last executing test programs: 9.608148585s ago: executing program 1 (id=661): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) fgetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) 9.534395726s ago: executing program 1 (id=663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9.32272993s ago: executing program 1 (id=669): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 9.195572902s ago: executing program 1 (id=673): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 9.142846053s ago: executing program 1 (id=674): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x21081e, &(0x7f0000000040)={[{@commit={'commit', 0x3d, 0x5}}, {@nodioread_nolock}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x101000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x100) fallocate(r0, 0x3, 0x2, 0x8000c62) 8.971970875s ago: executing program 1 (id=675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) 4.462076163s ago: executing program 4 (id=739): timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000040)={{}, {r1, r2+60000000}}, &(0x7f0000000000)) 4.207321727s ago: executing program 4 (id=741): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.621690605s ago: executing program 0 (id=753): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 3.522561587s ago: executing program 0 (id=756): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x81) ioctl$FITRIM(r0, 0xc0185879, 0x0) 2.834970828s ago: executing program 0 (id=767): syz_mount_image$f2fs(&(0x7f0000000280), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70fb5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/712], 0x5, 0x55a4, &(0x7f0000002940)="$eJzs3DuPG2UXAOAz3uzm+uVbIQq6jBQh7UqxFW8ugooAibiIRBGXggq8tmM5sT2rteMsqVJQIgr+CQKJipLfQAEldIgCRIcU5JlZiHMjF683JM8jjc/M69dnzjuyVjozKwfwzFpO//gticOxPyIWIuJQEvl+Um4RNyLOFHNfiIgjEVG5ZUvK8b8HliLiQEQcniQvciblW18cGx899evbv3/7/d49B7/85oddXTiwq16MiP5GsX+tX8Ssk4ebC+V4Y9zNY//kuIwbUzn6WTF+rb2eZ7jW2J7XyOOJTjE/27g6nMRLvUZzEjvdS/n4xqA44XDc2c4z+UB6ubGZH7fa63nsDrM8dq4X5926Xvxtuz4cFXlaZb5P8vQxGm3HYry91S7Ws3Elj83BqBwv8mat9tYkjstYni6aWa+V17H+qFf5yfdOd3B1Kx23N4fdbJCeqtVfqtVPV+ubWas9ap+sNvqt0yfTlU5vMq06ajf6ZzpZ1um1a82sv5qudJrNar2erpxtr3cbg7Rer52oHa+eWi33jqVvXPgg7bXSlUl8rTu4Our2humlbDMtPrGartVOvLyaHq2n752/mF5899y58xff/+jshxdePf/W6+WkO8pKV9aOr61V68era/XVZ2j9n5ZFP8T6k7sP//Tj4102KNzjCwbAvd3R/8ft/X/o/4GZu0//H5f/pf/vXymPd6b/j7v2/5Xp/j/y/n+pyPO4/f+kpXqQ/n/vo17tJ9dD9b+VXeh/F0P/f3tZyezWD4/l0fr/pZnXAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3P28+NWb+c5ycXywHP9fOfRceZxERCUibt7FQixN5Vwo8yzeY/7ibTV8l0SeYXKOveV2ICLOlNuf/9/pqwAAAABPr69vHPm86NaLl+XdLoh5Km7aVA59PKN8SUQsLv8yo2yVycvzM0qWf7/3xNaMsuU3sPbNKFlxy23PrLI9kIWpsO+WkBShMtdyAACAuZjuBObbhQAAADBPn9333VfmVgdzlsT2o8ztZ8H5f97/80Bw/9R7AAAAwH9QstsFAAAAADsu7//9/h8AAAA83Yrf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiLnfvJVRoIAwD+tVDwbyTGvVdxB8fwCC5dCgdw6QU4Ap7AxAtwBkxceAQVQzuSVx4kL48pfY/8fkmnnSl8nYFuvplkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NKPajX7+unt53t89cuN629/tufJOCQAAADgwKZazeqLSVN/ntpfpqbXqV5ERBkRx3L3QYxaMQcpTnXi89VBH75H1BF27eN0PIuId+n4/arrXwEAAACu13qxnDbZelOkKYCf/faKC2kmbcoX7zPFKyKimvzKFK3cFW8yBavf72F8zBStnsB6kilYM+U2PH5vlOshbYPW6f9I5vWfWNfKbp4LAAD0qZ0JnMhCAAAAuAIf+u4Al3A7tS/2xX6dcdyc0oLg01YNAAAAeISKvjsAAAAAdK7O/x/S/n+F/f8AAAAgu2b/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq0qVaz9WI5PXV/fsc4f7fnyTciAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+sT/vKBACYRAGe9d3JnP/w0qDhsYmVSB8/I3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF/rykQAgEQRTMGf876fsfVhL0DCJEQMOjilo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFvh37tlGFAQD/7IudpoAIAUUigIrUARaauqWlK0KgiIE/ASlKnRJwKbQZaBVRsrChzF0QjAghgcKW/6FzI3UpW4cMQWJiCLrznXNOAo1Ke+c2v5/0/D6fr+9972xV+fzOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDYejdebeZxkj5M9uPi2J3tlYW039zTpzbW7s6kLY0bFef9BHit/OTEdH2JAAAAcHQkRX0fEfda63Np35zM6v9WcU5a8//wXD8u6vm9df/m9sqx/KWZov7//bf7Lw0mmkyyedJBF5d63dP7Uxl7TEscec8/8Iyx7Mpn370k2RvS/HD1xa1Wdj0b392+/X47C8eryBYAeBinij4Pir+H0r5TZ2IAHBljpcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJgZ241Tm9srCwf136zdndnI2/lbt9bKY6ZDtCJicanXPV3hWkZXcTVvfDbf63WvXrtedXAiIg546ebh/nmSp/+v57QjYujIyZcPGOfjQ8y1Z5x9Qf7xjGqv4US6vgee3Bg60th3wd/b6avjA1BV0Mzfn1HJ51EGxWfv0Y9c8X9HAAA89Vp5SyvRe631ufRYYypi58fh+v+NUhxDdf/Ozf6R9Pl4ROzW//c/OX+nPFe5/u9UtcAnwOzy5S9mr12/8dbS5flL3Uvdz98+03mnc/bCuXMXZrPvSmYXo+kbEwAAAP6Hdt7K9X9zav/+//FSHP+x/79R2v//8vvO1+W5EvX/wEQp3t30qzEhAACAI6s9iF54/a8/Gwec0Wi346v55eWrnf7j4PmZ/mOl6T6k8byV6/9kqu6sAAAAgCpsrTaG9v8vluI45P7/sz+98kt5zKS/730lIrqnFq70Lla3nJFWxQ+Vs4nada8UAACAukzkrbz/38ru/28ObnloRsSbJyP+zn/DH4es/5MPvv25PFf5/v+zla5y9DSn+9cj66cjxqbrzggAAICn2bG8pcX+H631uU9/Pf5R2/3/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFX7JwAA//9CGDFc") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.533780902s ago: executing program 0 (id=768): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001180)={0x0, 0x0, 0x2, "8248"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.134646458s ago: executing program 2 (id=771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.103560698s ago: executing program 2 (id=772): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 2.051383919s ago: executing program 2 (id=773): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) 2.051192889s ago: executing program 2 (id=774): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x29) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.050578549s ago: executing program 4 (id=775): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r1, @ANYRES32=r3], 0x44}}, 0x0) 1.98622737s ago: executing program 4 (id=776): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) 1.914465172s ago: executing program 2 (id=777): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@getsadinfo={0x348, 0x23, 0x8, 0x70bd2b, 0x25dfdbfb, 0x0, [@tmpl={0x44, 0x5, [{{@in6=@local, 0x4d3, 0x32}, 0xa, @in=@private=0xa010102, 0x0, 0x2, 0x1, 0x8, 0x100, 0x401, 0x80}]}, @migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xff, 0x4, 0x0, 0x3506, 0xa, 0x2}]}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2c, 0xfffffffc}}, @sa={0xe4, 0x6, {{@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x4e22, 0x8000, 0x4e20, 0x5, 0x2, 0x80, 0xa0}, {@in6=@private0, 0x4d4, 0x2b}, @in6=@local, {0x2, 0x3, 0x85c, 0x8, 0x10000, 0x7, 0x5, 0xffffffffffffffff}, {0x10000, 0x1, 0x2e, 0x8}, {0x1000, 0x2, 0x34}, 0x70bd25, 0x3502, 0xa, 0x0, 0x67, 0x11}}, @algo_auth_trunc={0xe9, 0x14, {{'sha512-arm\x00'}, 0x4e8, 0xa0, "53c039ff1ca31ffb775d05933ce9377f7bff01d048205d87e5080e7c70eb58a2308a91700a9bd01869bcb8244df1b614df6a39078ff62e9c4070daa254b5291261959b14006acd001ab5974d187a6398cf7db8f7e238c7e555982c3578ae8816faf421e1097bcbcf3b9ae38cdc1e63c651c31a4ea2b28cf3b8ddf46983d960137cc7ef48ec246fbb7a567d575fc03fc0cf4d89b531e2d167b7eced57d5"}}, @algo_aead={0xbf, 0x12, {{'aegis128l-generic\x00'}, 0x398, 0x80, "b87b7ad4e1910545420fd9e56d33ccaea040ee33d5e9e0f7230cb4cc81944cf6752b8bf06a9c665d762e893efd8c129e9bfe83481e720042e731850754f9b901d3e5ce1d691a6c3a7132555aa309ff4e3877bf0a2f3e6edd2470e9dd129fe65a13fdef0cd1f3813d60933144b13baaf127a84d"}}]}, 0x348}, 0x1, 0x0, 0x0, 0x800}, 0x4008084) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40080) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.910045991s ago: executing program 4 (id=778): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x59, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x65, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000540)={0x20, 0x7, 0x19, {0x19, 0x21, "2657649057b73e08007601c6a000b9d03ebab4d586075e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.685975145s ago: executing program 3 (id=782): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.605216156s ago: executing program 3 (id=783): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) tee(r0, r4, 0xf3a, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) 1.485576068s ago: executing program 3 (id=784): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.441072339s ago: executing program 3 (id=785): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000), 0x4, 0x5eb, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x10d27e, 0x55) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fallocate(r0, 0x0, 0x0, 0x1001f0) fallocate(r0, 0x3, 0x0, 0x7750) 1.3386974s ago: executing program 3 (id=786): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4104, 0x1008}], 0x1, 0x8000d, 0xfff) 1.33438454s ago: executing program 3 (id=787): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000040ef178560000000000001090224090100000000090400fe010300030009210b00000122030009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="00310400000003002000b1c50d681d8502579f4e1b7c98400709b63f38ce5c0300cb1e828e66632c31413419a5fe0a800f16f41abf72eb3f12d3240b2f4f58c2a6b0cfecfd2d82d69145d106a2cf3a0551c7e454ae40ee5b"], 0x0, 0x0, 0x0, 0x0}, 0x0) 397.119444ms ago: executing program 0 (id=788): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) 326.702615ms ago: executing program 0 (id=789): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) pause() 79.263389ms ago: executing program 4 (id=790): r0 = socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x3, 0x0) socket$inet6(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 0s ago: executing program 2 (id=791): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f00000004c0)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x6}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@orlov}, {@max_batch_time}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}]}, 0xf, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) kernel console output (not intermixed with test programs): 3446194.540:233): avc: denied { ioctl } for pid=1087 comm="syz.2.165" path="socket:[18670]" dev="sockfs" ino=18670 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 97.079641][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.137533][ T6] usb 1-1: config 0 descriptor?? [ 97.147785][ T1099] loop1: detected capacity change from 0 to 1024 [ 97.169998][ T6] usb 1-1: can't set config #0, error -71 [ 97.176790][ T6] usb 1-1: USB disconnect, device number 2 [ 97.191651][ T1099] EXT4-fs: Ignoring removed orlov option [ 97.248027][ T1099] EXT4-fs (loop1): Test dummy encryption mode enabled [ 97.679655][ T1103] netlink: 'syz.2.167': attribute type 32 has an invalid length. [ 97.687221][ T1103] netlink: 52 bytes leftover after parsing attributes in process `syz.2.167'. [ 97.710004][ T28] audit: type=1400 audit(1743446195.370:234): avc: denied { wake_alarm } for pid=1095 comm="syz.2.167" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 98.360574][ T1099] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 99.810044][ T28] audit: type=1400 audit(1743446197.460:235): avc: denied { write } for pid=1098 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 99.850719][ T1117] loop2: detected capacity change from 0 to 512 [ 99.913783][ T1117] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 99.921720][ T1117] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 99.929710][ T1117] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.170: bad orphan inode 13 [ 99.937014][ T28] audit: type=1400 audit(1743446197.800:236): avc: denied { mounton } for pid=1113 comm="syz.2.170" path="/34/file0" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.939677][ T1117] EXT4-fs (loop2): Remounting filesystem read-only [ 99.967989][ T1117] ext4_test_bit(bit=12, block=4) = 1 [ 99.970318][ T292] EXT4-fs (loop1): unmounting filesystem. [ 99.981712][ T1123] loop3: detected capacity change from 0 to 16 [ 100.001294][ T1117] is_bad_inode(inode)=0 [ 100.005458][ T1117] NEXT_ORPHAN(inode)=17694720 [ 100.011807][ T1117] max_ino=32 [ 100.014845][ T1117] i_nlink=0 [ 100.032437][ T1123] erofs: (device loop3): mounted with root inode @ nid 36. [ 100.035014][ T1117] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 100.053093][ T1117] EXT4-fs (loop2): unmounting filesystem. [ 100.064065][ T28] audit: type=1400 audit(1743446197.950:237): avc: denied { setattr } for pid=1125 comm="syz.1.173" name="tun" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 100.197567][ T1127] tipc: Bearer : already 2 bearers with priority 10 [ 100.205885][ T1127] tipc: Bearer : trying with adjusted priority [ 100.214090][ T1127] tipc: Enabled bearer , priority 9 [ 100.640274][ T1117] loop2: detected capacity change from 0 to 256 [ 100.646588][ T1117] exfat: Deprecated parameter 'namecase' [ 100.670120][ T1117] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 100.681657][ T1129] loop4: detected capacity change from 0 to 8192 [ 100.757278][ T28] audit: type=1400 audit(1743446198.640:238): avc: denied { write } for pid=1113 comm="syz.2.170" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.839736][ T28] audit: type=1400 audit(1743446198.640:239): avc: denied { add_name } for pid=1113 comm="syz.2.170" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.945948][ T28] audit: type=1400 audit(1743446198.640:240): avc: denied { associate } for pid=1113 comm="syz.2.170" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 102.309655][ T301] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 104.221209][ T1167] loop1: detected capacity change from 0 to 256 [ 104.227844][ T28] audit: type=1400 audit(1743446202.110:241): avc: denied { remount } for pid=1166 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 104.350076][ T316] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.485148][ T28] audit: type=1400 audit(1743446202.370:242): avc: denied { read write } for pid=1168 comm="syz.3.183" name="loop3" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.512219][ T1169] loop3: detected capacity change from 0 to 256 [ 104.810038][ T28] audit: type=1400 audit(1743446202.400:243): avc: denied { open } for pid=1168 comm="syz.3.183" path="/dev/loop3" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.846567][ T28] audit: type=1400 audit(1743446202.400:244): avc: denied { ioctl } for pid=1168 comm="syz.3.183" path="/dev/loop3" dev="devtmpfs" ino=117 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.848865][ T1169] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 104.886484][ T28] audit: type=1400 audit(1743446202.460:245): avc: denied { bpf } for pid=1166 comm="syz.1.182" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 104.931590][ T28] audit: type=1400 audit(1743446202.510:246): avc: denied { create } for pid=1166 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.007192][ T28] audit: type=1400 audit(1743446202.540:247): avc: denied { connect } for pid=1166 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.067914][ T28] audit: type=1400 audit(1743446202.550:248): avc: denied { write } for pid=1166 comm="syz.1.182" path="socket:[18773]" dev="sockfs" ino=18773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.128501][ T28] audit: type=1400 audit(1743446202.660:249): avc: denied { prog_load } for pid=1149 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 105.222476][ T1175] loop1: detected capacity change from 0 to 256 [ 105.241430][ T1175] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 105.267616][ T28] audit: type=1400 audit(1743446202.730:250): avc: denied { mounton } for pid=1168 comm="syz.3.183" path="/33/file2" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 106.790926][ T1182] netlink: 40 bytes leftover after parsing attributes in process `syz.4.185'. [ 106.893711][ T1199] loop4: detected capacity change from 0 to 512 [ 106.963159][ T1200] syz.1.188[1200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.963244][ T1200] syz.1.188[1200] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.975614][ T1200] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.060070][ T1199] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.149835][ T1199] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.218362][ T1199] EXT4-fs (loop4): 1 truncate cleaned up [ 107.224088][ T1199] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 107.921043][ T294] EXT4-fs (loop4): unmounting filesystem. [ 107.991560][ T1218] loop4: detected capacity change from 0 to 128 [ 108.039992][ T1218] EXT4-fs (loop4): Test dummy encryption mode enabled [ 108.048287][ T1218] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.057330][ T1218] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.789639][ T1226] device lo entered promiscuous mode [ 108.805393][ T1226] device tunl0 entered promiscuous mode [ 108.824192][ T1226] device gre0 entered promiscuous mode [ 108.913069][ T1227] overlayfs: missing 'lowerdir' [ 109.011302][ T1226] device gretap0 entered promiscuous mode [ 109.037328][ T1226] device erspan0 entered promiscuous mode [ 109.059249][ T1226] device ip_vti0 entered promiscuous mode [ 109.126610][ T1226] device ip6_vti0 entered promiscuous mode [ 109.148014][ T1226] device sit0 entered promiscuous mode [ 109.235063][ T1226] device ip6tnl0 entered promiscuous mode [ 109.259706][ T1226] device ip6gre0 entered promiscuous mode [ 109.306778][ T1226] device syz_tun entered promiscuous mode [ 109.330517][ T1226] device ip6gretap0 entered promiscuous mode [ 109.629094][ T1226] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.636185][ T1226] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.644349][ T1226] device bridge0 entered promiscuous mode [ 109.763100][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 109.763117][ T28] audit: type=1400 audit(1743446206.800:297): avc: denied { create } for pid=1217 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.874384][ T28] audit: type=1400 audit(1743446206.800:298): avc: denied { mounton } for pid=1217 comm="syz.4.193" path="/36/mnt/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 109.898274][ T294] EXT4-fs (loop4): unmounting filesystem. [ 109.937007][ T1237] device bridge0 left promiscuous mode [ 109.943628][ T28] audit: type=1400 audit(1743446207.830:299): avc: denied { setopt } for pid=1236 comm="syz.2.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 109.970480][ T28] audit: type=1400 audit(1743446207.850:300): avc: denied { accept } for pid=1236 comm="syz.2.199" path="socket:[18846]" dev="sockfs" ino=18846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.052360][ T28] audit: type=1400 audit(1743446208.940:301): avc: denied { bind } for pid=1242 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.071590][ T28] audit: type=1400 audit(1743446208.940:302): avc: denied { setopt } for pid=1242 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.097236][ T28] audit: type=1400 audit(1743446208.940:303): avc: denied { write } for pid=1242 comm="syz.4.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 111.232383][ T1244] loop2: detected capacity change from 0 to 512 [ 111.318075][ T28] audit: type=1400 audit(1743446209.200:304): avc: denied { create } for pid=1234 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.340699][ T1244] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.487091][ T1253] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.376301][ T28] audit: type=1400 audit(1743446209.230:305): avc: denied { bind } for pid=1234 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 112.399289][ T1244] EXT4-fs (loop2): orphan cleanup on readonly fs [ 112.410091][ T1244] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.199: bg 0: block 248: padding at end of block bitmap is not set [ 112.424575][ T28] audit: type=1400 audit(1743446209.240:306): avc: denied { bind } for pid=1247 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.471765][ T1244] EXT4-fs error (device loop2): ext4_acquire_dquot:6782: comm syz.2.199: Failed to acquire dquot type 1 [ 112.505556][ T1244] EXT4-fs (loop2): 1 truncate cleaned up [ 112.522369][ T1244] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 112.937845][ T1260] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 113.383753][ T1260] input: syz1 as /devices/virtual/input/input5 [ 113.599652][ T6] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.847115][ T1273] loop4: detected capacity change from 0 to 2048 [ 113.847787][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 113.885676][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 113.922338][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 113.999373][ T6] usb 2-1: New USB device found, idVendor=1949, idProduct=85a5, bcdDevice=a3.3a [ 114.059345][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.118500][ T6] usb 2-1: Product: syz [ 114.337583][ T6] usb 2-1: Manufacturer: syz [ 114.355846][ T6] usb 2-1: SerialNumber: syz [ 114.369347][ T6] usb 2-1: config 0 descriptor?? [ 114.388292][ T6] usb 2-1: can't set config #0, error -71 [ 114.472601][ T6] usb 2-1: USB disconnect, device number 3 [ 114.660099][ T1286] overlayfs: missing 'lowerdir' [ 115.546718][ T1287] loop4: detected capacity change from 0 to 4096 [ 115.553201][ T1287] ext4: Unknown parameter 'obj_role' [ 115.600077][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 115.600094][ T28] audit: type=1400 audit(1743446213.330:328): avc: denied { bind } for pid=1277 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 115.729177][ T1292] loop1: detected capacity change from 0 to 512 [ 115.999036][ T1292] EXT4-fs: Ignoring removed mblk_io_submit option [ 116.023754][ T1292] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 116.128312][ T1296] usb usb8: usbfs: process 1296 (syz.0.211) did not claim interface 0 before use [ 116.197329][ T28] audit: type=1400 audit(1743446214.010:329): avc: denied { write } for pid=1293 comm="syz.0.211" name="001" dev="devtmpfs" ino=181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.268520][ T1292] EXT4-fs (loop1): 1 truncate cleaned up [ 116.274387][ T1292] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 116.374112][ T316] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.424937][ T1285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 116.434279][ T1285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.209'. [ 116.706230][ T1301] loop3: detected capacity change from 0 to 8192 [ 116.899525][ T1307] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 117.410002][ T28] audit: type=1400 audit(1743446214.720:330): avc: denied { write } for pid=1302 comm="syz.4.213" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 117.524643][ T28] audit: type=1400 audit(1743446214.720:331): avc: denied { open } for pid=1302 comm="syz.4.213" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 117.586456][ T292] EXT4-fs (loop1): unmounting filesystem. [ 117.602800][ T1311] loop4: detected capacity change from 0 to 512 [ 117.729744][ T1311] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 117.738574][ T1311] ext4 filesystem being mounted at /41/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.767726][ T294] EXT4-fs (loop4): unmounting filesystem. [ 118.107603][ T1321] netlink: 168 bytes leftover after parsing attributes in process `syz.1.215'. [ 118.117652][ T28] audit: type=1400 audit(1743446215.990:332): avc: denied { create } for pid=1316 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.202619][ T28] audit: type=1400 audit(1743446215.990:333): avc: denied { write } for pid=1316 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.456497][ T28] audit: type=1400 audit(1743446215.990:334): avc: denied { nlmsg_write } for pid=1316 comm="syz.1.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 118.493753][ T293] EXT4-fs (loop2): unmounting filesystem. [ 118.878038][ T28] audit: type=1400 audit(1743446216.760:335): avc: denied { read } for pid=1329 comm="syz.1.221" name="loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 118.918551][ T1334] loop2: detected capacity change from 0 to 2048 [ 118.938895][ T316] udevd[316]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 118.979685][ T28] audit: type=1400 audit(1743446216.760:336): avc: denied { open } for pid=1329 comm="syz.1.221" path="/dev/loop-control" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 119.004176][ T28] audit: type=1400 audit(1743446216.760:337): avc: denied { ioctl } for pid=1329 comm="syz.1.221" path="/dev/loop-control" dev="devtmpfs" ino=113 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 119.070157][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.141449][ T1334] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 119.273911][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 119.303804][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 119.539705][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 119.650809][ T6] usb 1-1: New USB device found, idVendor=1949, idProduct=85a5, bcdDevice=a3.3a [ 119.669642][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.696502][ T6] usb 1-1: Product: syz [ 119.712043][ T1334] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.220: bg 0: block 234: padding at end of block bitmap is not set [ 119.736393][ T6] usb 1-1: Manufacturer: syz [ 119.746496][ T6] usb 1-1: SerialNumber: syz [ 119.760518][ T6] usb 1-1: config 0 descriptor?? [ 119.797856][ T1334] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 119.969613][ T6] usb 1-1: USB disconnect, device number 3 [ 120.014593][ T1334] EXT4-fs (loop2): This should not happen!! Data will be lost [ 120.014593][ T1334] [ 120.030134][ T1334] EXT4-fs (loop2): Total free blocks count 0 [ 120.035951][ T1334] EXT4-fs (loop2): Free/Dirty block details [ 120.041725][ T1334] EXT4-fs (loop2): free_blocks=0 [ 120.046452][ T1334] EXT4-fs (loop2): dirty_blocks=3744 [ 120.051634][ T1334] EXT4-fs (loop2): Block reservation details [ 120.057389][ T1334] EXT4-fs (loop2): i_reserved_data_blocks=234 [ 120.416071][ T642] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1690 with error 28 [ 125.593614][ T1384] syz.4.232[1384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.593708][ T1384] syz.4.232[1384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.210556][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 126.239983][ T28] audit: type=1400 audit(1743446223.700:342): avc: denied { ioctl } for pid=1391 comm="syz.1.233" path="socket:[18417]" dev="sockfs" ino=18417 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.310031][ T28] audit: type=1400 audit(1743446223.700:343): avc: denied { connect } for pid=1391 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 126.334487][ T28] audit: type=1400 audit(1743446223.700:344): avc: denied { block_suspend } for pid=1391 comm="syz.1.233" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.610669][ T1405] mmap: syz.3.234 (1405) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 126.837257][ T1408] Driver unsupported XDP return value 0 on prog (id 174) dev N/A, expect packet loss! [ 127.011126][ T28] audit: type=1400 audit(1743446224.900:345): avc: denied { create } for pid=1392 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.154916][ T28] audit: type=1400 audit(1743446224.920:346): avc: denied { read } for pid=1392 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.821083][ T28] audit: type=1400 audit(1743446225.710:347): avc: denied { setopt } for pid=1392 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.910589][ T28] audit: type=1400 audit(1743446225.790:348): avc: denied { write } for pid=1392 comm="syz.3.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.969324][ T1393] 9pnet_fd: Insufficient options for proto=fd [ 128.389501][ T28] audit: type=1400 audit(1743446226.160:349): avc: denied { write } for pid=1409 comm="syz.2.238" path="socket:[19099]" dev="sockfs" ino=19099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.561213][ T28] audit: type=1400 audit(1743446226.260:350): avc: denied { read } for pid=1414 comm="syz.3.239" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 128.584507][ T28] audit: type=1400 audit(1743446226.260:351): avc: denied { open } for pid=1414 comm="syz.3.239" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 129.197713][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 129.290632][ T1437] syz.3.242[1437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.290719][ T1437] syz.3.242[1437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.380800][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 129.551250][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 130.020283][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 130.093401][ T6] usb 5-1: New USB device found, idVendor=1949, idProduct=85a5, bcdDevice=a3.3a [ 130.501233][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.509068][ T6] usb 5-1: Product: syz [ 130.513104][ T6] usb 5-1: Manufacturer: syz [ 130.517490][ T6] usb 5-1: SerialNumber: syz [ 130.581814][ T6] usb 5-1: config 0 descriptor?? [ 130.808483][ T6] usb 5-1: USB disconnect, device number 2 [ 131.003206][ T1464] syz.1.252[1464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.003295][ T1464] syz.1.252[1464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.558984][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 131.559000][ T28] audit: type=1400 audit(1743446229.440:388): avc: denied { read } for pid=1468 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 132.002950][ T28] audit: type=1400 audit(1743446229.890:389): avc: denied { read } for pid=1480 comm="syz.0.256" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 132.160089][ T1475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.254'. [ 132.200612][ T28] audit: type=1400 audit(1743446230.090:390): avc: denied { sqpoll } for pid=1489 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 132.639345][ T28] audit: type=1400 audit(1743446230.520:391): avc: denied { write } for pid=1492 comm="syz.4.259" path="socket:[19264]" dev="sockfs" ino=19264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.804459][ T28] audit: type=1400 audit(1743446230.690:392): avc: denied { map } for pid=1500 comm="syz.0.261" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 132.889703][ T28] audit: type=1400 audit(1743446230.690:393): avc: denied { write } for pid=1500 comm="syz.0.261" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 133.911800][ T1519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.264'. [ 133.922709][ T28] audit: type=1400 audit(1743446231.460:394): avc: denied { write } for pid=1510 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.980724][ T1519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 133.989385][ T1519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 134.055145][ T1519] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 134.476831][ T1522] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 134.615198][ T28] audit: type=1400 audit(1743446232.480:395): avc: denied { read write } for pid=1532 comm="syz.2.269" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 134.652697][ T28] audit: type=1400 audit(1743446232.480:396): avc: denied { open } for pid=1532 comm="syz.2.269" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 135.603380][ T1540] binder: 1532:1540 ioctl c0306201 0 returned -14 [ 135.800989][ T28] audit: type=1400 audit(1743446233.470:397): avc: denied { read } for pid=1532 comm="syz.2.269" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 136.514151][ T1548] netlink: 168 bytes leftover after parsing attributes in process `syz.4.270'. [ 136.882198][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 136.882214][ T28] audit: type=1326 audit(1743446234.770:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0527b8d169 code=0x7ffc0000 [ 136.937454][ T28] audit: type=1326 audit(1743446234.810:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0527b8d169 code=0x7ffc0000 [ 136.962109][ T28] audit: type=1326 audit(1743446234.810:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0527b8d169 code=0x7ffc0000 [ 136.986115][ T28] audit: type=1326 audit(1743446234.810:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0527b8d169 code=0x7ffc0000 [ 137.010843][ T28] audit: type=1326 audit(1743446234.810:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0527b8d169 code=0x7ffc0000 [ 137.034041][ T28] audit: type=1326 audit(1743446234.810:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0527b8d169 code=0x7ffc0000 [ 137.057634][ T28] audit: type=1326 audit(1743446234.810:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0527b8d169 code=0x7ffc0000 [ 137.080887][ T28] audit: type=1326 audit(1743446234.810:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0527b8d169 code=0x7ffc0000 [ 137.109984][ T28] audit: type=1326 audit(1743446234.810:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0527b8d169 code=0x7ffc0000 [ 137.138896][ T1562] futex_wake_op: syz.1.273 tries to shift op by -1; fix this program [ 137.384443][ T28] audit: type=1326 audit(1743446234.810:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.4.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0527b8d169 code=0x7ffc0000 [ 137.676306][ T301] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 142.931831][ T1602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=1602 comm=syz.3.284 [ 142.937382][ T301] usb 1-1: device not accepting address 4, error -71 [ 143.062610][ T716] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.070645][ T28] kauditd_printk_skb: 142 callbacks suppressed [ 143.070663][ T28] audit: type=1400 audit(1743446240.960:552): avc: denied { create } for pid=1581 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 143.100967][ T716] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 143.290360][ T716] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 143.539624][ T716] usb 2-1: Using ep0 maxpacket: 16 [ 143.545978][ T716] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 143.577383][ T716] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 143.597370][ T716] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 143.631320][ T716] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.648681][ T716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 143.895818][ T716] usb 2-1: SerialNumber: syz [ 143.999623][ T6] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 144.030728][ T1608] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 144.175551][ T1629] loop4: detected capacity change from 0 to 512 [ 144.220160][ T1629] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 144.241730][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 144.481292][ T1629] EXT4-fs (loop4): 1 truncate cleaned up [ 144.486878][ T1629] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 144.534587][ T1629] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 144.670369][ T28] audit: type=1400 audit(1743446242.420:553): avc: denied { remount } for pid=1626 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 147.858638][ T6] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 147.868289][ T6] usb 4-1: can't read configurations, error -71 [ 147.993826][ T294] EXT4-fs (loop4): unmounting filesystem. [ 148.024613][ T716] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 148.033442][ T716] usb 2-1: USB disconnect, device number 4 [ 148.090297][ T1649] loop4: detected capacity change from 0 to 2048 [ 148.155250][ T1649] EXT4-fs: Ignoring removed nobh option [ 148.170081][ T1649] EXT4-fs warning (device loop4): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 150.099455][ T1665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.292'. [ 150.499300][ T1670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.298'. [ 150.530273][ T28] audit: type=1400 audit(1743446248.380:554): avc: denied { ioctl } for pid=1658 comm="syz.2.298" path="socket:[20504]" dev="sockfs" ino=20504 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 150.933521][ T28] audit: type=1400 audit(1743446248.820:555): avc: denied { bind } for pid=1671 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.015228][ T28] audit: type=1400 audit(1743446248.820:556): avc: denied { setopt } for pid=1671 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 152.621266][ T1689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 152.632814][ T28] audit: type=1400 audit(1743446249.920:557): avc: denied { create } for pid=1673 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 152.668567][ T28] audit: type=1400 audit(1743446249.940:558): avc: denied { connect } for pid=1673 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 153.976136][ T28] audit: type=1400 audit(1743446250.340:559): avc: denied { mounton } for pid=1659 comm="syz.1.297" path="/70/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 154.060815][ T1698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.304'. [ 154.298154][ T28] audit: type=1326 audit(1743446250.520:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1685 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758f18d169 code=0x7ffc0000 [ 154.321754][ T28] audit: type=1326 audit(1743446250.520:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1685 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f758f18d169 code=0x7ffc0000 [ 154.347238][ T28] audit: type=1326 audit(1743446250.520:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1685 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758f18d169 code=0x7ffc0000 [ 154.370718][ T28] audit: type=1326 audit(1743446250.520:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1685 comm="syz.0.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f758f18d169 code=0x7ffc0000 [ 156.440361][ T1720] loop4: detected capacity change from 0 to 512 [ 157.089895][ T1720] EXT4-fs (loop4): Test dummy encryption mode enabled [ 159.160939][ T1720] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.308: casefold flag without casefold feature [ 159.173543][ T1720] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.308: couldn't read orphan inode 15 (err -117) [ 159.185507][ T1720] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 159.239178][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 159.239196][ T28] audit: type=1400 audit(1743446257.110:570): avc: denied { create } for pid=1715 comm="syz.4.308" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 160.747445][ T294] EXT4-fs (loop4): unmounting filesystem. [ 162.079176][ T28] audit: type=1400 audit(1743446259.940:571): avc: denied { create } for pid=1747 comm="syz.0.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 164.806489][ T28] audit: type=1400 audit(1743446262.280:572): avc: denied { mount } for pid=1760 comm="syz.2.318" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 164.818332][ T1755] device syzkaller0 entered promiscuous mode [ 164.848984][ T28] audit: type=1400 audit(1743446262.730:573): avc: denied { read } for pid=1772 comm="syz.2.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 165.524701][ T28] audit: type=1400 audit(1743446263.390:574): avc: denied { sys_module } for pid=1780 comm="syz.0.322" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 167.565188][ T28] audit: type=1400 audit(1743446265.450:575): avc: denied { watch } for pid=1791 comm="syz.4.325" path="/60" dev="tmpfs" ino=359 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 167.808639][ T1817] bridge0: port 2(vlan0) entered blocking state [ 167.814852][ T1817] bridge0: port 2(vlan0) entered disabled state [ 168.071568][ T1818] netlink: 76 bytes leftover after parsing attributes in process `syz.2.328'. [ 168.586322][ T28] audit: type=1400 audit(1743446265.610:576): avc: denied { mount } for pid=1800 comm="syz.3.327" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 168.609782][ T1820] syz.1.330[1820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.609869][ T1820] syz.1.330[1820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.641998][ T1822] incfs: Options parsing error. -22 [ 168.657843][ T28] audit: type=1400 audit(1743446265.640:577): avc: denied { create } for pid=1800 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 168.677507][ T28] audit: type=1400 audit(1743446265.660:578): avc: denied { write } for pid=1800 comm="syz.3.327" path="socket:[20785]" dev="sockfs" ino=20785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 168.691457][ T1820] fuse: Bad value for 'fd' [ 168.701727][ T1822] incfs: mount failed -22 [ 168.725012][ T28] audit: type=1400 audit(1743446265.660:579): avc: denied { nlmsg_read } for pid=1800 comm="syz.3.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 169.233528][ T1827] netlink: 12 bytes leftover after parsing attributes in process `syz.0.329'. [ 170.486813][ T28] audit: type=1400 audit(1743446265.670:580): avc: denied { ioctl } for pid=1800 comm="syz.3.327" path="socket:[20081]" dev="sockfs" ino=20081 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.512358][ T28] audit: type=1400 audit(1743446265.880:581): avc: denied { write } for pid=1807 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 170.531633][ T28] audit: type=1400 audit(1743446266.590:582): avc: denied { getopt } for pid=1824 comm="syz.4.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 170.552918][ T1822] netlink: 20 bytes leftover after parsing attributes in process `syz.2.331'. [ 170.566158][ T28] audit: type=1400 audit(1743446268.450:583): avc: denied { read } for pid=1821 comm="syz.2.331" path="socket:[20092]" dev="sockfs" ino=20092 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 171.379663][ T28] audit: type=1400 audit(1743446269.190:584): avc: denied { read } for pid=1831 comm="syz.3.333" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.400904][ T1835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.333'. [ 171.409720][ T28] audit: type=1326 audit(1743446269.260:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e3d8d169 code=0x7fc00000 [ 171.790324][ T28] audit: type=1326 audit(1743446269.260:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37e3d8d169 code=0x7fc00000 [ 171.829176][ T28] audit: type=1326 audit(1743446269.260:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e3d8d169 code=0x7fc00000 [ 171.860331][ T28] audit: type=1326 audit(1743446269.260:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e3d8d169 code=0x7fc00000 [ 171.981134][ T28] audit: type=1326 audit(1743446269.260:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e3d8d169 code=0x7fc00000 [ 172.090973][ T1857] overlayfs: missing 'lowerdir' [ 172.243546][ T1858] device macsec0 left promiscuous mode [ 172.258083][ T1858] device veth1_macvtap entered promiscuous mode [ 172.606772][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.724238][ T1861] netlink: 'syz.1.338': attribute type 49 has an invalid length. [ 172.732296][ T1861] netlink: 'syz.1.338': attribute type 49 has an invalid length. [ 176.762496][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 176.762517][ T28] audit: type=1326 audit(1743446269.260:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e3d8d169 code=0x7fc00000 [ 176.837564][ T28] audit: type=1326 audit(1743446269.260:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e3d8d169 code=0x7fc00000 [ 176.904187][ T28] audit: type=1326 audit(1743446269.260:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e3d8d169 code=0x7fc00000 [ 176.932530][ T28] audit: type=1326 audit(1743446269.260:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e3d8d169 code=0x7fc00000 [ 176.998363][ T28] audit: type=1326 audit(1743446269.260:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e3d8d169 code=0x7fc00000 [ 177.021803][ T28] audit: type=1326 audit(1743446269.260:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e3d8d169 code=0x7fc00000 [ 178.117438][ T1884] input: syz0 as /devices/virtual/input/input6 [ 179.285441][ T1888] usb usb8: usbfs: process 1888 (syz.0.345) did not claim interface 0 before use [ 179.297224][ T28] audit: type=1326 audit(1743446269.260:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e3d8d169 code=0x7fc00000 [ 180.278391][ T28] audit: type=1326 audit(1743446269.260:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e3d8d169 code=0x7fc00000 [ 180.332379][ T28] audit: type=1326 audit(1743446269.260:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e3d8d169 code=0x7fc00000 [ 180.355741][ T28] audit: type=1326 audit(1743446269.260:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1808 comm="syz.1.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e3d8d169 code=0x7fc00000 [ 181.639621][ T1903] tipc: Can't bind to reserved service type 0 [ 183.501212][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 183.501233][ T28] audit: type=1400 audit(1743446280.340:642): avc: denied { write } for pid=1901 comm="syz.0.350" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 183.551290][ T28] audit: type=1400 audit(1743446280.550:643): avc: denied { relabelfrom } for pid=1895 comm="syz.2.347" name="" dev="pipefs" ino=20931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 183.576849][ T28] audit: type=1400 audit(1743446280.670:644): avc: denied { write } for pid=1895 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 184.775963][ T1925] netlink: 'syz.3.352': attribute type 4 has an invalid length. [ 184.913156][ T28] audit: type=1400 audit(1743446282.760:645): avc: denied { accept } for pid=1917 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 186.017494][ T28] audit: type=1400 audit(1743446283.900:646): avc: denied { setopt } for pid=1917 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 189.025646][ T1962] netlink: 43 bytes leftover after parsing attributes in process `syz.4.359'. [ 189.034500][ T1962] tipc: Started in network mode [ 189.039145][ T1962] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 189.046188][ T1962] tipc: Enabled bearer , priority 10 [ 189.946180][ T28] audit: type=1326 audit(1743446287.830:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192538d169 code=0x7ffc0000 [ 190.039812][ T351] tipc: Node number set to 10005162 [ 190.342937][ T28] audit: type=1326 audit(1743446287.860:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192538d169 code=0x7ffc0000 [ 190.376546][ T28] audit: type=1326 audit(1743446287.890:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f192538d169 code=0x7ffc0000 [ 190.524372][ T28] audit: type=1326 audit(1743446287.890:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192538d169 code=0x7ffc0000 [ 190.908132][ T28] audit: type=1326 audit(1743446287.900:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f192538d169 code=0x7ffc0000 [ 190.932061][ T28] audit: type=1326 audit(1743446287.900:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192538d169 code=0x7ffc0000 [ 190.964024][ T28] audit: type=1326 audit(1743446287.900:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f192538d169 code=0x7ffc0000 [ 190.987519][ T28] audit: type=1400 audit(1743446288.230:654): avc: denied { validate_trans } for pid=1963 comm="syz.2.362" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 191.017265][ T28] audit: type=1326 audit(1743446288.260:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192538d169 code=0x7ffc0000 [ 191.101428][ T28] audit: type=1326 audit(1743446288.260:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1966 comm="syz.3.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192538d169 code=0x7ffc0000 [ 191.976238][ T1970] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 192.406890][ T2001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.367'. [ 193.186454][ T2007] netlink: 552 bytes leftover after parsing attributes in process `syz.2.369'. [ 193.195440][ T2007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 193.222148][ T1970] usb 1-1: Using ep0 maxpacket: 8 [ 193.232897][ T1970] usb 1-1: config 11 has an invalid interface number: 80 but max is 0 [ 193.263363][ T1970] usb 1-1: config 11 has no interface number 0 [ 193.963939][ T1970] usb 1-1: config 11 interface 80 has no altsetting 0 [ 194.014325][ T2004] loop4: detected capacity change from 0 to 2048 [ 194.087488][ T2004] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 198.669928][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 198.699997][ T28] audit: type=1400 audit(1743446293.760:679): avc: denied { mount } for pid=2017 comm="syz.3.373" name="/" dev="ramfs" ino=21150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 199.306603][ T28] audit: type=1400 audit(1743446297.190:680): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 199.327211][ T294] EXT4-fs (loop4): unmounting filesystem. [ 199.561723][ T1970] usb 1-1: string descriptor 0 read error: -32 [ 199.568882][ T1970] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=a4.ea [ 199.587119][ T1970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.599485][ T28] audit: type=1400 audit(1743446297.480:681): avc: denied { bind } for pid=2034 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.621196][ T28] audit: type=1400 audit(1743446297.510:682): avc: denied { listen } for pid=2034 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.950832][ T1970] usb 1-1: can't set config #11, error -32 [ 200.960145][ T28] audit: type=1400 audit(1743446297.820:683): avc: denied { connect } for pid=2036 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 201.232013][ T2049] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 202.305951][ T28] audit: type=1400 audit(1743446297.880:684): avc: denied { getopt } for pid=2036 comm="syz.4.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 203.042922][ T28] audit: type=1400 audit(1743446299.880:685): avc: denied { ioctl } for pid=2033 comm="syz.2.377" path="socket:[20439]" dev="sockfs" ino=20439 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 203.678209][ T1970] usb 1-1: USB disconnect, device number 6 [ 204.140663][ T28] audit: type=1326 audit(1743446302.010:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2063 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe023d8d169 code=0x7ffc0000 [ 204.450568][ T28] audit: type=1326 audit(1743446302.010:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2063 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe023d8d169 code=0x7ffc0000 [ 204.494508][ T28] audit: type=1326 audit(1743446302.010:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2063 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe023d8d169 code=0x7ffc0000 [ 204.569647][ T28] audit: type=1326 audit(1743446302.010:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2063 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe023d8d169 code=0x7ffc0000 [ 204.633509][ T28] audit: type=1326 audit(1743446302.010:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2063 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe023d8d169 code=0x7ffc0000 [ 204.712295][ T28] audit: type=1326 audit(1743446302.010:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2063 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fe023d8d169 code=0x7ffc0000 [ 204.740400][ T28] audit: type=1326 audit(1743446302.010:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2063 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe023d8d169 code=0x7ffc0000 [ 204.763757][ T28] audit: type=1326 audit(1743446302.010:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2063 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe023d8d169 code=0x7ffc0000 [ 204.787373][ T28] audit: type=1326 audit(1743446302.010:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2063 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fe023d8d169 code=0x7ffc0000 [ 204.812969][ T28] audit: type=1326 audit(1743446302.010:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2063 comm="syz.2.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe023d8d169 code=0x7ffc0000 [ 207.408237][ T2101] bridge0: port 3(gretap0) entered blocking state [ 207.414569][ T2101] bridge0: port 3(gretap0) entered disabled state [ 207.424846][ T2101] device gretap0 entered promiscuous mode [ 207.431129][ T2101] bridge0: port 3(gretap0) entered blocking state [ 207.437366][ T2101] bridge0: port 3(gretap0) entered forwarding state [ 208.700289][ T2071] syz.3.383 (2071) used greatest stack depth: 19352 bytes left [ 208.966454][ T2106] netlink: 25 bytes leftover after parsing attributes in process `syz.3.389'. [ 209.074668][ T2107] SELinux: Context system_u:object_r:dri_device_t:s0 is not valid (left unmapped). [ 209.432119][ T2106] device gretap0 entered promiscuous mode [ 210.319741][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 210.319764][ T28] audit: type=1400 audit(1743446306.970:729): avc: denied { relabelto } for pid=2103 comm="syz.3.389" name="file1" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dri_device_t:s0" [ 210.368455][ T28] audit: type=1400 audit(1743446306.970:730): avc: denied { associate } for pid=2103 comm="syz.3.389" name="file1" dev="tmpfs" ino=470 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dri_device_t:s0" [ 210.593520][ T2121] loop4: detected capacity change from 0 to 512 [ 210.601902][ T28] audit: type=1400 audit(1743446308.460:731): avc: denied { create } for pid=2110 comm="syz.4.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 213.585148][ T2121] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 213.777949][ T2121] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.393: iget: bad i_size value: -67835469387268086 [ 213.791506][ T2121] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.393: couldn't read orphan inode 15 (err -117) [ 213.805234][ T2121] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 213.813926][ T2121] ext2 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.858305][ T2121] netlink: 72 bytes leftover after parsing attributes in process `syz.4.393'. [ 214.139589][ T1754] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 214.354540][ T2141] netlink: 60 bytes leftover after parsing attributes in process `syz.1.394'. [ 214.523109][ T28] audit: type=1400 audit(1743446312.250:732): avc: denied { mount } for pid=2128 comm="syz.1.394" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 214.725332][ T28] audit: type=1400 audit(1743446312.610:733): avc: denied { ioctl } for pid=2143 comm="syz.1.398" path="socket:[21589]" dev="sockfs" ino=21589 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 214.750401][ T1754] usb 5-1: Using ep0 maxpacket: 8 [ 214.755644][ T1754] usb 5-1: config 11 has an invalid interface number: 117 but max is 0 [ 214.766930][ T1754] usb 5-1: config 11 has no interface number 0 [ 214.790355][ T1754] usb 5-1: New USB device found, idVendor=11c8, idProduct=e644, bcdDevice=d5.da [ 214.799238][ T1754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.819759][ T1754] usb 5-1: Product: syz [ 214.823753][ T1754] usb 5-1: Manufacturer: syz [ 214.828181][ T1754] usb 5-1: SerialNumber: syz [ 214.900856][ T294] EXT4-fs (loop4): unmounting filesystem. [ 214.994860][ T2150] netlink: 'syz.1.398': attribute type 8 has an invalid length. [ 215.378896][ T1754] usb 5-1: can't set config #11, error -71 [ 215.392373][ T1754] usb 5-1: USB disconnect, device number 3 [ 216.832227][ T2163] binder: 2161:2163 ioctl 4018620d 0 returned -22 [ 216.838774][ T2163] binder: 2161:2163 ioctl c0306201 200000000680 returned -11 [ 216.858909][ T2167] bridge0: port 3(syz_tun) entered blocking state [ 216.870008][ T2167] bridge0: port 3(syz_tun) entered disabled state [ 216.876767][ T2167] device syz_tun entered promiscuous mode [ 216.882897][ T2167] bridge0: port 3(syz_tun) entered blocking state [ 216.889142][ T2167] bridge0: port 3(syz_tun) entered forwarding state [ 216.937337][ T2167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 217.078373][ T2173] fuse: Unknown parameter 'roomode' [ 217.701236][ T28] audit: type=1400 audit(1743446316.233:734): avc: denied { connect } for pid=2168 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 217.858826][ T28] audit: type=1400 audit(1743446316.673:735): avc: denied { create } for pid=2151 comm="syz.4.400" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 217.879397][ T28] audit: type=1400 audit(1743446316.693:736): avc: denied { write } for pid=2151 comm="syz.4.400" name="file0" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 217.901643][ T28] audit: type=1400 audit(1743446316.693:737): avc: denied { open } for pid=2151 comm="syz.4.400" path="/70/file0" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 219.115336][ T2167] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.131241][ T2167] device bridge_slave_0 left promiscuous mode [ 219.146920][ T2167] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.539973][ T2185] netlink: 25 bytes leftover after parsing attributes in process `syz.3.405'. [ 219.548797][ T2186] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.405'. [ 219.558103][ T2186] 0ªX¹¦Dö»: renamed from gretap0 [ 219.563888][ T2186] device 00ªX¹¦Dö» left promiscuous mode [ 219.763081][ T28] audit: type=1400 audit(1743446318.653:738): avc: denied { unlink } for pid=294 comm="syz-executor" name="file0" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 222.210674][ T2198] loop4: detected capacity change from 0 to 512 [ 222.221963][ T2198] EXT4-fs: Ignoring removed nobh option [ 222.227567][ T28] audit: type=1400 audit(1743446319.723:739): avc: denied { bind } for pid=2189 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 222.253654][ T28] audit: type=1400 audit(1743446319.723:740): avc: denied { name_bind } for pid=2189 comm="syz.3.407" src=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 222.274169][ T28] audit: type=1400 audit(1743446319.723:741): avc: denied { node_bind } for pid=2189 comm="syz.3.407" saddr=2001:: src=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 222.302571][ T2198] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #3: comm syz.4.410: corrupted inode contents [ 222.314552][ T2198] EXT4-fs (loop4): Remounting filesystem read-only [ 222.321139][ T2198] EXT4-fs error (device loop4): ext4_dirty_inode:6091: inode #3: comm syz.4.410: mark_inode_dirty error [ 222.339966][ T2198] EXT4-fs (loop4): Remounting filesystem read-only [ 222.403449][ T2198] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #3: comm syz.4.410: corrupted inode contents [ 222.459288][ T2198] EXT4-fs (loop4): Remounting filesystem read-only [ 222.466764][ T2198] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.410: mark_inode_dirty error [ 223.490396][ T28] audit: type=1400 audit(1743446321.703:742): avc: denied { setopt } for pid=2208 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.334261][ T28] audit: type=1400 audit(1743446322.233:743): avc: denied { bpf } for pid=2213 comm="syz.3.413" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.369164][ T2198] EXT4-fs (loop4): Remounting filesystem read-only [ 224.448777][ T28] audit: type=1400 audit(1743446322.233:744): avc: denied { prog_load } for pid=2213 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 224.522846][ T2198] Quota error (device loop4): write_blk: dquota write failed [ 224.641518][ T28] audit: type=1400 audit(1743446322.233:745): avc: denied { perfmon } for pid=2213 comm="syz.3.413" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 224.665887][ T2198] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 224.675799][ T2198] EXT4-fs error (device loop4): ext4_acquire_dquot:6782: comm syz.4.410: Failed to acquire dquot type 0 [ 224.687056][ T28] audit: type=1400 audit(1743446322.233:746): avc: denied { prog_run } for pid=2213 comm="syz.3.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 225.633015][ T2198] EXT4-fs (loop4): Remounting filesystem read-only [ 225.639985][ T2198] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #16: comm syz.4.410: corrupted inode contents [ 226.647808][ T28] audit: type=1400 audit(1743446323.223:747): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 226.660565][ T2198] EXT4-fs (loop4): Remounting filesystem read-only [ 226.676962][ T2198] EXT4-fs error (device loop4): ext4_dirty_inode:6091: inode #16: comm syz.4.410: mark_inode_dirty error [ 226.688825][ T2198] EXT4-fs (loop4): Remounting filesystem read-only [ 226.695524][ T2198] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #16: comm syz.4.410: corrupted inode contents [ 226.707410][ T28] audit: type=1400 audit(1743446323.223:748): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.734968][ T2198] EXT4-fs (loop4): Remounting filesystem read-only [ 226.828776][ T2198] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.410: mark_inode_dirty error [ 227.913758][ T28] audit: type=1400 audit(1743446323.223:749): avc: denied { append } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 227.936131][ T2198] EXT4-fs (loop4): Remounting filesystem read-only [ 227.942627][ T2198] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #16: comm syz.4.410: corrupted inode contents [ 228.000316][ T2198] EXT4-fs (loop4): Remounting filesystem read-only [ 228.393069][ T2198] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 228.605397][ T2248] netlink: 32 bytes leftover after parsing attributes in process `syz.3.418'. [ 228.675683][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 228.675701][ T28] audit: type=1400 audit(1743446327.443:762): avc: denied { create } for pid=2240 comm="syz.3.418" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 228.733992][ T2198] EXT4-fs (loop4): Remounting filesystem read-only [ 228.762065][ T2251] netlink: 40 bytes leftover after parsing attributes in process `syz.0.419'. [ 228.779802][ T2198] EXT4-fs error (device loop4): ext4_do_update_inode:5226: inode #16: comm syz.4.410: corrupted inode contents [ 228.822082][ T2198] EXT4-fs (loop4): Remounting filesystem read-only [ 228.830963][ T28] audit: type=1400 audit(1743446327.443:763): avc: denied { ioctl } for pid=2240 comm="syz.3.418" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21424 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 228.875712][ T2198] EXT4-fs error (device loop4): ext4_truncate:4313: inode #16: comm syz.4.410: mark_inode_dirty error [ 228.907921][ T2198] EXT4-fs (loop4): Remounting filesystem read-only [ 228.972508][ T28] audit: type=1400 audit(1743446327.653:764): avc: denied { create } for pid=2250 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 228.993216][ T28] audit: type=1400 audit(1743446327.653:765): avc: denied { write } for pid=2250 comm="syz.0.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 229.015023][ T2198] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 229.048508][ T28] audit: type=1400 audit(1743446327.883:766): avc: denied { read write } for pid=2250 comm="syz.0.419" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.071763][ T28] audit: type=1400 audit(1743446327.883:767): avc: denied { open } for pid=2250 comm="syz.0.419" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.094839][ T28] audit: type=1400 audit(1743446327.883:768): avc: denied { ioctl } for pid=2250 comm="syz.0.419" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.117958][ T2198] EXT4-fs (loop4): Remounting filesystem read-only [ 229.119471][ T28] audit: type=1400 audit(1743446327.883:769): avc: denied { create } for pid=2258 comm="syz.2.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 229.137744][ T2198] EXT4-fs (loop4): 1 truncate cleaned up [ 230.010203][ T2261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.420'. [ 230.019806][ T28] audit: type=1400 audit(1743446327.923:770): avc: denied { getopt } for pid=2258 comm="syz.2.421" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 230.042259][ T2198] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 230.052580][ T2198] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.089956][ T315] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 230.148181][ T2265] hub 6-0:1.0: USB hub found [ 230.152792][ T2265] hub 6-0:1.0: 1 port detected [ 230.802165][ T28] audit: type=1400 audit(1743446328.943:771): avc: denied { mount } for pid=2197 comm="syz.4.410" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 230.925329][ T294] EXT4-fs (loop4): unmounting filesystem. [ 230.950827][ T315] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 230.967757][ T315] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 919, setting to 64 [ 231.135912][ T315] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 231.172739][ T315] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.242596][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 231.354804][ T315] usb 1-1: Product: syz [ 231.358951][ T315] usb 1-1: Manufacturer: syz [ 231.363435][ T315] usb 1-1: SerialNumber: syz [ 231.369691][ T2255] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 231.691049][ T2278] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 231.699686][ T2278] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 231.711177][ T2278] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 231.721684][ T2280] device lo left promiscuous mode [ 231.727488][ T2280] device tunl0 left promiscuous mode [ 231.733336][ T2280] device gre0 left promiscuous mode [ 231.750253][ T2280] device gretap0 left promiscuous mode [ 231.757566][ T2280] device erspan0 left promiscuous mode [ 231.764897][ T2280] device ip_vti0 left promiscuous mode [ 231.772005][ T2280] device ip6_vti0 left promiscuous mode [ 231.779390][ T2280] device sit0 left promiscuous mode [ 231.804317][ T2280] device ip6tnl0 left promiscuous mode [ 231.811719][ T2280] device ip6gre0 left promiscuous mode [ 231.842151][ T2280] device syz_tun left promiscuous mode [ 231.848120][ T2280] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 231.855551][ T2280] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 231.863033][ T2280] device ip6gretap0 left promiscuous mode [ 231.870963][ T2280] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.877889][ T2280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.885115][ T2280] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.892028][ T2280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.900973][ T2280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 231.908184][ T2280] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 232.260891][ T2281] netlink: 96 bytes leftover after parsing attributes in process `syz.1.424'. [ 232.329020][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.354041][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 232.362398][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.372008][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 232.394643][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.471248][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.481403][ T315] cdc_ncm 1-1:1.0: bind() failure [ 232.487210][ T315] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 232.494042][ T315] cdc_ncm 1-1:1.1: bind() failure [ 232.503761][ T315] usb 1-1: USB disconnect, device number 7 [ 232.515201][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.172184][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.181202][ T612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.200362][ T2298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.427'. [ 233.290249][ T1970] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 233.432334][ T1970] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 233.824646][ T1970] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 233.891382][ T1970] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 233.899729][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 233.899745][ T28] audit: type=1400 audit(1743446332.753:794): avc: denied { create } for pid=2309 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 234.001355][ T28] audit: type=1400 audit(1743446332.753:795): avc: denied { write } for pid=2309 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 234.099096][ T28] audit: type=1400 audit(1743446332.753:796): avc: denied { create } for pid=2309 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 234.196903][ T28] audit: type=1400 audit(1743446332.753:797): avc: denied { bind } for pid=2309 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 234.285062][ T2317] loop4: detected capacity change from 0 to 256 [ 234.299741][ T28] audit: type=1400 audit(1743446332.753:798): avc: denied { setopt } for pid=2309 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 234.326324][ T2317] exfat: Unknown parameter 'ÿÿ00000000000000000000' [ 234.336584][ T28] audit: type=1400 audit(1743446332.763:799): avc: denied { write } for pid=2309 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 234.431689][ T1970] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 236.518278][ T2324] loop4: detected capacity change from 0 to 131072 [ 236.527572][ T2324] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 150994945) [ 236.535631][ T2324] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 236.547962][ T2324] F2FS-fs (loop4): invalid crc value [ 236.569034][ T28] audit: type=1400 audit(1743446335.453:800): avc: denied { read } for pid=2332 comm="syz.3.436" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 236.592909][ T28] audit: type=1400 audit(1743446335.453:801): avc: denied { open } for pid=2332 comm="syz.3.436" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 237.769650][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 241.343461][ T2324] F2FS-fs (loop4): Found nat_bits in checkpoint [ 241.387645][ T28] audit: type=1400 audit(1743446336.573:802): avc: denied { read } for pid=2321 comm="syz.2.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 241.392957][ T2338] tty tty20: ldisc open failed (-12), clearing slot 19 [ 241.503459][ T28] audit: type=1400 audit(1743446340.393:803): avc: denied { read } for pid=2349 comm="syz.3.438" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 241.944430][ T2363] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 242.634631][ T2358] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 242.704581][ T2366] bridge0: port 3(gretap0) entered blocking state [ 242.711018][ T2366] bridge0: port 3(gretap0) entered disabled state [ 242.720060][ T2366] device gretap0 entered promiscuous mode [ 242.726523][ T2366] bridge0: port 3(gretap0) entered blocking state [ 242.732822][ T2366] bridge0: port 3(gretap0) entered forwarding state [ 242.766071][ T2366] device gretap0 left promiscuous mode [ 242.771786][ T2366] bridge0: port 3(gretap0) entered disabled state [ 242.905076][ T28] audit: type=1400 audit(1743446340.393:804): avc: denied { open } for pid=2349 comm="syz.3.438" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 245.769614][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 247.196495][ T28] audit: type=1400 audit(1743446340.433:805): avc: denied { bind } for pid=2352 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 247.291642][ T28] audit: type=1400 audit(1743446340.433:806): avc: denied { setopt } for pid=2352 comm="syz.0.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 247.321835][ T28] audit: type=1326 audit(1743446340.773:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2348 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe023d8d169 code=0x7ffc0000 [ 247.393667][ T28] audit: type=1326 audit(1743446340.773:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2348 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe023d8d169 code=0x7ffc0000 [ 247.429133][ T28] audit: type=1326 audit(1743446340.793:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2348 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe023d8d169 code=0x7ffc0000 [ 247.835237][ T28] audit: type=1326 audit(1743446340.803:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2348 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe023d8d169 code=0x7ffc0000 [ 247.904494][ T28] audit: type=1326 audit(1743446340.803:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2348 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe023d8d169 code=0x7ffc0000 [ 247.927924][ T28] audit: type=1326 audit(1743446340.823:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2348 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe023d8d169 code=0x7ffc0000 [ 247.951016][ T28] audit: type=1326 audit(1743446340.843:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2348 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe023d8d169 code=0x7ffc0000 [ 248.783449][ T28] audit: type=1326 audit(1743446340.853:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2348 comm="syz.2.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe023d8d169 code=0x7ffc0000 [ 248.910164][ T2394] syz.0.446[2394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.910626][ T2394] syz.0.446[2394] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.829094][ T2410] loop4: detected capacity change from 0 to 256 [ 251.857409][ T2410] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 253.392308][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 253.427265][ T28] audit: type=1326 audit(1743446352.283:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2406 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758f18d169 code=0x7ffc0000 [ 253.643969][ T28] audit: type=1326 audit(1743446352.283:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2406 comm="syz.0.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758f18d169 code=0x7ffc0000 [ 253.940982][ T2411] netlink: 6 bytes leftover after parsing attributes in process `syz.0.449'. [ 253.955216][ T28] audit: type=1400 audit(1743446352.843:834): avc: denied { write } for pid=2409 comm="syz.4.450" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 253.981946][ T28] audit: type=1400 audit(1743446352.843:835): avc: denied { add_name } for pid=2409 comm="syz.4.450" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.003199][ T28] audit: type=1400 audit(1743446352.843:836): avc: denied { create } for pid=2409 comm="syz.4.450" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 254.023481][ T28] audit: type=1400 audit(1743446352.843:837): avc: denied { associate } for pid=2409 comm="syz.4.450" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 254.025279][ T2418] syz.1.451 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 254.045867][ T28] audit: type=1400 audit(1743446352.873:838): avc: denied { read write open } for pid=2409 comm="syz.4.450" path="/77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop4" ino=1048621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 254.144923][ T28] audit: type=1400 audit(1743446353.013:839): avc: denied { name_bind } for pid=2409 comm="syz.4.450" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 254.569704][ T28] audit: type=1400 audit(1743446353.413:840): avc: denied { read } for pid=2430 comm="syz.3.454" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 254.770251][ T28] audit: type=1400 audit(1743446353.413:841): avc: denied { open } for pid=2430 comm="syz.3.454" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 259.660137][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 259.660157][ T28] audit: type=1400 audit(1743446354.223:848): avc: denied { setopt } for pid=2437 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 259.799097][ T2452] loop4: detected capacity change from 0 to 256 [ 261.165405][ T2464] device bridge_slave_0 left promiscuous mode [ 261.184746][ T28] audit: type=1400 audit(1743446359.023:849): avc: denied { ioctl } for pid=2441 comm="syz.4.457" path="socket:[22096]" dev="sockfs" ino=22096 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 261.717817][ T2464] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.769651][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 261.905113][ T28] audit: type=1400 audit(1743446359.043:850): avc: denied { create } for pid=2458 comm="syz.2.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 261.936081][ T28] audit: type=1400 audit(1743446359.863:851): avc: denied { block_suspend } for pid=2451 comm="syz.1.459" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 262.010010][ T28] audit: type=1400 audit(1743446360.513:852): avc: denied { write } for pid=2458 comm="syz.2.458" path="socket:[22870]" dev="sockfs" ino=22870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 263.852820][ T28] audit: type=1400 audit(1743446361.723:853): avc: denied { create } for pid=2481 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 264.227767][ T2489] device pim6reg1 entered promiscuous mode [ 264.248087][ T2486] loop4: detected capacity change from 0 to 512 [ 264.318651][ T2486] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.465: inode #1: comm syz.4.465: iget: illegal inode # [ 264.337373][ T2486] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.465: error while reading EA inode 1 err=-117 [ 264.894566][ T2486] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.465: inode #1: comm syz.4.465: iget: illegal inode # [ 265.012018][ T2509] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.036232][ T2509] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.043318][ T2509] IPv6: NLM_F_CREATE should be set when creating new route [ 265.049583][ T2486] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.465: error while reading EA inode 1 err=-117 [ 265.050327][ T2509] IPv6: NLM_F_CREATE should be set when creating new route [ 265.069964][ T2486] EXT4-fs (loop4): 1 orphan inode deleted [ 265.079573][ T2486] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 265.626608][ T28] audit: type=1400 audit(1743446817.511:854): avc: denied { write } for pid=2520 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 265.693396][ T28] audit: type=1400 audit(1743446817.511:855): avc: denied { nlmsg_write } for pid=2520 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 265.714251][ T28] audit: type=1400 audit(1743446817.581:856): avc: denied { getopt } for pid=2524 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 267.094455][ T294] EXT4-fs (loop4): unmounting filesystem. [ 267.107237][ T28] audit: type=1400 audit(1743446818.991:857): avc: denied { write } for pid=2538 comm="syz.3.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 267.115984][ T2541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 267.182823][ T2548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.486'. [ 267.192541][ T2548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.486'. [ 267.199682][ T39] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 267.201978][ T2548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.486'. [ 267.260551][ T28] audit: type=1400 audit(1743446819.151:858): avc: denied { nlmsg_read } for pid=2558 comm="syz.4.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 267.326609][ T2570] netlink: 'syz.4.499': attribute type 5 has an invalid length. [ 267.365001][ T28] audit: type=1400 audit(1743446819.251:859): avc: denied { ioctl } for pid=2567 comm="syz.2.497" path="pid:[4026532373]" dev="nsfs" ino=4026532373 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 267.413526][ T39] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 267.506002][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.043624][ T28] audit: type=1400 audit(1743446819.411:860): avc: denied { nlmsg_read } for pid=2576 comm="syz.4.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 269.065176][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.083036][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 270.057250][ T28] audit: type=1400 audit(1743446820.971:861): avc: denied { read write } for pid=2583 comm="syz.2.505" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 270.077561][ T2588] virtio-fs: tag <(null)> not found [ 270.088416][ T39] usb 1-1: string descriptor 0 read error: -71 [ 270.103265][ T39] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 270.126187][ T28] audit: type=1400 audit(1743446820.971:862): avc: denied { open } for pid=2583 comm="syz.2.505" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 270.128224][ T39] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 270.153449][ T2593] binfmt_misc: register: failed to install interpreter file ./file0 [ 270.165252][ T39] usb 1-1: config 0 descriptor?? [ 270.166384][ T39] usb 1-1: can't set config #0, error -71 [ 270.197031][ T28] audit: type=1400 audit(1743446821.941:863): avc: denied { mounton } for pid=2587 comm="syz.0.508" path="/94/bus" dev="tmpfs" ino=550 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 270.265284][ T39] usb 1-1: USB disconnect, device number 8 [ 271.403709][ T28] audit: type=1400 audit(2000000000.160:864): avc: denied { connect } for pid=2600 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 271.663750][ T2623] ÿ: renamed from bond_slave_0 [ 272.103795][ T28] audit: type=1400 audit(2000000000.190:865): avc: denied { shutdown } for pid=2600 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 272.590383][ T2630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.523'. [ 272.643980][ T28] audit: type=1400 audit(2000000001.100:866): avc: denied { connect } for pid=2602 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 272.680286][ T2637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.527'. [ 272.690122][ T28] audit: type=1400 audit(2000000001.110:867): avc: denied { getopt } for pid=2602 comm="syz.4.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 272.719216][ T2642] netlink: 'syz.0.530': attribute type 11 has an invalid length. [ 272.749861][ T2642] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.530'. [ 272.813183][ T2657] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 272.884639][ T28] audit: type=1400 audit(2000000002.370:868): avc: denied { write } for pid=2668 comm="syz.2.542" name="udp6" dev="proc" ino=4026532589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 272.894220][ T2673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 272.929692][ T28] audit: type=1400 audit(2000000002.410:869): avc: denied { bind } for pid=2670 comm="syz.0.543" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 272.951217][ T2676] tipc: Started in network mode [ 272.968196][ T2680] capability: warning: `syz.0.547' uses 32-bit capabilities (legacy support in use) [ 272.968371][ T2676] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 272.979663][ T28] audit: type=1400 audit(2000000002.410:870): avc: denied { node_bind } for pid=2670 comm="syz.0.543" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 272.999642][ T2676] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 273.038568][ T28] audit: type=1400 audit(2000000002.510:871): avc: denied { compute_member } for pid=2681 comm="syz.3.549" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 273.039111][ T2676] tipc: Enabled bearer , priority 10 [ 273.065301][ T39] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 273.116564][ T2695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.556'. [ 273.130453][ T2695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.556'. [ 273.143737][ T2701] netlink: 52 bytes leftover after parsing attributes in process `syz.0.557'. [ 273.290296][ T39] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 273.299177][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.313938][ T39] usb 5-1: config 0 descriptor?? [ 273.332894][ T39] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 273.351604][ T39] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 273.461141][ T28] audit: type=1400 audit(2000000002.910:872): avc: denied { create } for pid=2704 comm="syz.2.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 273.560229][ T39] usb 5-1: USB disconnect, device number 4 [ 273.677733][ T39] ftdi_sio 5-1:0.0: device disconnected [ 273.802518][ T28] audit: type=1400 audit(2000000003.200:873): avc: denied { read write } for pid=2720 comm="syz.0.565" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 274.469139][ T351] tipc: Node number set to 1 [ 274.516069][ T2728] 9pnet_fd: p9_fd_create_tcp (2728): problem connecting socket to 127.0.0.1 [ 274.622417][ T2735] tipc: Started in network mode [ 274.627128][ T2735] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 274.641750][ T2735] tipc: Enabling of bearer rejected, failed to enable media [ 274.869663][ T39] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 275.069546][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 275.076119][ T39] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 275.098147][ T39] usb 3-1: config 0 interface 0 has no altsetting 0 [ 275.110849][ T39] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 275.125947][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.148763][ T39] usb 3-1: config 0 descriptor?? [ 275.181904][ T2757] netlink: 28 bytes leftover after parsing attributes in process `syz.0.581'. [ 275.197898][ T2757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.581'. [ 275.595254][ T39] zydacron 0003:13EC:0006.0002: item fetching failed at offset 0/3 [ 275.673656][ T39] zydacron 0003:13EC:0006.0002: parse failed [ 275.749402][ T39] zydacron: probe of 0003:13EC:0006.0002 failed with error -22 [ 275.918593][ T39] usb 3-1: USB disconnect, device number 6 [ 276.690185][ T2766] SELinux: Context Ü is not valid (left unmapped). [ 276.696723][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 276.696741][ T28] audit: type=1400 audit(2000000006.180:884): avc: denied { mac_admin } for pid=2765 comm="syz.4.584" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 277.417569][ T39] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 277.631631][ T39] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.676380][ T39] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 277.709560][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.729782][ T39] usb 5-1: Product: syz [ 277.733796][ T39] usb 5-1: Manufacturer: syz [ 277.751291][ T39] usb 5-1: SerialNumber: syz [ 277.787045][ T28] audit: type=1400 audit(2000000007.270:885): avc: denied { append } for pid=2806 comm="syz.3.601" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 277.963312][ T39] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 278.045384][ T28] audit: type=1400 audit(2000000007.530:886): avc: denied { create } for pid=2824 comm="syz.0.608" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 278.067562][ T28] audit: type=1400 audit(2000000007.550:887): avc: denied { mounton } for pid=2824 comm="syz.0.608" path="/125/file0" dev="tmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 278.093218][ T2825] block device autoloading is deprecated and will be removed. [ 278.108376][ T2825] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 278.122069][ T2825] FAT-fs (loop1): unable to read boot sector [ 278.178197][ T28] audit: type=1400 audit(2000000007.660:888): avc: denied { read write } for pid=2792 comm="syz.4.596" name="lp0" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 278.179033][ T1754] usb 5-1: USB disconnect, device number 5 [ 278.210883][ T28] audit: type=1400 audit(2000000007.660:889): avc: denied { open } for pid=2792 comm="syz.4.596" path="/dev/usb/lp0" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 278.245314][ T1754] usblp0: removed [ 278.258464][ T28] audit: type=1400 audit(2000000007.700:890): avc: denied { unlink } for pid=291 comm="syz-executor" name="file0" dev="tmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 278.462995][ T28] audit: type=1400 audit(2000000007.950:891): avc: denied { shutdown } for pid=2855 comm="syz.2.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.495385][ T28] audit: type=1400 audit(2000000007.970:892): avc: denied { read } for pid=2855 comm="syz.2.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 278.679574][ T315] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 278.715362][ T2869] 9p: Unknown uid 00000000004294967295 [ 278.797287][ T28] audit: type=1400 audit(2000000008.280:893): avc: denied { append } for pid=2875 comm="syz.2.629" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 278.797461][ T2876] random: crng reseeded on system resumption [ 278.860642][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.879853][ T315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.899628][ T315] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 278.909814][ T315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.926460][ T315] usb 4-1: config 0 descriptor?? [ 279.050902][ T2891] netlink: 'syz.2.637': attribute type 4 has an invalid length. [ 279.078539][ T2891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'. [ 279.164237][ T2898] loop1: detected capacity change from 0 to 2048 [ 279.240216][ T2898] loop1: p2 < > p3 p4 < > [ 279.245858][ T2898] loop1: p3 start 4278191616 is beyond EOD, truncated [ 279.277222][ T102] loop1: p2 < > p3 p4 < > [ 279.282140][ T102] loop1: p3 start 4278191616 is beyond EOD, truncated [ 279.331120][ T2463] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 279.357212][ T2455] udevd[2455]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 279.370973][ T2463] udevd[2463]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 279.582590][ T2930] input: syz0 as /devices/virtual/input/input7 [ 279.943906][ T315] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 279.961510][ T315] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 279.979703][ T315] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 279.987673][ T315] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 279.995094][ T351] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 280.005551][ T315] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 280.037200][ T315] usb 4-1: USB disconnect, device number 5 [ 280.179526][ T351] usb 1-1: Using ep0 maxpacket: 16 [ 280.186269][ T351] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 280.223941][ T351] usb 1-1: config 0 interface 0 has no altsetting 0 [ 280.239590][ T351] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 280.248595][ T351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.278853][ T351] usb 1-1: config 0 descriptor?? [ 280.693301][ T351] zydacron 0003:13EC:0006.0004: item fetching failed at offset 0/3 [ 280.719914][ T351] zydacron 0003:13EC:0006.0004: parse failed [ 280.725851][ T351] zydacron: probe of 0003:13EC:0006.0004 failed with error -22 [ 280.818417][ T2965] loop1: detected capacity change from 0 to 128 [ 280.837403][ T2965] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 280.859932][ T2965] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 280.958952][ T315] usb 1-1: USB disconnect, device number 9 [ 280.979199][ T626] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 281.057581][ T2977] loop1: detected capacity change from 0 to 512 [ 281.064026][ T314] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 281.133296][ T2977] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 281.149639][ T2977] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.206032][ T292] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /148/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 281.260610][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 281.271400][ T314] usb 4-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 281.280406][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.299635][ T314] usb 4-1: config 0 descriptor?? [ 281.304668][ T2963] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 281.723418][ T314] wacom 0003:056A:0029.0005: unknown main item tag 0x3 [ 281.743404][ T314] wacom 0003:056A:0029.0005: Unknown device_type for 'HID 056a:0029'. Assuming pen. [ 281.774244][ T314] wacom 0003:056A:0029.0005: hidraw0: USB HID v1.01 Device [HID 056a:0029] on usb-dummy_hcd.3-1/input0 [ 281.816653][ T314] input: Wacom Intuos5 S Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0029.0005/input/input8 [ 281.992792][ T314] usb 4-1: USB disconnect, device number 6 [ 282.241530][ T3010] syz.0.688[3010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.241614][ T3010] syz.0.688[3010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.589353][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 282.589372][ T28] audit: type=1400 audit(2000000012.070:917): avc: denied { mount } for pid=3031 comm="syz.4.698" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 282.635229][ T28] audit: type=1400 audit(2000000012.120:918): avc: denied { mounton } for pid=3031 comm="syz.4.698" path="/114/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 282.679105][ T28] audit: type=1400 audit(2000000012.150:919): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 282.720681][ T3035] loop4: detected capacity change from 0 to 256 [ 282.730670][ T3037] syz.3.700[3037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.730753][ T3037] syz.3.700[3037] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.743776][ T28] audit: type=1400 audit(2000000012.230:920): avc: denied { remount } for pid=3036 comm="syz.3.700" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 282.746299][ T3035] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 282.859523][ T3035] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 282.881160][ T3035] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 282.918655][ T28] audit: type=1400 audit(2000000012.400:921): avc: denied { create } for pid=3034 comm="syz.4.699" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 282.948081][ T3035] exFAT-fs (loop4): error, found bogus dentry(18) beyond unused empty group(3) (start_clu : 5, cur_clu : 5) [ 282.963079][ T3042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.702'. [ 282.966642][ T28] audit: type=1400 audit(2000000012.430:922): avc: denied { remove_name } for pid=3034 comm="syz.4.699" name="file1" dev="loop4" ino=1048624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 282.992025][ T3035] exFAT-fs (loop4): Filesystem has been set read-only [ 283.024716][ T28] audit: type=1400 audit(2000000012.430:923): avc: denied { rename } for pid=3034 comm="syz.4.699" name="file1" dev="loop4" ino=1048624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.045028][ T3044] loop4: detected capacity change from 0 to 128 [ 283.071569][ T3044] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 283.099757][ T3044] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.120688][ T28] audit: type=1400 audit(2000000012.610:924): avc: denied { append } for pid=3043 comm="syz.4.703" path="/116/file0/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 283.144795][ T294] EXT4-fs (loop4): unmounting filesystem. [ 283.185399][ T28] audit: type=1400 audit(2000000012.610:925): avc: denied { read } for pid=3043 comm="syz.4.703" name="file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 283.231804][ T3057] xt_bpf: check failed: parse error [ 283.354193][ T3067] usb usb8: usbfs: process 3067 (syz.0.712) did not claim interface 0 before use [ 283.407894][ T28] audit: type=1400 audit(2000000012.890:926): avc: denied { create } for pid=3072 comm="syz.0.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 283.449890][ T314] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 283.489549][ T351] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 283.639544][ T314] usb 4-1: Using ep0 maxpacket: 32 [ 283.645576][ T314] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 283.663732][ T314] usb 4-1: config 0 has no interface number 0 [ 283.672049][ T314] usb 4-1: config 0 interface 184 has no altsetting 0 [ 283.680659][ T351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.690512][ T314] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 283.700291][ T351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.709556][ T314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.717840][ T351] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 283.731760][ T351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.739561][ T314] usb 4-1: Product: syz [ 283.739581][ T314] usb 4-1: Manufacturer: syz [ 283.739600][ T314] usb 4-1: SerialNumber: syz [ 283.753145][ T314] usb 4-1: config 0 descriptor?? [ 283.755852][ T351] usb 5-1: config 0 descriptor?? [ 283.767089][ T314] smsc75xx v1.0.0 [ 284.171502][ T351] hid (null): bogus close delimiter [ 284.339558][ T1754] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 284.365850][ T314] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 284.376841][ T351] usb 5-1: string descriptor 0 read error: -22 [ 284.386739][ T314] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 284.529543][ T1754] usb 1-1: Using ep0 maxpacket: 16 [ 284.535640][ T1754] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 284.554374][ T1754] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.574544][ T1754] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.596936][ T1754] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 284.606784][ T314] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 284.628422][ T1754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.636298][ T314] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 284.655803][ T1754] usb 1-1: Product: syz [ 284.659854][ T314] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 284.669073][ T1754] usb 1-1: Manufacturer: syz [ 284.673462][ T1754] usb 1-1: SerialNumber: syz [ 284.689355][ T314] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 284.701573][ T314] usb 4-1: USB disconnect, device number 7 [ 284.783749][ T351] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #100: -71 [ 284.803566][ T351] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 284.813640][ T351] uclogic 0003:256C:006D.0006: failed probing pen v1 parameters: -71 [ 284.829550][ T351] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 284.847015][ T351] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 284.871037][ T351] usb 5-1: USB disconnect, device number 6 [ 285.098539][ T1754] usb 1-1: 0:2 : does not exist [ 285.309550][ T314] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 285.510635][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.529634][ T314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.549368][ T314] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 285.550063][ T3124] overlayfs: upper fs does not support tmpfile. [ 285.579563][ T314] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.588541][ T314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.600096][ T314] usb 3-1: config 0 descriptor?? [ 285.719749][ T1754] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 285.752246][ T1754] usb 1-1: USB disconnect, device number 10 [ 285.761435][ T3134] xt_hashlimit: size too large, truncated to 1048576 [ 286.012561][ T314] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 286.031176][ T314] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 286.113398][ T3144] netlink: 'syz.3.743': attribute type 4 has an invalid length. [ 286.246675][ T3152] hub 1-0:1.0: USB hub found [ 286.252003][ T351] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 286.260964][ T3152] hub 1-0:1.0: 1 port detected [ 286.300391][ T314] usb 3-1: USB disconnect, device number 7 [ 286.324449][ T3158] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 286.333372][ T3158] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 286.342232][ T3158] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 286.351062][ T3158] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 286.359956][ T3158] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 286.368748][ T3158] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 286.377631][ T3158] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 286.386476][ T3158] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 286.395352][ T3158] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 286.404300][ T3158] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 286.440852][ T351] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.455300][ T351] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 286.473964][ T351] usb 5-1: config 1 has no interface number 0 [ 286.486497][ T351] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.509328][ T351] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 286.536635][ T351] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.560838][ T351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.579073][ T351] usb 5-1: Product: syz [ 286.589175][ T351] usb 5-1: Manufacturer: syz [ 286.593657][ T351] usb 5-1: SerialNumber: syz [ 286.889620][ T314] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 287.080646][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.099275][ T314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.109395][ T314] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.122350][ T314] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.131502][ T314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.152730][ T314] usb 4-1: config 0 descriptor?? [ 287.410754][ T351] cdc_ncm 5-1:1.1: bind() failure [ 287.561015][ T314] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 287.571942][ T314] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 287.586868][ T314] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 287.601981][ T314] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 287.621360][ T314] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 287.630029][ T314] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 287.644382][ T1754] usb 5-1: USB disconnect, device number 7 [ 287.652978][ T314] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 287.832475][ T314] usb 4-1: USB disconnect, device number 8 [ 287.919547][ T19] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 287.956996][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 287.957012][ T28] audit: type=1400 audit(2000000017.440:935): avc: denied { load_policy } for pid=3201 comm="syz.2.769" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 287.982762][ T3202] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 287.992217][ T3202] SELinux: failed to load policy [ 288.012990][ T28] audit: type=1400 audit(2000000017.500:936): avc: denied { bind } for pid=3203 comm="syz.2.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 288.099577][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 288.107033][ T19] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 288.139999][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.159655][ T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.175743][ T19] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 288.199679][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.213976][ T19] usb 1-1: Product: syz [ 288.218262][ T19] usb 1-1: Manufacturer: syz [ 288.224483][ T19] usb 1-1: SerialNumber: syz [ 288.230700][ T28] audit: type=1400 audit(2000000017.720:937): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.260912][ T28] audit: type=1400 audit(2000000017.720:938): avc: denied { remove_name } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.290542][ T28] audit: type=1400 audit(2000000017.720:939): avc: denied { rename } for pid=84 comm="syslogd" name="messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 288.312911][ T28] audit: type=1400 audit(2000000017.720:940): avc: denied { add_name } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.335155][ T28] audit: type=1400 audit(2000000017.720:941): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 288.362591][ T28] audit: type=1400 audit(2000000017.720:942): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 288.442048][ T3224] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 288.452168][ T3224] SELinux: failed to load policy [ 288.529625][ T351] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 288.549559][ T314] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 288.641218][ T19] usb 1-1: 0:2 : does not exist [ 288.729613][ T351] usb 3-1: Using ep0 maxpacket: 16 [ 288.735697][ T351] usb 3-1: config 0 interface 0 has no altsetting 0 [ 288.740750][ T314] usb 5-1: config 0 interface 0 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.749532][ T351] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 288.759531][ T314] usb 5-1: config 0 interface 0 has no altsetting 0 [ 288.769520][ T351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.777541][ T314] usb 5-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 288.794258][ T351] usb 3-1: config 0 descriptor?? [ 288.794878][ T314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.823802][ T314] usb 5-1: config 0 descriptor?? [ 289.119601][ T301] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 289.202124][ T351] hid (null): unknown global tag 0xe [ 289.207282][ T351] hid (null): global environment stack underflow [ 289.213484][ T351] hid (null): global environment stack underflow [ 289.219635][ T351] hid (null): unknown global tag 0xc [ 289.239135][ T314] wacom 0003:056A:0059.000A: hidraw0: USB HID v0.00 Device [HID 056a:0059] on usb-dummy_hcd.4-1/input0 [ 289.258347][ T19] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 289.287439][ T19] usb 1-1: USB disconnect, device number 11 [ 289.300856][ T301] usb 4-1: config index 0 descriptor too short (expected 2340, got 36) [ 289.309098][ T301] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.320411][ T301] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.330405][ T301] usb 4-1: config 0 interface 0 has no altsetting 0 [ 289.336842][ T301] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 289.346094][ T301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.354900][ T301] usb 4-1: config 0 descriptor?? [ 289.408059][ T351] usb 3-1: USB disconnect, device number 8 [ 289.447636][ T39] usb 5-1: USB disconnect, device number 8 [ 289.763529][ T301] hid-rmi 0003:17EF:6085.000B: item fetching failed at offset 0/3 [ 289.777476][ T301] hid-rmi 0003:17EF:6085.000B: parse failed [ 289.786940][ T301] hid-rmi: probe of 0003:17EF:6085.000B failed with error -22 [ 289.806346][ T291] ------------[ cut here ]------------ [ 289.811932][ T291] WARNING: CPU: 1 PID: 291 at fs/inode.c:332 drop_nlink+0xc1/0x110 [ 289.819724][ T291] Modules linked in: [ 289.823405][ T291] CPU: 1 PID: 291 Comm: syz-executor Not tainted 6.1.129-syzkaller-00053-gdf2dac406f15 #0 [ 289.833170][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 289.843233][ T291] RIP: 0010:drop_nlink+0xc1/0x110 [ 289.848106][ T291] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 57 d0 ef ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 2f 21 a8 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 289.867594][ T291] RSP: 0018:ffffc90000dd7bf0 EFLAGS: 00010293 [ 289.873458][ T291] RAX: ffffffff81cd7661 RBX: 0000000000000000 RCX: ffff88810f563cc0 [ 289.881272][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.889054][ T291] RBP: ffffc90000dd7c18 R08: ffffffff81cd75e4 R09: 0000000000000003 [ 289.896909][ T291] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 289.904713][ T291] R13: 1ffff11023972e3e R14: ffff88811cb971a8 R15: ffff88811cb971f0 [ 289.912512][ T291] FS: 00005555636ab500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 289.921270][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.927875][ T291] CR2: 00005555636ce4e8 CR3: 000000012eb70000 CR4: 00000000003506a0 [ 289.935813][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 289.943626][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 289.951435][ T291] Call Trace: [ 289.954540][ T291] [ 289.957318][ T291] ? show_regs+0x58/0x60 [ 289.961436][ T291] ? __warn+0x160/0x3d0 [ 289.965406][ T291] ? drop_nlink+0xc1/0x110 [ 289.969664][ T291] ? report_bug+0x4d5/0x7d0 [ 289.973987][ T291] ? drop_nlink+0xc1/0x110 [ 289.978260][ T291] ? handle_bug+0x41/0x70 [ 289.982443][ T291] ? exc_invalid_op+0x1b/0x50 [ 289.986925][ T291] ? asm_exc_invalid_op+0x1b/0x20 [ 289.991841][ T291] ? drop_nlink+0x44/0x110 [ 289.996028][ T291] ? drop_nlink+0xc1/0x110 [ 290.000486][ T291] ? drop_nlink+0xc1/0x110 [ 290.004711][ T291] shmem_rmdir+0x59/0x90 [ 290.008790][ T291] vfs_rmdir+0x398/0x500 [ 290.013039][ T291] incfs_kill_sb+0x113/0x230 [ 290.014611][ T19] usb 4-1: USB disconnect, device number 9 [ 290.017393][ T291] deactivate_locked_super+0xad/0x110 [ 290.028251][ T291] deactivate_super+0xbe/0xf0 [ 290.032793][ T291] cleanup_mnt+0x485/0x510 [ 290.037003][ T291] ? user_path_at_empty+0x14e/0x1a0 [ 290.042092][ T291] __cleanup_mnt+0x19/0x20 [ 290.046305][ T291] task_work_run+0x24d/0x2e0 [ 290.050877][ T291] ? task_work_cancel+0x2e0/0x2e0 [ 290.055677][ T291] ? __x64_sys_umount+0x122/0x170 [ 290.060584][ T291] exit_to_user_mode_loop+0x94/0xa0 [ 290.065576][ T291] exit_to_user_mode_prepare+0x5a/0xa0 [ 290.070901][ T291] syscall_exit_to_user_mode+0x26/0x130 [ 290.076257][ T291] do_syscall_64+0x47/0xb0 [ 290.080589][ T291] ? clear_bhb_loop+0x55/0xb0 [ 290.085099][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.090897][ T291] RIP: 0033:0x7f758f18e497 [ 290.095091][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 290.114589][ T291] RSP: 002b:00007ffc8fb7f328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 290.122793][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f758f18e497 [ 290.130602][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8fb7f3e0 [ 290.138399][ T291] RBP: 00007ffc8fb7f3e0 R08: 0000000000000000 R09: 0000000000000000 [ 290.146247][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8fb80470 [ 290.154050][ T291] R13: 00007f758f20e08c R14: 0000000000046bf3 R15: 00007ffc8fb804b0 [ 290.161865][ T291] [ 290.164689][ T291] ---[ end trace 0000000000000000 ]--- [ 290.172205][ T291] ================================================================== [ 290.180093][ T291] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 290.186169][ T291] Write of size 4 at addr 0000000000000170 by task syz-executor/291 [ 290.193978][ T291] [ 290.196170][ T291] CPU: 1 PID: 291 Comm: syz-executor Tainted: G W 6.1.129-syzkaller-00053-gdf2dac406f15 #0 [ 290.207343][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 290.217240][ T291] Call Trace: [ 290.220371][ T291] [ 290.223137][ T291] dump_stack_lvl+0x151/0x1b7 [ 290.227660][ T291] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 290.232947][ T291] ? _printk+0xd1/0x111 [ 290.236938][ T291] print_report+0xe1/0x4e0 [ 290.241191][ T291] ? __virt_addr_valid+0x59/0x2f0 [ 290.246051][ T291] ? kasan_addr_to_slab+0xd/0x80 [ 290.250912][ T291] ? ihold+0x20/0x60 [ 290.254646][ T291] kasan_report+0x13c/0x170 [ 290.258985][ T291] ? ihold+0x20/0x60 [ 290.262721][ T291] kasan_check_range+0x294/0x2a0 [ 290.267749][ T291] __kasan_check_write+0x14/0x20 [ 290.272541][ T291] ihold+0x20/0x60 [ 290.276089][ T291] vfs_rmdir+0x268/0x500 [ 290.280201][ T291] incfs_kill_sb+0x113/0x230 [ 290.284592][ T291] deactivate_locked_super+0xad/0x110 [ 290.289807][ T291] deactivate_super+0xbe/0xf0 [ 290.294311][ T291] cleanup_mnt+0x485/0x510 [ 290.298577][ T291] ? user_path_at_empty+0x14e/0x1a0 [ 290.303597][ T291] __cleanup_mnt+0x19/0x20 [ 290.307895][ T291] task_work_run+0x24d/0x2e0 [ 290.312288][ T291] ? task_work_cancel+0x2e0/0x2e0 [ 290.317139][ T291] ? __x64_sys_umount+0x122/0x170 [ 290.321995][ T291] exit_to_user_mode_loop+0x94/0xa0 [ 290.327030][ T291] exit_to_user_mode_prepare+0x5a/0xa0 [ 290.332345][ T291] syscall_exit_to_user_mode+0x26/0x130 [ 290.337706][ T291] do_syscall_64+0x47/0xb0 [ 290.341975][ T291] ? clear_bhb_loop+0x55/0xb0 [ 290.346474][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.352213][ T291] RIP: 0033:0x7f758f18e497 [ 290.356546][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 290.375981][ T291] RSP: 002b:00007ffc8fb7f328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 290.384227][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f758f18e497 [ 290.392044][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8fb7f3e0 [ 290.399850][ T291] RBP: 00007ffc8fb7f3e0 R08: 0000000000000000 R09: 0000000000000000 [ 290.407656][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8fb80470 [ 290.415470][ T291] R13: 00007f758f20e08c R14: 0000000000046bf3 R15: 00007ffc8fb804b0 [ 290.423383][ T291] [ 290.426232][ T291] ================================================================== [ 290.435480][ T291] Disabling lock debugging due to kernel taint [ 290.441706][ T291] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 290.449454][ T291] #PF: supervisor write access in kernel mode [ 290.455365][ T291] #PF: error_code(0x0002) - not-present page [ 290.461174][ T291] PGD 131d53067 P4D 131d53067 PUD 0 [ 290.466295][ T291] Oops: 0002 [#1] PREEMPT SMP KASAN [ 290.471329][ T291] CPU: 1 PID: 291 Comm: syz-executor Tainted: G B W 6.1.129-syzkaller-00053-gdf2dac406f15 #0 [ 290.482525][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 290.492547][ T291] RIP: 0010:ihold+0x25/0x60 [ 290.496883][ T291] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 01 19 a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 c8 ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 84 1c a8 [ 290.499624][ T1754] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 290.516324][ T291] RSP: 0018:ffffc90000dd7c30 EFLAGS: 00010246 [ 290.516351][ T291] RAX: ffff88810f563c00 RBX: 0000000000000001 RCX: ffff88810f563cc0 [ 290.516367][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 290.516379][ T291] RBP: ffffc90000dd7c40 R08: ffffffff8144b443 R09: fffffbfff0f6e8fd [ 290.552955][ T291] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11022f12dc0 [ 290.560763][ T291] R13: ffff88810be94660 R14: 0000000000000000 R15: 1ffff110217d28d2 [ 290.568574][ T291] FS: 00005555636ab500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 290.577361][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.583764][ T291] CR2: 0000000000000170 CR3: 000000012eb70000 CR4: 00000000003506a0 [ 290.591601][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 290.599384][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 290.607199][ T291] Call Trace: [ 290.610321][ T291] [ 290.613187][ T291] ? __die_body+0x62/0xb0 [ 290.617352][ T291] ? __die+0x7e/0x90 [ 290.621083][ T291] ? page_fault_oops+0x7f9/0xa90 [ 290.625853][ T291] ? vprintk_default+0x26/0x30 [ 290.630459][ T291] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 290.635834][ T291] ? add_taint+0x44/0xe0 [ 290.639914][ T291] ? panic+0x667/0x667 [ 290.643824][ T291] ? preempt_schedule_thunk+0x16/0x18 [ 290.649203][ T291] ? exc_page_fault+0x529/0x6d0 [ 290.653889][ T291] ? asm_exc_page_fault+0x27/0x30 [ 290.658752][ T291] ? add_taint+0x93/0xe0 [ 290.662832][ T291] ? ihold+0x25/0x60 [ 290.666561][ T291] vfs_rmdir+0x268/0x500 [ 290.670641][ T291] incfs_kill_sb+0x113/0x230 [ 290.675067][ T291] deactivate_locked_super+0xad/0x110 [ 290.680273][ T291] deactivate_super+0xbe/0xf0 [ 290.684788][ T291] cleanup_mnt+0x485/0x510 [ 290.689041][ T291] ? user_path_at_empty+0x14e/0x1a0 [ 290.694076][ T291] __cleanup_mnt+0x19/0x20 [ 290.698328][ T291] task_work_run+0x24d/0x2e0 [ 290.702758][ T291] ? task_work_cancel+0x2e0/0x2e0 [ 290.707614][ T291] ? __x64_sys_umount+0x122/0x170 [ 290.712474][ T291] exit_to_user_mode_loop+0x94/0xa0 [ 290.717507][ T291] exit_to_user_mode_prepare+0x5a/0xa0 [ 290.722954][ T291] syscall_exit_to_user_mode+0x26/0x130 [ 290.728332][ T291] do_syscall_64+0x47/0xb0 [ 290.732582][ T291] ? clear_bhb_loop+0x55/0xb0 [ 290.737093][ T291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.742822][ T291] RIP: 0033:0x7f758f18e497 [ 290.747072][ T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 290.766517][ T291] RSP: 002b:00007ffc8fb7f328 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 290.774769][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f758f18e497 [ 290.782659][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8fb7f3e0 [ 290.790468][ T291] RBP: 00007ffc8fb7f3e0 R08: 0000000000000000 R09: 0000000000000000 [ 290.798279][ T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8fb80470 [ 290.806095][ T291] R13: 00007f758f20e08c R14: 0000000000046bf3 R15: 00007ffc8fb804b0 [ 290.813912][ T291] [ 290.816768][ T291] Modules linked in: [ 290.820517][ T291] CR2: 0000000000000170 [ 290.824495][ T291] ---[ end trace 0000000000000000 ]--- [ 290.829789][ T291] RIP: 0010:ihold+0x25/0x60 [ 290.834129][ T291] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 01 19 a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 00 c8 ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 84 1c a8 [ 290.853571][ T291] RSP: 0018:ffffc90000dd7c30 EFLAGS: 00010246 [ 290.859470][ T291] RAX: ffff88810f563c00 RBX: 0000000000000001 RCX: ffff88810f563cc0 [ 290.867281][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 290.875092][ T291] RBP: ffffc90000dd7c40 R08: ffffffff8144b443 R09: fffffbfff0f6e8fd [ 290.882905][ T291] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11022f12dc0 [ 290.890717][ T291] R13: ffff88810be94660 R14: 0000000000000000 R15: 1ffff110217d28d2 [ 290.898525][ T291] FS: 00005555636ab500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 290.907295][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.913724][ T291] CR2: 0000000000000170 CR3: 000000012eb70000 CR4: 00000000003506a0 [ 290.921531][ T291] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 290.929343][ T291] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 290.937153][ T291] Kernel panic - not syncing: Fatal exception [ 290.943165][ T291] Kernel Offset: disabled [ 290.947219][ T291] Rebooting in 86400 seconds..