last executing test programs: 7m41.575810774s ago: executing program 32 (id=1258): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 7m29.387139285s ago: executing program 33 (id=1551): r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x21) wait4(r0, 0x0, 0x40000000, 0x0) 7m17.443152765s ago: executing program 34 (id=1838): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x35}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a14e5f40700426e2400000000ff20000000000000", 0x23) 7m8.307981116s ago: executing program 35 (id=2047): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf252800000005002e000f0000000c002d000201aaaaaaaaaaaa05002b0003000000080002000d46"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6m55.81209161s ago: executing program 36 (id=2358): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioperm(0x0, 0x2, 0x2) ioperm(0x0, 0x9d, 0x0) 5m4.499113267s ago: executing program 37 (id=5696): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x7}, 0xa) 4m45.366962224s ago: executing program 38 (id=5821): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) write$binfmt_aout(r0, &(0x7f0000000940)=ANY=[], 0xff2e) 4m44.730886762s ago: executing program 39 (id=5846): unshare(0x2040400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv(r0, 0x0, 0x0, 0xe7, 0x6) 4m39.370129521s ago: executing program 40 (id=5913): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) getsockopt$MRT6(r0, 0x29, 0xce, 0x0, &(0x7f0000000080)) 3m18.260889428s ago: executing program 41 (id=7727): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) 1m51.647764119s ago: executing program 42 (id=9992): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x261, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4004}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 1m36.045206836s ago: executing program 43 (id=10183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000000000000500000003000000010000000000000004000000090000000000000000000000000000000000000000000000000000000b000000020000000100000000000000bca10000ad010000000000000000000000000000000000000000000000000000f5000000030000000100000000000000ff010000000000000200000000000000040000000000000003000000ff7f0000920900000000000000000000000000000a00000000040000040000000300000000000000000000000000000000000000ffff0000"]) 1m11.529317723s ago: executing program 1 (id=11095): r0 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r1, 0x4b46, &(0x7f0000000140)) 1m11.486627546s ago: executing program 1 (id=11097): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)) 1m11.395218069s ago: executing program 1 (id=11102): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 1m11.36311687s ago: executing program 1 (id=11104): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5515, &(0x7f00000079c0)="$eJzs3EtvG9UXAPDjPNr08W+jv1iw60gVUiLVVpxHBbsArXiIVFGBBStwbMdya3ui2HFCVixYIhZ8EwQSK5Z8Bhas2SEWIHZIIM9MoOEhIcWJm+b3k8Zn7vX1mXOtqtKZiRzAhTWf/PJTKW7ElYiYjojrEdl5qTgy63l4PiJuRcTUE0epmP9j4lJEXI2IG6Pkec5S8dZnd4a313588+evv708c+3zr76b3K6BSXshIro7+fl+N49pK4+PivnasJ3F7uqwiPkb3cfFOM3jfnMry7BfO1pXy+JKK1+f7uz1R3G7U6uPYqu9nc3v9PIL9oetozzZBx7VdrNxo7mVxXY/zWLrMK/r4DD/v+2wP8jzNIp8H2bpYzA4ivl886CZ72fncRbrvUExn+dNG82DURwWsbhc1NNOI6tj6yTf9NPtrXZv7yAZNnf77bSXrFWqL1aqd8vV3bTRHDRXy7Vu4+5qstDqjJaVB81ad72Vpq1Os1JPu4vJQqteL1erycK95la71kuq1cpKZam8tlic3Ulee/Bu0mkkC6P4Sru3N2h3+sl2upvkn1hMlisrLy0mt6vJ2xubyebD+/c3Nt95/957D17eeOPVYtHfykoWlpeWl8vVpfJydfEC7f/jougx7h9OpDTpAgDOH/0/MAmn1//vPow4/f4/9P9jca7633PX/08XV3l69w8nov8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiwvp/94vXsZD4fXyvm/1dM/b8YlyJiKiJ++wfTcelYzukiz+y/rJ/9Sw3flCLLMLrG5eK4GhHrxfHrzdP+FgAAAODZ9eVHtz7Nu/X8ZX7SBXGW8ps2U9c/GFO+uYiYnf9hTNmmRi/PjSlZ9u97Jg7GlC27gTU3llQ3i1tuM2PJ9l9NHwtzT4RSHqbOtBwAAOBMHO8EzrYLAQAA4Cx9MukCmIxSHD3KPHoWnP3l/Z8PBK8cGwEAAADnUGnSBQAAAACnLuv//f4fAAAAPNvy3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+Z+duchOHATCAOoEMMD8aNJr9XGV2cIw5wiy7rDhAL8EBuqBX6AW4QumuR6hIReJSqIpEFSdRq/ekYByZDxvBwrYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtOm+WM1vLv9cNc3ZlmVZjmKlfL/mIwEAAABO2RSrefVkWte/xfs/4q1fsZ6FEPITU/tB+HKUOYg5xUv768P2xas+3IZQJezeYxSvryGEv/F6/Nn2pwAAAACf13qxnNWz9fph2neH6FK9aJN//5coLwshFNOHRGn5Lu93orDq+z0MF4nSqgWscaKwesltmCrtLNXPfb9qNz4osrrI33zZvpPJxg4AAHRocFR0OwsBAACgS//77gDp3E3Ob5uF563M/VZg/AN/3N6bHNUAAACADyjruwMAAABA66r5f0fn/5XO/wMAAIB+1Of/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KZNsZqvF8tZ05xt2Uya0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE/vzjgIhEAZhsHd9ZzL3P6w0aGpqUgXCx98YDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7M9LCoRAEETBnPG/k77/YSVBzyBCBDQ8qqhFAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc7NzPaxxVHADwNzM7W1sV1yh7iIiCB73Y7ba29iYelODBP0EI6bbGbv3R5mBLEXPxJjn3InoUEZR46/+QcwK5xFsOe4jgWZnZmezkB7j+mtkknw+8ed8dhnnfNwsh33kvAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNHp7EifZoTOO4+Lc5t7DpazfOtRnHq9tz2cti6M6kz4ZXqx+iLrNJQIAAMDZkZT1fQhhJ11fyPq4k9f/aXlNVvN/+/Q4Luv5w3V/2Ze1f9Z++Xn3+f2BOuNxspveXB4OLh1NpfX/zXK2PfOXV7TyJ5+/e0nyLyR+b/W5UZo/z+jrjY132nl4ro5sAYB/4mLZF0H5+1DW95tMDIAzo1UpvMv6P+k0mxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAHUar4ckyjkII861JnNnae7h0XP94bXu+bNcePVoLX07umd0iDSHcXB4OLtU6m9l27/6D24vD4eBu/cFLIYSmRn+rmP7tD6a4OIRGno/gPwri4suelXxORtDgDyUAAE6ltGhZXb+Tri9k56K5EP747mD9/2olDlPW/7sfXtusjlWt//u1zXD29VbufNq7d//B68t3Fm8Nbg0+fuNy/83+letXr17v5e9Ket6YAAAA8O+0i1at/+O5o+v/FypxmLL+/+yb/hfVsRL1/7Emi35NZwIAAHC2Pfvy779Fx5yP2u3w+eLKyt3++Lj/+fL42ECqf9u5olXr/2Su6awAAACAOoxWowPr/zcqcZhy/f+p71/4sXrPJIRwvlj/v7j0yfBGfdOZaXX8OXHTcwQAAKBZ54tWXf9P8/3/8f6WhziE8Nor47j4N4BT1f/Ju1/9UB2ruv//Sn1TnElxd/w88r4bQqvbdEYAAACcZk8ULSv2f03XFz766cL7bfv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2ZwAAAP//eHA1gA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m11.021418495s ago: executing program 1 (id=11115): ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000380)={@loopback, @dev={0xfe, 0x80, '\x00', 0x17}, @private2, 0x8, 0x439, 0x3f, 0x100, 0x2, 0x440200}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1m10.804791095s ago: executing program 5 (id=11124): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r0) 1m10.791032065s ago: executing program 5 (id=11125): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)) 1m10.731247578s ago: executing program 5 (id=11126): r0 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1m10.731000117s ago: executing program 5 (id=11127): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5515, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m10.607356243s ago: executing program 1 (id=11131): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) 1m10.528273396s ago: executing program 44 (id=11131): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) 1m10.397072122s ago: executing program 0 (id=11138): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x3, 0x9, 0xdedb, 0x11, '\v\x00\x00]\x00'}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 1m10.175527681s ago: executing program 5 (id=11140): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000102505a8a440000102030109021b000101000000090400dc020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 1m9.872773854s ago: executing program 0 (id=11146): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r0) 1m9.765515239s ago: executing program 0 (id=11147): r0 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x1, 0xffffffff, 0x2cf}, &(0x7f0000000500)=0x0, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xe7f, 0xe876, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0) 1m9.622968355s ago: executing program 0 (id=11149): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) open$dir(&(0x7f0000000000)='./file0/file2\x00', 0x2, 0xa1) 1m9.622822645s ago: executing program 5 (id=11150): syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0xffffffff) 1m9.536791639s ago: executing program 45 (id=11150): syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0xffffffff) 1m9.214525283s ago: executing program 0 (id=11155): io_uring_setup(0xc90, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x80000}) r0 = io_uring_setup(0x4166, &(0x7f0000000140)={0x0, 0x4, 0x400, 0x3, 0x161}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) io_uring_enter(r0, 0x0, 0xfc86, 0x10, 0x0, 0x0) 1m8.34785455s ago: executing program 0 (id=11157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 1m8.299950072s ago: executing program 46 (id=11157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x15) 1m4.961714404s ago: executing program 6 (id=11242): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1m4.893804487s ago: executing program 6 (id=11243): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000180085000000b00000001801000020cf782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='workqueue_queue_work\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 1m4.893258967s ago: executing program 6 (id=11244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x278100003e7, 0x0, 0x1, 0xffffffffffffffff, 0x1}) 1m4.727921934s ago: executing program 6 (id=11247): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) open$dir(&(0x7f0000000000)='./file0/file2\x00', 0x2, 0xa1) 1m4.366677029s ago: executing program 6 (id=11255): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() sigaltstack(&(0x7f0000000000)={&(0x7f0000001080)=""/4096, 0x0, 0x1000}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f00000002c0)={0xb, 0x4}) 1m4.249633374s ago: executing program 4 (id=11262): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="b00000000000000029000000360000006712000000000000040103061c8b5ad07e70126777779300ce2e0cea2b880000000000000000000000c2040000cd160401040401070502000404010f072000000003060c0600040000000000000072090000000000000000000000000000c910fe80000000000000000000000000001f0728000000010806feff02000000000000000800000000000000ff0700000066000001000000000000000000000013000001"], 0x1b0}}], 0x1, 0x4) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 1m4.211721066s ago: executing program 4 (id=11263): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)='\x00'/11, 0xb, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x80, 0x6, @broadcast}, 0x14) 1m4.152700299s ago: executing program 4 (id=11265): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000081}, 0x20000000) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) 1m4.109959881s ago: executing program 4 (id=11266): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) open$dir(&(0x7f0000000000)='./file0/file2\x00', 0x2, 0xa1) 1m3.631320441s ago: executing program 4 (id=11279): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000005d00)=@newsa={0x138, 0x10, 0x1, 0x0, 0x2, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in=@rand_addr=0x64010101, 0x0, 0x33}, @in=@multicast2, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x8000000000}, {0x0, 0x0, 0x800, 0x2}, {0x0, 0x0, 0x8}, 0x70bd29, 0x3506, 0xa, 0x3}, [@algo_auth={0x48, 0x1, {{'sha3-512-generic\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1m2.979106659s ago: executing program 6 (id=11283): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0x9}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x7}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 1m2.94870911s ago: executing program 47 (id=11283): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xb, 0x9}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x7}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 1m2.805695577s ago: executing program 4 (id=11287): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='map_files\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0x58) 1m2.738641929s ago: executing program 48 (id=11287): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='map_files\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0x58) 5.081179513s ago: executing program 2 (id=13509): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x0, 0xd6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 5.052910515s ago: executing program 2 (id=13503): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c1f02010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000180905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.477102919s ago: executing program 2 (id=13527): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x141981, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x5) 2.879027377s ago: executing program 3 (id=13555): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8852, &(0x7f0000000000)={[{@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x4}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$eJzs3E9sVEUcAODf27a05Y+siCiIWkRjI7GFgsLBxGA08aCJERP12LSFIIUaWhIhaJbE4NGQeDcevXrwql6I8WTiFY8mhoQYLoCJcc3bfW93u91tadl2wX5fst2ZefvezOy8eTtvprsBrFtD6Z+kGr4WEVsjotD8gqHq0+2bFyfu3Lw4EaVy+dhfSWW3W2k8kx0mNmWR4UJE4fOkvqHB7PkLp8anp6fOZvHRudMfj86ev/DiyYEs5ciRQwcPHH557KXlV6pFfmm9bu36bGb3zjc/vPL2RG+enufWWI9OGYqhVkWpeK7TmXXZloZw0tvFgrAs6fmfNldfpf9vjZ5YrPFKa1gyYLWVy+Vyf/vNpXKzSwtSgAdWEt0uAdAd+Qd9ev+bP1oNBDaszvCj624crd4ApfW+nT0inq4k5vMgfU33t500FBEflP7+On3EKs1DAAA0+vFoPhJsGv8Vqysj/5y7+mr6/FC2hlKMiIcjYltEPBIR2yPi0YjYERGPRcTjTcfviYjyIvk3zzbX8q8tQhWud6iqLaXjv1eyta36+G9eAYo9WWxLRD5gntqfvSfD0dd//OT01IFF8vjp9d++bLetcfyXPtL887FgVo7rvU0TdJPjc+MrrnCTG5cidvU21z/pjUhqbZNExM6I2LWM4xYbwidf+HZ3LdI3/3VL17+i3HIdrQPrTOVvIp6vtn8p5rV/Pcdk3vrk6fETUyemzozV1idHB2J6av9oehbsb5nHL79efqdd/kvW//s/mnd54/APx7Kede/S9t/YcP5Hvn5br38xiUhq67Wzy8/j8u9ftL2nWen5vyF5rxLO70s/GZ+bO3sgYkPy1sL0sfq+eTx9jlK1/sN7W/f/bdk+6TvxRESkJ/GTEfFUVO8Q07LviYhnImLvIvX/+bVnP1p5/VdXWv/JputfteXntX99vb5dIMnWBqspg42bek7tuXanzcXj7tr/UCU0nKUsvP6lJUzmXSLalTT/tEtT/u3IOwgAAAD3v0JEbG6YS9ochcLISHUOaHtsLEzPzM7tOz5z7sxkui2iGH2FfKarOh/cl+Tzn8WG+FhT/GA2b/xVz2AlPjIxMz3Z1ZoDmyp9PimMRLzf09D/U392ZooZuJ/5vhasX4v1/3QQv+PKGhYGWFN3//l/9dNVLQiw5hr6f7tv+JdW8H9fwAPA/T9Qt/QP/bhmwIOvrC/Duras/r/PjwDC/0lvvFsLF7paEmCtGf/DurTk9/rvKVDub71pIBa+OAYWP2BPrKwYgy3y6kogHVl1JffBleyV/5pC29dEYXkH7I/OtOnxe3w3SmdnT+zo+Mlfzv5XvtMt+N2a9NNWga5cjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADruvwAAAP//hS/gCQ==") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 2.81375841s ago: executing program 3 (id=13556): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0xf05, &(0x7f00000003c0)={0x0, 0x6879, 0x0, 0x1, 0x200275}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f00000013c0)=[{0xf00, 0x0, 0x0, 0x0, 0x0}], 0x1) 2.747229913s ago: executing program 3 (id=13558): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000000), 0x1) 2.747004823s ago: executing program 3 (id=13561): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) 2.733016104s ago: executing program 3 (id=13564): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 2.703316845s ago: executing program 3 (id=13565): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1}, 0x3) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000001180)=""/4084, 0xff4}], 0x1, 0x308, 0x4) 2.409018458s ago: executing program 7 (id=13569): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2.330041631s ago: executing program 7 (id=13570): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0xffffffffffffffff) 1.908832749s ago: executing program 2 (id=13571): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400d06"], 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) 1.908337779s ago: executing program 8 (id=13572): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@link_local, @random="4d5088b759e8", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a7a096", 0x18, 0x3a, 0xff, @local, @local, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) 1.907882129s ago: executing program 7 (id=13573): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) 1.343722013s ago: executing program 2 (id=13575): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 1.343563973s ago: executing program 8 (id=13577): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 1.343170623s ago: executing program 7 (id=13578): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x6d276b17) 668.364722ms ago: executing program 2 (id=13580): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) write(r1, &(0x7f0000000100)='e', 0x1) recvfrom$unix(r0, &(0x7f0000000040)=""/74, 0x4a, 0x0, 0x0, 0x0) 668.026162ms ago: executing program 7 (id=13581): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, 0x0) io_setup(0x260, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000000240), 0x0, 0x4, 0x0, 0x2}]) 498.767089ms ago: executing program 7 (id=13583): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x141981, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x5) 439.058422ms ago: executing program 9 (id=13586): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x4, r1}, 0x38) 438.788902ms ago: executing program 8 (id=13587): gettid() timer_create(0x7, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000200)={{0x0, 0x989680}}, &(0x7f0000000240)) 387.291294ms ago: executing program 9 (id=13588): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f00000004c0)={[{@grpquota}]}, 0x1, 0x7a4, &(0x7f00000007c0)="$eJzs3c1rXOUaAPDnTL7T3ptcuIvbuwpcuDdQOrmpsVUQrLgQwUJB123DZBpqJpmSmZQmBJouBLeKC8Fuuraiu27VtW78G1xIS9W0WFcSOTNn2snHpEmbmank94OTed9zzvR5n/Oer855mQng0BpL/+QijkX0pcWRbH4S2YzojThTX+/R+mohnZLY2Hj3l6S2zsP11UI0vSd1JKv8KyK+/SDieG573Mryytx0qVRczOoT1fkrE5XllROX56dni7PFhVOTU1MnT798+tTB5frb9ytH73301v8iYq3exDNxNFtWy2Po4GJFbduOZdukL92Em7x5sKG6Ltnjer1tbgf7kx6aPVm/HIuR6NmlJ1/vaMsAgHa5HhEbAMAhk7j+A8Ah0/gc4OH6aqExRf15zlpXP5jokPtvRMRgPf/G8836kt76M7sfBmvPQYcfJpueXSURMXoA8cci4uad87fTKbY8TwVop7UbEXFxdGzr+b8+OuL5/H8P64xtqTv/Qed8nd7/vLL9/i8ilx3/g7W/W+9/BnY4dp/F04//3N1N1b4DCNokvf97rWls26Om/DOjPVntb7V7vr7k0uVSMT23/T0ixqNvIK1P7hJj/MEfD1ota77/+/Xj9z9P46evT9bI3e0d2Pyemenq9PPk3Oz+jYh/9+6Uf/K4/5MW97/n9hjj7Vc//KzVsjT/NN/GtD3/9tq4FfHfHfv/yTioZNfxiRO13WGisVPs4KsfPx1uFb+5/2/eSSOtFhr/F+iEtP+Hd89/NGker1nZf4zvbo1802rZ5vzP307jb85/5/2/P3mvVu7P5l2brlYXJyP6k3e2zz/55L2NemP9NP/x/+x8/O+2/6enoYtZeeMpgx977/38xbPn315p/jNp/ydZEk/t//0Xvnw019Mq/t76f6pWGs/mbD//bR9Vuod2DT7XhgMAAAAAAAAAAAAAAAAAAAAAAACAfchFxNFIcvnH5Vwun6//hvc/YzhXKleqxy+VlxZmovZb2aPRl2t81eVI0/ehTmbfh9+on9xSfyki/hERnwwM1er5Qrk00+3kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBzpMXv/6d+Guh26wCAthnsdgMAgI5z/QeAw6fF9b9/59lDbW0LANAZtet/0tvtZgAAHeTzfwA4fFz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLNzZ8+m08bv66uFtD5zdXlprnz1xEyxMpefXyrkC+XFK/nZcnm2VMwXyvMt/6G1+kupXL4yFQtL1yaqxUp1orK8cmG+vLRQvXB5fnq2eKHY17HMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvKssrc9OlUnFRYffC9ReiGTeybuv21lB4IQoDEdGuEM1niaHunJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/gL+DAAA//9QoxnL") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) setuid(0xee00) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) 367.895505ms ago: executing program 8 (id=13596): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, 0x0, 0x0) 333.687426ms ago: executing program 9 (id=13589): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) 321.471677ms ago: executing program 8 (id=13590): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 292.827098ms ago: executing program 8 (id=13591): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) set_tid_address(0x0) 280.023529ms ago: executing program 9 (id=13592): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 183.218962ms ago: executing program 9 (id=13593): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) 0s ago: executing program 9 (id=13594): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, 0x0) io_setup(0x260, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000000240), 0x0, 0x4, 0x0, 0x2}]) kernel console output (not intermixed with test programs): ion [ 427.395000][T23554] EXT4-fs: Ignoring removed orlov option [ 427.402516][ T8] kworker/u4:0: attempt to access beyond end of device [ 427.402516][ T8] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 427.474191][T23554] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 427.601211][ T3171] EXT4-fs (loop5): unmounting filesystem. [ 427.619707][T23568] loop1: detected capacity change from 0 to 512 [ 427.677368][T23568] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 427.697071][T23568] System zones: 0-2, 18-18, 34-35 [ 427.732404][T23568] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 427.803505][T13001] EXT4-fs (loop1): unmounting filesystem. [ 428.051363][T23599] loop5: detected capacity change from 0 to 128 [ 428.081527][T23599] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 428.101059][ T3171] EXT4-fs (loop5): unmounting filesystem. [ 428.381037][T23639] loop9: detected capacity change from 0 to 256 [ 428.554875][T23622] loop0: detected capacity change from 0 to 40427 [ 428.566672][T23622] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 428.576083][T23622] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 428.603090][T23622] F2FS-fs (loop0): invalid crc value [ 428.617598][T23622] F2FS-fs (loop0): Found nat_bits in checkpoint [ 428.696615][T23622] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 428.706163][T23622] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 428.803146][T13578] syz-executor: attempt to access beyond end of device [ 428.803146][T13578] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 428.885167][T23662] loop1: detected capacity change from 0 to 512 [ 428.958350][T23662] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 429.020711][T13001] EXT4-fs (loop1): unmounting filesystem. [ 429.505492][T23701] device erspan0 entered promiscuous mode [ 429.556969][ T28] audit: type=1326 audit(430.193:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23711 comm="syz.9.10279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2de38f749 code=0x7ffc0000 [ 429.591887][T23714] netem: incorrect ge model size [ 429.602884][T23714] netem: change failed [ 429.656564][ T28] audit: type=1326 audit(430.193:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23711 comm="syz.9.10279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2de38f749 code=0x7ffc0000 [ 429.726423][ T28] audit: type=1326 audit(430.233:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23711 comm="syz.9.10279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc2de38f749 code=0x7ffc0000 [ 429.796445][ T28] audit: type=1326 audit(430.253:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23719 comm="syz.9.10279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc2de3c2005 code=0x7ffc0000 [ 429.856439][ T28] audit: type=1326 audit(430.253:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23711 comm="syz.9.10279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2de38f749 code=0x7ffc0000 [ 429.926605][ T28] audit: type=1326 audit(430.253:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23711 comm="syz.9.10279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2de38f749 code=0x7ffc0000 [ 430.007352][ T28] audit: type=1326 audit(430.263:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23711 comm="syz.9.10279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fc2de38f749 code=0x7ffc0000 [ 430.047497][ T28] audit: type=1326 audit(430.263:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23711 comm="syz.9.10279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2de38f749 code=0x7ffc0000 [ 430.437140][T23753] loop9: detected capacity change from 0 to 40427 [ 430.450730][T23753] F2FS-fs (loop9): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 430.498432][T23753] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 430.516988][T23753] F2FS-fs (loop9): invalid crc value [ 430.559954][T23753] F2FS-fs (loop9): Found nat_bits in checkpoint [ 430.634663][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10308'. [ 430.659026][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10308'. [ 430.678971][T23753] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 430.685233][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10308'. [ 430.686278][T23753] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 430.705618][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10308'. [ 430.725327][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10308'. [ 430.758863][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10308'. [ 430.787004][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10308'. [ 430.800049][T23455] syz-executor: attempt to access beyond end of device [ 430.800049][T23455] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 430.806739][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10308'. [ 430.825231][ T335] hid-generic 0003:0004:0000.0083: unknown main item tag 0x0 [ 430.843707][ T335] hid-generic 0003:0004:0000.0083: unknown main item tag 0x0 [ 430.856462][ T335] hid-generic 0003:0004:0000.0083: unknown main item tag 0x0 [ 430.864196][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10308'. [ 430.883732][ T335] hid-generic 0003:0004:0000.0083: unknown main item tag 0x0 [ 430.895269][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10308'. [ 430.904503][ T335] hid-generic 0003:0004:0000.0083: unknown main item tag 0x0 [ 430.922817][ T335] hid-generic 0003:0004:0000.0083: unknown main item tag 0x0 [ 430.931238][T23783] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 430.943254][ T335] hid-generic 0003:0004:0000.0083: unknown main item tag 0x0 [ 430.959535][ T335] hid-generic 0003:0004:0000.0083: unknown main item tag 0x0 [ 430.972455][ T335] hid-generic 0003:0004:0000.0083: unknown main item tag 0x0 [ 430.980910][ T335] hid-generic 0003:0004:0000.0083: unknown main item tag 0x0 [ 431.016469][ T335] hid-generic 0003:0004:0000.0083: unknown main item tag 0x0 [ 431.029583][ T335] hid-generic 0003:0004:0000.0083: unknown main item tag 0x0 [ 431.046396][ T335] hid-generic 0003:0004:0000.0083: unknown main item tag 0x0 [ 431.053846][ T335] hid-generic 0003:0004:0000.0083: unknown main item tag 0x0 [ 431.086543][ T335] hid-generic 0003:0004:0000.0083: unknown main item tag 0x0 [ 431.096534][ T335] hid-generic 0003:0004:0000.0083: unknown main item tag 0x0 [ 431.119339][ T335] hid-generic 0003:0004:0000.0083: unknown main item tag 0x0 [ 431.136439][ T335] hid-generic 0003:0004:0000.0083: unknown main item tag 0x0 [ 431.149457][ T335] hid-generic 0003:0004:0000.0083: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 431.242009][T23811] fido_id[23811]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 431.623993][T23817] loop5: detected capacity change from 0 to 40427 [ 431.749145][T23817] F2FS-fs (loop5): invalid crc value [ 431.847457][T23817] F2FS-fs (loop5): Found nat_bits in checkpoint [ 431.924581][T23895] loop9: detected capacity change from 0 to 256 [ 431.979485][T23895] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 432.025625][T23817] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 432.119483][T23905] loop0: detected capacity change from 0 to 128 [ 432.145124][ T3171] syz-executor: attempt to access beyond end of device [ 432.145124][ T3171] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 432.417482][T23929] loop0: detected capacity change from 0 to 128 [ 432.441257][T23929] EXT4-fs: Ignoring removed orlov option [ 432.483795][T23929] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 432.566479][T13578] EXT4-fs (loop0): unmounting filesystem. [ 432.772660][T23946] loop0: detected capacity change from 0 to 40427 [ 432.780238][T23946] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 432.788851][T23946] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 432.798291][T23946] F2FS-fs (loop0): invalid crc value [ 432.830184][T23946] F2FS-fs (loop0): Found nat_bits in checkpoint [ 432.896608][T23946] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 432.942073][T23946] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 432.952823][T23972] loop5: detected capacity change from 0 to 128 [ 432.966415][T23946] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 432.969000][T23974] loop9: detected capacity change from 0 to 1024 [ 433.004746][T23972] EXT4-fs: Ignoring removed orlov option [ 433.020094][T23974] EXT4-fs: Ignoring removed nomblk_io_submit option [ 433.051432][T23972] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 433.076892][T23974] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 433.147351][ T3171] EXT4-fs (loop5): unmounting filesystem. [ 433.169462][T23455] EXT4-fs (loop9): unmounting filesystem. [ 433.321407][T23994] loop0: detected capacity change from 0 to 512 [ 433.329249][T23994] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 433.358234][T23994] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 433.369998][T23994] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 433.421667][T23994] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 433.479361][T23994] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 433.533422][T23994] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 433.586555][T23994] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 433.658187][T24001] loop9: detected capacity change from 0 to 128 [ 433.682496][T23994] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 433.716945][T24001] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 433.748767][T24001] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 433.812204][T23994] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 433.905828][T23994] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 433.944329][T24012] loop9: detected capacity change from 0 to 4096 [ 433.967725][T24012] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 433.992524][T23994] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 434.008811][T23455] EXT4-fs (loop9): unmounting filesystem. [ 434.081865][T23994] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 434.463227][T24029] device erspan0 entered promiscuous mode [ 434.901584][T24043] loop1: detected capacity change from 0 to 40427 [ 434.917659][T24043] F2FS-fs (loop1): fault_injection options not supported [ 434.932742][T24043] F2FS-fs (loop1): Image doesn't support compression [ 434.947106][T24043] F2FS-fs (loop1): Image doesn't support compression [ 434.969309][T24043] F2FS-fs (loop1): invalid crc value [ 434.998577][T24043] F2FS-fs (loop1): Found nat_bits in checkpoint [ 435.061112][T24066] loop9: detected capacity change from 0 to 256 [ 435.077616][T24066] exfat: Deprecated parameter 'namecase' [ 435.086661][T24043] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 435.095232][T24066] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 435.151275][T24043] syz.1.10388: attempt to access beyond end of device [ 435.151275][T24043] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 435.171265][T24043] syz.1.10388: attempt to access beyond end of device [ 435.171265][T24043] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 435.193370][T13001] syz-executor: attempt to access beyond end of device [ 435.193370][T13001] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 435.356420][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 435.356433][T20852] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 435.628406][T24093] loop1: detected capacity change from 0 to 128 [ 435.648595][T24093] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 435.675740][T24068] loop9: detected capacity change from 0 to 40427 [ 435.687017][T24093] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 435.718792][T24068] F2FS-fs (loop9): Small segment_count (9 < 1 * 24) [ 435.725993][T24068] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 435.777049][T24068] F2FS-fs (loop9): Found nat_bits in checkpoint [ 435.794753][T24076] loop0: detected capacity change from 0 to 40427 [ 435.817454][T24076] F2FS-fs (loop0): fault_injection options not supported [ 435.834009][T24076] F2FS-fs (loop0): invalid crc value [ 435.843932][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 435.843953][ T28] audit: type=1400 audit(692.482:1661): avc: denied { audit_write } for pid=24102 comm="syz.1.10413" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 435.876847][T24068] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 435.893953][T24068] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 435.906591][T24076] F2FS-fs (loop0): Found nat_bits in checkpoint [ 435.972996][T24076] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 436.055488][T24114] __nla_validate_parse: 48 callbacks suppressed [ 436.055523][T24114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10418'. [ 436.075261][T23455] syz-executor: attempt to access beyond end of device [ 436.075261][T23455] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 436.097289][T13578] syz-executor: attempt to access beyond end of device [ 436.097289][T13578] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 436.670153][T24122] loop1: detected capacity change from 0 to 40427 [ 436.701613][T24122] F2FS-fs (loop1): invalid crc value [ 436.731999][T24122] F2FS-fs (loop1): Found nat_bits in checkpoint [ 436.846688][T24122] F2FS-fs (loop1): Start checkpoint disabled! [ 436.866666][T24122] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 437.026154][T24142] loop5: detected capacity change from 0 to 40427 [ 437.033414][T23849] kworker/u4:38: attempt to access beyond end of device [ 437.033414][T23849] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 437.055594][T24146] loop9: detected capacity change from 0 to 40427 [ 437.063241][T24142] F2FS-fs (loop5): fault_injection options not supported [ 437.078312][T24142] F2FS-fs (loop5): invalid crc value [ 437.090527][T24146] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 437.113364][T24146] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 437.123216][T24142] F2FS-fs (loop5): Found nat_bits in checkpoint [ 437.189071][T24142] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 437.221236][T24146] F2FS-fs (loop9): invalid crc value [ 437.248081][T24146] F2FS-fs (loop9): Found nat_bits in checkpoint [ 437.306456][T24146] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 437.354739][ T3171] syz-executor: attempt to access beyond end of device [ 437.354739][ T3171] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 437.377218][T24146] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 437.384624][T24146] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 437.579044][T24184] loop5: detected capacity change from 0 to 512 [ 437.588291][T24182] loop0: detected capacity change from 0 to 4096 [ 437.609624][T24184] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 437.675882][T24182] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 437.754274][T24184] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 437.764240][T24184] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 437.764928][T13578] EXT4-fs (loop0): unmounting filesystem. [ 437.845619][T24184] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 437.992928][T24184] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 438.100979][T24184] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 438.166433][ T24] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 438.166482][T24184] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 438.254052][T24184] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 438.310084][T24184] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 438.346382][ T1980] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 438.358183][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.378638][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.399341][ T24] usb 10-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 438.402616][T24184] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 438.429654][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.460418][ T24] usb 10-1: config 0 descriptor?? [ 438.497210][T24219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10460'. [ 438.541235][ T1980] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 438.556537][ T1980] usb 2-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 438.578641][ T1980] usb 2-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 438.597504][T24184] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 438.610492][ T1980] usb 2-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 438.626562][ T1980] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 438.661206][ T1980] usb 2-1: config 220 has no interface number 2 [ 438.668292][ T1980] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 438.684607][ T1980] usb 2-1: config 220 interface 0 has no altsetting 0 [ 438.698583][ T1980] usb 2-1: config 220 interface 76 has no altsetting 0 [ 438.717646][T24229] loop5: detected capacity change from 0 to 128 [ 438.725457][ T1980] usb 2-1: config 220 interface 1 has no altsetting 0 [ 438.745100][T24229] EXT4-fs: Ignoring removed nobh option [ 438.755352][ T1980] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 438.769622][ T28] audit: type=1400 audit(695.402:1662): avc: denied { setcheckreqprot } for pid=24231 comm="syz.0.10467" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 438.816571][ T1980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.825831][T24229] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 438.849280][ T1980] usb 2-1: Product: syz [ 438.853515][ T1980] usb 2-1: Manufacturer: syz [ 438.871839][ T24] sony 0003:054C:0BA0.0084: unknown main item tag 0x0 [ 438.874183][ T28] audit: type=1400 audit(695.402:1663): avc: denied { setattr } for pid=13808 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 438.903666][ T24] sony 0003:054C:0BA0.0084: hidraw0: USB HID v80.00 Device [HID 054c:0ba0] on usb-dummy_hcd.9-1/input0 [ 438.915200][ T24] sony 0003:054C:0BA0.0084: failed to claim input [ 438.917493][ T3171] EXT4-fs (loop5): unmounting filesystem. [ 438.923578][ T28] audit: type=1400 audit(695.402:1664): avc: denied { read write } for pid=13578 comm="syz-executor" name="loop0" dev="devtmpfs" ino=2716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 438.931261][ T1980] usb 2-1: SerialNumber: syz [ 438.954974][ T28] audit: type=1400 audit(695.402:1665): avc: denied { open } for pid=13578 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=2716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 438.983299][ T28] audit: type=1400 audit(695.402:1666): avc: denied { ioctl } for pid=13578 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=2716 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 439.029092][ T28] audit: type=1400 audit(695.472:1667): avc: denied { mount } for pid=24228 comm="syz.5.10466" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 439.046211][T24241] loop0: detected capacity change from 0 to 512 [ 439.050826][ T28] audit: type=1400 audit(695.482:1668): avc: denied { write } for pid=24228 comm="syz.5.10466" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 439.087388][T24241] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 439.105185][ T28] audit: type=1400 audit(695.482:1669): avc: denied { add_name } for pid=24228 comm="syz.5.10466" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 439.128730][T24241] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 439.145210][ T28] audit: type=1400 audit(695.482:1670): avc: denied { create } for pid=24228 comm="syz.5.10466" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 439.169630][T24241] EXT4-fs (loop0): 1 truncate cleaned up [ 439.175519][T24241] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 439.249399][T13578] EXT4-fs (loop0): unmounting filesystem. [ 439.279298][ T1980] usb 2-1: selecting invalid altsetting 0 [ 439.291673][ T1980] usb 2-1: selecting invalid altsetting 0 [ 439.298341][T24244] loop5: detected capacity change from 0 to 40427 [ 439.307034][ T1980] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 439.314466][ T1980] usb 2-1: No valid video chain found. [ 439.321037][T24244] F2FS-fs (loop5): fault_injection options not supported [ 439.332399][T24244] F2FS-fs (loop5): Image doesn't support compression [ 439.351264][ T1980] usb 2-1: USB disconnect, device number 34 [ 439.364150][T24244] F2FS-fs (loop5): Image doesn't support compression [ 439.372547][T24244] F2FS-fs (loop5): invalid crc value [ 439.422002][T24244] F2FS-fs (loop5): Found nat_bits in checkpoint [ 439.476606][T24244] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 439.562733][T24244] syz.5.10470: attempt to access beyond end of device [ 439.562733][T24244] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 439.578283][T24244] syz.5.10470: attempt to access beyond end of device [ 439.578283][T24244] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 439.601274][ T3171] syz-executor: attempt to access beyond end of device [ 439.601274][ T3171] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 439.792612][T24262] loop5: detected capacity change from 0 to 2048 [ 439.820609][T24262] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 439.874329][T24266] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 439.879295][ T3171] EXT4-fs (loop5): unmounting filesystem. [ 440.356685][T24306] loop1: detected capacity change from 0 to 2048 [ 440.403235][T24306] loop1: p1 p2 p3 [ 440.503806][T24317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10511'. [ 440.523872][T24317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10511'. [ 440.545071][T23488] udevd[23488]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 440.556630][T23468] udevd[23468]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 440.559449][T23812] udevd[23812]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 440.578075][T24315] tap0: tun_chr_ioctl cmd 1074025678 [ 440.606348][T24315] tap0: group set to 0 [ 440.632396][T23488] udevd[23488]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 440.644670][T23468] udevd[23468]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 440.658078][T23812] udevd[23812]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 440.755665][T24330] loop1: detected capacity change from 0 to 1024 [ 440.770198][T24330] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 440.783419][T23860] tipc: Left network mode [ 440.799485][T24330] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 440.867340][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 440.867357][ T28] audit: type=1400 audit(697.502:1716): avc: denied { ioctl } for pid=24329 comm="syz.1.10507" path="/1043/file1/file1" dev="loop1" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 440.903273][ T335] usb 10-1: USB disconnect, device number 18 [ 440.913556][T13001] EXT4-fs (loop1): unmounting filesystem. [ 440.949386][T24332] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.951808][T24328] loop0: detected capacity change from 0 to 40427 [ 440.966967][ T28] audit: type=1400 audit(697.572:1717): avc: denied { read write } for pid=24340 comm="syz.9.10509" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 440.982204][T24332] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.991623][ T28] audit: type=1400 audit(697.572:1718): avc: denied { open } for pid=24340 comm="syz.9.10509" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 441.031699][T24328] F2FS-fs (loop0): invalid crc value [ 441.042721][T24332] device bridge_slave_0 entered promiscuous mode [ 441.061073][T24332] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.080410][T24332] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.088817][T24332] device bridge_slave_1 entered promiscuous mode [ 441.133068][ T28] audit: type=1400 audit(697.762:1719): avc: denied { name_bind } for pid=24364 comm="syz.1.10513" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 441.159627][T24328] F2FS-fs (loop0): Found nat_bits in checkpoint [ 441.249717][ T28] audit: type=1400 audit(697.762:1720): avc: denied { node_bind } for pid=24364 comm="syz.1.10513" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 441.298857][T24328] F2FS-fs (loop0): Start checkpoint disabled! [ 441.316371][ T335] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 441.334586][T24328] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 441.359212][ T28] audit: type=1400 audit(697.992:1721): avc: denied { write } for pid=24332 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 441.388501][ T28] audit: type=1400 audit(698.002:1722): avc: denied { read } for pid=24332 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 441.409468][ T28] audit: type=1400 audit(698.032:1723): avc: denied { create } for pid=24327 comm="syz.0.10505" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 441.424681][T24359] kworker/u4:95: attempt to access beyond end of device [ 441.424681][T24359] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 441.474881][T24332] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.483197][T24332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.490519][T24332] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.498274][T24332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.506403][ T335] usb 10-1: Using ep0 maxpacket: 32 [ 441.513064][ T335] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 441.522321][ T335] usb 10-1: config 0 has no interface number 0 [ 441.526665][T24359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 441.529937][ T335] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.548885][ T335] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.548938][T24359] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.559449][ T335] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 441.576721][ T335] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.576922][T24359] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.597646][ T335] usb 10-1: config 0 descriptor?? [ 441.607495][T23860] device bridge_slave_1 left promiscuous mode [ 441.615525][T23860] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.623414][T23860] device bridge_slave_0 left promiscuous mode [ 441.638538][T23860] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.655045][T23860] device veth1_macvtap left promiscuous mode [ 441.661538][T23860] device veth0_vlan left promiscuous mode [ 441.673154][T24387] loop0: detected capacity change from 0 to 256 [ 441.685730][ T28] audit: type=1400 audit(698.312:1724): avc: denied { mount } for pid=24386 comm="syz.0.10517" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 441.792666][ T28] audit: type=1400 audit(698.422:1725): avc: denied { unmount } for pid=13578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 441.833362][T24391] cgroup: fork rejected by pids controller in /syz0 [ 441.901317][T24359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 441.909936][T24359] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.917101][T24359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.924847][T24359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 441.933686][T24359] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.940782][T24359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.954667][T14849] device syz_tun left promiscuous mode [ 441.960428][T14849] bridge0: port 2(syz_tun) entered disabled state [ 441.983423][T24359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 441.992304][T24359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 442.011767][T24359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 442.020258][T24359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 442.035594][T24332] device veth0_vlan entered promiscuous mode [ 442.042510][T24359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 442.051690][T24359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 442.060666][T24359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 442.069198][T24359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 442.077821][T24359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 442.085486][T24359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 442.113966][T23892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 442.129436][T23892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 442.148757][T24332] device veth1_macvtap entered promiscuous mode [ 442.171030][T23892] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 442.186885][T23892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 442.201782][T24408] syz.1.10527[24408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.201875][T24408] syz.1.10527[24408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.205722][T23892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 442.214385][ T335] uclogic 0003:28BD:0094.0085: pen parameters not found [ 442.246658][T23892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 442.254981][T23892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 442.283036][ T335] uclogic 0003:28BD:0094.0085: interface is invalid, ignoring [ 442.331894][ T335] usb 10-1: USB disconnect, device number 19 [ 442.386934][T24409] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.394134][T24409] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.402698][T24409] device bridge_slave_0 entered promiscuous mode [ 442.429615][T24409] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.458809][T24409] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.468574][T24409] device bridge_slave_1 entered promiscuous mode [ 442.534816][T24445] loop6: detected capacity change from 0 to 128 [ 442.546363][T24443] tap0: tun_chr_ioctl cmd 2147767520 [ 442.551808][T24445] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 442.565734][T23812] udevd[23812]: incorrect ext4 checksum on /dev/loop6 [ 442.568830][T24445] EXT4-fs warning (device loop6): verify_group_input:151: Cannot add at group 4294965625 (only 1 groups) [ 442.600413][T24332] EXT4-fs (loop6): unmounting filesystem. [ 442.628535][T24409] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.635909][T24409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.643307][T24409] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.650584][T24409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.677958][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 442.687498][ T4569] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.700838][ T4569] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.717242][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 442.725840][ T4569] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.732967][ T4569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.751968][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 442.761081][ T4569] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.768160][ T4569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.793371][T24466] syz.6.10546[24466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.793462][T24466] syz.6.10546[24466] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.817131][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 442.843165][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 442.872323][T23842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 442.902151][T24409] device veth0_vlan entered promiscuous mode [ 442.918864][T23842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 442.935005][T23842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 442.943426][T23842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 442.990744][T24409] device veth1_macvtap entered promiscuous mode [ 443.004952][T23842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 443.011948][T24480] loop6: detected capacity change from 0 to 2048 [ 443.014399][T23842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 443.030013][T23842] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 443.040756][T24480] EXT4-fs: Ignoring removed nomblk_io_submit option [ 443.054255][T23842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 443.057567][T24480] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 443.063004][T23842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 443.071155][T24480] EXT4-fs (loop6): Test dummy encryption mode enabled [ 443.080528][T23842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 443.095446][T23842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 443.122756][T23860] device bridge_slave_0 left promiscuous mode [ 443.133898][T23860] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.137268][T24480] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 443.163471][T23860] device veth1_macvtap left promiscuous mode [ 443.170938][T23860] device veth0_vlan left promiscuous mode [ 443.219604][T24332] EXT4-fs (loop6): unmounting filesystem. [ 443.305862][T24510] loop6: detected capacity change from 0 to 128 [ 443.313943][T24510] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 443.405457][T24517] loop6: detected capacity change from 0 to 128 [ 443.467777][T24497] tap0: tun_chr_ioctl cmd 2147767520 [ 443.544978][T24537] loop5: detected capacity change from 0 to 128 [ 443.570027][T24537] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 443.587751][T24537] EXT4-fs warning (device loop5): verify_group_input:151: Cannot add at group 4294965625 (only 1 groups) [ 443.617137][ T3171] EXT4-fs (loop5): unmounting filesystem. [ 443.788428][T24563] device ip6gre1 entered promiscuous mode [ 443.795381][ T335] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 443.803517][ T335] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 443.817718][ T335] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 443.960875][T24590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10601'. [ 444.084375][T24613] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10611'. [ 444.179770][T24621] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10615'. [ 444.222391][T24628] binder: 24627:24628 ioctl c018620c 200000000340 returned -1 [ 444.306649][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 444.331151][T24650] loop9: detected capacity change from 0 to 128 [ 444.358717][T24650] FAT-fs (loop9): error, invalid FAT chain (i_pos 548, last_block 8) [ 444.374771][T24650] FAT-fs (loop9): Filesystem has been set read-only [ 444.401933][T24650] FAT-fs (loop9): error, corrupted file size (i_pos 548, 522) [ 444.484669][T24672] loop1: detected capacity change from 0 to 128 [ 444.506906][T24672] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 444.542515][T24672] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 444.557127][ T39] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 444.626204][T24694] loop1: detected capacity change from 0 to 128 [ 444.682950][T24697] netlink: 128 bytes leftover after parsing attributes in process `syz.5.10650'. [ 444.748240][T24707] pim6reg: tun_chr_ioctl cmd 1074025672 [ 444.769641][T24707] pim6reg: ignored: set checksum enabled [ 444.925695][T24716] loop0: detected capacity change from 0 to 40427 [ 444.940571][T24716] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 444.950223][T24716] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 444.959072][T24729] loop9: detected capacity change from 0 to 8192 [ 444.981125][T24716] F2FS-fs (loop0): Found nat_bits in checkpoint [ 445.023455][T24716] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 445.031084][ T335] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 445.036216][T24716] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 445.085602][T24739] loop9: detected capacity change from 0 to 512 [ 445.226553][ T335] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 445.239902][ T335] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 445.250559][ T335] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 445.263404][ T335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.526494][T20953] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 445.672874][T24772] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10680'. [ 445.685889][ T335] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 445.701605][ T335] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input86 [ 445.718228][T20953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.718266][T20953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.718296][T20953] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 445.718319][T20953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.719067][T20953] usb 1-1: config 0 descriptor?? [ 445.747226][ T335] input: failed to attach handler kbd to device input86, error: -5 [ 445.763894][ T335] usb 6-1: USB disconnect, device number 52 [ 445.918658][T24781] loop9: detected capacity change from 0 to 128 [ 445.932476][T24781] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 445.979688][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 445.979708][ T28] audit: type=1400 audit(702.612:1806): avc: denied { map } for pid=24782 comm="syz.1.10685" path="socket:[115749]" dev="sockfs" ino=115749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 446.031926][ T28] audit: type=1400 audit(702.612:1807): avc: denied { read write } for pid=24782 comm="syz.1.10685" path="socket:[115749]" dev="sockfs" ino=115749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 446.142400][T20953] sony 0003:054C:0BA0.0086: unknown main item tag 0x0 [ 446.153892][T20953] sony 0003:054C:0BA0.0086: hidraw0: USB HID v80.00 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 446.167220][T20953] sony 0003:054C:0BA0.0086: failed to claim input [ 446.208428][ T28] audit: type=1326 audit(702.842:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24788 comm="syz.5.10686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc58f749 code=0x7ffc0000 [ 446.259653][ T28] audit: type=1326 audit(702.842:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24788 comm="syz.5.10686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f37cc58f749 code=0x7ffc0000 [ 446.303738][ T28] audit: type=1326 audit(702.842:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24788 comm="syz.5.10686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc58f749 code=0x7ffc0000 [ 446.368531][ T28] audit: type=1326 audit(702.862:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24788 comm="syz.5.10686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc58f749 code=0x7ffc0000 [ 446.403675][T24802] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.414821][T24802] FAT-fs (loop11): unable to read boot sector [ 446.446228][ T28] audit: type=1400 audit(702.992:1812): avc: denied { create } for pid=24801 comm="syz.5.10693" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 446.473407][ T28] audit: type=1400 audit(703.032:1813): avc: denied { mounton } for pid=24801 comm="syz.5.10693" path="/2023/file0" dev="tmpfs" ino=10448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 446.505780][ T28] audit: type=1400 audit(703.072:1814): avc: denied { unlink } for pid=3171 comm="syz-executor" name="file0" dev="tmpfs" ino=10448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 446.537350][ T28] audit: type=1400 audit(703.172:1815): avc: denied { bind } for pid=24809 comm="syz.1.10698" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 446.585773][T24818] loop1: detected capacity change from 0 to 512 [ 446.611951][T24818] EXT4-fs (loop1): too many log groups per flexible block group [ 446.638947][T24818] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 446.651025][T24818] EXT4-fs (loop1): mount failed [ 446.747882][T24824] loop1: detected capacity change from 0 to 512 [ 446.803336][T24826] loop9: detected capacity change from 0 to 128 [ 447.378954][T24850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10712'. [ 447.389171][T24852] netlink: 128 bytes leftover after parsing attributes in process `syz.9.10715'. [ 447.954931][T24864] loop1: detected capacity change from 0 to 40427 [ 447.971840][T24864] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 447.980066][T24864] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 447.991096][T24864] F2FS-fs (loop1): Found nat_bits in checkpoint [ 448.015230][T24864] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 448.022714][T24864] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 448.100295][T23849] Bluetooth: hci0: Frame reassembly failed (-84) [ 448.157451][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.274091][ T39] usb 1-1: USB disconnect, device number 27 [ 448.466722][T24989] loop1: detected capacity change from 0 to 8192 [ 448.507313][T23812] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 449.114584][T25016] loop9: detected capacity change from 0 to 128 [ 449.140900][T25016] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 449.154590][T25016] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 449.239170][T25012] loop5: detected capacity change from 0 to 40427 [ 449.261307][T25012] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 449.277191][T25012] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 449.302666][T25012] F2FS-fs (loop5): Found nat_bits in checkpoint [ 449.343328][T25012] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 449.352153][T25012] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 449.396456][ T1980] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 449.423479][T25031] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 449.433291][T25031] FAT-fs (loop19): unable to read boot sector [ 449.608086][ T1980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.619634][ T1980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.631384][ T1980] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 449.641293][ T1980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.651761][ T1980] usb 2-1: config 0 descriptor?? [ 450.060790][ T1980] sony 0003:054C:0BA0.0087: unknown main item tag 0x0 [ 450.068383][ T1980] sony 0003:054C:0BA0.0087: hidraw0: USB HID v80.00 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 450.079570][ T1980] sony 0003:054C:0BA0.0087: failed to claim input [ 450.156490][T20852] Bluetooth: hci0: command 0x1003 tx timeout [ 450.156507][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 450.237711][T25048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10751'. [ 450.283449][T25052] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10754'. [ 450.580234][T25084] loop0: detected capacity change from 0 to 128 [ 450.819101][T25100] loop5: detected capacity change from 0 to 256 [ 450.859424][T25100] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 450.987270][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 450.987286][ T28] audit: type=1400 audit(707.622:1823): avc: denied { open } for pid=25099 comm="syz.5.10779" path="/2039/file2/file1" dev="loop5" ino=1049220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 451.025649][T25100] exFAT-fs (loop5): error, invalid size(size(0) > aligned(9223372036854777344) [ 451.025649][T25100] [ 451.103558][T25100] exFAT-fs (loop5): Filesystem has been set read-only [ 451.221969][T25121] loop5: detected capacity change from 0 to 128 [ 451.330542][T25132] loop9: detected capacity change from 0 to 2048 [ 451.361953][T25132] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 451.387686][T25132] EXT4-fs error (device loop9): ext4_lookup:1858: inode #13: comm syz.9.10790: unexpected EA_INODE flag [ 451.406780][ T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 451.418825][T23455] EXT4-fs (loop9): unmounting filesystem. [ 451.636371][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 451.644817][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 451.655167][ T24] usb 1-1: config 0 has no interface number 0 [ 451.662246][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.715180][ T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.732354][ T24] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 451.741975][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.802409][ T24] usb 1-1: config 0 descriptor?? [ 452.483062][T25146] netem: incorrect gi model size [ 452.491782][T25146] netem: change failed [ 452.492096][ T1980] usb 2-1: USB disconnect, device number 35 [ 452.528895][ T28] audit: type=1400 audit(709.162:1824): avc: denied { write } for pid=25148 comm="syz.6.10800" name="file0" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 452.606502][ T28] audit: type=1400 audit(709.162:1825): avc: denied { open } for pid=25148 comm="syz.6.10800" path="/43/file0" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 452.655056][ T28] audit: type=1400 audit(709.182:1826): avc: denied { ioctl } for pid=25148 comm="syz.6.10800" path="/43/file0" dev="tmpfs" ino=241 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 452.657384][T25167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10807'. [ 452.690047][ T24] uclogic 0003:28BD:0094.0088: failed retrieving string descriptor #100: -71 [ 452.700455][ T24] uclogic 0003:28BD:0094.0088: failed retrieving pen parameters: -71 [ 452.709207][ T24] uclogic 0003:28BD:0094.0088: pen probing failed: -71 [ 452.726414][ T24] uclogic 0003:28BD:0094.0088: failed probing parameters: -71 [ 452.734255][ T24] uclogic: probe of 0003:28BD:0094.0088 failed with error -71 [ 452.746113][ T24] usb 1-1: USB disconnect, device number 28 [ 452.781207][T25174] netlink: 44 bytes leftover after parsing attributes in process `syz.9.10811'. [ 452.935750][T25196] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10821'. [ 452.991644][ T28] audit: type=1400 audit(709.622:1827): avc: denied { read } for pid=25200 comm="syz.6.10823" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 453.020088][ T28] audit: type=1400 audit(709.622:1828): avc: denied { open } for pid=25200 comm="syz.6.10823" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 453.050879][ T28] audit: type=1400 audit(709.632:1829): avc: denied { ioctl } for pid=25200 comm="syz.6.10823" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 453.097777][T25207] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10825'. [ 453.106971][T24354] Bluetooth: hci0: Frame reassembly failed (-84) [ 453.260233][T25219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10832'. [ 453.297630][T25223] loop6: detected capacity change from 0 to 512 [ 453.322829][T25223] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 453.345477][T24332] EXT4-fs (loop6): unmounting filesystem. [ 453.364556][T25231] loop6: detected capacity change from 0 to 1024 [ 453.378003][T25231] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 453.404558][T24332] EXT4-fs (loop6): unmounting filesystem. [ 453.644573][ T28] audit: type=1400 audit(710.272:1830): avc: denied { append } for pid=25251 comm="syz.0.10846" name="event1" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 453.706596][ T28] audit: type=1400 audit(710.342:1831): avc: denied { read } for pid=25257 comm="syz.0.10849" name="usbmon8" dev="devtmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 453.740612][T25260] loop0: detected capacity change from 0 to 1024 [ 453.754969][ T28] audit: type=1400 audit(710.342:1832): avc: denied { open } for pid=25257 comm="syz.0.10849" path="/dev/usbmon8" dev="devtmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 453.830778][T25260] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 453.887660][T24409] EXT4-fs (loop0): unmounting filesystem. [ 453.991901][T25254] loop5: detected capacity change from 0 to 40427 [ 454.020461][T25254] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 454.027572][T25254] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 454.068740][T25254] F2FS-fs (loop5): invalid crc value [ 454.078356][T25254] F2FS-fs (loop5): Found nat_bits in checkpoint [ 454.124831][T25254] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 454.132370][T25254] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 454.188200][T24348] kworker/u4:86: attempt to access beyond end of device [ 454.188200][T24348] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 454.208645][T25254] VFS:Filesystem freeze failed [ 454.436972][T25364] netlink: 188 bytes leftover after parsing attributes in process `syz.0.10857'. [ 454.508196][T25371] loop0: detected capacity change from 0 to 1024 [ 454.546248][T25371] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 454.583146][T24409] EXT4-fs (loop0): unmounting filesystem. [ 454.798255][T25392] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 454.886369][ T1980] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 454.886448][ T335] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 455.078264][ T335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13629, setting to 64 [ 455.078350][ T1980] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 455.092664][ T335] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 455.106168][ T1980] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 455.123464][ T8794] Bluetooth: hci0: command 0x1003 tx timeout [ 455.143019][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 455.150052][ T1980] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 455.160240][ T335] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 455.161969][ T1980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.173270][ T335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.217281][ T335] usb 6-1: config 0 descriptor?? [ 455.223476][T25379] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 455.611946][ T1980] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 455.623770][ T1980] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input87 [ 455.644357][ T1980] input: failed to attach handler kbd to device input87, error: -5 [ 455.657281][ T335] hid-generic 0003:0457:07DA.0089: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.5-1/input0 [ 455.693280][ T1980] usb 1-1: USB disconnect, device number 29 [ 455.958001][ T24] usb 6-1: USB disconnect, device number 53 [ 456.238956][T25444] loop9: detected capacity change from 0 to 128 [ 456.260755][T25444] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 456.616738][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 456.616760][ T28] audit: type=1400 audit(713.252:1839): avc: denied { read write } for pid=25458 comm="syz.5.10888" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 456.712105][ T28] audit: type=1400 audit(713.292:1840): avc: denied { open } for pid=25458 comm="syz.5.10888" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 456.804776][ T28] audit: type=1400 audit(713.292:1841): avc: denied { ioctl } for pid=25458 comm="syz.5.10888" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 457.036817][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 457.246674][ T28] audit: type=1400 audit(713.882:1842): avc: denied { getopt } for pid=25469 comm="syz.0.10894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 457.276835][T23455] EXT4-fs (loop9): unmounting filesystem. [ 457.278518][T25470] loop0: detected capacity change from 0 to 256 [ 457.342074][T25470] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 457.562668][T25499] pim6reg1: tun_chr_ioctl cmd 2147767521 [ 457.590398][T25506] loop9: detected capacity change from 0 to 7 [ 457.701637][T25512] loop6: detected capacity change from 0 to 2048 [ 457.729916][ T28] audit: type=1400 audit(714.362:1843): avc: denied { mounton } for pid=25520 comm="syz.0.10916" path="/72/file0" dev="tmpfs" ino=384 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 457.777974][T25512] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 457.791712][T25529] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10919'. [ 457.831890][T24332] EXT4-fs (loop6): unmounting filesystem. [ 457.939571][ T28] audit: type=1400 audit(714.572:1844): avc: denied { write } for pid=25547 comm="syz.5.10927" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 457.989147][ T28] audit: type=1400 audit(714.592:1845): avc: denied { write } for pid=25549 comm="syz.0.10928" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 458.084815][T25557] loop5: detected capacity change from 0 to 1024 [ 458.122653][T25557] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 458.163727][ T3171] EXT4-fs (loop5): unmounting filesystem. [ 458.177932][T25571] loop9: detected capacity change from 0 to 2048 [ 458.232067][T25571] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 458.277779][T23455] EXT4-fs (loop9): unmounting filesystem. [ 458.284389][T25588] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10954'. [ 458.349147][T25598] loop0: detected capacity change from 0 to 256 [ 458.358608][T25596] loop5: detected capacity change from 0 to 512 [ 458.374990][T25598] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 458.389429][T25600] loop9: detected capacity change from 0 to 256 [ 458.413806][T25598] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 458.441280][T25596] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 458.491594][T25604] loop6: detected capacity change from 0 to 1024 [ 458.531397][T25604] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 458.578952][T25619] loop1: detected capacity change from 0 to 2048 [ 458.599534][T24332] EXT4-fs (loop6): unmounting filesystem. [ 458.646461][T25619] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 458.653380][T25636] loop5: detected capacity change from 0 to 256 [ 458.682830][T13001] EXT4-fs (loop1): unmounting filesystem. [ 458.735828][T25643] loop5: detected capacity change from 0 to 256 [ 458.763671][T25643] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 458.792264][T25643] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 458.822229][T25650] loop9: detected capacity change from 0 to 512 [ 458.855664][T25650] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 458.931169][T25663] loop9: detected capacity change from 0 to 1024 [ 458.978395][T25663] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 459.017458][T23455] EXT4-fs (loop9): unmounting filesystem. [ 459.097378][T25687] loop6: detected capacity change from 0 to 256 [ 459.134828][T25687] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 459.168649][T25687] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 459.273301][T25706] pim6reg1: tun_chr_ioctl cmd 2147767521 [ 459.311710][T25715] loop1: detected capacity change from 0 to 1024 [ 459.339013][T25715] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 459.362839][T13001] EXT4-fs (loop1): unmounting filesystem. [ 460.552190][T25734] loop0: detected capacity change from 0 to 512 [ 460.590264][T25734] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 460.724600][T24409] EXT4-fs (loop0): unmounting filesystem. [ 460.958574][ T28] audit: type=1326 audit(717.592:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25764 comm="syz.9.11015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2de38f749 code=0x7ffc0000 [ 461.023028][ T28] audit: type=1326 audit(717.622:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25764 comm="syz.9.11015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fc2de38f749 code=0x7ffc0000 [ 461.067035][ T287] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 461.113778][T25773] loop1: detected capacity change from 0 to 128 [ 461.142042][ T28] audit: type=1326 audit(717.692:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25764 comm="syz.9.11015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2de38f749 code=0x7ffc0000 [ 461.214671][T25773] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 461.278560][ T287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.318135][ T287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.358118][ T287] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 461.406574][ T287] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 461.456367][ T287] usb 1-1: Manufacturer: syz [ 461.486622][ T287] usb 1-1: config 0 descriptor?? [ 461.744815][T13001] EXT4-fs (loop1): unmounting filesystem. [ 461.839146][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 461.839161][ T28] audit: type=1326 audit(718.472:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25795 comm="syz.5.11029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc58f749 code=0x7ffc0000 [ 461.876854][ T28] audit: type=1326 audit(718.512:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25795 comm="syz.5.11029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc58f749 code=0x7ffc0000 [ 461.934238][ T28] audit: type=1326 audit(718.512:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25795 comm="syz.5.11029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f37cc58f749 code=0x7ffc0000 [ 462.015973][ T28] audit: type=1326 audit(718.602:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25795 comm="syz.5.11029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc58f749 code=0x7ffc0000 [ 462.052197][T25808] kvm [25807]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000030) = 0x0 [ 462.064405][ T28] audit: type=1326 audit(718.602:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25795 comm="syz.5.11029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cc58f749 code=0x7ffc0000 [ 462.257807][ T291] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 462.300337][ T287] uclogic 0003:256C:006D.008A: failed retrieving string descriptor #200: -71 [ 462.311262][ T287] uclogic 0003:256C:006D.008A: failed retrieving pen parameters: -71 [ 462.322318][ T287] uclogic 0003:256C:006D.008A: failed probing pen v2 parameters: -71 [ 462.335488][ T287] uclogic 0003:256C:006D.008A: failed probing parameters: -71 [ 462.346505][ T287] uclogic: probe of 0003:256C:006D.008A failed with error -71 [ 462.359273][ T287] usb 1-1: USB disconnect, device number 30 [ 462.447779][ T291] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 462.483377][ T291] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 462.494340][ T291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 462.504048][ T291] usb 6-1: SerialNumber: syz [ 462.917444][ T291] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 462.931307][ T291] usb 6-1: USB disconnect, device number 54 [ 463.315669][ T28] audit: type=1400 audit(719.942:1855): avc: denied { ioctl } for pid=25836 comm="syz.9.11049" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=119887 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 463.511111][ T28] audit: type=1400 audit(720.142:1856): avc: denied { append } for pid=25866 comm="syz.9.11060" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 463.609312][T25876] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11066'. [ 463.625126][T25876] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11066'. [ 463.633145][T25880] loop0: detected capacity change from 0 to 256 [ 463.695450][ T28] audit: type=1400 audit(720.322:1857): avc: denied { write } for pid=25877 comm="syz.1.11065" path="socket:[119939]" dev="sockfs" ino=119939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 464.006498][ T287] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 464.187713][ T287] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 464.205056][ T287] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 464.218647][ T287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 464.227188][ T287] usb 1-1: SerialNumber: syz [ 464.641109][T25914] loop1: detected capacity change from 0 to 512 [ 464.653258][ T287] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 464.694310][ T287] usb 1-1: USB disconnect, device number 31 [ 464.705231][ T28] audit: type=1400 audit(721.332:1858): avc: denied { write } for pid=25919 comm="syz.5.11084" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 464.734507][T25920] random: crng reseeded on system resumption [ 464.759721][T25923] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 464.760173][ T28] audit: type=1400 audit(721.372:1859): avc: denied { open } for pid=25919 comm="syz.5.11084" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 464.801247][T25923] loop1: detected capacity change from 0 to 256 [ 464.861348][T25929] loop9: detected capacity change from 0 to 512 [ 464.879177][T25932] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3944. macoff=96 [ 464.889129][T25929] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 464.914385][T23455] EXT4-fs (loop9): unmounting filesystem. [ 464.953356][T25942] loop9: detected capacity change from 0 to 512 [ 464.969672][T25942] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 464.991110][T23455] EXT4-fs (loop9): unmounting filesystem. [ 465.011476][T25948] loop9: detected capacity change from 0 to 16 [ 465.023271][T25948] erofs: (device loop9): mounted with root inode @ nid 36. [ 465.089401][T25957] loop9: detected capacity change from 0 to 256 [ 465.331043][T25966] loop1: detected capacity change from 0 to 40427 [ 465.353349][T25966] F2FS-fs (loop1): invalid crc value [ 465.368855][T25966] F2FS-fs (loop1): Found nat_bits in checkpoint [ 465.404501][T25986] tun0: tun_chr_ioctl cmd 1074025680 [ 465.426522][T25966] F2FS-fs (loop1): Start checkpoint disabled! [ 465.435601][T25966] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 465.494394][T13001] syz-executor: attempt to access beyond end of device [ 465.494394][T13001] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 465.510561][T13001] syz-executor: attempt to access beyond end of device [ 465.510561][T13001] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 465.569919][T24369] kworker/u4:102: attempt to access beyond end of device [ 465.569919][T24369] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 465.587283][T13586] bridge0: port 3(syz_tun) entered disabled state [ 465.595192][T13586] device syz_tun left promiscuous mode [ 465.601307][T13586] bridge0: port 3(syz_tun) entered disabled state [ 465.645026][T26006] loop0: detected capacity change from 0 to 512 [ 465.664431][T24369] tipc: Disabling bearer [ 465.676569][T24369] tipc: Left network mode [ 465.677311][T26006] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 465.737728][T24409] EXT4-fs (loop0): unmounting filesystem. [ 465.785436][T26018] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11123'. [ 465.811170][T26018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11123'. [ 465.836358][ T291] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 465.868805][T26022] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 466.008231][T26031] loop0: detected capacity change from 0 to 512 [ 466.023631][T26020] loop5: detected capacity change from 0 to 40427 [ 466.047509][ T291] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 466.069893][T26031] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 466.071351][ T291] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.080181][T26020] F2FS-fs (loop5): invalid crc value [ 466.091429][ T291] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 466.108414][ T291] usb 10-1: SerialNumber: syz [ 466.131496][T24409] EXT4-fs (loop0): unmounting filesystem. [ 466.147430][T26020] F2FS-fs (loop5): Found nat_bits in checkpoint [ 466.193642][T26041] can0: slcan on ttyS3. [ 466.216663][T26045] netlink: 40 bytes leftover after parsing attributes in process `syz.6.11139'. [ 466.227634][T24369] device bridge_slave_1 left promiscuous mode [ 466.234983][T26045] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11139'. [ 466.251305][T24369] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.268173][T26020] F2FS-fs (loop5): Start checkpoint disabled! [ 466.276244][T24369] device bridge_slave_0 left promiscuous mode [ 466.282314][T26020] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 466.291946][T24369] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.316651][T24369] device veth1_macvtap left promiscuous mode [ 466.323761][T24369] device veth0_vlan left promiscuous mode [ 466.357828][ T3171] syz-executor: attempt to access beyond end of device [ 466.357828][ T3171] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 466.381220][ T3171] syz-executor: attempt to access beyond end of device [ 466.381220][ T3171] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 466.482939][T24975] kworker/u4:181: attempt to access beyond end of device [ 466.482939][T24975] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 466.526936][ T291] cdc_ether: probe of 10-1:1.0 failed with error -71 [ 466.550843][ T291] usb 10-1: USB disconnect, device number 20 [ 466.607980][T26040] can0 (unregistered): slcan off ttyS3. [ 466.689916][T26044] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.709558][T26044] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.720005][T26044] device bridge_slave_0 entered promiscuous mode [ 466.741007][T26044] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.766403][T26044] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.789095][T26044] device bridge_slave_1 entered promiscuous mode [ 466.888908][T24369] tipc: Disabling bearer [ 466.890880][T26093] loop0: detected capacity change from 0 to 1024 [ 466.902869][T24369] tipc: Disabling bearer [ 466.916557][T24369] tipc: Left network mode [ 466.944870][T26093] EXT4-fs: Ignoring removed bh option [ 467.008813][T26093] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 467.049226][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 467.049243][ T28] audit: type=1400 audit(723.682:1892): avc: denied { mounton } for pid=26092 comm="syz.0.11149" path="/119/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 467.114104][ T28] audit: type=1400 audit(723.742:1893): avc: denied { read write } for pid=26092 comm="syz.0.11149" name="file2" dev="overlay" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 467.139991][ T28] audit: type=1400 audit(723.742:1894): avc: denied { open } for pid=26092 comm="syz.0.11149" path="/119/file1/file0/file2" dev="overlay" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 467.140480][T26093] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.11149: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 467.171052][ T28] audit: type=1400 audit(723.772:1895): avc: denied { setattr } for pid=26092 comm="syz.0.11149" name="#20" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 467.220426][T26093] EXT4-fs (loop0): Remounting filesystem read-only [ 467.222783][T26044] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.235134][T26044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.237118][ T28] audit: type=1400 audit(723.772:1896): avc: denied { link } for pid=26092 comm="syz.0.11149" name="#20" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 467.245422][T26044] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.276113][T26044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.317957][ T28] audit: type=1400 audit(723.942:1897): avc: denied { rmdir } for pid=24409 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 467.346325][T24409] EXT4-fs error (device loop0): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /119/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 467.376074][T24409] EXT4-fs (loop0): Remounting filesystem read-only [ 467.383441][T25326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 467.393652][ T28] audit: type=1400 audit(724.022:1898): avc: denied { unlink } for pid=24409 comm="syz-executor" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 467.393728][T24409] EXT4-fs error (device loop0): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /119/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 467.424039][T25326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 467.452622][T24409] EXT4-fs (loop0): Remounting filesystem read-only [ 467.464548][T25326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.473502][T24409] EXT4-fs error (device loop0): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 467.507083][T24409] EXT4-fs (loop0): Remounting filesystem read-only [ 467.518244][T24409] EXT4-fs warning (device loop0): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.535858][T24409] EXT4-fs error (device loop0): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /119/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 467.563145][T24409] EXT4-fs (loop0): Remounting filesystem read-only [ 467.571929][T24409] EXT4-fs error (device loop0): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /119/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 467.596768][T24409] EXT4-fs (loop0): Remounting filesystem read-only [ 467.604983][T24409] EXT4-fs error (device loop0): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 467.634746][T24409] EXT4-fs (loop0): Remounting filesystem read-only [ 467.643136][T24409] EXT4-fs warning (device loop0): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.661797][T24409] EXT4-fs error (device loop0): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /119/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 467.691115][T24409] EXT4-fs (loop0): Remounting filesystem read-only [ 467.700027][T24409] EXT4-fs error (device loop0): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /119/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 467.731841][T25326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 467.736844][T24409] EXT4-fs (loop0): Remounting filesystem read-only [ 467.742132][T25326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 467.751853][T24409] EXT4-fs error (device loop0): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 467.791041][T24409] EXT4-fs warning (device loop0): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.809663][T24409] EXT4-fs warning (device loop0): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.828228][T24409] EXT4-fs warning (device loop0): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.855627][T26101] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.865617][T26101] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.866178][T24409] EXT4-fs warning (device loop0): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.874571][T26101] device bridge_slave_0 entered promiscuous mode [ 467.897369][T24409] EXT4-fs warning (device loop0): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.905845][T26044] device veth0_vlan entered promiscuous mode [ 467.926955][T24409] EXT4-fs warning (device loop0): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.934938][T26044] device veth1_macvtap entered promiscuous mode [ 467.952007][T24409] EXT4-fs warning (device loop0): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.969967][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 467.970487][T24409] EXT4-fs warning (device loop0): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 467.980696][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 468.005389][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 468.013985][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 468.023341][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 468.031933][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 468.042506][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 468.051020][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 468.059460][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 468.067991][T26101] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.076261][T26101] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.084362][T26101] device bridge_slave_1 entered promiscuous mode [ 468.104460][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 468.114641][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 468.140332][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 468.149652][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 468.227035][T26101] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.234492][T26101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.257577][T24369] device bridge_slave_0 left promiscuous mode [ 468.271816][T24369] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.300097][T24369] device veth1_macvtap left promiscuous mode [ 468.319802][T24369] device veth0_vlan left promiscuous mode [ 468.358950][ T28] audit: type=1400 audit(724.992:1899): avc: denied { ioctl } for pid=26133 comm="syz.9.11161" path="socket:[120516]" dev="sockfs" ino=120516 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 468.623842][T25290] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.635534][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 468.651772][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 468.693206][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 468.703489][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 468.713033][T25290] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.722206][T25290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.732972][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 468.749562][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 468.768249][T25290] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.776928][T25290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.800188][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 468.814967][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.835664][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 468.844143][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 468.863474][T26101] device veth0_vlan entered promiscuous mode [ 468.873305][T25326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 468.884248][T25326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 468.898657][T25326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 468.901018][T26184] loop9: detected capacity change from 0 to 1024 [ 468.918594][T25326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 468.920278][T26184] EXT4-fs: Ignoring removed mblk_io_submit option [ 468.945931][T26101] device veth1_macvtap entered promiscuous mode [ 468.946147][T26184] EXT4-fs: Ignoring removed oldalloc option [ 468.955714][T25326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 468.969866][T26184] EXT4-fs: Ignoring removed nomblk_io_submit option [ 468.985135][T25326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 468.997577][T25326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 469.008200][T25326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 469.017582][T26184] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 469.019731][T25326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 469.077964][ T28] audit: type=1400 audit(725.712:1900): avc: denied { mounton } for pid=26181 comm="syz.9.11184" path="/248/file1/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.125996][ T28] audit: type=1400 audit(725.752:1901): avc: denied { unlink } for pid=23455 comm="syz-executor" name="file1" dev="loop9" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 469.166722][T23455] EXT4-fs (loop9): unmounting filesystem. [ 469.174862][T26132] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.184416][T26132] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.194218][T26132] device bridge_slave_0 entered promiscuous mode [ 469.203618][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 469.213330][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 469.224694][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 469.234577][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 469.247076][T26132] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.281024][T26132] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.293903][T26132] device bridge_slave_1 entered promiscuous mode [ 469.389222][T26209] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11196'. [ 469.482159][T26132] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.491655][T26132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.499758][T26132] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.507624][T26132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.539160][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 469.547803][T25290] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.555506][T25290] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.572991][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 469.582782][T25290] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.591273][T25290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.603375][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 469.612320][T25290] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.620439][T25290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.633526][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 469.652702][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 469.671709][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 469.682405][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 469.696078][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 469.704567][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 469.717463][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 469.725526][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 469.735642][T26132] device veth0_vlan entered promiscuous mode [ 469.748347][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 469.757223][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 469.772576][T26132] device veth1_macvtap entered promiscuous mode [ 469.785983][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 469.794327][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 469.806541][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 469.818787][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 469.828758][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 469.910131][T24369] device bridge_slave_1 left promiscuous mode [ 469.918096][T24369] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.930317][T24369] device bridge_slave_0 left promiscuous mode [ 469.953224][T24369] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.963457][T24369] device veth1_macvtap left promiscuous mode [ 469.971364][T24369] device veth0_vlan left promiscuous mode [ 470.165630][T26248] loop9: detected capacity change from 0 to 32768 [ 470.200385][T26248] loop9: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 470.293088][T26272] veth1_virt_wifi: vlans aren't supported yet for dev_uc|mc_add() [ 470.964817][T26289] SELinux: failed to load policy [ 471.333839][T26300] loop4: detected capacity change from 0 to 40427 [ 471.356036][T26300] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 471.378312][T26276] udevd[26276]: inotify_add_watch(7, /dev/loop9p39, 10) failed: No such file or directory [ 471.380302][T26300] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 471.394031][T26277] udevd[26277]: inotify_add_watch(7, /dev/loop9p40, 10) failed: No such file or directory [ 471.414780][T26279] udevd[26279]: inotify_add_watch(7, /dev/loop9p43, 10) failed: No such file or directory [ 471.416476][T26278] udevd[26278]: inotify_add_watch(7, /dev/loop9p42, 10) failed: No such file or directory [ 471.428701][T26275] udevd[26275]: inotify_add_watch(7, /dev/loop9p44, 10) failed: No such file or directory [ 471.450853][T23812] udevd[23812]: inotify_add_watch(7, /dev/loop9p45, 10) failed: No such file or directory [ 471.452396][T24322] udevd[24322]: inotify_add_watch(7, /dev/loop9p48, 10) failed: No such file or directory [ 471.462779][T23488] udevd[23488]: inotify_add_watch(7, /dev/loop9p47, 10) failed: No such file or directory [ 471.491958][T23468] udevd[23468]: inotify_add_watch(7, /dev/loop9p49, 10) failed: No such file or directory [ 471.494136][T26276] udevd[26276]: inotify_add_watch(7, /dev/loop9p51, 10) failed: No such file or directory [ 471.525345][T26300] F2FS-fs (loop4): invalid crc value [ 471.549344][T26329] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 471.567212][T26300] F2FS-fs (loop4): Found nat_bits in checkpoint [ 471.573379][T26329] dvmrp1: linktype set to 24593 [ 471.807647][T26300] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 471.816533][T26300] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 471.818668][T26347] loop6: detected capacity change from 0 to 1024 [ 471.902228][T26347] EXT4-fs: Ignoring removed bh option [ 471.969139][T26347] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 472.047465][T26347] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #12: block 7: comm syz.6.11247: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 472.133785][T26347] EXT4-fs (loop6): Remounting filesystem read-only [ 472.167117][T24332] EXT4-fs error (device loop6): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /119/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 472.203481][T24332] EXT4-fs (loop6): Remounting filesystem read-only [ 472.223130][T24332] EXT4-fs error (device loop6): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /119/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 472.259902][T24332] EXT4-fs (loop6): Remounting filesystem read-only [ 472.274139][T24332] EXT4-fs error (device loop6): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 472.325031][T24332] EXT4-fs (loop6): Remounting filesystem read-only [ 472.335177][T24332] EXT4-fs warning (device loop6): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 472.362509][T24332] EXT4-fs error (device loop6): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /119/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 472.403886][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 472.403902][ T28] audit: type=1400 audit(729.032:1905): avc: denied { write } for pid=26384 comm="syz.4.11265" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 472.444878][T24332] EXT4-fs (loop6): Remounting filesystem read-only [ 472.450007][ T28] audit: type=1400 audit(729.052:1906): avc: denied { read append } for pid=26386 comm="syz.7.11276" name="file2" dev="tmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 472.463923][T24332] EXT4-fs error (device loop6): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /119/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 472.502284][T26389] loop4: detected capacity change from 0 to 1024 [ 472.519994][T26389] EXT4-fs: Ignoring removed bh option [ 472.526883][T24332] EXT4-fs (loop6): Remounting filesystem read-only [ 472.536161][T24332] EXT4-fs error (device loop6): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 472.573231][T24332] EXT4-fs (loop6): Remounting filesystem read-only [ 472.583696][T26389] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 472.588879][T24332] EXT4-fs warning (device loop6): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 472.617535][T24332] EXT4-fs error (device loop6): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /119/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 472.649001][T24332] EXT4-fs (loop6): Remounting filesystem read-only [ 472.652242][T26389] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #12: block 7: comm syz.4.11266: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 472.660211][T24332] EXT4-fs error (device loop6): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /119/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 472.706261][T24332] EXT4-fs (loop6): Remounting filesystem read-only [ 472.716431][T24332] EXT4-fs error (device loop6): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 472.749790][T24332] EXT4-fs warning (device loop6): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 472.750812][T26389] EXT4-fs (loop4): Remounting filesystem read-only [ 472.768724][T24332] EXT4-fs warning (device loop6): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 472.806689][T24332] EXT4-fs warning (device loop6): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 472.807232][T24332] EXT4-fs warning (device loop6): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 472.869568][T24332] EXT4-fs warning (device loop6): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 472.894525][T26411] loop9: detected capacity change from 0 to 256 [ 472.902554][T24332] EXT4-fs warning (device loop6): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 472.902984][T24332] EXT4-fs warning (device loop6): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 472.903365][T24332] EXT4-fs warning (device loop6): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 472.923809][T26132] EXT4-fs error (device loop4): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 472.926761][T26411] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000001) [ 473.001976][T26132] EXT4-fs (loop4): Remounting filesystem read-only [ 473.002325][T26132] EXT4-fs error (device loop4): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 473.014848][T26411] FAT-fs (loop9): Filesystem has been set read-only [ 473.076095][T26132] EXT4-fs (loop4): Remounting filesystem read-only [ 473.076193][T26132] EXT4-fs error (device loop4): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 473.089788][T26132] EXT4-fs (loop4): Remounting filesystem read-only [ 473.089811][T26132] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 473.089933][T26132] EXT4-fs error (device loop4): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 473.090128][T26132] EXT4-fs (loop4): Remounting filesystem read-only [ 473.090153][T26132] EXT4-fs error (device loop4): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 473.090261][T26132] EXT4-fs (loop4): Remounting filesystem read-only [ 473.090314][T26132] EXT4-fs error (device loop4): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 473.090478][T26132] EXT4-fs (loop4): Remounting filesystem read-only [ 473.258647][T26132] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 473.258811][T26132] EXT4-fs error (device loop4): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 473.326406][T26132] EXT4-fs (loop4): Remounting filesystem read-only [ 473.326470][T26132] EXT4-fs error (device loop4): ext4_read_inline_dir:1601: inode #12: block 7: comm syz-executor: path /19/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 473.335128][T26132] EXT4-fs (loop4): Remounting filesystem read-only [ 473.366532][T26132] EXT4-fs error (device loop4): empty_inline_dir:1885: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 473.374434][T26132] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 473.383611][T26132] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 473.384094][T26132] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 473.428679][T26132] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 473.429355][T26132] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 473.430862][T26132] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 473.431292][T26132] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 473.432358][T26132] EXT4-fs warning (device loop4): empty_inline_dir:1892: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 473.548595][ T28] audit: type=1400 audit(730.162:1907): avc: denied { remount } for pid=26422 comm="syz.9.11282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 473.881805][ T28] audit: type=1400 audit(730.512:1908): avc: denied { create } for pid=26441 comm="syz.9.11294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 473.967868][T26450] loop9: detected capacity change from 0 to 512 [ 474.005769][T26453] input: syz1 as /devices/virtual/input/input89 [ 474.017362][ T28] audit: type=1400 audit(730.652:1909): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=4637 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 474.044047][T26432] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.044049][T26450] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 474.057442][T26450] EXT4-fs (loop9): orphan cleanup on readonly fs [ 474.070343][T26432] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.072425][T26450] EXT4-fs error (device loop9): ext4_ext_check_inode:520: inode #3: comm syz.9.11296: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 474.082821][T26432] device bridge_slave_0 entered promiscuous mode [ 474.103232][T26450] EXT4-fs error (device loop9): ext4_quota_enable:7014: comm syz.9.11296: Bad quota inode: 3, type: 0 [ 474.125271][T26450] EXT4-fs warning (device loop9): ext4_enable_quotas:7055: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 474.141998][T24369] device bridge_slave_1 left promiscuous mode [ 474.142039][T26450] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 474.150826][T24369] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.157891][T26450] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 474.178866][T24369] device bridge_slave_0 left promiscuous mode [ 474.187137][T24369] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.200603][T24369] device veth1_macvtap left promiscuous mode [ 474.209493][T24369] device veth0_vlan left promiscuous mode [ 474.209761][T23455] EXT4-fs (loop9): unmounting filesystem. [ 474.341694][T26432] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.349480][T26432] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.358657][T26432] device bridge_slave_1 entered promiscuous mode [ 474.366467][T26461] loop9: detected capacity change from 0 to 40427 [ 474.382409][T26461] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 474.397086][T26461] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 474.407937][T26461] F2FS-fs (loop9): invalid crc value [ 474.417277][T26461] F2FS-fs (loop9): Found nat_bits in checkpoint [ 474.466025][T26461] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 474.474907][T26461] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 474.506931][T26454] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.516456][T26454] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.523279][ T28] audit: type=1400 audit(731.152:1910): avc: denied { rename } for pid=26460 comm="syz.9.11301" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 474.525833][T26454] device bridge_slave_0 entered promiscuous mode [ 474.597757][T26454] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.605163][T26454] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.615066][T26454] device bridge_slave_1 entered promiscuous mode [ 474.700582][ T28] audit: type=1400 audit(731.332:1911): avc: denied { map } for pid=26479 comm="syz.8.11305" path="socket:[122630]" dev="sockfs" ino=122630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 474.777110][ T28] audit: type=1400 audit(731.402:1912): avc: denied { map } for pid=26486 comm="syz.7.11308" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 474.903782][T26454] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.911990][T26454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.921819][T26454] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.929481][T26454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.943929][T25286] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.953543][T25286] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.962797][T25286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 474.970705][T25286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 475.023688][T25286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 475.035370][T25286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 475.060015][T25286] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.067483][T25286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.074706][T26513] input: syz1 as /devices/virtual/input/input90 [ 475.083838][T25286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 475.092768][T25286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 475.102912][T25286] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.110822][T25286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.174500][T25286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 475.192302][T25286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 475.206207][T25286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 475.223238][T25286] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.230497][T25286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.238641][T25286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 475.248793][T25286] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.255979][T25286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.264195][T25286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 475.272480][T25286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 475.289747][ T28] audit: type=1400 audit(731.922:1913): avc: denied { unlink } for pid=26528 comm="syz.7.11324" name="#26" dev="tmpfs" ino=373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 475.296611][T26529] overlayfs: failed to resolve './file1': -2 [ 475.321244][T26517] netlink: 'syz.8.11318': attribute type 12 has an invalid length. [ 475.336717][T26517] netlink: 'syz.8.11318': attribute type 29 has an invalid length. [ 475.344661][T26517] netlink: 'syz.8.11318': attribute type 2 has an invalid length. [ 475.371321][T26517] netlink: 260 bytes leftover after parsing attributes in process `syz.8.11318'. [ 475.396502][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 475.411311][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 475.421430][T26535] loop9: detected capacity change from 0 to 16 [ 475.452066][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 475.465280][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 475.475445][T26541] loop8: detected capacity change from 0 to 512 [ 475.482187][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 475.483367][T26535] erofs: (device loop9): mounted with root inode @ nid 36. [ 475.491991][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 475.510420][T26432] device veth0_vlan entered promiscuous mode [ 475.523074][T26454] device veth0_vlan entered promiscuous mode [ 475.547498][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 475.557257][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 475.569045][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 475.577577][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 475.602610][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 475.610621][T25290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 475.630112][T26546] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11332'. [ 475.639616][T26546] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11332'. [ 475.652642][T26432] device veth1_macvtap entered promiscuous mode [ 475.663978][T26454] device veth1_macvtap entered promiscuous mode [ 475.674313][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 475.686087][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 475.697725][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 475.705585][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 475.716395][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 475.727397][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 475.761082][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 475.770884][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 475.780467][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 475.794121][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 475.803274][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 475.812104][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 475.824467][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 475.835999][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 475.853279][T26561] netlink: 'syz.7.11339': attribute type 7 has an invalid length. [ 475.896540][T26567] netlink: 68 bytes leftover after parsing attributes in process `syz.7.11342'. [ 475.918240][T24369] device bridge_slave_1 left promiscuous mode [ 475.924463][T24369] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.980982][T24369] device bridge_slave_0 left promiscuous mode [ 476.010270][T24369] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.047245][T24369] device veth1_macvtap left promiscuous mode [ 476.053428][T24369] device veth0_vlan left promiscuous mode [ 476.134699][T26592] loop3: detected capacity change from 0 to 512 [ 476.174260][T26592] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 476.201049][T26584] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11348'. [ 476.205802][T26592] EXT4-fs (loop3): orphan cleanup on readonly fs [ 476.217647][T26592] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #3: comm syz.3.11351: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 476.236702][T26584] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11348'. [ 476.250909][T26592] EXT4-fs error (device loop3): ext4_quota_enable:7014: comm syz.3.11351: Bad quota inode: 3, type: 0 [ 476.289545][T26592] EXT4-fs warning (device loop3): ext4_enable_quotas:7055: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 476.310901][T26604] netlink: 'syz.8.11355': attribute type 7 has an invalid length. [ 476.324259][T26607] input: syz1 as /devices/virtual/input/input91 [ 476.324588][T26592] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 476.339079][T26592] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 476.357476][T26609] netlink: 68 bytes leftover after parsing attributes in process `syz.2.11359'. [ 476.443519][T26432] EXT4-fs (loop3): unmounting filesystem. [ 476.484316][ T28] audit: type=1400 audit(733.112:1914): avc: denied { create } for pid=26625 comm="syz.8.11367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 476.822979][T26677] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11390'. [ 477.066233][T26713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11408'. [ 477.237895][T26728] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 477.247774][T26728] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 477.276022][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 477.296780][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 477.319259][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 477.345251][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 477.366753][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 477.382055][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 477.391263][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 477.399651][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 477.415196][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 477.415216][ T28] audit: type=1400 audit(734.042:2007): avc: denied { read write } for pid=23455 comm="syz-executor" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 477.455310][ T28] audit: type=1400 audit(734.052:2008): avc: denied { bpf } for pid=26750 comm="syz.9.11425" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 477.480407][ T28] audit: type=1400 audit(734.052:2009): avc: denied { map_create } for pid=26750 comm="syz.9.11425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 477.480444][ T28] audit: type=1400 audit(734.052:2010): avc: denied { bpf } for pid=26750 comm="syz.9.11425" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 477.480462][ T28] audit: type=1400 audit(734.052:2011): avc: denied { prog_load } for pid=26750 comm="syz.9.11425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 477.480480][ T28] audit: type=1400 audit(734.052:2012): avc: denied { bpf } for pid=26750 comm="syz.9.11425" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 477.480499][ T28] audit: type=1400 audit(734.062:2013): avc: denied { read write } for pid=23455 comm="syz-executor" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 477.480518][ T28] audit: type=1400 audit(734.072:2014): avc: denied { read write } for pid=26101 comm="syz-executor" name="loop8" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 477.480539][ T28] audit: type=1400 audit(734.102:2015): avc: denied { read write } for pid=26432 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 477.483127][ T28] audit: type=1400 audit(734.112:2016): avc: denied { name_bind } for pid=26756 comm="syz.8.11428" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=0 [ 477.504077][T26760] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 478.436640][T26844] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 478.459745][T26846] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 478.479211][T26846] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 478.516667][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 478.540841][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 478.562864][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 478.592636][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 478.628023][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 478.657181][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 478.677472][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 478.701116][T24975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 479.014354][T26904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11496'. [ 479.921515][T27056] device lo entered promiscuous mode [ 480.145781][T27083] SELinux: security_context_str_to_sid (=5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 480.588460][T27159] netlink: 'syz.8.11617': attribute type 12 has an invalid length. [ 481.403408][T27233] __nla_validate_parse: 7 callbacks suppressed [ 481.403431][T27233] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11653'. [ 481.572757][T27249] device erspan0 entered promiscuous mode [ 481.925821][T27286] netlink: 'syz.3.11677': attribute type 1 has an invalid length. [ 481.935911][T27286] netlink: 'syz.3.11677': attribute type 2 has an invalid length. [ 481.947330][T27286] netlink: 'syz.3.11677': attribute type 1 has an invalid length. [ 481.959585][T27286] netlink: 'syz.3.11677': attribute type 2 has an invalid length. [ 482.059110][T27298] netlink: 'syz.3.11683': attribute type 8 has an invalid length. [ 482.145758][T27309] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11688'. [ 482.438918][ T28] kauditd_printk_skb: 478 callbacks suppressed [ 482.438939][ T28] audit: type=1400 audit(739.072:2495): avc: denied { read write } for pid=23455 comm="syz-executor" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 482.475942][ T28] audit: type=1400 audit(739.082:2496): avc: denied { read write } for pid=23455 comm="syz-executor" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 482.506980][ T28] audit: type=1400 audit(739.092:2497): avc: denied { bpf } for pid=27319 comm="syz.9.11693" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 482.537742][ T28] audit: type=1400 audit(739.092:2498): avc: denied { map_create } for pid=27319 comm="syz.9.11693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 482.566502][ T28] audit: type=1400 audit(739.092:2499): avc: denied { bpf } for pid=27319 comm="syz.9.11693" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 482.593974][ T28] audit: type=1400 audit(739.092:2500): avc: denied { prog_load } for pid=27319 comm="syz.9.11693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 482.627218][ T28] audit: type=1400 audit(739.092:2501): avc: denied { bpf } for pid=27319 comm="syz.9.11693" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 482.637541][T23455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 482.658339][ T28] audit: type=1400 audit(739.102:2502): avc: denied { read write } for pid=23455 comm="syz-executor" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 482.675643][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 482.703719][T27332] can0: slcan on ttyS3. [ 482.756695][T27332] can0 (unregistered): slcan off ttyS3. [ 482.773799][T27332] can0: slcan on ttyS3. [ 482.826568][T27331] can0 (unregistered): slcan off ttyS3. [ 483.103843][T27380] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11723'. [ 483.173096][T27390] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11728'. [ 485.202367][T27558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11803'. [ 485.690445][T27626] pim6reg: tun_chr_ioctl cmd 21731 [ 485.880881][T27655] xt_hashlimit: max too large, truncated to 1048576 [ 486.006553][T27665] can0: slcan on ptm0. [ 486.028137][T27667] tap0: tun_chr_ioctl cmd 1074025677 [ 486.033798][T27667] tap0: linktype set to 270 [ 486.052483][T27664] can0 (unregistered): slcan off ptm0. [ 486.528944][T27725] xt_bpf: check failed: parse error [ 487.357062][ T28] kauditd_printk_skb: 21339 callbacks suppressed [ 487.357078][ T28] audit: type=1400 audit(1512.074:23838): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 487.364108][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 487.392593][T26454] audit: audit_backlog=65 > audit_backlog_limit=64 [ 487.402913][T26101] audit: audit_backlog=65 > audit_backlog_limit=64 [ 487.414926][T26101] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 487.418178][ T28] audit: type=1400 audit(1512.074:23839): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 487.437109][T26101] audit: backlog limit exceeded [ 487.471614][ T141] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 487.482695][T26454] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 487.491412][T27810] audit: audit_backlog=65 > audit_backlog_limit=64 [ 487.722452][T27837] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11933'. [ 488.716502][T27868] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11946'. [ 489.631026][T27906] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11963'. [ 490.000510][T27944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11981'. [ 490.502270][T27984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12000'. [ 490.552919][T27984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12000'. [ 490.791460][T28030] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12021'. [ 490.804567][T28030] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12021'. [ 491.773478][T28121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12070'. [ 491.798309][T24369] Bluetooth: hci0: Frame reassembly failed (-84) [ 491.964480][T28142] netlink: 48 bytes leftover after parsing attributes in process `syz.7.12069'. [ 492.130415][ T28] kauditd_printk_skb: 23750 callbacks suppressed [ 492.130429][ T28] audit: type=1400 audit(1517.092:45285): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 492.138499][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 492.160947][T26454] audit: audit_backlog=65 > audit_backlog_limit=64 [ 492.168518][ T141] audit: audit_lost=774 audit_rate_limit=0 audit_backlog_limit=64 [ 492.175856][ T28] audit: type=1400 audit(1517.092:45286): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 492.185965][ T141] audit: backlog limit exceeded [ 492.207572][T26454] audit: audit_lost=775 audit_rate_limit=0 audit_backlog_limit=64 [ 492.213467][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 492.221181][T26454] audit: backlog limit exceeded [ 492.228576][ T141] audit: audit_lost=776 audit_rate_limit=0 audit_backlog_limit=64 [ 493.182904][T28217] __nla_validate_parse: 1 callbacks suppressed [ 493.182925][T28217] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12103'. [ 493.269950][T28221] netlink: 'syz.2.12105': attribute type 12 has an invalid length. [ 493.747882][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 494.326427][T24975] Bluetooth: hci0: Frame reassembly failed (-84) [ 495.016284][T28298] device erspan0 entered promiscuous mode [ 496.262363][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 496.262763][ T8794] Bluetooth: hci0: command 0x1003 tx timeout [ 496.385301][T28332] netlink: 'syz.8.12159': attribute type 1 has an invalid length. [ 496.401481][T28332] netlink: 'syz.8.12159': attribute type 2 has an invalid length. [ 496.412608][T28329] tun0: tun_chr_ioctl cmd 1074025676 [ 496.420492][T28329] tun0: owner set to 0 [ 496.425843][T28332] netlink: 'syz.8.12159': attribute type 1 has an invalid length. [ 496.436072][T28332] netlink: 'syz.8.12159': attribute type 2 has an invalid length. [ 496.470730][T28337] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 496.902236][ T28] kauditd_printk_skb: 24716 callbacks suppressed [ 496.902253][ T28] audit: type=1400 audit(1522.101:69825): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 496.937537][ T28] audit: type=1400 audit(1522.101:69826): avc: denied { read write } for pid=26432 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 496.965115][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 496.975179][T26454] audit: audit_backlog=65 > audit_backlog_limit=64 [ 496.979141][T28355] audit: audit_backlog=65 > audit_backlog_limit=64 [ 496.984174][ T141] audit: audit_lost=836 audit_rate_limit=0 audit_backlog_limit=64 [ 496.996050][T26454] audit: audit_lost=837 audit_rate_limit=0 audit_backlog_limit=64 [ 496.998031][ T141] audit: backlog limit exceeded [ 497.010923][ T28] audit: type=1400 audit(1522.132:69827): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 497.019223][T26454] audit: backlog limit exceeded [ 497.127152][T28364] netlink: 'syz.9.12175': attribute type 1 has an invalid length. [ 497.175550][T28364] netlink: 'syz.9.12175': attribute type 2 has an invalid length. [ 497.203261][T28373] netlink: 'syz.9.12175': attribute type 1 has an invalid length. [ 497.229209][T28373] netlink: 'syz.9.12175': attribute type 2 has an invalid length. [ 497.250950][T28368] tun0: tun_chr_ioctl cmd 1074025676 [ 497.257858][T28368] tun0: owner set to 0 [ 497.532884][T28406] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 498.114183][T28438] can0: slcan on ttyS3. [ 498.172715][T28438] can0 (unregistered): slcan off ttyS3. [ 498.191123][T28438] can0: slcan on ttyS3. [ 498.253362][T28437] can0 (unregistered): slcan off ttyS3. [ 498.464720][T28472] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12236'. [ 498.835017][T28512] netlink: 36 bytes leftover after parsing attributes in process `syz.8.12242'. [ 499.505730][T28591] can0: slcan on ttyS3. [ 499.596919][T28591] can0 (unregistered): slcan off ttyS3. [ 499.616410][T28591] can0: slcan on ttyS3. [ 499.710606][T28590] can0 (unregistered): slcan off ttyS3. [ 500.162117][T28638] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 500.314797][T28647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12307'. [ 500.941231][T28689] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 501.674971][ T28] kauditd_printk_skb: 22641 callbacks suppressed [ 501.674996][ T28] audit: type=1400 audit(1527.119:90895): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 501.706998][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 501.714926][T28732] audit: audit_backlog=65 > audit_backlog_limit=64 [ 501.725673][T28732] audit: audit_lost=1363 audit_rate_limit=0 audit_backlog_limit=64 [ 501.733083][ T141] audit: audit_lost=1364 audit_rate_limit=0 audit_backlog_limit=64 [ 501.734524][T26432] audit: audit_backlog=65 > audit_backlog_limit=64 [ 501.749462][ T141] audit: backlog limit exceeded [ 501.756977][T28732] audit: backlog limit exceeded [ 501.762546][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 501.773841][ T28] audit: type=1400 audit(1527.119:90896): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 501.882873][T28752] pim6reg: tun_chr_ioctl cmd 21731 [ 502.145587][T28780] can0: slcan on ptm0. [ 502.225192][T28779] can0 (unregistered): slcan off ptm0. [ 502.291512][T28795] xt_hashlimit: max too large, truncated to 1048576 [ 502.489504][T28805] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12378'. [ 502.765072][T28815] tap0: tun_chr_ioctl cmd 1074025677 [ 502.801962][T28815] tap0: linktype set to 270 [ 503.073816][T28847] tap0: tun_chr_ioctl cmd 1074025677 [ 503.084188][T28847] tap0: linktype set to 270 [ 505.896904][T29035] xt_hashlimit: size too large, truncated to 1048576 [ 505.946334][T29035] xt_hashlimit: max too large, truncated to 1048576 [ 506.275340][T29091] netlink: 'syz.9.12505': attribute type 11 has an invalid length. [ 506.301243][T29091] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12505'. [ 506.446825][ T28] kauditd_printk_skb: 22107 callbacks suppressed [ 506.446847][ T28] audit: type=1400 audit(2044.120:110708): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 506.495465][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 506.499630][T26432] audit: audit_backlog=65 > audit_backlog_limit=64 [ 506.511520][ T141] audit: audit_lost=2131 audit_rate_limit=0 audit_backlog_limit=64 [ 506.520673][ T141] audit: backlog limit exceeded [ 506.522857][T23455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 506.525912][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 506.544022][T26432] audit: audit_lost=2132 audit_rate_limit=0 audit_backlog_limit=64 [ 506.547704][ T141] audit: audit_lost=2133 audit_rate_limit=0 audit_backlog_limit=64 [ 506.558427][T26101] audit: audit_backlog=65 > audit_backlog_limit=64 [ 507.817560][T29241] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12574'. [ 507.850880][T29241] device macsec0 entered promiscuous mode [ 508.122433][T29277] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12591'. [ 508.160781][T29277] device macsec0 entered promiscuous mode [ 508.583712][T29303] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12603'. [ 508.639249][T29303] device macsec0 entered promiscuous mode [ 509.066705][T29328] IPv6: sit1: Disabled Multicast RS [ 510.406666][T29377] IPv6: sit1: Disabled Multicast RS [ 510.997975][T29435] IPv6: sit1: Disabled Multicast RS [ 511.216722][ T28] kauditd_printk_skb: 23206 callbacks suppressed [ 511.216743][ T28] audit: type=1400 audit(2305.122:133363): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 511.249628][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 511.254735][ T28] audit: type=1400 audit(2305.122:133364): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 511.262088][ T141] audit: audit_lost=2318 audit_rate_limit=0 audit_backlog_limit=64 [ 511.280495][T29470] audit: audit_backlog=65 > audit_backlog_limit=64 [ 511.295653][ T141] audit: backlog limit exceeded [ 511.297497][ T28] audit: type=1400 audit(2305.122:133365): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 511.303175][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 511.330917][T29470] audit: audit_lost=2319 audit_rate_limit=0 audit_backlog_limit=64 [ 511.332159][T29471] audit: audit_backlog=65 > audit_backlog_limit=64 [ 511.408386][T29470] IPv6: sit1: Disabled Multicast RS [ 511.866403][T29513] IPv6: sit1: Disabled Multicast RS [ 512.298358][T29553] IPv6: sit1: Disabled Multicast RS [ 513.758085][T29628] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12749'. [ 514.035579][T29643] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12754'. [ 514.060371][T29643] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12754'. [ 514.452751][T29673] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12770'. [ 514.483154][T29673] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12770'. [ 514.552948][T29675] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12771'. [ 514.611694][T29679] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 514.664876][T29683] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 514.776348][T29696] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12781'. [ 514.807682][T29696] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12781'. [ 515.988799][ T28] kauditd_printk_skb: 26484 callbacks suppressed [ 515.988819][ T28] audit: type=1400 audit(2310.129:159515): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 515.995283][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 516.023942][ T141] audit: audit_lost=2432 audit_rate_limit=0 audit_backlog_limit=64 [ 516.032777][ T141] audit: backlog limit exceeded [ 516.038247][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 516.044906][ T141] audit: audit_lost=2433 audit_rate_limit=0 audit_backlog_limit=64 [ 516.046310][ T28] audit: type=1400 audit(2310.140:159516): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 516.054601][ T141] audit: backlog limit exceeded [ 516.079511][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 516.086268][ T141] audit: audit_lost=2434 audit_rate_limit=0 audit_backlog_limit=64 [ 516.423466][T29795] netlink: 248 bytes leftover after parsing attributes in process `syz.8.12827'. [ 518.948974][T30007] netlink: 504 bytes leftover after parsing attributes in process `syz.3.12927'. [ 518.974499][T30007] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 519.581317][T30100] netlink: 504 bytes leftover after parsing attributes in process `syz.7.12968'. [ 519.627711][T30100] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 519.702920][T30111] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12985'. [ 520.669105][T30226] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.761136][ T28] kauditd_printk_skb: 30487 callbacks suppressed [ 520.761154][ T28] audit: type=1400 audit(2315.147:189805): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 520.800383][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 520.807203][ T141] audit: audit_lost=2501 audit_rate_limit=0 audit_backlog_limit=64 [ 520.815123][T23455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 520.817613][ T141] audit: backlog limit exceeded [ 520.824878][T26432] audit: audit_backlog=65 > audit_backlog_limit=64 [ 520.830599][ T28] audit: type=1400 audit(2315.158:189806): avc: denied { read write } for pid=26101 comm="syz-executor" name="loop8" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 520.844494][T23455] audit: audit_lost=2502 audit_rate_limit=0 audit_backlog_limit=64 [ 520.862263][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 520.872593][T26432] audit: audit_lost=2503 audit_rate_limit=0 audit_backlog_limit=64 [ 521.685903][T30364] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13096'. [ 521.700930][T30364] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 521.824084][T30373] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.012918][T30392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.300223][T30429] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13127'. [ 522.320224][T30429] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 522.341432][T30433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13128'. [ 522.543475][T30458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.574985][T30463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13141'. [ 522.598571][T30463] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 522.839634][T20953] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 522.955698][T30517] tun0: tun_chr_ioctl cmd 2147767507 [ 523.625097][ T291] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 523.650803][T30592] tun0: tun_chr_ioctl cmd 2147767507 [ 524.734998][T30701] netlink: 'syz.2.13258': attribute type 11 has an invalid length. [ 524.776110][T30701] netlink: 'syz.2.13258': attribute type 1 has an invalid length. [ 524.785954][T30701] netlink: 3593 bytes leftover after parsing attributes in process `syz.2.13258'. [ 524.796445][T30705] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13260'. [ 524.975196][T30724] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13268'. [ 525.051641][T30739] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13275'. [ 525.081812][T30743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13288'. [ 525.221077][T30768] netlink: 92 bytes leftover after parsing attributes in process `syz.8.13291'. [ 525.250275][T30768] netem: unknown loss type 0 [ 525.266033][T30774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13294'. [ 525.632260][T30812] netlink: 16 bytes leftover after parsing attributes in process `syz.9.13309'. [ 525.642125][ T28] kauditd_printk_skb: 30736 callbacks suppressed [ 525.642141][ T28] audit: type=1400 audit(2320.158:219684): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 525.651071][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 525.688616][ T141] audit: audit_lost=2790 audit_rate_limit=0 audit_backlog_limit=64 [ 525.706183][ T141] audit: backlog limit exceeded [ 525.707032][T23455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 525.716615][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 525.719156][T26454] audit: audit_backlog=65 > audit_backlog_limit=64 [ 525.725127][ T141] audit: audit_lost=2791 audit_rate_limit=0 audit_backlog_limit=64 [ 525.738174][ T28] audit: type=1400 audit(2320.167:219685): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 525.739977][T26454] audit: audit_lost=2792 audit_rate_limit=0 audit_backlog_limit=64 [ 526.890740][T30927] netlink: 68 bytes leftover after parsing attributes in process `syz.8.13366'. [ 527.195717][T30966] netlink: 68 bytes leftover after parsing attributes in process `syz.3.13381'. [ 527.341737][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 528.196984][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.575808][T31115] netlink: 'syz.3.13451': attribute type 2 has an invalid length. [ 529.719386][T31123] netlink: 'syz.2.13464': attribute type 2 has an invalid length. [ 529.781618][T31127] serio: Serial port ttyS3 [ 530.008315][T31159] netlink: 'syz.7.13468': attribute type 2 has an invalid length. [ 530.189829][T31166] __nla_validate_parse: 1 callbacks suppressed [ 530.189861][T31166] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13475'. [ 530.460216][T31192] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13488'. [ 530.517035][T31200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13501'. [ 530.998135][ T28] kauditd_printk_skb: 32830 callbacks suppressed [ 530.998152][ T28] audit: type=1400 audit(2325.162:250160): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 531.003737][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 531.004656][ T28] audit: type=1400 audit(2325.172:250161): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 531.027359][ T141] audit: audit_lost=3578 audit_rate_limit=0 audit_backlog_limit=64 [ 531.035503][ T28] audit: type=1400 audit(2325.172:250162): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 531.059328][ T141] audit: backlog limit exceeded [ 531.065287][ T28] audit: type=1400 audit(2325.172:250163): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 531.084706][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 531.089583][ T28] audit: type=1400 audit(2325.172:250164): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 531.110489][ T141] audit: audit_lost=3579 audit_rate_limit=0 audit_backlog_limit=64 [ 532.051015][T25286] Bluetooth: hci0: Frame reassembly failed (-84) [ 532.059248][T31258] Bluetooth: hci0: Frame reassembly failed (-84) [ 532.581533][T31284] netlink: 40 bytes leftover after parsing attributes in process `syz.8.13526'. [ 533.021388][T31308] netlink: 40 bytes leftover after parsing attributes in process `syz.9.13542'. [ 533.828056][T26432] cgroup: fork rejected by pids controller in /syz3 [ 534.269254][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 534.269639][ T8794] Bluetooth: hci0: command 0x1003 tx timeout [ 534.494944][T24975] device bridge_slave_1 left promiscuous mode [ 534.502009][T24975] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.512489][T24975] device bridge_slave_0 left promiscuous mode [ 534.520042][T24975] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.529945][T24975] device veth1_macvtap left promiscuous mode [ 534.536026][T24975] device veth0_vlan left promiscuous mode [ 535.855405][T26454] cgroup: fork rejected by pids controller in /syz2 [ 536.030119][T24975] Bluetooth: hci0: Frame reassembly failed (-84) [ 536.040706][T31402] Bluetooth: hci0: Frame reassembly failed (-84) [ 536.231045][T26101] cgroup: fork rejected by pids controller in /syz8 [ 536.307769][T31436] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 536.353895][ T28] kauditd_printk_skb: 39570 callbacks suppressed [ 536.353910][ T28] audit: type=1400 audit(2330.176:288978): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 536.402943][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 536.413546][ T141] audit: audit_lost=3832 audit_rate_limit=0 audit_backlog_limit=64 [ 536.418046][ T28] audit: type=1400 audit(2330.185:288979): avc: denied { execmem } for pid=31440 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 536.422335][ T141] audit: backlog limit exceeded [ 536.450952][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 536.462958][T31444] audit: audit_backlog=65 > audit_backlog_limit=64 [ 536.470039][ T141] audit: audit_lost=3833 audit_rate_limit=0 audit_backlog_limit=64 [ 536.471606][ T28] audit: type=1400 audit(2330.185:288980): avc: denied { execmem } for pid=31441 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 536.478509][T31444] audit: audit_lost=3834 audit_rate_limit=0 audit_backlog_limit=64 [ 536.547263][T25286] device bridge_slave_1 left promiscuous mode [ 536.555930][T25286] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.574080][T25286] device bridge_slave_0 left promiscuous mode [ 536.583241][T25286] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.605947][T25286] device veth1_macvtap left promiscuous mode [ 536.616997][T25286] device veth0_vlan left promiscuous mode [ 537.627595][T25286] device bridge_slave_1 left promiscuous mode [ 537.633859][T25286] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.643593][T25286] device bridge_slave_0 left promiscuous mode [ 537.652291][T25286] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.661768][T25286] device bridge_slave_1 left promiscuous mode [ 537.669908][T25286] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.678040][T25286] device bridge_slave_0 left promiscuous mode [ 537.685612][T25286] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.695216][T25286] device veth1_macvtap left promiscuous mode [ 537.701779][T25286] device veth0_vlan left promiscuous mode [ 537.708440][T25286] device veth1_macvtap left promiscuous mode [ 537.715053][T25286] device veth0_vlan left promiscuous mode [ 538.203361][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 538.203361][ T8794] Bluetooth: hci0: command 0x1003 tx timeout [ 538.878234][T25286] device bridge_slave_1 left promiscuous mode [ 538.885459][T25286] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.909279][T25286] device bridge_slave_0 left promiscuous mode [ 538.916175][T25286] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.925414][T25286] device veth1_macvtap left promiscuous mode [ 538.931754][T25286] device veth0_vlan left promiscuous mode [ 541.710850][ T28] kauditd_printk_skb: 46896 callbacks suppressed [ 541.710889][ T28] audit: type=1400 audit(2335.180:333208): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 541.718009][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 541.719337][ T28] audit: type=1400 audit(2335.199:333209): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 541.750477][ T141] audit: audit_lost=4724 audit_rate_limit=0 audit_backlog_limit=64 [ 541.758089][ T28] audit: type=1400 audit(2335.199:333210): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 541.784004][ T141] audit: backlog limit exceeded [ 541.794152][ T28] audit: type=1400 audit(2335.199:333211): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 541.822513][ T141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 541.827398][ T28] audit: type=1400 audit(2335.199:333212): avc: denied { read } for pid=141 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 541.851195][ T141] audit: audit_lost=4725 audit_rate_limit=0 audit_backlog_limit=64