.294661][ T1992] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 55.306325][ T338] usb 9-1: invalid MIDI in EP 0 [ 55.314311][ T338] snd-usb-audio: probe of 9-1:27.0 failed with error -22 [ 55.329303][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 55.458869][ T2002] usb 9-1: USB disconnect, device number 6 [ 55.478260][ T2002] hub 9-0:1.0: USB hub found [ 55.487713][ T2002] hub 9-0:1.0: 1 port detected [ 55.577839][ T28] audit: type=1400 audit(2000000022.530:402): avc: denied { remount } for pid=2014 comm="syz.0.674" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 55.674410][ T19] hid-multitouch 0003:0EEF:72C4.000D: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 55.767043][ T2021] loop2: detected capacity change from 0 to 128 [ 55.791150][ T2021] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 55.800852][ T2021] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.814380][ T60] usb 1-1: USB disconnect, device number 5 [ 55.832968][ T28] audit: type=1400 audit(2000000022.780:403): avc: denied { setattr } for pid=2019 comm="syz.2.677" name="bus" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.863791][ T287] EXT4-fs (loop2): unmounting filesystem. [ 55.897564][ T2026] loop2: detected capacity change from 0 to 128 [ 55.927935][ T2026] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 55.944319][ T2026] ext4 filesystem being mounted at /174/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.976399][ T287] EXT4-fs (loop2): unmounting filesystem. [ 56.032883][ T2033] loop2: detected capacity change from 0 to 8192 [ 56.064232][ T19] usb 4-1: USB disconnect, device number 6 [ 56.219555][ T28] audit: type=1400 audit(2000000023.170:404): avc: denied { mount } for pid=2045 comm="syz.0.688" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 56.295374][ T28] audit: type=1400 audit(2000000023.250:405): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 56.317066][ T2048] syz.8.689[2048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.317148][ T2048] syz.8.689[2048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.496287][ T2058] loop3: detected capacity change from 0 to 1024 [ 56.549729][ T2058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 56.576004][ T2058] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.658924][ T2058] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: comm syz.3.693: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.671836][ T2072] input: syz1 as /devices/virtual/input/input11 [ 56.681067][ T2058] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 56.705053][ T2058] EXT4-fs (loop3): This should not happen!! Data will be lost [ 56.705053][ T2058] [ 56.718355][ T2073] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.693: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.740691][ T2073] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.693: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.781217][ T2057] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.693: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.801460][ T2073] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.693: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.815013][ T2057] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.693: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.831773][ T2081] loop4: detected capacity change from 0 to 128 [ 56.839488][ T2057] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.693: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.855787][ T2081] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 56.868331][ T2081] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.894754][ T2057] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.693: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.909430][ T2057] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.693: lblock 0 mapped to illegal pblock 0 (length 1) [ 56.923808][ T1962] EXT4-fs (loop4): unmounting filesystem. [ 56.944062][ T2057] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.693: lblock 0 mapped to illegal pblock 0 (length 1) [ 57.133967][ T1801] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 57.315218][ T1801] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.328665][ T1801] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 57.345081][ T1801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.353813][ T1801] usb 1-1: config 0 descriptor?? [ 57.359263][ T1806] EXT4-fs (loop3): unmounting filesystem. [ 57.377940][ T2094] hub 9-0:1.0: USB hub found [ 57.382680][ T2094] hub 9-0:1.0: 1 port detected [ 57.510436][ T2106] loop2: detected capacity change from 0 to 32768 [ 57.562634][ T60] usb 1-1: USB disconnect, device number 6 [ 57.693967][ T334] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 57.795223][ T2124] hub 9-0:1.0: USB hub found [ 57.799953][ T2124] hub 9-0:1.0: 1 port detected [ 57.883954][ T1801] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 57.895045][ T334] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 57.905239][ T334] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 57.925177][ T334] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 57.934388][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.942718][ T334] usb 4-1: Product: syz [ 57.946956][ T334] usb 4-1: Manufacturer: syz [ 57.951694][ T334] usb 4-1: SerialNumber: syz [ 58.063942][ T1801] usb 3-1: Using ep0 maxpacket: 32 [ 58.070403][ T1801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.093761][ T1801] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.104676][ T1801] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 58.114439][ T1801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.129575][ T1801] usb 3-1: config 0 descriptor?? [ 58.136031][ T1801] hub 3-1:0.0: USB hub found [ 58.159547][ T334] usb 4-1: cannot find UAC_HEADER [ 58.166390][ T334] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 58.182149][ T334] usb 4-1: USB disconnect, device number 7 [ 58.189725][ T386] udevd[386]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.337996][ T1801] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 58.551446][ T1801] hid-generic 0003:046D:C31C.000E: item fetching failed at offset 0/1 [ 58.569594][ T2156] netlink: 32 bytes leftover after parsing attributes in process `syz.4.736'. [ 58.570307][ T1801] hid-generic: probe of 0003:046D:C31C.000E failed with error -22 [ 58.590125][ T2156] netlink: 75 bytes leftover after parsing attributes in process `syz.4.736'. [ 58.907582][ T338] usb 3-1: USB disconnect, device number 6 [ 59.050633][ T28] audit: type=1400 audit(2000000026.000:406): avc: denied { read write } for pid=1806 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.082763][ T28] audit: type=1400 audit(2000000026.000:407): avc: denied { open } for pid=1806 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.109752][ T1386] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 59.125282][ T28] audit: type=1400 audit(2000000026.000:408): avc: denied { ioctl } for pid=1806 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.151359][ T28] audit: type=1400 audit(2000000026.000:409): avc: denied { block_suspend } for pid=2181 comm="syz.3.749" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.175076][ T28] audit: type=1400 audit(2000000026.060:410): avc: denied { bpf } for pid=2183 comm="syz.8.750" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 59.196103][ T28] audit: type=1400 audit(2000000026.060:411): avc: denied { map_create } for pid=2183 comm="syz.8.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 59.315386][ T1386] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 59.332232][ T1386] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1 [ 59.342271][ T1386] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 59.364103][ T1386] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 59.383942][ T1386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.393492][ T2169] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 59.405002][ T1386] usb 5-1: invalid MIDI in EP 0 [ 59.416358][ T1386] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 59.443973][ T6] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 59.454400][ T589] udevd[589]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 59.615420][ T1801] usb 5-1: USB disconnect, device number 6 [ 59.653953][ T6] usb 9-1: Using ep0 maxpacket: 8 [ 59.660205][ T6] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 59.669102][ T6] usb 9-1: config 179 has no interface number 0 [ 59.675518][ T6] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 59.687795][ T6] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 59.703982][ T6] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 59.715579][ T6] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 59.727212][ T6] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 59.740609][ T1386] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 59.748593][ T6] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 59.757808][ T6] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.770119][ T2188] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 59.956718][ T1386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.970466][ T1386] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 59.979831][ T1386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.999465][ T1386] usb 1-1: config 0 descriptor?? [ 60.018868][ T2188] loop8: detected capacity change from 0 to 256 [ 60.030609][ T2188] exfat: Deprecated parameter 'namecase' [ 60.050855][ T2188] exfat: Deprecated parameter 'namecase' [ 60.070690][ T2188] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 60.092747][ T19] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input12 [ 60.237056][ T2224] input: syz1 as /devices/virtual/input/input13 [ 60.303610][ T2188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.323382][ T2188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.331307][ T334] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 60.344819][ T2230] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 60.411049][ T1386] dragonrise 0003:0079:0006.000F: item fetching failed at offset 4/5 [ 60.420523][ T1386] dragonrise 0003:0079:0006.000F: parse failed [ 60.427043][ T1386] dragonrise: probe of 0003:0079:0006.000F failed with error -22 [ 60.514104][ T334] usb 3-1: Using ep0 maxpacket: 16 [ 60.534653][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.552400][ T334] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.563560][ T334] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 60.572761][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.581336][ T24] usb 9-1: USB disconnect, device number 8 [ 60.581442][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 60.587911][ T334] usb 3-1: config 0 descriptor?? [ 60.596112][ C0] dummy_hcd dummy_hcd.8: timer fired with no URBs pending? [ 60.623966][ T60] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 60.626998][ T1386] usb 1-1: USB disconnect, device number 7 [ 60.814998][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.826032][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.835966][ T60] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 60.845238][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.854253][ T60] usb 5-1: config 0 descriptor?? [ 61.007976][ T2234] syz.3.774[2234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.008027][ T2234] syz.3.774[2234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.021135][ T2234] netlink: 96 bytes leftover after parsing attributes in process `syz.3.774'. [ 61.021625][ T334] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0010/input/input14 [ 61.078781][ T2238] loop7: detected capacity change from 0 to 16384 [ 61.079856][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 61.079870][ T28] audit: type=1400 audit(2000000028.030:436): avc: denied { unmount } for pid=1173 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 61.118682][ T334] appleir 0003:05AC:8241.0010: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 61.154498][ T28] audit: type=1400 audit(2000000028.110:437): avc: denied { create } for pid=2239 comm="syz.8.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.203579][ T28] audit: type=1400 audit(2000000028.130:438): avc: denied { write } for pid=2239 comm="syz.8.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.225336][ T28] audit: type=1400 audit(2000000028.130:439): avc: denied { read } for pid=2239 comm="syz.8.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.265146][ T60] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 61.266076][ T28] audit: type=1400 audit(2000000028.150:440): avc: denied { create } for pid=2243 comm="syz.0.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.282450][ T60] cp2112 0003:10C4:EA90.0011: item fetching failed at offset 6/7 [ 61.291842][ T2238] I/O error, dev loop7, sector 15144 op 0x0:(READ) flags 0x80700 phys_seg 6 prio class 2 [ 61.316130][ T28] audit: type=1400 audit(2000000028.150:441): avc: denied { connect } for pid=2243 comm="syz.0.788" lport=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.337349][ T60] cp2112 0003:10C4:EA90.0011: parse failed [ 61.344268][ T28] audit: type=1400 audit(2000000028.150:442): avc: denied { write } for pid=2243 comm="syz.0.788" laddr=::1 lport=38 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.353503][ T60] cp2112: probe of 0003:10C4:EA90.0011 failed with error -22 [ 61.383530][ T28] audit: type=1400 audit(2000000028.250:443): avc: denied { ioctl } for pid=2243 comm="syz.0.788" path="socket:[27309]" dev="sockfs" ino=27309 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.413959][ T28] audit: type=1400 audit(2000000028.360:444): avc: denied { execmem } for pid=2209 comm="syz.2.762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.442713][ T2250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.779'. [ 61.519432][ T28] audit: type=1400 audit(2000000028.470:445): avc: denied { create } for pid=2251 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.544052][ T24] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 61.555031][ T6] usb 5-1: USB disconnect, device number 7 [ 61.702606][ T2260] loop3: detected capacity change from 0 to 2048 [ 61.745075][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 61.755311][ T24] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.755531][ T2260] loop3: p3 < > p4 < > [ 61.764573][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.769680][ T2260] loop3: partition table partially beyond EOD, truncated [ 61.777625][ T24] usb 9-1: config 0 descriptor?? [ 61.789384][ T2260] loop3: p3 start 4284289 is beyond EOD, truncated [ 61.804591][ T103] loop3: p3 < > p4 < > [ 61.808842][ T103] loop3: partition table partially beyond EOD, truncated [ 61.816252][ T103] loop3: p3 start 4284289 is beyond EOD, truncated [ 61.864385][ T1806] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 61.864612][ T386] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 61.881157][ T386] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.890325][ T386] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 61.898505][ T386] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.907731][ T386] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 61.915858][ T386] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.925063][ T386] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 61.933178][ T386] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.942299][ T386] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 61.950455][ T386] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.959854][ T386] Buffer I/O error on dev loop3p4, logical block 0, async page read [ 61.972165][ T386] udevd[386]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 61.989585][ T386] udevd[386]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 62.009756][ T24] usb 9-1: USB disconnect, device number 9 [ 62.114650][ T2273] loop3: detected capacity change from 0 to 256 [ 62.140330][ T2273] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x18b10316, utbl_chksum : 0xe619d30d) [ 62.160215][ T2273] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 62.331520][ T2280] netlink: 'syz.3.793': attribute type 1 has an invalid length. [ 62.693547][ T2304] loop8: detected capacity change from 0 to 256 [ 62.716335][ T2304] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 62.847368][ T2320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 62.904820][ T2327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'. [ 63.095025][ T2350] loop8: detected capacity change from 0 to 128 [ 63.137374][ T2350] syz.8.825: attempt to access beyond end of device [ 63.137374][ T2350] loop8: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 63.185483][ T2350] syz.8.825: attempt to access beyond end of device [ 63.185483][ T2350] loop8: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 63.219378][ T2350] Buffer I/O error on dev loop8, logical block 72, lost async page write [ 63.248390][ T2349] syz.8.825: attempt to access beyond end of device [ 63.248390][ T2349] loop8: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 63.261938][ T2349] Buffer I/O error on dev loop8, logical block 69, lost async page write [ 63.286376][ T60] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 63.298854][ T60] usb 3-1: device reset changed ep0 maxpacket size! [ 63.312096][ T334] usb 3-1: USB disconnect, device number 7 [ 63.494836][ T334] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 63.685188][ T334] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.702204][ T2388] loop4: detected capacity change from 0 to 2048 [ 63.703725][ T334] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.728976][ T334] usb 3-1: config 0 interface 0 has no altsetting 0 [ 63.739075][ T334] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 63.753955][ T60] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 63.763974][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.782743][ T334] usb 3-1: config 0 descriptor?? [ 63.945167][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 63.964854][ T60] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 63.993950][ T60] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 64.013967][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.032710][ T60] usb 1-1: config 0 descriptor?? [ 64.045367][ T2374] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 64.266722][ T2374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.278182][ T2374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.290705][ T60] usbhid 1-1:0.0: can't add hid device: -71 [ 64.297559][ T60] usbhid: probe of 1-1:0.0 failed with error -71 [ 64.306604][ T60] usb 1-1: USB disconnect, device number 8 [ 64.324050][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 64.353970][ T39] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 64.384409][ T2407] netlink: 128 bytes leftover after parsing attributes in process `syz.8.850'. [ 64.393565][ T2407] netlink: 128 bytes leftover after parsing attributes in process `syz.8.850'. [ 64.402815][ T334] usb 3-1: string descriptor 0 read error: -22 [ 64.503940][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 64.510222][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.516226][ T2412] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.521991][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.538630][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 64.551599][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 64.560802][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.570084][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.581390][ T24] usb 4-1: config 0 descriptor?? [ 64.586454][ T39] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 64.596587][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.605698][ T334] uclogic 0003:256C:006D.0012: interface is invalid, ignoring [ 64.614188][ T39] usb 5-1: config 0 descriptor?? [ 64.627199][ T334] usb 3-1: USB disconnect, device number 8 [ 64.647099][ T2421] input: syz0 as /devices/virtual/input/input15 [ 64.863984][ T60] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 64.998600][ T24] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max [ 65.008841][ T24] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 65.016608][ T24] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 65.024810][ T39] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 65.033433][ T24] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 65.042363][ T39] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0014/input/input16 [ 65.053971][ T60] usb 1-1: Using ep0 maxpacket: 32 [ 65.060649][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 65.061748][ T2435] syz.8.863[2435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.072013][ T2435] syz.8.863[2435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.073433][ T24] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 65.102112][ T60] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 65.115087][ T60] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 65.124196][ T24] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 65.131420][ T24] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 65.138736][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.146896][ T24] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 65.155208][ T24] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 65.162652][ T60] usb 1-1: config 0 descriptor?? [ 65.167874][ T24] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 65.175931][ T60] hub 1-1:0.0: bad descriptor, ignoring hub [ 65.181892][ T60] hub: probe of 1-1:0.0 failed with error -5 [ 65.197366][ T39] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 65.209486][ T24] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 65.219674][ T24] microsoft 0003:045E:07DA.0013: No inputs registered, leaving [ 65.228457][ T2442] SELinux: Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped). [ 65.243996][ T2404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.252541][ T2404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.263503][ T24] microsoft 0003:045E:07DA.0013: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 65.276405][ T24] microsoft 0003:045E:07DA.0013: no inputs found [ 65.294205][ T24] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 65.322406][ T24] usb 4-1: USB disconnect, device number 8 [ 65.407271][ T2456] fido_id[2456]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 65.446758][ T2462] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.469120][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 65.477681][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.486977][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 65.495640][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.495687][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 65.504157][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.523872][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.532478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.540899][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.573817][ T2470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.877'. [ 65.586816][ T60] hid-multitouch 0003:0EEF:72C4.0015: hidraw1: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 65.610646][ T2472] netlink: 324 bytes leftover after parsing attributes in process `syz.8.878'. [ 65.666433][ T1386] usb 5-1: USB disconnect, device number 8 [ 65.810953][ T2486] netlink: 24 bytes leftover after parsing attributes in process `syz.8.884'. [ 65.873489][ T2501] overlayfs: upper fs is r/o, try multi-lower layers mount [ 65.892564][ T2503] loop8: detected capacity change from 0 to 1024 [ 65.915199][ T24] usb 1-1: USB disconnect, device number 9 [ 65.917198][ T2503] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 65.951080][ T1173] EXT4-fs (loop8): unmounting filesystem. [ 66.001560][ T2512] loop2: detected capacity change from 0 to 256 [ 66.018196][ T2512] FAT-fs (loop2): Directory bread(block 64) failed [ 66.024892][ T2512] FAT-fs (loop2): Directory bread(block 65) failed [ 66.031457][ T2512] FAT-fs (loop2): Directory bread(block 66) failed [ 66.039047][ T2512] FAT-fs (loop2): Directory bread(block 67) failed [ 66.046578][ T2512] FAT-fs (loop2): Directory bread(block 68) failed [ 66.053211][ T2512] FAT-fs (loop2): Directory bread(block 69) failed [ 66.059897][ T2512] FAT-fs (loop2): Directory bread(block 70) failed [ 66.066617][ T2512] FAT-fs (loop2): Directory bread(block 71) failed [ 66.073165][ T2512] FAT-fs (loop2): Directory bread(block 72) failed [ 66.086287][ T2512] FAT-fs (loop2): Directory bread(block 73) failed [ 66.180282][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 66.180298][ T28] audit: type=1400 audit(2000000033.130:539): avc: denied { mount } for pid=2531 comm="syz.2.903" name="/" dev="configfs" ino=13942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 66.236237][ T28] audit: type=1400 audit(2000000033.130:540): avc: denied { search } for pid=2531 comm="syz.2.903" name="/" dev="configfs" ino=13942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.259103][ T28] audit: type=1400 audit(2000000033.130:541): avc: denied { read } for pid=2531 comm="syz.2.903" name="/" dev="configfs" ino=13942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.269561][ T2541] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 66.288502][ T28] audit: type=1400 audit(2000000033.130:542): avc: denied { open } for pid=2531 comm="syz.2.903" path="/" dev="configfs" ino=13942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 66.310763][ T28] audit: type=1400 audit(2000000033.160:543): avc: denied { map } for pid=2533 comm="syz.4.904" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.316153][ T353] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.335155][ T28] audit: type=1400 audit(2000000033.160:544): avc: denied { read write } for pid=2533 comm="syz.4.904" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 66.514196][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 68.354171][ T1177] Bluetooth: hci0: command 0x1003 tx timeout [ 68.354332][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.502450][ T2559] loop3: detected capacity change from 0 to 256 [ 68.509246][ T2559] exfat: Deprecated parameter 'namecase' [ 68.515471][ T2559] exfat: Deprecated parameter 'utf8' [ 68.523869][ T2559] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 68.643975][ T60] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 68.651651][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 68.853928][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 68.859130][ T60] usb 9-1: Using ep0 maxpacket: 16 [ 68.865502][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.875469][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 68.882250][ T24] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 68.891490][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.902567][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.910754][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.913957][ T6] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 68.923229][ T24] usb 5-1: config 0 descriptor?? [ 68.933270][ T60] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 68.946512][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.955899][ T60] usb 9-1: config 0 descriptor?? [ 69.105244][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.116316][ T6] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 69.125619][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.144892][ T6] usb 4-1: config 0 descriptor?? [ 69.246302][ T28] audit: type=1400 audit(2000000036.200:545): avc: denied { setopt } for pid=2562 comm="syz.0.916" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.246364][ T2563] xt_hashlimit: size too large, truncated to 1048576 [ 69.357720][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.366969][ T60] input: HID 05ac:8241 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:05AC:8241.0017/input/input18 [ 69.379749][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.387444][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.395098][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.402535][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.410173][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.417735][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.425304][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.432942][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.446583][ T60] appleir 0003:05AC:8241.0017: input,hiddev96,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.8-1/input0 [ 69.460676][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.473132][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.480961][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.489534][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.498215][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.506454][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.518317][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.534070][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.550238][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.565052][ T6] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 69.565425][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x4 [ 69.585301][ T6] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0018/input/input19 [ 69.587517][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.610893][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.620140][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.628961][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.652367][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.671197][ T28] audit: type=1400 audit(2000000036.620:546): avc: denied { create } for pid=2578 comm="syz.0.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.672558][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.699009][ T6] keytouch 0003:0926:3333.0018: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 69.725968][ T28] audit: type=1400 audit(2000000036.650:547): avc: denied { connect } for pid=2578 comm="syz.0.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.727422][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.752857][ T28] audit: type=1400 audit(2000000036.650:548): avc: denied { setopt } for pid=2578 comm="syz.0.923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.807587][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.832093][ T2561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.838790][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.846159][ T2561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.870553][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.886779][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.895910][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.903432][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.911115][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.918621][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.918648][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.918665][ T24] hid-generic 0003:060B:500A.0016: unknown main item tag 0x0 [ 69.918754][ T24] hid-generic 0003:060B:500A.0016: unexpected long global item [ 69.919081][ T24] hid-generic: probe of 0003:060B:500A.0016 failed with error -22 [ 69.962940][ T24] usb 5-1: USB disconnect, device number 9 [ 69.976755][ T2590] device bridge0 entered promiscuous mode [ 69.988728][ T2590] device macsec1 entered promiscuous mode [ 69.995362][ T2590] bridge0: port 3(macsec1) entered blocking state [ 70.001832][ T2590] bridge0: port 3(macsec1) entered disabled state [ 70.009612][ T2590] device bridge0 left promiscuous mode [ 70.084794][ T2599] serio: Serial port ptm0 [ 70.211750][ T6] usb 4-1: USB disconnect, device number 9 [ 70.479209][ T2638] IPv6: sit1: Disabled Multicast RS [ 70.504525][ T2640] netlink: 20 bytes leftover after parsing attributes in process `syz.4.949'. [ 70.645476][ T2652] loop4: detected capacity change from 0 to 1024 [ 70.652168][ T2652] EXT4-fs: Ignoring removed nobh option [ 70.657937][ T2652] EXT4-fs: Ignoring removed bh option [ 70.663885][ T2652] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.695638][ T2652] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 70.718792][ T1962] EXT4-fs (loop4): unmounting filesystem. [ 70.758602][ T2658] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 70.768044][ T2658] FAT-fs (loop7): unable to read boot sector [ 70.887621][ T2677] loop4: detected capacity change from 0 to 512 [ 70.922706][ T2679] loop4: detected capacity change from 0 to 512 [ 70.933366][ T2679] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.966: casefold flag without casefold feature [ 70.946134][ T2679] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.966: couldn't read orphan inode 15 (err -117) [ 70.958152][ T2679] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 71.046201][ T1962] EXT4-fs (loop4): unmounting filesystem. [ 71.134890][ T2691] loop8: detected capacity change from 0 to 1024 [ 71.152442][ T2691] EXT4-fs: Ignoring removed bh option [ 71.164305][ T2691] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.219387][ T2691] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 71.232716][ T2691] netlink: 12 bytes leftover after parsing attributes in process `syz.8.972'. [ 71.251924][ T1173] EXT4-fs (loop8): unmounting filesystem. [ 71.329606][ T2717] netlink: 'syz.2.983': attribute type 12 has an invalid length. [ 71.337639][ T2717] netlink: 'syz.2.983': attribute type 29 has an invalid length. [ 71.345926][ T19] usb 9-1: USB disconnect, device number 10 [ 71.352730][ T2717] netlink: 148 bytes leftover after parsing attributes in process `syz.2.983'. [ 71.370876][ T2717] netlink: 43 bytes leftover after parsing attributes in process `syz.2.983'. [ 71.404903][ T2725] netlink: 'syz.2.983': attribute type 12 has an invalid length. [ 71.416175][ T2725] netlink: 'syz.2.983': attribute type 29 has an invalid length. [ 71.424068][ T2725] netlink: 148 bytes leftover after parsing attributes in process `syz.2.983'. [ 71.433519][ T2725] netlink: 43 bytes leftover after parsing attributes in process `syz.2.983'. [ 71.547911][ T2748] capability: warning: `syz.2.998' uses deprecated v2 capabilities in a way that may be insecure [ 71.562022][ T2750] loop4: detected capacity change from 0 to 128 [ 71.579223][ T2750] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 71.600129][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 71.600147][ T28] audit: type=1400 audit(2000000038.550:564): avc: denied { read } for pid=2754 comm="syz.2.999" path="socket:[29457]" dev="sockfs" ino=29457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.604028][ T2750] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.651691][ T28] audit: type=1400 audit(2000000038.600:565): avc: denied { remount } for pid=2749 comm="syz.4.997" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.675625][ T2758] loop8: detected capacity change from 0 to 512 [ 71.683807][ T1962] EXT4-fs (loop4): unmounting filesystem. [ 71.713821][ T2758] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 71.771746][ T28] audit: type=1400 audit(2000000038.720:566): avc: denied { create } for pid=2757 comm="syz.8.1000" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.798350][ T28] audit: type=1400 audit(2000000038.740:567): avc: denied { mounton } for pid=2757 comm="syz.8.1000" path="/126/file0/file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.821620][ T28] audit: type=1400 audit(2000000038.740:568): avc: denied { write } for pid=2757 comm="syz.8.1000" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.843374][ T28] audit: type=1400 audit(2000000038.740:569): avc: denied { add_name } for pid=2757 comm="syz.8.1000" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.865478][ T2758] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 71.866627][ T28] audit: type=1400 audit(2000000038.740:570): avc: denied { setattr } for pid=2757 comm="syz.8.1000" name="work" dev="loop8" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.901448][ T28] audit: type=1400 audit(2000000038.740:571): avc: denied { remove_name } for pid=2757 comm="syz.8.1000" name="#1f" dev="loop8" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.931012][ T1173] EXT4-fs (loop8): unmounting filesystem. [ 71.963970][ T28] audit: type=1400 audit(2000000038.740:572): avc: denied { rename } for pid=2757 comm="syz.8.1000" name="#1f" dev="loop8" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.993637][ T2775] loop4: detected capacity change from 0 to 8192 [ 72.001612][ T28] audit: type=1400 audit(2000000038.750:573): avc: denied { unlink } for pid=2757 comm="syz.8.1000" name="#1f" dev="loop8" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.028007][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.053116][ T2779] input: syz1 as /devices/virtual/input/input20 [ 72.463987][ T6] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 72.655236][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.666412][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.676547][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.689811][ T6] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.698939][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.716327][ T6] usb 4-1: config 0 descriptor?? [ 72.788380][ T2827] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1032'. [ 73.130506][ T6] plantronics 0003:047F:FFFF.0019: unknown main item tag 0xd [ 73.139825][ T6] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 73.158729][ T6] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 73.183946][ T1386] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 73.374002][ T1386] usb 5-1: Using ep0 maxpacket: 32 [ 73.386912][ T1386] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.398121][ T1386] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.408081][ T1386] usb 5-1: config 0 interface 0 has no altsetting 0 [ 73.424133][ T1386] usb 5-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 73.433239][ T1386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.443536][ T6] usb 4-1: USB disconnect, device number 10 [ 73.471109][ T1386] usb 5-1: config 0 descriptor?? [ 73.474056][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 73.559123][ T2884] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.566222][ T2884] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.573479][ T2884] device bridge_slave_0 entered promiscuous mode [ 73.581093][ T2884] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.588619][ T2884] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.596558][ T2884] device bridge_slave_1 entered promiscuous mode [ 73.657420][ T2884] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.664778][ T2884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.672052][ T2884] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.679271][ T2884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.698701][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.706504][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.713769][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.723081][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.732698][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.739786][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.759790][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.760663][ T2898] loop2: detected capacity change from 0 to 512 [ 73.768281][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.781464][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.790737][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.798927][ T2898] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.804430][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.819658][ T2898] EXT4-fs (loop2): 1 truncate cleaned up [ 73.825633][ T2898] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 73.835300][ T2884] device veth0_vlan entered promiscuous mode [ 73.848871][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.857826][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.866241][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.866833][ T287] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 73.875822][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.905396][ T1386] wacom 0003:056A:032C.001A: hidraw0: USB HID vb.27 Device [HID 056a:032c] on usb-dummy_hcd.4-1/input0 [ 73.912715][ T2884] device veth1_macvtap entered promiscuous mode [ 73.930976][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.944536][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.962130][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.992479][ T287] EXT4-fs (loop2): unmounting filesystem. [ 74.034001][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.034019][ T1176] Bluetooth: hci0: command 0x1003 tx timeout [ 74.117324][ T1386] usb 5-1: USB disconnect, device number 10 [ 74.186161][ T8] device vlan2 left promiscuous mode [ 74.194548][ T8] bridge0: port 3(vlan2) entered disabled state [ 74.201326][ T8] device bridge_slave_1 left promiscuous mode [ 74.207566][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.215816][ T8] device bridge_slave_0 left promiscuous mode [ 74.221980][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.231071][ T8] device veth1_macvtap left promiscuous mode [ 74.237239][ T8] device veth0_vlan left promiscuous mode [ 74.335578][ T301] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 74.369996][ T2933] kvm [2932]: vcpu2, guest rIP: 0x9134 ignored wrmsr: 0x11e data 0x405 [ 74.381971][ T2933] kvm_set_msr_common: 12 callbacks suppressed [ 74.381989][ T2933] kvm [2932]: vcpu2, guest rIP: 0x9134 disabled perfctr wrmsr: 0x186 data 0x2c05 [ 74.397688][ T2933] kvm [2932]: vcpu2, guest rIP: 0x9134 disabled perfctr wrmsr: 0x187 data 0x6505 [ 74.411075][ T2933] kvm [2932]: vcpu2, guest rIP: 0x9134 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0xa705, nop [ 74.435553][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.442701][ T2917] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.450274][ T2917] device bridge_slave_0 entered promiscuous mode [ 74.457653][ T2917] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.465117][ T2917] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.472732][ T2917] device bridge_slave_1 entered promiscuous mode [ 74.524028][ T301] usb 9-1: Using ep0 maxpacket: 16 [ 74.531049][ T301] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 74.539405][ T301] usb 9-1: config 1 has no interface number 0 [ 74.545680][ T301] usb 9-1: config 1 interface 105 has no altsetting 0 [ 74.564738][ T301] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 74.573874][ T301] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.582023][ T301] usb 9-1: Product: syz [ 74.586263][ T301] usb 9-1: Manufacturer: syz [ 74.590867][ T301] usb 9-1: SerialNumber: syz [ 74.646823][ T2941] loop3: detected capacity change from 0 to 128 [ 74.653776][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.671408][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.680641][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.690193][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.702799][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.709978][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.725859][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.746340][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.751958][ T2964] input: syz1 as /devices/virtual/input/input25 [ 74.755305][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.771015][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.778108][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.809159][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.818204][ T301] aqc111: probe of 9-1:1.105 failed with error -22 [ 74.828498][ T301] usb 9-1: USB disconnect, device number 11 [ 74.849646][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.867405][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.881750][ T2917] device veth0_vlan entered promiscuous mode [ 74.892443][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.901122][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.910037][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.932045][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.941002][ T2917] device veth1_macvtap entered promiscuous mode [ 74.953566][ T2976] loop3: detected capacity change from 0 to 512 [ 74.963456][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.976895][ T424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.986225][ T2976] EXT4-fs: Ignoring removed orlov option [ 74.992642][ T2976] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 75.005270][ T2976] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 75.020027][ T2976] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.1091: corrupted in-inode xattr [ 75.035589][ T2976] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1091: couldn't read orphan inode 15 (err -117) [ 75.048952][ T2976] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 75.084232][ T1806] EXT4-fs (loop3): unmounting filesystem. [ 75.183405][ T2987] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 75.285313][ T8] device bridge_slave_1 left promiscuous mode [ 75.291692][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.299442][ T8] device bridge_slave_0 left promiscuous mode [ 75.306408][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.314989][ T8] device veth1_macvtap left promiscuous mode [ 75.321048][ T8] device veth0_vlan left promiscuous mode [ 75.350998][ T2999] binder: 2998:2999 ioctl c0306201 200000000640 returned -22 [ 75.434249][ T3004] loop8: detected capacity change from 0 to 8192 [ 75.544810][ T60] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 75.574587][ T3012] input: syz1 as /devices/virtual/input/input26 [ 75.695473][ T3018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1108'. [ 75.731866][ T3020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1109'. [ 75.766263][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.778209][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.788858][ T60] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 75.805032][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.831314][ T60] usb 8-1: config 0 descriptor?? [ 75.860868][ T3026] loop4: detected capacity change from 0 to 256 [ 75.871357][ T3026] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.882932][ T3026] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 75.902786][ T3026] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 76.114346][ T24] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 76.242902][ T60] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 76.252720][ T60] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 76.274702][ T60] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 76.291717][ T60] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 76.305134][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 76.317225][ T60] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 76.331761][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 76.348075][ T60] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 76.361493][ T60] pyra 0003:1E7D:2CF6.001B: unknown main item tag 0x0 [ 76.371676][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 76.390703][ T60] pyra 0003:1E7D:2CF6.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.7-1/input0 [ 76.412990][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.435339][ T24] usb 4-1: config 0 descriptor?? [ 76.448329][ T3024] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 76.487584][ T3048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1122'. [ 76.512682][ T3050] loop8: detected capacity change from 0 to 512 [ 76.520470][ T3050] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 76.548710][ T3050] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #16: comm syz.8.1123: invalid indirect mapped block 4294967295 (level 0) [ 76.563757][ T3050] EXT4-fs (loop8): Remounting filesystem read-only [ 76.570579][ T3050] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #16: comm syz.8.1123: invalid indirect mapped block 4294967295 (level 1) [ 76.585121][ T3050] EXT4-fs (loop8): Remounting filesystem read-only [ 76.591817][ T3050] EXT4-fs (loop8): 1 orphan inode deleted [ 76.598017][ T3050] EXT4-fs (loop8): 1 truncate cleaned up [ 76.603852][ T3050] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 76.615645][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 76.615660][ T28] audit: type=1400 audit(2000000043.570:627): avc: denied { mount } for pid=3049 comm="syz.8.1123" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.643939][ T60] pyra 0003:1E7D:2CF6.001B: couldn't init struct pyra_device [ 76.651390][ T60] pyra 0003:1E7D:2CF6.001B: couldn't install mouse [ 76.664918][ T60] pyra: probe of 0003:1E7D:2CF6.001B failed with error -71 [ 76.680573][ T60] usb 8-1: USB disconnect, device number 2 [ 76.688448][ T28] audit: type=1400 audit(2000000043.630:628): avc: denied { write } for pid=3049 comm="syz.8.1123" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.710682][ T28] audit: type=1400 audit(2000000043.630:629): avc: denied { add_name } for pid=3049 comm="syz.8.1123" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.732323][ T1173] EXT4-fs (loop8): unmounting filesystem. [ 76.753749][ T28] audit: type=1400 audit(2000000043.630:630): avc: denied { create } for pid=3049 comm="syz.8.1123" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.781740][ T28] audit: type=1400 audit(2000000043.630:631): avc: denied { read write open } for pid=3049 comm="syz.8.1123" path="/133/bus/file0/bus" dev="loop8" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.792753][ T3053] fido_id[3053]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 76.806772][ T28] audit: type=1400 audit(2000000043.660:632): avc: denied { unmount } for pid=1173 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.840915][ T28] audit: type=1400 audit(2000000043.660:633): avc: denied { read } for pid=3054 comm="syz.4.1124" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.863801][ T28] audit: type=1400 audit(2000000043.660:634): avc: denied { open } for pid=3054 comm="syz.4.1124" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.886936][ T28] audit: type=1400 audit(2000000043.660:635): avc: denied { ioctl } for pid=3054 comm="syz.4.1124" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.911586][ T28] audit: type=1400 audit(2000000043.730:636): avc: denied { read write } for pid=3057 comm="syz.8.1125" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.991625][ T24] logitech 0003:046D:C298.001C: unknown main item tag 0x4 [ 76.999288][ T24] logitech 0003:046D:C298.001C: unknown main item tag 0x0 [ 77.006684][ T24] logitech 0003:046D:C298.001C: unknown main item tag 0x0 [ 77.022820][ T24] logitech 0003:046D:C298.001C: unbalanced collection at end of report description [ 77.048366][ T24] logitech 0003:046D:C298.001C: parse failed [ 77.055025][ T334] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 77.064061][ T24] logitech: probe of 0003:046D:C298.001C failed with error -22 [ 77.193469][ T301] usb 4-1: USB disconnect, device number 11 [ 77.232814][ T3069] loop5: detected capacity change from 0 to 40427 [ 77.235629][ T3065] loop4: detected capacity change from 0 to 40427 [ 77.247379][ T3069] F2FS-fs (loop5): Unrecognized mount option "test_dumm" or missing value [ 77.256134][ T3065] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 77.257914][ T334] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 77.264694][ T3065] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 77.276150][ T334] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 77.298347][ T334] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 77.307864][ T334] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.316989][ T334] usb 9-1: config 0 descriptor?? [ 77.322290][ T3058] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 77.330321][ T3065] F2FS-fs (loop4): Found nat_bits in checkpoint [ 77.383699][ T3065] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 77.392075][ T3065] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 77.429081][ T3065] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 77.429101][ T3065] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 77.436877][ T3065] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 77.444551][ T3065] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 77.452113][ T3065] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 77.459916][ T3065] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 77.467543][ T3065] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 77.536073][ T3058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.553258][ T3058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.564051][ T334] usbhid 9-1:0.0: can't add hid device: -71 [ 77.570083][ T334] usbhid: probe of 9-1:0.0 failed with error -71 [ 77.578291][ T334] usb 9-1: USB disconnect, device number 12 [ 77.642468][ T3065] F2FS-fs (loop4): Start checkpoint disabled! [ 77.648627][ T2417] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 77.724325][ T3080] loop3: detected capacity change from 0 to 8192 [ 77.778455][ T3084] loop4: detected capacity change from 0 to 512 [ 77.806082][ T3084] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 77.815680][ T3084] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.835055][ T2417] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.850156][ T2417] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 77.861633][ T3084] EXT4-fs error (device loop4): ext4_get_first_dir_block:3583: inode #12: comm syz.4.1134: Attempting to read directory block (0) that is past i_size (3) [ 77.877415][ T2417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.877429][ T3084] EXT4-fs (loop4): Remounting filesystem read-only [ 77.901153][ T2417] usb 6-1: config 0 descriptor?? [ 77.904493][ T1962] EXT4-fs (loop4): unmounting filesystem. [ 78.063989][ T24] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 78.195732][ T334] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 78.263960][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 78.270436][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 78.289402][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 78.302852][ T24] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 78.312412][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.321322][ T2417] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 78.333753][ T24] usb 9-1: config 0 descriptor?? [ 78.340594][ T2417] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.001D/input/input27 [ 78.354921][ T24] hub 9-1:0.0: bad descriptor, ignoring hub [ 78.360975][ T24] hub: probe of 9-1:0.0 failed with error -5 [ 78.393947][ T334] usb 5-1: Using ep0 maxpacket: 16 [ 78.400588][ T334] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 78.419069][ T2417] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 78.432861][ T334] usb 5-1: config 0 interface 0 has no altsetting 0 [ 78.442156][ T334] usb 5-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 78.462289][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.479970][ T334] usb 5-1: config 0 descriptor?? [ 78.536916][ T3077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.558650][ T3077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.740301][ T444] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.748708][ T3117] syz.3.1148[3117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.748754][ T3117] syz.3.1148[3117] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.763159][ T24] hid-multitouch 0003:0EEF:72C4.001E: hidraw1: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.8-1/input0 [ 78.799460][ T3119] capability: warning: `syz.3.1149' uses 32-bit capabilities (legacy support in use) [ 78.890902][ T334] lg-g15 0003:046D:C22D.001F: hidraw2: USB HID v0.06 Device [HID 046d:c22d] on usb-dummy_hcd.4-1/input0 [ 78.899519][ T301] usb 6-1: USB disconnect, device number 2 [ 78.902173][ C1] keytouch 0003:0926:3333.001D: usb_submit_urb(ctrl) failed: -19 [ 78.915945][ C1] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 78.953770][ T3126] loop3: detected capacity change from 0 to 2048 [ 78.985154][ T3126] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 78.993673][ T3126] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.017627][ T3126] overlayfs: failed to set xattr on upper [ 79.023597][ T3126] overlayfs: Failed to create volatile/dirty file. [ 79.033756][ T3126] overlayfs: failed to set xattr on upper [ 79.039587][ T3126] overlayfs: ...falling back to index=off,metacopy=off. [ 79.046568][ T3126] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 79.064426][ T1806] EXT4-fs (loop3): unmounting filesystem. [ 79.094109][ T1801] usb 9-1: USB disconnect, device number 13 [ 79.097086][ T334] usb 5-1: USB disconnect, device number 11 [ 79.164602][ T3137] loop3: detected capacity change from 0 to 512 [ 79.171106][ T3137] EXT4-fs: Ignoring removed bh option [ 79.177317][ T3137] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.186544][ T3137] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 79.195508][ T3137] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 79.205016][ T3137] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 79.213340][ T3137] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 79.237282][ T1806] EXT4-fs (loop3): unmounting filesystem. [ 79.303142][ T3144] loop3: detected capacity change from 0 to 512 [ 79.320698][ T3144] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 79.331094][ T3144] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.348352][ T3144] EXT4-fs error (device loop3): ext4_get_first_dir_block:3583: inode #12: comm syz.3.1158: Attempting to read directory block (0) that is past i_size (3) [ 79.364087][ T3144] EXT4-fs (loop3): Remounting filesystem read-only [ 79.376050][ T1806] EXT4-fs (loop3): unmounting filesystem. [ 79.573767][ T3161] SELinux: failed to load policy [ 79.614924][ T3167] loop5: detected capacity change from 0 to 512 [ 79.639679][ T3167] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 79.650436][ T3167] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.677297][ T3167] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.1167: corrupted inode contents [ 79.694554][ T3167] EXT4-fs error (device loop5): ext4_dirty_inode:6121: inode #2: comm syz.5.1167: mark_inode_dirty error [ 79.715691][ T3167] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.1167: corrupted inode contents [ 79.728153][ T3177] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.1167: corrupted inode contents [ 79.740316][ T3177] EXT4-fs error (device loop5): ext4_dirty_inode:6121: inode #2: comm syz.5.1167: mark_inode_dirty error [ 79.751843][ T3177] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #2: comm syz.5.1167: corrupted inode contents [ 79.769726][ T2884] EXT4-fs (loop5): unmounting filesystem. [ 80.754034][ T1177] Bluetooth: hci0: command 0x1003 tx timeout [ 80.754069][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.766412][ T3115] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 80.786445][ T3182] loop7: detected capacity change from 0 to 16384 [ 80.889617][ T3182] I/O error, dev loop7, sector 7440 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 2 [ 80.896497][ T3203] loop5: detected capacity change from 0 to 2048 [ 80.967648][ T3205] SELinux: failed to load policy [ 80.999431][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 81.064000][ T1386] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 81.143962][ T2417] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 81.245016][ T1386] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.255991][ T1386] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 81.265050][ T1386] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.277110][ T1386] usb 8-1: config 0 descriptor?? [ 81.323954][ T2417] usb 9-1: Using ep0 maxpacket: 16 [ 81.330348][ T2417] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 81.341627][ T2417] usb 9-1: config 0 interface 0 has no altsetting 0 [ 81.348373][ T2417] usb 9-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 81.357578][ T2417] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.366418][ T2417] usb 9-1: config 0 descriptor?? [ 81.686025][ T1386] keytouch 0003:0926:3333.0020: fixing up Keytouch IEC report descriptor [ 81.695496][ T1386] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0020/input/input28 [ 81.776927][ T2417] lg-g15 0003:046D:C22D.0021: hidraw0: USB HID v0.06 Device [HID 046d:c22d] on usb-dummy_hcd.8-1/input0 [ 81.777396][ T1386] keytouch 0003:0926:3333.0020: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 81.913018][ T3186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.922487][ T3186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.987886][ T2417] usb 9-1: USB disconnect, device number 14 [ 82.022619][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 82.022634][ T28] audit: type=1400 audit(2000000048.970:689): avc: denied { read } for pid=3220 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 82.035599][ T3227] loop5: detected capacity change from 0 to 2048 [ 82.079315][ T3227] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 82.088216][ T3227] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.108386][ T3227] overlayfs: failed to set xattr on upper [ 82.114495][ T3227] overlayfs: Failed to create volatile/dirty file. [ 82.126046][ T3227] overlayfs: failed to set xattr on upper [ 82.131805][ T3227] overlayfs: ...falling back to index=off,metacopy=off. [ 82.139442][ T3227] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 82.165497][ T2884] EXT4-fs (loop5): unmounting filesystem. Stopping sshd: stopped /usr/sbin/sshd (pid 194) OK [ 82.251914][ T2417] usb 8-1: USB disconnect, device number 3 [ 82.252049][ C0] keytouch 0003:0926:3333.0020: usb_submit_urb(ctrl) failed: -19 Stopping crond: stopped /usr/sbin/crond (pid 187) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 141) [ 82.327159][ T28] audit: type=1400 audit(2000000049.280:690): avc: denied { search } for pid=3241 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Stopping network: [ 82.410193][ T28] audit: type=1400 audit(2000000049.360:691): avc: denied { write } for pid=142 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.436949][ T28] audit: type=1400 audit(2000000049.360:692): avc: denied { remove_name } for pid=142 comm="dhcpcd" name="sock" dev="tmpfs" ino=491 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.459511][ T28] audit: type=1400 audit(2000000049.360:693): avc: denied { unlink } for pid=142 comm="dhcpcd" name="sock" dev="tmpfs" ino=491 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 82.482485][ T28] audit: type=1400 audit(2000000049.390:694): avc: denied { read write } for pid=3251 comm="ip" path="/dev/console" dev="rootfs" ino=6740 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK[ 82.505973][ T28] audit: type=1400 audit(2000000049.390:695): avc: denied { unlink } for pid=142 comm="dhcpcd" name="pid" dev="tmpfs" ino=490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.542093][ T28] audit: type=1400 audit(2000000049.490:696): avc: denied { create } for pid=3255 comm="syz.3.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 Stopping iptables: OK [ 82.582600][ T28] audit: type=1400 audit(2000000049.520:697): avc: denied { ioctl } for pid=3255 comm="syz.3.1192" path="socket:[32333]" dev="sockfs" ino=32333 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 Stopping system message bus: [ 82.613441][ T28] audit: type=1400 audit(2000000049.520:698): avc: denied { read write } for pid=3261 comm="iptables" path="/dev/console" dev="rootfs" ino=6740 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 82.639220][ T3264] loop7: detected capacity change from 0 to 16384 done [ 82.750288][ T3264] I/O error, dev loop7, sector 5768 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 82.833920][ C0] ================================================================== [ 82.835917][ T3288] overlayfs: upper fs is r/o, try multi-lower layers mount [ 82.842035][ C0] BUG: KASAN: use-after-free in __run_timers+0x32b/0x9a0 [ 82.842069][ C0] Write of size 8 at addr ffff8881209f0a00 by task udevadm/3284 [ 82.863968][ C0] [ 82.866293][ C0] CPU: 0 PID: 3284 Comm: udevadm Not tainted 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 82.875834][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.885884][ C0] Call Trace: [ 82.889154][ C0] [ 82.892162][ C0] __dump_stack+0x21/0x24 [ 82.896499][ C0] dump_stack_lvl+0xee/0x150 [ 82.901092][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 82.906114][ C0] ? update_rq_clock+0x536/0x5c0 [ 82.911044][ C0] ? __run_timers+0x32b/0x9a0 [ 82.915719][ C0] print_address_description+0x71/0x210 [ 82.921279][ C0] print_report+0x4a/0x60 [ 82.925607][ C0] kasan_report+0x122/0x150 [ 82.930104][ C0] ? __run_timers+0x32b/0x9a0 [ 82.934777][ C0] __asan_report_store8_noabort+0x17/0x20 [ 82.940496][ C0] __run_timers+0x32b/0x9a0 [ 82.945083][ C0] ? sched_clock+0x9/0x10 [ 82.949411][ C0] ? sched_clock_cpu+0x6e/0x250 [ 82.954260][ C0] ? calc_index+0x200/0x200 [ 82.958760][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 82.963957][ C0] run_timer_softirq+0x6a/0xf0 [ 82.968718][ C0] handle_softirqs+0x1d7/0x600 [ 82.973474][ C0] __irq_exit_rcu+0x52/0xf0 [ 82.977969][ C0] irq_exit_rcu+0x9/0x10 [ 82.982207][ C0] sysvec_apic_timer_interrupt+0x58/0xc0 [ 82.987835][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 82.993815][ C0] RIP: 0033:0x7f8ab3cb8d34 [ 82.998225][ C0] Code: 8d 34 19 49 39 d0 49 89 70 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 48 89 cf 4c 89 e6 48 89 4c 24 08 e8 18 c7 ff ff 48 8b [ 83.017908][ C0] RSP: 002b:00007ffd1e8ba500 EFLAGS: 00010202 [ 83.023970][ C0] RAX: 0000000000014e01 RBX: 0000000000000450 RCX: 0000563e1fd73dc0 [ 83.031937][ C0] RDX: 0000000000000451 RSI: 0000563e1fd74200 RDI: 0000000000000000 [ 83.039901][ C0] RBP: fffffffffffffe98 R08: 00007f8ab3df1ac0 R09: 0000000000000000 [ 83.047953][ C0] R10: 0000000000000004 R11: 0000563e1fd68000 R12: 0000000000000448 [ 83.055959][ C0] R13: 0000000000000000 R14: 0000000000000043 R15: 00007f8ab3df1b20 [ 83.063927][ C0] [ 83.066935][ C0] [ 83.069250][ C0] Allocated by task 3115: [ 83.073561][ C0] kasan_set_track+0x4b/0x70 [ 83.078150][ C0] kasan_save_alloc_info+0x25/0x30 [ 83.083254][ C0] __kasan_kmalloc+0x95/0xb0 [ 83.087837][ C0] __kmalloc+0xb1/0x1e0 [ 83.092007][ C0] hci_alloc_dev_priv+0x27/0x1bd0 [ 83.097112][ C0] hci_uart_tty_ioctl+0x3d6/0xa20 [ 83.102135][ C0] tty_ioctl+0x8ef/0xc60 [ 83.106368][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 83.111126][ C0] __x64_sys_ioctl+0x7b/0x90 [ 83.115708][ C0] x64_sys_call+0x58b/0x9a0 [ 83.120203][ C0] do_syscall_64+0x4c/0xa0 [ 83.124705][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.130686][ C0] [ 83.133002][ C0] Freed by task 3115: [ 83.136976][ C0] kasan_set_track+0x4b/0x70 [ 83.141558][ C0] kasan_save_free_info+0x31/0x50 [ 83.146574][ C0] ____kasan_slab_free+0x132/0x180 [ 83.151672][ C0] __kasan_slab_free+0x11/0x20 [ 83.156425][ C0] slab_free_freelist_hook+0xc2/0x190 [ 83.161799][ C0] __kmem_cache_free+0xb7/0x1b0 [ 83.166644][ C0] kfree+0x6f/0xf0 [ 83.170445][ C0] hci_release_dev+0x12a3/0x13b0 [ 83.175377][ C0] bt_host_release+0x82/0x90 [ 83.179965][ C0] device_release+0xa4/0x1d0 [ 83.184545][ C0] kobject_put+0x19d/0x280 [ 83.188965][ C0] put_device+0x1f/0x30 [ 83.193111][ C0] hci_dev_cmd+0x265/0x720 [ 83.197607][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 83.202275][ C0] sock_do_ioctl+0x101/0x310 [ 83.206858][ C0] sock_ioctl+0x4d8/0x6e0 [ 83.211188][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 83.215862][ C0] __x64_sys_ioctl+0x7b/0x90 [ 83.220458][ C0] x64_sys_call+0x58b/0x9a0 [ 83.224953][ C0] do_syscall_64+0x4c/0xa0 [ 83.229377][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.235264][ C0] [ 83.237580][ C0] Last potentially related work creation: [ 83.243283][ C0] kasan_save_stack+0x3a/0x60 [ 83.247960][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 83.253347][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 83.259149][ C0] insert_work+0x51/0x300 [ 83.263476][ C0] __queue_work+0x9b1/0xd30 [ 83.267977][ C0] queue_work_on+0xd2/0x140 [ 83.272474][ C0] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 83.277409][ C0] hci_cmd_sync_status+0x53/0x120 [ 83.282769][ C0] hci_dev_cmd+0x628/0x720 [ 83.287354][ C0] hci_sock_ioctl+0x41e/0x7f0 [ 83.292022][ C0] sock_do_ioctl+0x101/0x310 [ 83.296605][ C0] sock_ioctl+0x4d8/0x6e0 [ 83.301016][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 83.305685][ C0] __x64_sys_ioctl+0x7b/0x90 [ 83.310264][ C0] x64_sys_call+0x58b/0x9a0 [ 83.314758][ C0] do_syscall_64+0x4c/0xa0 [ 83.319170][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.325097][ C0] [ 83.327409][ C0] Second to last potentially related work creation: [ 83.333984][ C0] kasan_save_stack+0x3a/0x60 [ 83.338656][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 83.344025][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 83.349829][ C0] insert_work+0x51/0x300 [ 83.354160][ C0] __queue_work+0x9b1/0xd30 [ 83.358654][ C0] queue_work_on+0xd2/0x140 [ 83.363166][ C0] hci_cmd_timeout+0x191/0x200 [ 83.367919][ C0] process_one_work+0x71f/0xc40 [ 83.372760][ C0] worker_thread+0xa29/0x11f0 [ 83.377426][ C0] kthread+0x281/0x320 [ 83.381490][ C0] ret_from_fork+0x1f/0x30 [ 83.385897][ C0] [ 83.388213][ C0] The buggy address belongs to the object at ffff8881209f0000 [ 83.388213][ C0] which belongs to the cache kmalloc-8k of size 8192 [ 83.402253][ C0] The buggy address is located 2560 bytes inside of [ 83.402253][ C0] 8192-byte region [ffff8881209f0000, ffff8881209f2000) [ 83.415689][ C0] [ 83.418001][ C0] The buggy address belongs to the physical page: [ 83.424396][ C0] page:ffffea0004827c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1209f0 [ 83.434709][ C0] head:ffffea0004827c00 order:3 compound_mapcount:0 compound_pincount:0 [ 83.443019][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 83.449095][ C0] raw: 4000000000010200 ffffea00048b6a00 dead000000000003 ffff888100043500 [ 83.457756][ C0] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 83.466322][ C0] page dumped because: kasan: bad access detected [ 83.472717][ C0] page_owner tracks the page as allocated [ 83.478517][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1491, tgid 1490 (syz.6.459), ts 46197320016, free_ts 46187770670 [ 83.501084][ C0] post_alloc_hook+0x1f5/0x210 [ 83.505842][ C0] prep_new_page+0x1c/0x110 [ 83.510436][ C0] get_page_from_freelist+0x2c7b/0x2cf0 [ 83.516013][ C0] __alloc_pages+0x1c3/0x450 [ 83.520598][ C0] alloc_slab_page+0x6e/0xf0 [ 83.525180][ C0] new_slab+0x98/0x3d0 [ 83.529241][ C0] ___slab_alloc+0x6f6/0xb50 [ 83.533825][ C0] __slab_alloc+0x5e/0xa0 [ 83.538157][ C0] __kmem_cache_alloc_node+0x203/0x2c0 [ 83.543629][ C0] __kmalloc_node+0xa1/0x1e0 [ 83.548225][ C0] kvmalloc_node+0x294/0x480 [ 83.552823][ C0] kvm_dev_ioctl_get_cpuid+0x1fe/0x790 [ 83.558309][ C0] kvm_arch_dev_ioctl+0x35a/0x7c0 [ 83.563420][ C0] kvm_dev_ioctl+0xd6/0x11f0 [ 83.568094][ C0] __se_sys_ioctl+0x12f/0x1b0 [ 83.572771][ C0] __x64_sys_ioctl+0x7b/0x90 [ 83.577349][ C0] page last free stack trace: [ 83.582011][ C0] free_unref_page_prepare+0x742/0x750 [ 83.587464][ C0] free_unref_page+0x8f/0x530 [ 83.592134][ C0] __free_pages+0x67/0x100 [ 83.596547][ C0] __free_slab+0xca/0x1a0 [ 83.600870][ C0] __unfreeze_partials+0x160/0x190 [ 83.605981][ C0] put_cpu_partial+0xa9/0x100 [ 83.610911][ C0] __slab_free+0x1c4/0x280 [ 83.615324][ C0] ___cache_free+0xbf/0xd0 [ 83.619731][ C0] qlist_free_all+0xc6/0x140 [ 83.624318][ C0] kasan_quarantine_reduce+0x14a/0x170 [ 83.629767][ C0] __kasan_slab_alloc+0x24/0x80 [ 83.634615][ C0] slab_post_alloc_hook+0x4f/0x2d0 [ 83.639720][ C0] kmem_cache_alloc+0x16e/0x330 [ 83.644563][ C0] getname_flags+0xb9/0x500 [ 83.649153][ C0] __se_sys_newfstatat+0xdf/0x380 [ 83.654166][ C0] __x64_sys_newfstatat+0x9b/0xb0 [ 83.659273][ C0] [ 83.661584][ C0] Memory state around the buggy address: [ 83.667201][ C0] ffff8881209f0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.675259][ C0] ffff8881209f0980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.683310][ C0] >ffff8881209f0a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.691357][ C0] ^ [ 83.695413][ C0] ffff8881209f0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.703482][ C0] ffff8881209f0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.711533][ C0] ================================================================== [ 83.719841][ C0] Disabling lock debugging due to kernel taint [ 83.726000][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 83.737709][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 83.746124][ C0] CPU: 0 PID: 3284 Comm: udevadm Tainted: G B 6.1.145-syzkaller-00002-gc750dc582629 #0 [ 83.757137][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 83.767272][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 83.772564][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 28 d7 28 00 4c 89 ff e8 50 60 ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 4c 3a 6d 00 49 8b 7d 00 e8 33 5c [ 83.792250][ C0] RSP: 0000:ffffc90000ba7bb0 EFLAGS: 00010046 [ 83.798317][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888111aa9440 [ 83.806284][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 83.814256][ C0] RBP: ffffc90000ba7c48 R08: fffffffffffffffb R09: 0000000000000007 [ 83.822219][ C0] R10: ffffed102413e139 R11: 1ffff1102413e139 R12: dffffc0000000000 [ 83.830182][ C0] R13: 0000000000000000 R14: ffff8881209f09c8 R15: 0000000000000008 [ 83.838155][ C0] FS: 00007f8ab4366880(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 83.847077][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.853658][ C0] CR2: 0000563e1fd74208 CR3: 000000011fc95000 CR4: 00000000003506b0 [ 83.861713][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.869683][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.877650][ C0] Call Trace: [ 83.880922][ C0] [ 83.883857][ C0] delayed_work_timer_fn+0x61/0x80 [ 83.888972][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 83.894773][ C0] call_timer_fn+0x46/0x2a0 [ 83.899275][ C0] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 83.905163][ C0] __run_timers+0x667/0x9a0 [ 83.909662][ C0] ? calc_index+0x200/0x200 [ 83.914156][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 83.919391][ C0] run_timer_softirq+0x6a/0xf0 [ 83.924151][ C0] handle_softirqs+0x1d7/0x600 [ 83.928909][ C0] __irq_exit_rcu+0x52/0xf0 [ 83.933578][ C0] irq_exit_rcu+0x9/0x10 [ 83.937833][ C0] sysvec_apic_timer_interrupt+0x58/0xc0 [ 83.943476][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 83.949453][ C0] RIP: 0033:0x7f8ab3cb8d34 [ 83.953869][ C0] Code: 8d 34 19 49 39 d0 49 89 70 60 0f 95 c2 48 29 d8 48 83 c1 10 0f b6 d2 48 83 c8 01 48 c1 e2 02 48 09 da 48 83 ca 01 48 89 51 f8 <48> 89 46 08 48 89 cf 4c 89 e6 48 89 4c 24 08 e8 18 c7 ff ff 48 8b [ 83.973480][ C0] RSP: 002b:00007ffd1e8ba500 EFLAGS: 00010202 [ 83.979565][ C0] RAX: 0000000000014e01 RBX: 0000000000000450 RCX: 0000563e1fd73dc0 [ 83.987551][ C0] RDX: 0000000000000451 RSI: 0000563e1fd74200 RDI: 0000000000000000 [ 83.995536][ C0] RBP: fffffffffffffe98 R08: 00007f8ab3df1ac0 R09: 0000000000000000 [ 84.003514][ C0] R10: 0000000000000004 R11: 0000563e1fd68000 R12: 0000000000000448 [ 84.011485][ C0] R13: 0000000000000000 R14: 0000000000000043 R15: 00007f8ab3df1b20 [ 84.019460][ C0] [ 84.022475][ C0] Modules linked in: [ 84.026368][ C0] ---[ end trace 0000000000000000 ]--- [ 84.031816][ C0] RIP: 0010:__queue_work+0x575/0xd30 [ 84.037197][ C0] Code: 39 2b 0f 84 b9 00 00 00 e8 28 d7 28 00 4c 89 ff e8 50 60 ac 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 4c 3a 6d 00 49 8b 7d 00 e8 33 5c [ 84.056805][ C0] RSP: 0000:ffffc90000ba7bb0 EFLAGS: 00010046 [ 84.062960][ C0] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888111aa9440 [ 84.070959][ C0] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 84.078929][ C0] RBP: ffffc90000ba7c48 R08: fffffffffffffffb R09: 0000000000000007 [ 84.086902][ C0] R10: ffffed102413e139 R11: 1ffff1102413e139 R12: dffffc0000000000 [ 84.094868][ C0] R13: 0000000000000000 R14: ffff8881209f09c8 R15: 0000000000000008 [ 84.103787][ C0] FS: 00007f8ab4366880(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 84.112708][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.119282][ C0] CR2: 0000563e1fd74208 CR3: 000000011fc95000 CR4: 00000000003506b0 [ 84.127251][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.135302][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.143273][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 84.193384][ C0] Kernel Offset: disabled [ 84.197717][ C0] Rebooting in 86400 seconds..