last executing test programs: 31.616323507s ago: executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) 31.052417844s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 30.844189857s ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="47880000000000000000060000000800010000000000080003"], 0x24}}, 0x0) 30.673864283s ago: executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x213a, 0x4) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x81, 0x4) sendmmsg$inet(r0, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40002110, 0x0) 30.080772884s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0xedc, 0x0}, 0xfffffdd0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=r0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sync() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x430, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{0x0, 0x1, 0xd}]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES16, @ANYRES8=0x0, @ANYRESDEC], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) 4.226990067s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d00000200000001002000", @ANYRES64=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0xb32, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "0f1ce8b66f91250f227b9ab41824e57b779b81cf0a9dcc40ff9ba319dcdc80ca0df43438711a0dcee8a9b3ec6c914ac526b6cbaa766800"}}, 0x80}}, 0x0) 4.136126472s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) setfsuid(0x0) 3.81996991s ago: executing program 2: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x54f8, &(0x7f0000010140)="$eJzs3LtvW1UcB/DjpGn6okSIga1XqpASqbbiPCrYArTiIVJFPAYmcGzHcmv7RrHjhEwMjIiB/wSBxMTI38DAzIYYQGxIIN9zQpvyWOLECfl8pOvvvcfXv3uOVVX6XUc3ABfWXPbbL6VwM1wNIUyHEG6EUOyX0lZYi/FCCOFWCGHqia2Uxv8auBxCuBZCuJkKJqO3vrgzvL3681u/fvv97KXrX37zwwSWC5wRL4YQuttxf68bM2/FfJjGa8N2kd2VYcr4RvdROs5j7jU3iwp7tcPzakUut+L5+fZuf5RbnVp9lK32VjG+3YsX7A9bh3WKDzys7RTHjeZmke1+XmTrIM5r/yD+93bQH8Q6jVTv46J8GAwOM44395txPduPiqz3Bmk81s0bzf1RDlOmy4V63mkU89g8zjd9tr3d7u3uZ8PmTr+d97LVSvWlSvVuubqTN5qD5kq51m3cXcnmW53RaeVBs9Zda+V5q9Os1PPuQjbfqtfL1Wo2f6+52a71smq1slxZLK8upL072esP3s86jWx+lK+2e7uDdqefbeU7WfzEQrZUWX55Ibtdzd5d38g23rl/f33jvQ/vffDglfU3X0sn/W1a2fzS4tJSubpYXqouXKD1f5omPcb1w7GUJj0BgPPnRPv/uVizpP8HnnLe+/+g/x+Lc9X/XvT+/wTWD8ei/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLB+nPnqjWJnLh5fT+PPpKHn0nEphDAVQvjjH0yHy0dqTqc6M/9y/sxTc1gLoagwusZs2q6l8dH2+7Mn/S0AAADA/9fXn9z6PHbr8WVu0hPiNMWbNlM3PhpTvVIIYWbupzFVmxq9PD+mYsW/70thf0zVihtYV8ZULN5yuzSuav/h8X236SNx5YkoxZg6hekAAACn7GgncBpdCAAAAJPx2aQnwGSUwuPfBNMf8M/GSD8IXj1yBAAAAJxDpUlPAAAAADhxRf9/Fp7/913J8/8AAADgpMTn/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCf7NxPTsJAFAfg10IF/0Vi3HsVd3AMj+DSpeEAXoIj4BW8AGfAnUcwYGhLtAYTkw7FkO9L2jIT8uOVsHkzpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD69FfPJy9Ptc9uc1bqdNHcDAAAA7LIs5pPyxagan9fzl/XUdT3OIiKPiF29ey9OGpm9Oqf45f3FjxpeI8qEzWcM6uMsIu7q4+Nq398CAAAAHK/FdDauuvXqNDp0QXSpWrTJL+4T5WURUYzeE6Xlm9NNorDy992Px0Rp5QLWMFFYteTWT5X2J73GZfjtklWXvNNyAACATjQ7gW67EAAAALr0cOgCOIwstluZ273g8p/3XxuCp40RAAAA8L8Ndk1m3dcBAAAAdKzs/z3/DwAAAI5b9fw/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9mlZzCeL6WzcNme1bifN3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfLI/7ygQAmEQBnvXdyZz/8NKg6amJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxc79+8ZNxQEAf7bPF1pAHAFlCEIgMcBCr9fS0pUBFDHwJyBF6bUErvxoM9CqQsrChjJ3QTAihAQKW/6HzImUJWwZbggSc5B9duL8kDgIsa/J5yM9v+9Z1nvf50RRvn5OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDS8L2DOMkOnVEcF+c2dh8vZP3mkT6ztrI1m7UsjupM+unwavVDNNNcIgAAAFwcSVnfhxC209W5rI87ef2fltdkNf8Pz4/isp4/WveXfVn7Z+3333Ze3p+oM5onG/TO4qB/9XgqrbNb5WR74R+vaOV3Pn/2kuRfkPjD5ZeGaX4/o+/W199v5+FUHdkCAP/FlbIvgvL3oazvNZkYABdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6DJfDs2UchRBmWwdxZnP38cJJ/drK1mzZbj55slIdMxsiDSHcWRz0r9a4lkn34OGjz+YHg/79+oPXQgjNzV4EH49xTQhNZig4bRAX3+v/48h70QSs62yDhn8wAQBw7qRFy+r67XR1LjsXTYew9+Ph+v/NShzGrP93Prm5UZ2rWv/3alvh5Osu3fuy++Dho7cX783f7d/tf/7Otd67veu3bty41c2flXQ9MQEAAOB02kWr1v/x9PH9/8uVOIxZ/3/1fe+b6lyJ+v9EB5t+TWcCAABwsb34+l9/Riecj9rt8PX80tL93ui4//na6NhAqv/aVNGq9X8y3XRWAAAAQB2Gy9Gh/f/blTiMuf//3E+v/FIdMwkhXCr2/68sfDG4Xd9yJlodf07c9BoBAABo1qWiVff/0/z9/3j/lYc4hPDWG6O4+DeAY9X/yQff/lydq/r+//X6ljiR4pnR/cj7qRBaM01nBAAAwHn2TNGyYv+PdHXu018vf9T2/j8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3f4OAAD//xwcQP8=") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0x4018f514, 0x0) 3.423249951s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x24, 0xbf, 0x6, 0x108003}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfe78) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(0x0, &(0x7f0000000200)=""/93, 0x5d) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1e5242, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0) pwrite64(r3, &(0x7f0000000340)='C', 0xfe04, 0x100000002) fallocate(r3, 0x3, 0xfffffffb, 0xffeffeff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.293515291s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) getcwd(&(0x7f0000002380)=""/4096, 0x1000) 3.133302226s ago: executing program 0: ftruncate(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001b40)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x32, 0x0, '\x00', [@pad1]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x32, 0x3, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x0, 0x200, [0x8001, 0x5b80]}}]}}}], 0x58}}, {{&(0x7f0000000700)={0xa, 0x4e22, 0xffff8000, @mcast2}, 0x1c, &(0x7f0000001340)=[{0x0}, {&(0x7f00000008c0)}, {&(0x7f0000001280)="fc296c1233e3280b86efc6ca28c8509cc11338ff218eb8fe06db82f9a0ae08b12f012df4cc5b4803dbd85e815f71db99aa69e533f2326cb411a71f1e", 0x3c}], 0x3}}, {{&(0x7f00000013c0)={0xa, 0x4e23, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, &(0x7f0000001840)=[{0x0}, {0x0}, {&(0x7f0000001540)="79cc2ccb02f31306b323913a507461046bfd831a2171cb0f843c83c1d78bb89e15df138444d8cb81bd72bc8e3553f51dbaa4d246825e7236b0da4c82c3fc6a365c213bea87e00dbc2bdc0979be7b70739e886e047fc5808e9ed7845ccbb10a5480db2f1dcc", 0x65}, {&(0x7f00000015c0)="26f54f4779dc575361bdd40fa961d044ef261eccdae5a337b87960befbace5823fa3937bc133872da8ccb384b2cf7693df30a95d94b52cb458dc3742fbee124b0d1d55f1b32be8252508af2e1346e3e15dc608e12c0ef9b6cfb5a516acdc7ed6416fafa0267c8ded6698a8a849e1223d2a1db9e636b81334ef4e2b3bafea07bef01efa8889520bfdf35436a00523d51a55f2f498fe777f69b243a44fa6e23fad52729f2e9062e5cd66a4acc341880e3839c837ab1b8de2217d31", 0xba}], 0x4, &(0x7f00000018c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7fffffff}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001940)="314c2e460918c4d43fc91fb98d6c5790f45c6dda418e85cf5901ab1e7306d7e5efeed9bf7c23baafdbf80d091f40c709c3818fe16ed280d8243241fd2bc30e1e17f260ce75078c83cdbd20e9eb8f80aa1f4338f9ae62ae91328c206e8a7bf62a0c4e7c8bbd65956aebc9cf998b30d3c3a0e0a6b181d954e83c55cd84d63baf614a480d8f5576b9232f224294de05d133784adafff1d50eff4d960e6ccafe60fd95798ea82158f03075b68023dd9f93a8f1561ad92c7f3141f2d23b3d95cc4e4ee1809f114dfea9854e1610e8a17b1e96c7e9e6b90e9ff13d5a9d03d28697d218e48b", 0xe2}, {&(0x7f0000001a40)}], 0x2}}], 0x4, 0x8080) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) 2.711488451s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2.314275202s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x3a, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000804000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000080)) recvmsg(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc2c}], 0x6, &(0x7f0000000200)=""/20, 0x31, 0xd571012c}, 0x114) write$binfmt_elf64(r3, &(0x7f0000000400)=ANY=[], 0x100000530) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000340)={0x0, @initdev, @multicast1}, &(0x7f0000000400)=0xc) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x24000010) 2.229385066s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 2.166458785s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_journal_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000300)='ext4_journal_start\x00', r2}, 0x30) unlink(&(0x7f0000000140)='./cgroup\x00') 1.887467459s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001700000004000680080006"], 0x24}}, 0x0) 1.667924433s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000007d000000a40000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[], 0x3c}}, 0x0) syz_emit_ethernet(0x1f6, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000000001c000006e1aa4058b74adad9a4e721f5b293380ff020000000000000000000000000001020205"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bbfe8000"/52, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='ext4_ext_remove_space\x00', r0}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) 1.506279177s ago: executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8910, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x6, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2}) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000001c0)="c10887a2ef13d9d6a1ecdfb002fa271150ab26697c95e45a113eae99f38a69b67ed57cbcd3948611d87b13857000c53f3923a01d0f94982c7531c4fface71fcdabaac8da217fd30f0f3bd3cba1c39addf0c97747800a6d2a314539b5053ec0", 0x5f}], 0x1) connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) 1.376821828s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 991.337937ms ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) setfsuid(0x0) 887.915933ms ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) io_setup(0x4, &(0x7f00000006c0)=0x0) io_destroy(r1) 821.863033ms ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21404e, &(0x7f00000009c0)={[{@errors_remount}, {@noblock_validity}]}, 0x1, 0x517, &(0x7f0000000140)="$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") bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffb, 0x2) getdents(r0, 0x0, 0x0) 808.078285ms ago: executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000740)=0x8, 0x4) 616.517455ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000002300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) unshare(0x20020400) 553.013055ms ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2f, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x8, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) 504.686832ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x6000200a}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000000)) 436.844302ms ago: executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10b, 0x10b, 0x7, [@ptr={0x6, 0x0, 0x0, 0x2, 0x3}, @datasec={0xc, 0x1, 0x0, 0xf, 0x2, [{0x2, 0x401, 0x81}], "d05a"}, @enum={0x6, 0x5, 0x0, 0x6, 0x4, [{0x3}, {0x2, 0x87}, {0x3, 0x80000001}, {0xa}, {0xe}]}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x26, 0x2}, @var={0x10, 0x0, 0x0, 0xe, 0x2, 0x1}, @const={0x10, 0x0, 0x0, 0xa, 0x1}, @datasec={0x5, 0x5, 0x0, 0xf, 0x1, [{0x3, 0x0, 0xfffffff7}, {0x5, 0x4, 0x10001}, {0x4, 0xffff80e4, 0xc5a}, {0x0, 0x8, 0x53}, {0x1, 0x0, 0x6}], "86"}, @restrict={0x1, 0x0, 0x0, 0xb, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x20}}, @struct={0x6, 0x1, 0x0, 0x4, 0x0, 0x7, [{}]}]}, {0x0, [0x2e, 0x30, 0x30, 0x61, 0x61]}}, &(0x7f0000000940)=""/243, 0x12b, 0xf3, 0x0, 0x400}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001080)={0xffffffffffffffff, 0x20, &(0x7f0000000bc0)={&(0x7f0000000a40)=""/169, 0xa9, 0x0, &(0x7f0000000b00)=""/172, 0xac}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x0, 0x2}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10e, &(0x7f0000000080), 0x3, 0x465, &(0x7f0000000c00)="$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") bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x41a100, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x5452, 0x5c0a01e2036fe26d) bpf$MAP_CREATE(0x0, 0x0, 0x0) symlink(&(0x7f0000000500)='./file0\x00', 0x0) 304.338793ms ago: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth0\x00', &(0x7f00000000c0)=@ethtool_rxfh_indir={0x39}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000044000000000000000007000000bb7f1a006600feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x2a, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000012000000000071f1768400000000000000800000000000000000000000000000008000"/141], 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x20142, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1000000201006) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000540)=ANY=[@ANYBLOB="000000000000000001000100000001"]) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x53a, &(0x7f0000000540)="$eJzs3c9vHFcdAPDvjH82desEeoAKSIFCQFF2400bVb00uYBQVQlRcUAcUmNvLJPdrPGuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IBixQjATSopkdu1t7XW/j9S71fj7SaObN23nf9+LMvJm39rwAxtZzEbETEdMR8UZEzBf7k2KJO50l+9yjve2l/b3tpSTa7df/nuT52b7oOibzZFHmbER846sR30mOx21ubj1YrNWq60W63KqvlZubWzdW64sr1ZXqw0rl9sLtmy/derEysLZerf9y9yurr37zN7/+9Lu/3/nyD7JqzRV53e0YpE7Tpw7jZCYj4tXzCDYCE8V6esT14PGkEfGxiPhcfv7Px0T+vxMAuMja7floz3enAYCLLs3HwJK0VIwFzEWalkqdMbxn4lJaazRb1+83Nh4ud8bKLsdUen+1Vr15ZeaP38vvGKaSLL2Q5+X5ebpyJH0rIq5ExI9nnsjTpaVGbXl0tz0AMNaePNL//2um0//3oce3egDAR8bsqCsAAAyd/h8Axo/+HwDGTx/9f/Fl/8651wUAGA7P/wAwfvT/ADB+9P8AMFa+/tpr2dLeL95/vfzm5saDxps3lqvNB6X6xlJpqbG+VlppNFbyd/bUTyuv1misLbwQG2+VW9Vmq9zc3LpXb2w8bN3L3+t9rzo1lFYBAB/kytV3/pBExM7LT+RLdM3loK+Giy0ddQWAkZkYdQWAkTHbF4yv/p/xf3eu9QBGp+fLvGd7br7fTz9EEL9nBP9Xrn2y//F/czzDxWL8H8bX443/vzLwegDDZ/wfxle7nRyd83/6MAsAuJDO8Dv+7R8O6iYEGKnTJvMeyPf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcMHMRcR3I0lLxVzgc5GmpVLEUxFxOaaS+6u16s2IeDquRsTUTJZeGHWlAYAzSv+aFPN/XZt/fu5o7nTy75l8HRHf/9nrP3lrsdVaX8j2/+Nw/8zB9GGV9447w7yCAECfnuvzc3n/XSnWXQ/yj/a2lw6W7s+nA67nUbt347/FVMRL+3vb+dLJmYzJfD2b30tc+mdSpDtzkT4bERMDiL/zdkR8olf7k3xs5HIx82l3/ChiPzXU+On74qd5Xmed3Xx9fAB1gXHzzt2IuNPr/EuLa2rv8382v0Kd3e7dTmEH1779rvgH17+JHvGTD3HN333ht187trM938l7O+LZyV7xk8P4yQnxn+8z/p8+9ZkfvXJCXvvnEdeid/zuWOVWfa3c3Ny6sVpfXKmuVB9WKrcXbt986daLlXI+Rl0+GKk+7m8vX3/6pLpl7b90QvzZnu2fPjz2C322/xf/eePbn/2A+F/6fO+f/zM943dkfeIX+4y/eOlXJ07fncVfPqH9p/38r/cZ/92/bC33+VEAYAiam1sPFmu16vqZNrKn0EGUc2wjq+JACzxl488xyALvnO3wqfP6Vz33jcnDe8XBlvytrMQhNycdeCvOtPGosxHnHmu01yXg/L130o+6JgAAAAAAAAAAAAAAwEmG8adLo24jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9f/AgAA//91qMwl") 269.222118ms ago: executing program 1: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) 0s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r1}, 0x9) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) kernel console output (not intermixed with test programs): unknown main item tag 0x0 [ 646.003354][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.014805][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.028294][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.039540][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.056960][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.064300][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.072217][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.081698][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.090299][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.097709][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.105027][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.112280][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.119767][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.127052][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.134638][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.141978][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.149377][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.156862][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.166914][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.176234][ T4803] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 646.202893][ T4803] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 646.354446][ T28] audit: type=1400 audit(2000000155.800:12238): avc: denied { listen } for pid=14096 comm="syz-executor.0" path=2F726F6F742F73797A6B616C6C65722D74657374646972323434383937363339332F73797A6B616C6C65722E716148536A4C2F35312FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 647.230929][ T28] audit: type=1326 audit(2000000156.680:12239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14142 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0df47cea9 code=0x0 [ 648.117548][T14176] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 648.184665][T14176] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 648.988020][T11003] bio_check_eod: 10398 callbacks suppressed [ 648.988042][T11003] syz-executor.4: attempt to access beyond end of device [ 648.988042][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 648.988573][ T7545] syz-executor.2: attempt to access beyond end of device [ 648.988573][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 648.994083][T11003] syz-executor.4: attempt to access beyond end of device [ 648.994083][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 649.022400][ T7545] syz-executor.2: attempt to access beyond end of device [ 649.022400][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 649.038752][T11003] syz-executor.4: attempt to access beyond end of device [ 649.038752][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 649.050588][ T7545] syz-executor.2: attempt to access beyond end of device [ 649.050588][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 649.064020][T11003] syz-executor.4: attempt to access beyond end of device [ 649.064020][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 649.078192][ T7545] syz-executor.2: attempt to access beyond end of device [ 649.078192][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 649.093077][T11003] syz-executor.4: attempt to access beyond end of device [ 649.093077][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 649.119670][T11003] syz-executor.4: attempt to access beyond end of device [ 649.119670][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 651.295505][T14249] serio: Serial port pts0 [ 651.366979][ T28] audit: type=1326 audit(2000000160.810:12240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14250 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79abe7cea9 code=0x0 [ 652.087724][ T4803] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 652.096811][T14285] serio: Serial port pts0 [ 652.144113][ T28] audit: type=1326 audit(2000000161.590:12241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14287 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0df47cea9 code=0x0 [ 652.457796][ T4803] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 652.827538][ T4803] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 652.846502][ T4803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.854582][ T4803] usb 2-1: Product: syz [ 652.862800][ T4803] usb 2-1: Manufacturer: syz [ 652.870380][ T4803] usb 2-1: SerialNumber: syz [ 653.488135][ T4803] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 653.498353][ T4803] usb 2-1: USB disconnect, device number 38 [ 653.850623][T14336] serio: Serial port pts1 [ 653.997977][ T7545] bio_check_eod: 10614 callbacks suppressed [ 653.997998][ T7545] syz-executor.2: attempt to access beyond end of device [ 653.997998][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 654.006223][T11003] syz-executor.4: attempt to access beyond end of device [ 654.006223][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 654.018495][ T7545] syz-executor.2: attempt to access beyond end of device [ 654.018495][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 654.046233][ T7545] syz-executor.2: attempt to access beyond end of device [ 654.046233][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 654.058082][T11003] syz-executor.4: attempt to access beyond end of device [ 654.058082][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 654.070686][ T7545] syz-executor.2: attempt to access beyond end of device [ 654.070686][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 654.074688][T11003] syz-executor.4: attempt to access beyond end of device [ 654.074688][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 654.089327][ T7545] syz-executor.2: attempt to access beyond end of device [ 654.089327][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 654.102522][T11003] syz-executor.4: attempt to access beyond end of device [ 654.102522][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 654.116685][ T7545] syz-executor.2: attempt to access beyond end of device [ 654.116685][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 655.508788][T14355] 9pnet_fd: Insufficient options for proto=fd [ 655.954165][ T28] audit: type=1326 audit(2000000165.400:12242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14366 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d11c7cea9 code=0x0 [ 655.997704][ T4412] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 656.063141][T14371] serio: Serial port pts0 [ 656.687761][ T4412] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.707696][ T4412] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.717541][ T4412] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 656.747660][ T4412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.767884][ T4412] usb 2-1: config 0 descriptor?? [ 657.587743][ T4412] usb 2-1: string descriptor 0 read error: -71 [ 657.607716][ T4412] uclogic 0003:256C:006D.004F: failed retrieving string descriptor #200: -71 [ 657.629365][ T4412] uclogic 0003:256C:006D.004F: failed retrieving pen parameters: -71 [ 657.630671][T14402] af_packet: tpacket_rcv: packet too big, clamped from 59658 to 3956. macoff=92 [ 657.657532][ T4412] uclogic 0003:256C:006D.004F: failed probing pen v2 parameters: -71 [ 657.677731][ T4412] uclogic 0003:256C:006D.004F: failed probing parameters: -71 [ 657.685048][ T4412] uclogic: probe of 0003:256C:006D.004F failed with error -71 [ 657.713415][ T4412] usb 2-1: USB disconnect, device number 39 [ 657.894138][T14407] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 657.905977][T14407] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 658.394181][T14411] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 659.007955][ T7545] bio_check_eod: 8616 callbacks suppressed [ 659.007976][ T7545] syz-executor.2: attempt to access beyond end of device [ 659.007976][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 659.028619][T11003] syz-executor.4: attempt to access beyond end of device [ 659.028619][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 659.043365][ T7545] syz-executor.2: attempt to access beyond end of device [ 659.043365][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 659.057381][T11003] syz-executor.4: attempt to access beyond end of device [ 659.057381][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 659.072323][ T7545] syz-executor.2: attempt to access beyond end of device [ 659.072323][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 659.087545][T11003] syz-executor.4: attempt to access beyond end of device [ 659.087545][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 659.102158][ T7545] syz-executor.2: attempt to access beyond end of device [ 659.102158][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 659.117194][ T7545] syz-executor.2: attempt to access beyond end of device [ 659.117194][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 659.131780][T11003] syz-executor.4: attempt to access beyond end of device [ 659.131780][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 659.146140][ T7545] syz-executor.2: attempt to access beyond end of device [ 659.146140][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 659.361482][T14434] serio: Serial port pts1 [ 659.793609][T14446] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 659.832414][T14446] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 661.492186][T14496] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 661.541578][T14496] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 662.477740][ T4803] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 662.605354][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 662.847791][ T4803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.867719][ T4803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.887553][ T4803] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 662.905995][ T4803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.922780][ T4803] usb 4-1: config 0 descriptor?? [ 663.040274][T14531] bridge0: port 3(vlan2) entered blocking state [ 663.056561][T14531] bridge0: port 3(vlan2) entered disabled state [ 663.627836][ T4803] usbhid 4-1:0.0: can't add hid device: -71 [ 663.633659][ T4803] usbhid: probe of 4-1:0.0 failed with error -71 [ 663.648447][ T4803] usb 4-1: USB disconnect, device number 49 [ 664.017965][ T7545] bio_check_eod: 11179 callbacks suppressed [ 664.017986][ T7545] syz-executor.2: attempt to access beyond end of device [ 664.017986][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 664.018195][T11003] syz-executor.4: attempt to access beyond end of device [ 664.018195][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 664.023999][ T7545] syz-executor.2: attempt to access beyond end of device [ 664.023999][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 664.038367][T11003] syz-executor.4: attempt to access beyond end of device [ 664.038367][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 664.080238][ T7545] syz-executor.2: attempt to access beyond end of device [ 664.080238][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 664.084143][T11003] syz-executor.4: attempt to access beyond end of device [ 664.084143][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 664.107945][ T7545] syz-executor.2: attempt to access beyond end of device [ 664.107945][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 664.109979][T11003] syz-executor.4: attempt to access beyond end of device [ 664.109979][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 664.128500][ T7545] syz-executor.2: attempt to access beyond end of device [ 664.128500][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 664.137817][T11003] syz-executor.4: attempt to access beyond end of device [ 664.137817][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 664.521969][ T28] audit: type=1400 audit(2000000173.970:12243): avc: denied { read } for pid=14560 comm="syz-executor.4" name="/" dev="configfs" ino=11870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 664.562790][ T28] audit: type=1400 audit(2000000173.970:12244): avc: denied { open } for pid=14560 comm="syz-executor.4" path="/sys/kernel/config" dev="configfs" ino=11870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 664.615232][ T28] audit: type=1400 audit(2000000173.970:12245): avc: denied { create } for pid=14560 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 664.941377][T14580] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 664.985306][T14580] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 665.399264][T14587] bridge0: port 3(vlan2) entered blocking state [ 665.423952][T14587] bridge0: port 3(vlan2) entered disabled state [ 665.467178][T14590] incfs: Options parsing error. -22 [ 665.480180][T14590] incfs: mount failed -22 [ 665.675233][T14596] bridge0: port 3(vlan2) entered blocking state [ 665.693575][T14596] bridge0: port 3(vlan2) entered disabled state [ 665.847672][ T4803] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 666.057721][ T347] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 666.218240][ T4803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.242148][ T4803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.261948][ T4803] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 666.281408][ T4803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.300066][ T4803] usb 2-1: config 0 descriptor?? [ 666.307688][ T347] usb 5-1: Using ep0 maxpacket: 32 [ 666.427761][ T347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.449354][ T347] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.467690][ T347] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 666.486768][ T347] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.503118][ T347] usb 5-1: config 0 descriptor?? [ 666.548798][ T347] hub 5-1:0.0: USB hub found [ 666.800412][ T4803] wacom 0003:056A:0331.0050: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0 [ 666.847838][ T347] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 667.002714][T10169] usb 2-1: USB disconnect, device number 40 [ 667.137735][ T347] usbhid 5-1:0.0: can't add hid device: -71 [ 667.143595][ T347] usbhid: probe of 5-1:0.0 failed with error -71 [ 667.197411][ T347] usb 5-1: USB disconnect, device number 42 [ 667.465262][T14644] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 667.550236][T14646] input: syz1 as /devices/virtual/input/input85 [ 667.608566][T14646] input: failed to attach handler leds to device input85, error: -6 [ 668.207811][T14662] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 668.727186][T14676] device ip6gretap0 entered promiscuous mode [ 668.761145][T14676] device vlan2 entered promiscuous mode [ 668.775004][T14676] device ip6gretap0 left promiscuous mode [ 668.837699][T10169] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 669.027754][T11003] bio_check_eod: 12757 callbacks suppressed [ 669.027777][T11003] syz-executor.4: attempt to access beyond end of device [ 669.027777][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 669.029528][ T7545] syz-executor.2: attempt to access beyond end of device [ 669.029528][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 669.033713][T11003] syz-executor.4: attempt to access beyond end of device [ 669.033713][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 669.067997][ T7545] syz-executor.2: attempt to access beyond end of device [ 669.067997][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 669.108534][ T7545] syz-executor.2: attempt to access beyond end of device [ 669.108534][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 669.137794][T10169] usb 5-1: Using ep0 maxpacket: 32 [ 669.139964][ T7545] syz-executor.2: attempt to access beyond end of device [ 669.139964][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 669.152766][T11003] syz-executor.4: attempt to access beyond end of device [ 669.152766][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 669.175281][ T7545] syz-executor.2: attempt to access beyond end of device [ 669.175281][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 669.190618][T11003] syz-executor.4: attempt to access beyond end of device [ 669.190618][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 669.206475][ T7545] syz-executor.2: attempt to access beyond end of device [ 669.206475][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 669.287729][T10169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.313411][T10169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.370635][T10169] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 669.750486][T10169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.759124][T10169] usb 5-1: config 0 descriptor?? [ 669.798233][T10169] hub 5-1:0.0: USB hub found [ 670.131983][T10169] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 670.207689][ T347] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 670.427708][T10169] usbhid 5-1:0.0: can't add hid device: -71 [ 670.433539][T10169] usbhid: probe of 5-1:0.0 failed with error -71 [ 670.477912][T10169] usb 5-1: USB disconnect, device number 43 [ 670.567760][ T347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.587742][ T347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.607673][ T347] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 670.616556][ T347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.647878][ T347] usb 4-1: config 0 descriptor?? [ 671.128637][ T347] arvo 0003:1E7D:30D4.0051: unknown main item tag 0x0 [ 671.135261][ T347] arvo 0003:1E7D:30D4.0051: item fetching failed at offset 5/7 [ 671.157845][ T347] arvo 0003:1E7D:30D4.0051: parse failed [ 671.163328][ T347] arvo: probe of 0003:1E7D:30D4.0051 failed with error -22 [ 671.329225][T10169] usb 4-1: USB disconnect, device number 50 [ 671.931384][T14730] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! [ 672.616390][T14745] kvm: pic: non byte read [ 672.785895][T14752] netem: unknown loss type 8 [ 672.797741][T14752] netem: change failed [ 673.967811][T14786] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 674.038590][ T7545] bio_check_eod: 11019 callbacks suppressed [ 674.038612][ T7545] syz-executor.2: attempt to access beyond end of device [ 674.038612][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 674.041578][T11003] syz-executor.4: attempt to access beyond end of device [ 674.041578][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 674.045001][ T7545] syz-executor.2: attempt to access beyond end of device [ 674.045001][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 674.086587][T11003] syz-executor.4: attempt to access beyond end of device [ 674.086587][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 674.087308][ T7545] syz-executor.2: attempt to access beyond end of device [ 674.087308][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 674.114940][ T7545] syz-executor.2: attempt to access beyond end of device [ 674.114940][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 674.129759][ T7545] syz-executor.2: attempt to access beyond end of device [ 674.129759][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 674.144503][ T7545] syz-executor.2: attempt to access beyond end of device [ 674.144503][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 674.159222][ T7545] syz-executor.2: attempt to access beyond end of device [ 674.159222][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 674.168007][T11003] syz-executor.4: attempt to access beyond end of device [ 674.168007][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 674.726878][ T28] audit: type=1400 audit(2000000184.170:12246): avc: denied { accept } for pid=14798 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 674.727023][T14799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=14799 comm=syz-executor.0 [ 676.028133][ T365] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 676.407796][ T39] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 676.437733][ T365] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 676.458110][ T365] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 676.481101][ T365] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 676.497658][ T365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.550121][ T365] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 676.789664][ T365] usb 2-1: USB disconnect, device number 41 [ 676.807743][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.823807][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.843585][ T39] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 676.865893][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.884537][ T39] usb 5-1: config 0 descriptor?? [ 677.674059][T14835] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 677.867711][ T39] usb 5-1: string descriptor 0 read error: -71 [ 677.887718][ T39] uclogic 0003:256C:006D.0052: failed retrieving string descriptor #200: -71 [ 677.896330][ T39] uclogic 0003:256C:006D.0052: failed retrieving pen parameters: -71 [ 677.904607][ T39] uclogic 0003:256C:006D.0052: failed probing pen v2 parameters: -71 [ 677.912705][ T39] uclogic 0003:256C:006D.0052: failed probing parameters: -71 [ 677.920327][ T39] uclogic: probe of 0003:256C:006D.0052 failed with error -71 [ 677.930939][ T39] usb 5-1: USB disconnect, device number 44 [ 679.048114][T11003] bio_check_eod: 10820 callbacks suppressed [ 679.048137][T11003] syz-executor.4: attempt to access beyond end of device [ 679.048137][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 679.050140][ T7545] syz-executor.2: attempt to access beyond end of device [ 679.050140][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 679.054351][T11003] syz-executor.4: attempt to access beyond end of device [ 679.054351][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 679.068995][ T7545] syz-executor.2: attempt to access beyond end of device [ 679.068995][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 679.082924][T11003] syz-executor.4: attempt to access beyond end of device [ 679.082924][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 679.097127][ T7545] syz-executor.2: attempt to access beyond end of device [ 679.097127][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 679.109737][T11003] syz-executor.4: attempt to access beyond end of device [ 679.109737][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 679.174710][T11003] syz-executor.4: attempt to access beyond end of device [ 679.174710][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 679.190316][T11003] syz-executor.4: attempt to access beyond end of device [ 679.190316][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 679.209026][T11003] syz-executor.4: attempt to access beyond end of device [ 679.209026][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 680.192465][T14886] /dev/loop1: Can't open blockdev [ 680.463861][T14894] device syzkaller0 entered promiscuous mode [ 681.420127][T14917] KVM: debugfs: duplicate directory 14917-6 [ 682.297685][ T347] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 682.657778][ T347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 682.681566][ T347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 682.705039][ T347] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 682.721039][ T347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.731980][ T347] usb 1-1: config 0 descriptor?? [ 682.763698][T14938] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.786654][T14938] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.796179][T14938] device bridge_slave_0 entered promiscuous mode [ 682.810041][T14938] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.817030][T14938] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.838975][T14938] device bridge_slave_1 entered promiscuous mode [ 683.345169][T14938] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.352070][T14938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.352794][ T347] arvo 0003:1E7D:30D4.0053: unknown main item tag 0x0 [ 683.359181][T14938] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.365718][ T347] arvo 0003:1E7D:30D4.0053: item fetching failed at offset 5/7 [ 683.372541][T14938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.380235][ T347] arvo 0003:1E7D:30D4.0053: parse failed [ 683.408377][ T347] arvo: probe of 0003:1E7D:30D4.0053 failed with error -22 [ 683.408612][T14949] syz-executor.4[14949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 683.415477][T14949] syz-executor.4[14949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 683.417010][ T347] usb 1-1: USB disconnect, device number 41 [ 683.464137][T14950] syz-executor.4[14950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 683.464217][T14950] syz-executor.4[14950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 683.476045][ T4412] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.518388][ T4412] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.526189][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 683.548031][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 683.570939][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 683.588097][ T4803] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.595048][ T4803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.612739][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 683.629351][ T4803] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.636234][ T4803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.657987][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 683.677384][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 683.699919][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 683.772293][T14938] device veth0_vlan entered promiscuous mode [ 683.778876][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 683.786699][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 683.818415][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 683.825790][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 683.854875][T14938] device veth1_macvtap entered promiscuous mode [ 683.862474][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 683.878022][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 683.886250][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 683.907686][T11771] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 683.917770][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 683.926002][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 683.948043][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 683.956441][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 684.058334][T11003] bio_check_eod: 11478 callbacks suppressed [ 684.058355][T11003] syz-executor.4: attempt to access beyond end of device [ 684.058355][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 684.059577][ T7545] syz-executor.2: attempt to access beyond end of device [ 684.059577][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 684.064596][T11003] syz-executor.4: attempt to access beyond end of device [ 684.064596][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 684.079990][ T7545] syz-executor.2: attempt to access beyond end of device [ 684.079990][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 684.104906][T11003] syz-executor.4: attempt to access beyond end of device [ 684.104906][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 684.120235][ T7545] syz-executor.2: attempt to access beyond end of device [ 684.120235][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 684.148009][T11003] syz-executor.4: attempt to access beyond end of device [ 684.148009][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 684.152001][ T7545] syz-executor.2: attempt to access beyond end of device [ 684.152001][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 684.168533][T11003] syz-executor.4: attempt to access beyond end of device [ 684.168533][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 684.177312][ T7545] syz-executor.2: attempt to access beyond end of device [ 684.177312][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 684.291891][T14959] device syzkaller0 entered promiscuous mode [ 684.307766][T11771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.324120][T11771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.342779][T11771] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 684.362801][T11771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.384347][T11771] usb 5-1: config 0 descriptor?? [ 685.247716][T11771] usb 5-1: string descriptor 0 read error: -71 [ 685.268407][T11771] uclogic 0003:256C:006D.0054: failed retrieving string descriptor #200: -71 [ 685.280360][T11771] uclogic 0003:256C:006D.0054: failed retrieving pen parameters: -71 [ 685.295887][T11771] uclogic 0003:256C:006D.0054: failed probing pen v2 parameters: -71 [ 685.311722][T11771] uclogic 0003:256C:006D.0054: failed probing parameters: -71 [ 685.326756][T11771] uclogic: probe of 0003:256C:006D.0054 failed with error -71 [ 685.342812][T11771] usb 5-1: USB disconnect, device number 45 [ 685.976982][T14977] incfs: Options parsing error. -22 [ 685.992832][T14977] incfs: mount failed -22 [ 686.637904][T14227] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 686.850436][T14985] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 686.973820][T14985] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.980912][T14985] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.127725][T14227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.143634][T14227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.172290][T14227] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 687.191391][T14227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.215393][T14227] usb 5-1: config 0 descriptor?? [ 687.457684][ T347] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 687.776414][T14227] wacom 0003:056A:0331.0055: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.4-1/input0 [ 688.153000][T11771] usb 5-1: USB disconnect, device number 46 [ 688.567769][ T347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.585353][ T347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.606635][ T347] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 688.625956][ T347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.644497][ T347] usb 3-1: config 0 descriptor?? [ 688.714855][T15006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15006 comm=syz-executor.1 [ 689.067837][ T7545] bio_check_eod: 7925 callbacks suppressed [ 689.067861][ T7545] syz-executor.2: attempt to access beyond end of device [ 689.067861][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 689.070862][T11003] syz-executor.4: attempt to access beyond end of device [ 689.070862][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 689.074474][ T7545] syz-executor.2: attempt to access beyond end of device [ 689.074474][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 689.089355][T11003] syz-executor.4: attempt to access beyond end of device [ 689.089355][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 689.102857][ T7545] syz-executor.2: attempt to access beyond end of device [ 689.102857][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 689.144009][T11003] syz-executor.4: attempt to access beyond end of device [ 689.144009][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 689.144073][ T7545] syz-executor.2: attempt to access beyond end of device [ 689.144073][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 689.171985][T11003] syz-executor.4: attempt to access beyond end of device [ 689.171985][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 689.172859][ T7545] syz-executor.2: attempt to access beyond end of device [ 689.172859][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 689.200715][T11003] syz-executor.4: attempt to access beyond end of device [ 689.200715][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 689.258830][ T347] arvo 0003:1E7D:30D4.0056: unknown main item tag 0x0 [ 689.265460][ T347] arvo 0003:1E7D:30D4.0056: item fetching failed at offset 5/7 [ 689.285960][ T347] arvo 0003:1E7D:30D4.0056: parse failed [ 689.291563][ T347] arvo: probe of 0003:1E7D:30D4.0056 failed with error -22 [ 689.434733][ T28] audit: type=1400 audit(2000000198.880:12247): avc: denied { listen } for pid=15014 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 689.462001][ T4412] usb 3-1: USB disconnect, device number 54 [ 690.623330][T15040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15040 comm=syz-executor.2 [ 693.198785][T15070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15070 comm=syz-executor.0 [ 694.089237][T11003] bio_check_eod: 9859 callbacks suppressed [ 694.089282][T11003] syz-executor.4: attempt to access beyond end of device [ 694.089282][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 694.119455][ T7545] syz-executor.2: attempt to access beyond end of device [ 694.119455][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 694.126490][T11003] syz-executor.4: attempt to access beyond end of device [ 694.126490][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 694.139079][ T7545] syz-executor.2: attempt to access beyond end of device [ 694.139079][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 694.162912][ T7545] syz-executor.2: attempt to access beyond end of device [ 694.162912][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 694.164724][T11003] syz-executor.4: attempt to access beyond end of device [ 694.164724][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 694.177938][ T7545] syz-executor.2: attempt to access beyond end of device [ 694.177938][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 694.191362][T11003] syz-executor.4: attempt to access beyond end of device [ 694.191362][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 694.206973][ T7545] syz-executor.2: attempt to access beyond end of device [ 694.206973][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 694.234811][ T7545] syz-executor.2: attempt to access beyond end of device [ 694.234811][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 694.271163][T15091] incfs: Options parsing error. -22 [ 694.276282][T15091] incfs: mount failed -22 [ 694.637677][ T383] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 694.667210][T15095] overlayfs: failed to resolve './file0': -2 [ 694.870785][T15105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15105 comm=syz-executor.4 [ 695.008284][ T383] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.028392][ T383] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.048731][ T383] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 695.058078][ T383] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.066847][ T383] usb 1-1: config 0 descriptor?? [ 695.591082][ T383] wacom 0003:056A:0331.0057: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.0-1/input0 [ 696.166746][ T383] usb 1-1: USB disconnect, device number 42 [ 696.197714][T15123] syz-executor.1[15123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 696.198189][T15123] syz-executor.1[15123] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 696.497911][ T28] audit: type=1400 audit(2000000205.940:12248): avc: denied { create } for pid=15124 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 699.097822][ T7545] bio_check_eod: 7353 callbacks suppressed [ 699.097843][ T7545] syz-executor.2: attempt to access beyond end of device [ 699.097843][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 699.098781][T11003] syz-executor.4: attempt to access beyond end of device [ 699.098781][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 699.104243][ T7545] syz-executor.2: attempt to access beyond end of device [ 699.104243][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 699.146542][ T7545] syz-executor.2: attempt to access beyond end of device [ 699.146542][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 699.161309][ T7545] syz-executor.2: attempt to access beyond end of device [ 699.161309][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 699.164555][T11003] syz-executor.4: attempt to access beyond end of device [ 699.164555][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 699.175777][ T7545] syz-executor.2: attempt to access beyond end of device [ 699.175777][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 699.203639][ T7545] syz-executor.2: attempt to access beyond end of device [ 699.203639][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 699.218156][T11003] syz-executor.4: attempt to access beyond end of device [ 699.218156][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 699.218396][ T7545] syz-executor.2: attempt to access beyond end of device [ 699.218396][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 699.281417][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 701.536310][ T28] audit: type=1400 audit(2000000210.980:12249): avc: denied { getattr } for pid=15201 comm="syz-executor.1" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=89429 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 703.720458][T15236] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.736400][T15236] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.756669][T15236] device bridge_slave_0 entered promiscuous mode [ 703.777795][T15236] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.795435][T15236] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.815341][T15236] device bridge_slave_1 entered promiscuous mode [ 703.936385][T15242] netem: change failed [ 703.992080][T15236] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.998974][T15236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.006066][T15236] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.012866][T15236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.092226][ T878] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.103702][ T878] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.111173][T11003] bio_check_eod: 7641 callbacks suppressed [ 704.111195][T11003] syz-executor.4: attempt to access beyond end of device [ 704.111195][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 704.131082][ T7545] syz-executor.2: attempt to access beyond end of device [ 704.131082][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 704.147866][ T878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 704.152327][T11003] syz-executor.4: attempt to access beyond end of device [ 704.152327][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 704.155246][ T878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 704.178442][ T7545] syz-executor.2: attempt to access beyond end of device [ 704.178442][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 704.193153][T11003] syz-executor.4: attempt to access beyond end of device [ 704.193153][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 704.211707][T11003] syz-executor.4: attempt to access beyond end of device [ 704.211707][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 704.233956][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 704.242124][T11003] syz-executor.4: attempt to access beyond end of device [ 704.242124][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 704.248494][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.256400][ T7545] syz-executor.2: attempt to access beyond end of device [ 704.256400][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 704.262634][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.284512][T11003] syz-executor.4: attempt to access beyond end of device [ 704.284512][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 704.299354][T11003] syz-executor.4: attempt to access beyond end of device [ 704.299354][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 704.304640][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 704.313684][T15249] syz-executor.2[15249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.327936][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.333418][T15249] syz-executor.2[15249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 704.339513][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.404969][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 704.419675][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 704.455340][ T878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 704.468043][ T878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 704.485569][ T878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 704.503389][ T878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 704.518447][T15236] device veth0_vlan entered promiscuous mode [ 704.533520][T15236] device veth1_macvtap entered promiscuous mode [ 704.578305][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 704.608676][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 704.624339][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 707.634709][T15303] syz-executor.2[15303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 707.634783][T15303] syz-executor.2[15303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 708.003112][T15310] overlayfs: unrecognized mount option "obj_role=" or missing value [ 709.697741][ T7545] bio_check_eod: 6874 callbacks suppressed [ 709.697762][ T7545] syz-executor.2: attempt to access beyond end of device [ 709.697762][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 709.717981][T11003] syz-executor.4: attempt to access beyond end of device [ 709.717981][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 709.730677][ T7545] syz-executor.2: attempt to access beyond end of device [ 709.730677][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 709.737963][T11003] syz-executor.4: attempt to access beyond end of device [ 709.737963][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 709.747793][ T7545] syz-executor.2: attempt to access beyond end of device [ 709.747793][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 709.761298][T11003] syz-executor.4: attempt to access beyond end of device [ 709.761298][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 709.774254][ T7545] syz-executor.2: attempt to access beyond end of device [ 709.774254][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 709.790321][T11003] syz-executor.4: attempt to access beyond end of device [ 709.790321][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 709.802501][ T7545] syz-executor.2: attempt to access beyond end of device [ 709.802501][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 709.816499][T11003] syz-executor.4: attempt to access beyond end of device [ 709.816499][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 710.191560][T15341] syz-executor.1[15341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 710.191635][T15341] syz-executor.1[15341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 711.627699][T14227] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 711.887667][T14227] usb 2-1: Using ep0 maxpacket: 8 [ 712.007723][T14227] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 712.019864][T14227] usb 2-1: config 179 has no interface number 0 [ 712.034658][T14227] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 712.112647][T14227] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 712.124005][T14227] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 712.134989][T14227] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 712.146639][T14227] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 712.159771][T14227] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 712.168707][T14227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.187733][T15388] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 712.578397][T14227] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input92 [ 712.777171][T15388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.792902][T15388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.039321][ T24] usb 2-1: USB disconnect, device number 42 [ 713.057649][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 713.065931][ T24] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 714.043352][ T28] audit: type=1400 audit(2000000223.490:12250): avc: denied { mounton } for pid=15438 comm="syz-executor.2" path="/root/syzkaller-testdir1965020138/syzkaller.bOms8x/51/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 714.122686][T15444] syz-executor.4[15444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 714.122759][T15444] syz-executor.4[15444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 714.709167][ T7545] bio_check_eod: 12170 callbacks suppressed [ 714.709188][ T7545] syz-executor.2: attempt to access beyond end of device [ 714.709188][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 714.718414][T11003] syz-executor.4: attempt to access beyond end of device [ 714.718414][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 714.721738][ T7545] syz-executor.2: attempt to access beyond end of device [ 714.721738][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 714.727260][T11003] syz-executor.4: attempt to access beyond end of device [ 714.727260][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 714.741639][ T7545] syz-executor.2: attempt to access beyond end of device [ 714.741639][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 714.754486][T11003] syz-executor.4: attempt to access beyond end of device [ 714.754486][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 714.783668][ T7545] syz-executor.2: attempt to access beyond end of device [ 714.783668][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 714.824125][T11003] syz-executor.4: attempt to access beyond end of device [ 714.824125][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 714.828930][ T7545] syz-executor.2: attempt to access beyond end of device [ 714.828930][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 714.838603][T11003] syz-executor.4: attempt to access beyond end of device [ 714.838603][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 715.061337][T15462] fscrypt (sda1, inode 1970): Sub-block data units not yet supported with IV_INO_LBLK_32 [ 716.338832][ T28] audit: type=1400 audit(2000000225.790:12251): avc: denied { mount } for pid=15488 comm="syz-executor.2" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 716.386961][ T28] audit: type=1400 audit(2000000225.820:12252): avc: denied { unmount } for pid=15488 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 716.434370][ T28] audit: type=1400 audit(2000000225.830:12253): avc: denied { watch } for pid=15490 comm="syz-executor.4" path="/root/syzkaller-testdir2770630877/syzkaller.wPCNVu/160/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 716.991712][T15506] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.998946][T15506] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.006603][T15506] device bridge_slave_0 entered promiscuous mode [ 717.014512][T12142] device bridge_slave_1 left promiscuous mode [ 717.027763][T12142] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.035240][T12142] device bridge_slave_0 left promiscuous mode [ 717.044958][T12142] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.057722][ T4412] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 717.069105][T12142] device veth1_macvtap left promiscuous mode [ 717.074963][T12142] device veth0_vlan left promiscuous mode [ 717.240090][T15506] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.249729][T15506] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.267757][T15506] device bridge_slave_1 entered promiscuous mode [ 717.412509][T15506] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.419405][T15506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.426507][T15506] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.433298][T15506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.458216][ T4412] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.487649][ T4412] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.497232][ T4412] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 717.527676][ T4412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.535989][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 717.543644][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 717.552585][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 717.567876][ T4412] usb 2-1: config 0 descriptor?? [ 717.578525][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 717.608814][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 717.639207][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 717.647846][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 717.746221][T15519] syz-executor.4[15519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 717.746504][T15519] syz-executor.4[15519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 717.977941][T15506] device veth0_vlan entered promiscuous mode [ 717.998749][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 718.006591][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 718.021460][T15506] device veth1_macvtap entered promiscuous mode [ 718.028677][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 718.035994][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 718.058823][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 718.066927][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 718.098153][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 718.110260][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 718.121781][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 718.149433][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 718.159792][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 718.747802][ T4412] uclogic 0003:256C:006D.0058: interface is invalid, ignoring [ 718.951573][T14227] usb 2-1: USB disconnect, device number 43 [ 719.397653][ T4803] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 719.647683][ T4803] usb 3-1: Using ep0 maxpacket: 8 [ 719.717774][T11003] bio_check_eod: 13003 callbacks suppressed [ 719.717796][T11003] syz-executor.4: attempt to access beyond end of device [ 719.717796][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 719.717958][ T7545] syz-executor.2: attempt to access beyond end of device [ 719.717958][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 719.723918][T11003] syz-executor.4: attempt to access beyond end of device [ 719.723918][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 719.739228][ T7545] syz-executor.2: attempt to access beyond end of device [ 719.739228][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 719.752800][T11003] syz-executor.4: attempt to access beyond end of device [ 719.752800][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 719.765512][ T7545] syz-executor.2: attempt to access beyond end of device [ 719.765512][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 719.779951][T11003] syz-executor.4: attempt to access beyond end of device [ 719.779951][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 719.794170][ T7545] syz-executor.2: attempt to access beyond end of device [ 719.794170][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 719.807945][ T4803] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 719.821216][ T7545] syz-executor.2: attempt to access beyond end of device [ 719.821216][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 719.835589][T11003] syz-executor.4: attempt to access beyond end of device [ 719.835589][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 719.870393][ T4803] usb 3-1: config 179 has no interface number 0 [ 719.876414][ T4803] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 719.887317][ T4803] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 719.898392][ T4803] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 719.927724][ T4803] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 719.939359][ T4803] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 719.967671][ T4803] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 719.977006][ T4803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.997728][T15539] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 720.238405][ T4803] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input93 [ 720.440209][T15539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.467018][T15539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.745091][T15572] overlayfs: unrecognized mount option "obj_role=" or missing value [ 720.823321][ T24] usb 3-1: USB disconnect, device number 55 [ 720.837643][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 720.845778][ T24] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 721.783031][T15581] device pim6reg1 entered promiscuous mode [ 721.917715][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 722.158360][T15589] syz-executor.4[15589] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 722.158441][T15589] syz-executor.4[15589] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 722.170264][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 722.307717][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.327631][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 722.344736][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 722.363087][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.372065][ T24] usb 2-1: config 0 descriptor?? [ 722.418199][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 722.619072][ T4803] usb 2-1: USB disconnect, device number 44 [ 724.602577][T15662] futex_wake_op: syz-executor.1 tries to shift op by 36; fix this program [ 724.728739][T11003] bio_check_eod: 14893 callbacks suppressed [ 724.728762][T11003] syz-executor.4: attempt to access beyond end of device [ 724.728762][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 724.750991][ T7545] syz-executor.2: attempt to access beyond end of device [ 724.750991][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 724.761963][T11003] syz-executor.4: attempt to access beyond end of device [ 724.761963][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 724.775680][ T7545] syz-executor.2: attempt to access beyond end of device [ 724.775680][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 724.780000][T11003] syz-executor.4: attempt to access beyond end of device [ 724.780000][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 724.804352][ T7545] syz-executor.2: attempt to access beyond end of device [ 724.804352][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 724.807685][T11003] syz-executor.4: attempt to access beyond end of device [ 724.807685][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 724.837452][ T7545] syz-executor.2: attempt to access beyond end of device [ 724.837452][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 724.840918][T11003] syz-executor.4: attempt to access beyond end of device [ 724.840918][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 724.866442][T11003] syz-executor.4: attempt to access beyond end of device [ 724.866442][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 725.332414][T15674] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 725.701748][T15683] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 725.777691][ T24] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 725.902775][ T43] device bridge_slave_1 left promiscuous mode [ 725.912942][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.972407][ T43] device bridge_slave_0 left promiscuous mode [ 725.982705][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.999681][ T43] device veth1_macvtap left promiscuous mode [ 726.005577][ T43] device veth0_vlan left promiscuous mode [ 726.067731][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 726.142754][T15681] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.161183][T15681] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.175893][T15681] device bridge_slave_0 entered promiscuous mode [ 726.191526][T15681] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.205652][T15681] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.217729][ T24] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 726.228423][T15681] device bridge_slave_1 entered promiscuous mode [ 726.235633][ T24] usb 5-1: config 179 has no interface number 0 [ 726.250134][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 726.282867][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 726.317840][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 726.352373][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 726.376121][ T24] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 726.397526][ T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 726.433922][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.454898][T15681] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.461832][T15681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.468900][T15681] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.475650][T15681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.483308][T15678] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 726.518755][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.527060][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.534526][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 726.542204][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 726.564821][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 726.573318][T14227] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.580219][T14227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.588282][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 726.596553][T14227] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.603446][T14227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.610787][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 726.624382][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 726.646849][T15681] device veth0_vlan entered promiscuous mode [ 726.653580][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 726.662403][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 726.671240][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 726.678709][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 726.693641][T15681] device veth1_macvtap entered promiscuous mode [ 726.706028][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 726.722060][T14227] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input94 [ 726.744329][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 726.753003][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 726.912138][T15678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.940702][T15678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.172571][ T24] usb 5-1: USB disconnect, device number 47 [ 727.178356][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 727.178395][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 727.225630][ T24] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 727.491723][T15708] syzkaller0: refused to change device tx_queue_len [ 727.545571][ T28] audit: type=1326 audit(2000000236.990:12254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d527cea9 code=0x7ffc0000 [ 727.594559][ T28] audit: type=1326 audit(2000000236.990:12255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d527cea9 code=0x7ffc0000 [ 727.642175][ T28] audit: type=1326 audit(2000000237.020:12256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36d527cea9 code=0x7ffc0000 [ 727.694056][ T28] audit: type=1326 audit(2000000237.020:12257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d527cea9 code=0x7ffc0000 [ 727.737678][ T28] audit: type=1326 audit(2000000237.020:12258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d527cea9 code=0x7ffc0000 [ 727.776617][ T28] audit: type=1326 audit(2000000237.020:12259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f36d527cea9 code=0x7ffc0000 [ 727.820774][ T28] audit: type=1326 audit(2000000237.020:12260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d527cea9 code=0x7ffc0000 [ 727.872850][ T28] audit: type=1326 audit(2000000237.020:12261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d527cea9 code=0x7ffc0000 [ 727.920057][ T28] audit: type=1326 audit(2000000237.020:12262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f36d527cea9 code=0x7ffc0000 [ 727.967646][ T28] audit: type=1326 audit(2000000237.020:12263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15709 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d527cea9 code=0x7ffc0000 [ 728.627758][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 728.997769][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 729.031072][ T24] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 729.051277][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.069097][ T24] usb 2-1: config 0 descriptor?? [ 729.109596][T15740] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.116460][T15740] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.128266][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 729.138224][T15740] device bridge_slave_0 entered promiscuous mode [ 729.145179][T15740] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.165803][T15740] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.173343][T15740] device bridge_slave_1 entered promiscuous mode [ 729.188268][ T43] device bridge_slave_1 left promiscuous mode [ 729.197469][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.215397][ T43] device bridge_slave_0 left promiscuous mode [ 729.225621][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.242736][ T43] device veth1_macvtap left promiscuous mode [ 729.248876][ T43] device veth0_vlan left promiscuous mode [ 729.416092][ T4803] usb 2-1: USB disconnect, device number 45 [ 729.580026][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 729.587536][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 729.609947][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 729.624357][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 729.636238][ T4412] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.643117][ T4412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.657729][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 729.668288][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 729.684919][ T4412] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.691795][ T4412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.704985][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 729.721736][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 729.731789][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 729.739672][ T7545] bio_check_eod: 12778 callbacks suppressed [ 729.739706][ T7545] syz-executor.2: attempt to access beyond end of device [ 729.739706][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 729.741734][T11003] syz-executor.4: attempt to access beyond end of device [ 729.741734][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 729.755472][T15740] device veth0_vlan entered promiscuous mode [ 729.769564][T11003] syz-executor.4: attempt to access beyond end of device [ 729.769564][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 729.774833][ T7545] syz-executor.2: attempt to access beyond end of device [ 729.774833][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 729.785327][T11003] syz-executor.4: attempt to access beyond end of device [ 729.785327][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 729.795032][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 729.820052][T11003] syz-executor.4: attempt to access beyond end of device [ 729.820052][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 729.821702][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 729.833892][T11003] syz-executor.4: attempt to access beyond end of device [ 729.833892][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 729.842555][ T7545] syz-executor.2: attempt to access beyond end of device [ 729.842555][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 729.857856][T11003] syz-executor.4: attempt to access beyond end of device [ 729.857856][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 729.864369][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 729.888378][T11003] syz-executor.4: attempt to access beyond end of device [ 729.888378][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 729.898004][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 729.943772][T15740] device veth1_macvtap entered promiscuous mode [ 729.956578][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 729.979313][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 729.989515][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 730.295137][T15761] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 731.266666][ T4803] kernel write not supported for file bpf-prog (pid: 4803 comm: kworker/0:9) [ 732.202821][T15809] syz-executor.4[15809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 732.203417][T15809] syz-executor.4[15809] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 732.736855][T15818] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56 [ 733.383133][T15825] random: crng reseeded on system resumption [ 733.648048][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 733.648069][ T28] audit: type=1400 audit(2000000242.830:12282): avc: denied { append } for pid=15821 comm="syz-executor.2" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 734.107920][ T28] audit: type=1326 audit(2000000243.550:12283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15829 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607bc7cea9 code=0x7ffc0000 [ 734.155027][ T28] audit: type=1326 audit(2000000243.560:12284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15829 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607bc7cea9 code=0x7ffc0000 [ 734.207647][ T28] audit: type=1326 audit(2000000243.590:12285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15829 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f607bc7cea9 code=0x7ffc0000 [ 734.247680][ T28] audit: type=1326 audit(2000000243.590:12286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15829 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607bc7cea9 code=0x7ffc0000 [ 734.271712][ T28] audit: type=1326 audit(2000000243.590:12287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15829 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607bc7cea9 code=0x7ffc0000 [ 734.295727][ T28] audit: type=1326 audit(2000000243.590:12288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15829 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f607bc7cea9 code=0x7ffc0000 [ 734.321258][ T28] audit: type=1326 audit(2000000243.590:12289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15829 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607bc7cea9 code=0x7ffc0000 [ 734.345291][ T28] audit: type=1326 audit(2000000243.590:12290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15829 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f607bc7a627 code=0x7ffc0000 [ 734.369247][ T28] audit: type=1326 audit(2000000243.590:12291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15829 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f607bc40309 code=0x7ffc0000 [ 734.747879][ T7545] bio_check_eod: 10959 callbacks suppressed [ 734.747909][ T7545] syz-executor.2: attempt to access beyond end of device [ 734.747909][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 734.748349][T11003] syz-executor.4: attempt to access beyond end of device [ 734.748349][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 734.753926][ T7545] syz-executor.2: attempt to access beyond end of device [ 734.753926][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 734.768699][T11003] syz-executor.4: attempt to access beyond end of device [ 734.768699][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 734.810194][T11003] syz-executor.4: attempt to access beyond end of device [ 734.810194][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 734.810772][ T7545] syz-executor.2: attempt to access beyond end of device [ 734.810772][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 734.824616][T11003] syz-executor.4: attempt to access beyond end of device [ 734.824616][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 734.852747][ T7545] syz-executor.2: attempt to access beyond end of device [ 734.852747][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 734.852828][T11003] syz-executor.4: attempt to access beyond end of device [ 734.852828][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 734.880845][T11003] syz-executor.4: attempt to access beyond end of device [ 734.880845][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 735.471177][T15857] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.482199][T15857] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.499663][T15857] device bridge_slave_0 entered promiscuous mode [ 735.512724][T15857] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.527143][T15857] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.538358][T15857] device bridge_slave_1 entered promiscuous mode [ 735.743024][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 735.750719][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 735.778603][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 735.787184][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 735.805917][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.812800][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.830547][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 735.844434][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 735.857895][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.864773][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.960800][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 735.970208][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 735.998644][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 736.013390][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 736.029022][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 736.043607][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 736.069234][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 736.080373][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 736.089400][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 736.098063][T15857] device veth0_vlan entered promiscuous mode [ 736.111949][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 736.125911][T15857] device veth1_macvtap entered promiscuous mode [ 736.143826][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 736.152631][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 736.167796][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 736.176977][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 736.596764][T15897] input: syz1 as /devices/virtual/input/input96 [ 737.152712][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.177710][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.196337][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.215262][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.239196][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.258151][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.265634][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.283306][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.292428][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.313193][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.326385][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.343827][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.362228][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.377656][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.385036][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.397921][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.407658][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.427635][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.434879][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.447777][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.467767][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.487776][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.509932][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.517660][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.535013][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.547642][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.554891][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.572271][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.584947][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.599837][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.614675][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.629544][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.640085][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.650590][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.661165][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.672755][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.683286][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.693771][ T347] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 737.722189][ T347] hid-generic 0000:0000:0000.0059: hidraw0: HID v0.00 Device [syz0] on syz0 [ 737.987652][ T4803] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 738.347750][ T4803] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.367655][ T4803] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 738.376535][ T4803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.395319][ T4803] usb 4-1: config 0 descriptor?? [ 738.903917][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 738.903964][ T28] audit: type=1400 audit(2000000248.350:12313): avc: denied { audit_write } for pid=15915 comm="syz-executor.2" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 739.070823][ T28] audit: type=1107 audit(2000000248.350:12314): pid=15915 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 739.127728][ T4803] samsung 0003:0419:0001.005A: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 739.148529][ T4803] usb 4-1: USB disconnect, device number 51 [ 739.757664][ T7545] bio_check_eod: 10754 callbacks suppressed [ 739.757684][ T7545] syz-executor.2: attempt to access beyond end of device [ 739.757684][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 739.757686][T11003] syz-executor.4: attempt to access beyond end of device [ 739.757686][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 739.757938][T11003] syz-executor.4: attempt to access beyond end of device [ 739.757938][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 739.763732][ T7545] syz-executor.2: attempt to access beyond end of device [ 739.763732][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 739.778519][T11003] syz-executor.4: attempt to access beyond end of device [ 739.778519][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 739.792653][ T7545] syz-executor.2: attempt to access beyond end of device [ 739.792653][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 739.805805][T11003] syz-executor.4: attempt to access beyond end of device [ 739.805805][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 739.820193][ T7545] syz-executor.2: attempt to access beyond end of device [ 739.820193][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 739.835218][T11003] syz-executor.4: attempt to access beyond end of device [ 739.835218][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 739.876232][ T7545] syz-executor.2: attempt to access beyond end of device [ 739.876232][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 740.347548][T15953] input: syz1 as /devices/virtual/input/input97 [ 741.717695][ T4803] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 742.088139][ T4803] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.239158][T16020] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 742.257791][ T4803] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 742.272149][ T4803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.289789][ T4803] usb 2-1: Product: syz [ 742.293961][ T4803] usb 2-1: Manufacturer: syz [ 742.298428][ T4803] usb 2-1: SerialNumber: syz [ 743.167753][T14227] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 743.349924][T11967] device bridge_slave_1 left promiscuous mode [ 743.355883][T11967] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.374523][T11967] device bridge_slave_0 left promiscuous mode [ 743.387983][T11967] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.407692][T14227] usb 4-1: Using ep0 maxpacket: 8 [ 743.413837][T11967] device veth1_macvtap left promiscuous mode [ 743.429962][T11967] device veth0_vlan left promiscuous mode [ 743.447704][ T4803] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 743.457132][ T4803] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 743.469862][ T4803] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 743.529039][T14227] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.638151][T14227] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 743.650866][T14227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 743.667643][T14227] usb 4-1: SerialNumber: syz [ 743.678181][T14227] usb 4-1: config 0 descriptor?? [ 743.687786][ T4803] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 743.699672][ T4803] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 743.711056][T16045] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.727615][T16045] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.728260][T14227] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 743.735150][T16045] device bridge_slave_0 entered promiscuous mode [ 743.749568][T14227] usb 4-1: No valid video chain found. [ 743.756527][ T4803] usb 2-1: USB disconnect, device number 46 [ 743.766039][ T4803] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 743.788780][T16045] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.795729][T16045] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.818214][T16045] device bridge_slave_1 entered promiscuous mode [ 743.929640][ T365] usb 4-1: USB disconnect, device number 52 [ 743.995339][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 744.003213][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 744.028381][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 744.036573][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 744.051691][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.058584][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.077727][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 744.089353][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 744.097413][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.104300][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 744.130181][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 744.142469][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 744.156070][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 744.177496][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 744.186005][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 744.210054][T16045] device veth0_vlan entered promiscuous mode [ 744.210257][ T8435] Bluetooth: hci0: sending frame failed (-49) [ 744.217842][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 744.222617][ T8386] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 744.230780][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 744.262131][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 744.299829][T16045] device veth1_macvtap entered promiscuous mode [ 744.313731][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 744.331145][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 744.350151][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 744.384780][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 744.423125][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 744.768762][T11003] bio_check_eod: 13489 callbacks suppressed [ 744.768821][T11003] syz-executor.4: attempt to access beyond end of device [ 744.768821][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 744.794320][ T7545] syz-executor.2: attempt to access beyond end of device [ 744.794320][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 744.810967][T11003] syz-executor.4: attempt to access beyond end of device [ 744.810967][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 744.825394][T11003] syz-executor.4: attempt to access beyond end of device [ 744.825394][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 744.826723][ T7545] syz-executor.2: attempt to access beyond end of device [ 744.826723][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 744.839966][T11003] syz-executor.4: attempt to access beyond end of device [ 744.839966][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 744.867544][T11003] syz-executor.4: attempt to access beyond end of device [ 744.867544][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 744.882315][ T7545] syz-executor.2: attempt to access beyond end of device [ 744.882315][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 744.893654][T11003] syz-executor.4: attempt to access beyond end of device [ 744.893654][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 744.896863][ T7545] syz-executor.2: attempt to access beyond end of device [ 744.896863][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 744.954598][T16063] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.964783][T16063] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.976548][T16063] device bridge_slave_0 entered promiscuous mode [ 744.991461][T16063] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.003696][T16063] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.024727][T16063] device bridge_slave_1 entered promiscuous mode [ 745.186291][T16063] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.193195][T16063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.200343][T16063] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.207196][T16063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.320948][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.329132][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.340272][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 745.357989][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 745.379729][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 745.388035][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.395041][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.402857][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 745.411656][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.418636][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.426193][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 745.434455][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 745.448149][T16080] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.455165][T16080] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.468641][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 745.485067][T16063] device veth0_vlan entered promiscuous mode [ 745.492545][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 745.502226][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 745.509858][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 745.517820][T16080] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.524676][T16080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.531822][T16080] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.538699][T16080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.548761][T16080] device bridge0 entered promiscuous mode [ 745.563444][T16063] device veth1_macvtap entered promiscuous mode [ 745.581345][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 745.603480][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 745.621865][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 745.663537][ T28] audit: type=1400 audit(2000000255.110:12315): avc: denied { read write } for pid=16063 comm="syz-executor.0" name="loop0" dev="devtmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 745.712340][ T28] audit: type=1400 audit(2000000255.110:12316): avc: denied { open } for pid=16063 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 745.762668][ T28] audit: type=1400 audit(2000000255.110:12317): avc: denied { ioctl } for pid=16063 comm="syz-executor.0" path="/dev/loop0" dev="devtmpfs" ino=828 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 745.853736][T16093] overlayfs: statfs failed on './file0' [ 746.496296][T16115] xt_CT: You must specify a L4 protocol and not use inversions on it [ 746.944249][ T43] device bridge_slave_1 left promiscuous mode [ 746.952349][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.967002][ T43] device bridge_slave_0 left promiscuous mode [ 747.066712][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.100511][ T43] device veth1_macvtap left promiscuous mode [ 747.509173][ T43] device veth0_vlan left promiscuous mode [ 747.616321][T16116] loop0: detected capacity change from 0 to 40427 [ 747.656490][T16116] F2FS-fs (loop0): invalid crc value [ 747.665493][ T28] audit: type=1400 audit(2000000257.120:12318): avc: denied { mounton } for pid=16123 comm="syz-executor.1" path="/root/syzkaller-testdir1142709939/syzkaller.R2I1b3/37/file0" dev="sda1" ino=1971 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 747.728581][T16116] F2FS-fs (loop0): Found nat_bits in checkpoint [ 747.778068][T16118] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.785328][T16118] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.801990][T16118] device bridge_slave_0 entered promiscuous mode [ 747.818895][T16118] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.825772][T16118] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.843752][T16118] device bridge_slave_1 entered promiscuous mode [ 747.908561][T16116] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 748.170448][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 748.178755][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 748.208625][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 748.217539][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 748.237182][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.244069][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.323715][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 748.332661][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 748.341314][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.348198][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.355573][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 748.363968][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 748.372182][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 748.401097][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 748.433365][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 748.512838][ T28] audit: type=1107 audit(2000000257.960:12319): pid=16092 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 748.698198][T16118] device veth0_vlan entered promiscuous mode [ 748.720986][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 748.729363][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 748.736719][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 748.751354][T16118] device veth1_macvtap entered promiscuous mode [ 748.768697][ T4803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 748.793154][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 748.801871][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 748.824504][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 748.843098][ T349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 749.043815][T16146] random: crng reseeded on system resumption [ 749.566050][T16149] syz-executor.3[16149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 749.566136][T16149] syz-executor.3[16149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 749.777741][T11003] bio_check_eod: 7307 callbacks suppressed [ 749.777763][T11003] syz-executor.4: attempt to access beyond end of device [ 749.777763][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 749.780247][ T7545] syz-executor.2: attempt to access beyond end of device [ 749.780247][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 749.790196][T11003] syz-executor.4: attempt to access beyond end of device [ 749.790196][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 749.809569][ T7545] syz-executor.2: attempt to access beyond end of device [ 749.809569][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 749.837325][T11003] syz-executor.4: attempt to access beyond end of device [ 749.837325][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 749.851789][ T7545] syz-executor.2: attempt to access beyond end of device [ 749.851789][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 749.865530][T11003] syz-executor.4: attempt to access beyond end of device [ 749.865530][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 749.878967][ T7545] syz-executor.2: attempt to access beyond end of device [ 749.878967][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 749.893167][T11003] syz-executor.4: attempt to access beyond end of device [ 749.893167][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 749.908287][ T7545] syz-executor.2: attempt to access beyond end of device [ 749.908287][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 750.956367][T16184] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 751.987664][ T383] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 752.247619][ T383] usb 2-1: Using ep0 maxpacket: 8 [ 752.367699][ T383] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.467728][ T383] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 752.483522][ T383] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 752.491787][ T383] usb 2-1: SerialNumber: syz [ 752.502773][ T383] usb 2-1: config 0 descriptor?? [ 752.508935][T16215] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 752.548216][ T383] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 752.554948][ T383] usb 2-1: No valid video chain found. [ 752.750327][ T349] usb 2-1: USB disconnect, device number 47 [ 753.232863][T16222] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.239908][T16222] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.247266][T16222] device bridge_slave_0 entered promiscuous mode [ 753.254289][T16222] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.261400][T16222] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.269645][T16222] device bridge_slave_1 entered promiscuous mode [ 753.345667][T16222] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.352744][T16222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.359830][T16222] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.366598][T16222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.408422][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 753.418307][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.436804][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.462909][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 753.474296][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.481200][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.498848][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 753.507266][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.514328][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.522217][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 753.538531][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 753.546995][ T396] device bridge_slave_1 left promiscuous mode [ 753.552999][ T396] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.568372][ T396] device bridge_slave_0 left promiscuous mode [ 753.577952][ T396] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.585854][ T28] audit: type=1326 audit(2000000263.030:12320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16227 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36d527cea9 code=0x0 [ 753.624618][ T396] device veth1_macvtap left promiscuous mode [ 753.640696][ T396] device veth0_vlan left promiscuous mode [ 753.875234][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 753.915417][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 753.928164][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 753.954399][T16222] device veth0_vlan entered promiscuous mode [ 753.964141][ T878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 753.973950][ T878] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 753.988384][T16222] device veth1_macvtap entered promiscuous mode [ 753.996403][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 754.005164][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 754.013548][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 754.027712][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 754.040632][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 754.058245][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 754.067986][T14227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 754.577454][ T28] audit: type=1326 audit(2000000264.020:12321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16254 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202487cea9 code=0x7ffc0000 [ 754.639102][ T28] audit: type=1326 audit(2000000264.020:12322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16254 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f202487cea9 code=0x7ffc0000 [ 754.722509][ T28] audit: type=1326 audit(2000000264.020:12323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16254 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202487cea9 code=0x7ffc0000 [ 754.787650][ T28] audit: type=1326 audit(2000000264.020:12324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16254 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f202487cea9 code=0x7ffc0000 [ 754.788271][ T7545] bio_check_eod: 12489 callbacks suppressed [ 754.788289][ T7545] syz-executor.2: attempt to access beyond end of device [ 754.788289][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 754.812626][T11003] syz-executor.4: attempt to access beyond end of device [ 754.812626][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 754.911252][ T7545] syz-executor.2: attempt to access beyond end of device [ 754.911252][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 755.099118][T11003] syz-executor.4: attempt to access beyond end of device [ 755.099118][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 755.139359][ T28] audit: type=1326 audit(2000000264.080:12325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16254 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f202487cea9 code=0x7ffc0000 [ 755.189086][ T7545] syz-executor.2: attempt to access beyond end of device [ 755.189086][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 755.211271][ T7545] syz-executor.2: attempt to access beyond end of device [ 755.211271][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 755.250266][T11003] syz-executor.4: attempt to access beyond end of device [ 755.250266][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 755.260176][ T7545] syz-executor.2: attempt to access beyond end of device [ 755.260176][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 755.265626][T11003] syz-executor.4: attempt to access beyond end of device [ 755.265626][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 755.292455][ T7545] syz-executor.2: attempt to access beyond end of device [ 755.292455][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 755.459801][ T28] audit: type=1326 audit(2000000264.090:12326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16254 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f202487a627 code=0x7ffc0000 [ 755.538880][ T28] audit: type=1326 audit(2000000264.090:12327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16254 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2024840309 code=0x7ffc0000 [ 755.589686][ T28] audit: type=1326 audit(2000000264.090:12328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16254 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f202487cea9 code=0x7ffc0000 [ 755.616742][ T28] audit: type=1326 audit(2000000264.090:12329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16254 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f202487a627 code=0x7ffc0000 [ 756.350277][T16285] loop0: detected capacity change from 0 to 256 [ 756.384426][T16285] FAT-fs (loop0): Directory bread(block 64) failed [ 756.398856][T16285] FAT-fs (loop0): Directory bread(block 65) failed [ 756.409455][T16285] FAT-fs (loop0): Directory bread(block 66) failed [ 756.420896][T16285] FAT-fs (loop0): Directory bread(block 67) failed [ 756.436684][T16285] FAT-fs (loop0): Directory bread(block 68) failed [ 756.446056][T16285] FAT-fs (loop0): Directory bread(block 69) failed [ 756.459556][T16285] FAT-fs (loop0): Directory bread(block 70) failed [ 756.468496][T16285] FAT-fs (loop0): Directory bread(block 71) failed [ 756.474869][T16285] FAT-fs (loop0): Directory bread(block 72) failed [ 756.496401][T16285] FAT-fs (loop0): Directory bread(block 73) failed [ 757.157653][ T4412] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 757.737928][ T4412] usb 4-1: Using ep0 maxpacket: 32 [ 757.857958][ T4412] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.878004][ T4412] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.007871][ T4412] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 758.021342][ T4412] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 758.047110][ T4412] usb 4-1: Product: syz [ 758.054836][ T4412] usb 4-1: Manufacturer: syz [ 758.138171][ T4412] hub 4-1:4.0: USB hub found [ 758.274442][ T396] Bluetooth: hci0: Frame reassembly failed (-84) [ 758.357731][ T4412] hub 4-1:4.0: 2 ports detected [ 758.477507][T16337] Invalid ELF header len 1 [ 759.727711][ T4412] hub 4-1:4.0: activate --> -90 [ 759.797795][T11003] bio_check_eod: 10670 callbacks suppressed [ 759.797818][T11003] syz-executor.4: attempt to access beyond end of device [ 759.797818][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 759.803380][ T7545] syz-executor.2: attempt to access beyond end of device [ 759.803380][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 759.805083][T11003] syz-executor.4: attempt to access beyond end of device [ 759.805083][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 759.818400][ T7545] syz-executor.2: attempt to access beyond end of device [ 759.818400][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 759.833972][T11003] syz-executor.4: attempt to access beyond end of device [ 759.833972][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 759.847228][ T7545] syz-executor.2: attempt to access beyond end of device [ 759.847228][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 759.859713][T11003] syz-executor.4: attempt to access beyond end of device [ 759.859713][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 759.873999][ T7545] syz-executor.2: attempt to access beyond end of device [ 759.873999][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 759.888316][T11003] syz-executor.4: attempt to access beyond end of device [ 759.888316][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 759.901925][ T7545] syz-executor.2: attempt to access beyond end of device [ 759.901925][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 760.297827][ T8386] Bluetooth: hci0: command 0x1003 tx timeout [ 760.304050][T16058] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 760.588443][ T24] usb 4-1: USB disconnect, device number 53 [ 762.158237][T16383] loop0: detected capacity change from 0 to 512 [ 762.225719][T16383] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #16: comm syz-executor.0: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 762.271048][T16383] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz-executor.0: couldn't read orphan inode 16 (err -117) [ 762.307839][T16383] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 762.321567][T16383] ext4 filesystem being mounted at /root/syzkaller-testdir1083577025/syzkaller.pJN8Bd/18/file1 supports timestamps until 2038 (0x7fffffff) [ 762.390304][T16383] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #20: comm syz-executor.0: corrupted inode contents [ 762.423168][T16383] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #20: comm syz-executor.0: mark_inode_dirty error [ 762.435646][T16383] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #20: comm syz-executor.0: corrupted inode contents [ 762.449525][T16383] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2955: inode #20: comm syz-executor.0: mark_inode_dirty error [ 762.462203][T16383] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2958: inode #20: comm syz-executor.0: mark inode dirty (error -117) [ 762.475470][T16383] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117) [ 762.611167][T16222] EXT4-fs (loop0): unmounting filesystem. [ 764.809969][T11003] bio_check_eod: 7351 callbacks suppressed [ 764.809993][T11003] syz-executor.4: attempt to access beyond end of device [ 764.809993][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 764.830975][ T7545] syz-executor.2: attempt to access beyond end of device [ 764.830975][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 764.845286][ T7545] syz-executor.2: attempt to access beyond end of device [ 764.845286][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 764.864287][T11003] syz-executor.4: attempt to access beyond end of device [ 764.864287][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 764.868900][ T7545] syz-executor.2: attempt to access beyond end of device [ 764.868900][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 764.881166][T11003] syz-executor.4: attempt to access beyond end of device [ 764.881166][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 764.892492][ T7545] syz-executor.2: attempt to access beyond end of device [ 764.892492][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 764.907074][T11003] syz-executor.4: attempt to access beyond end of device [ 764.907074][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 764.920537][ T7545] syz-executor.2: attempt to access beyond end of device [ 764.920537][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 764.934528][T11003] syz-executor.4: attempt to access beyond end of device [ 764.934528][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 765.138151][T16428] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 765.157853][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 765.157871][ T28] audit: type=1400 audit(2000000274.610:12406): avc: denied { relabelto } for pid=16426 comm="syz-executor.0" name="NETLINK" dev="sockfs" ino=96968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:mouse_device_t:s0" [ 765.359882][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 765.379456][T16433] device syz_tun entered promiscuous mode [ 765.385026][T16433] device macsec1 entered promiscuous mode [ 765.408546][T16433] device syz_tun left promiscuous mode [ 766.955244][T16467] loop0: detected capacity change from 0 to 512 [ 767.000541][T16467] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 767.015689][T16467] ext4 filesystem being mounted at /root/syzkaller-testdir1083577025/syzkaller.pJN8Bd/27/bus supports timestamps until 2038 (0x7fffffff) [ 767.464999][ T347] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 767.597846][T16476] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 767.619186][T16476] device syz_tun entered promiscuous mode [ 767.625025][T16476] device macsec1 entered promiscuous mode [ 767.641349][T16476] device syz_tun left promiscuous mode [ 767.657677][ T8386] Bluetooth: hci0: command 0x1003 tx timeout [ 767.663554][T16058] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 767.847707][ T347] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.866962][T16222] EXT4-fs (loop0): unmounting filesystem. [ 768.017779][ T347] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 768.027137][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.045099][ T347] usb 4-1: Product: syz [ 768.049119][ T347] usb 4-1: Manufacturer: syz [ 768.053524][ T347] usb 4-1: SerialNumber: syz [ 768.967737][ T349] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 769.207728][ T347] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 769.217610][ T349] usb 3-1: Using ep0 maxpacket: 8 [ 769.222525][ T347] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 769.237623][ T347] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 769.377659][ T349] usb 3-1: config 0 has no interfaces? [ 769.427686][ T347] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 769.434929][ T347] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 769.477433][ T347] usb 4-1: USB disconnect, device number 54 [ 769.496457][ T347] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 769.537704][ T349] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 769.547681][ T349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.555489][ T349] usb 3-1: Product: syz [ 769.560580][ T349] usb 3-1: Manufacturer: syz [ 769.565495][ T349] usb 3-1: SerialNumber: syz [ 769.577368][ T349] usb 3-1: config 0 descriptor?? [ 769.819245][ T7545] bio_check_eod: 14547 callbacks suppressed [ 769.819265][ T7545] syz-executor.2: attempt to access beyond end of device [ 769.819265][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 769.820207][T16422] usb 3-1: USB disconnect, device number 56 [ 769.825251][ T7545] syz-executor.2: attempt to access beyond end of device [ 769.825251][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 769.839797][T11003] syz-executor.4: attempt to access beyond end of device [ 769.839797][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 769.845630][ T7545] syz-executor.2: attempt to access beyond end of device [ 769.845630][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 769.859608][T11003] syz-executor.4: attempt to access beyond end of device [ 769.859608][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 769.873134][ T7545] syz-executor.2: attempt to access beyond end of device [ 769.873134][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 769.887619][T11003] syz-executor.4: attempt to access beyond end of device [ 769.887619][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 769.914869][ T7545] syz-executor.2: attempt to access beyond end of device [ 769.914869][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 769.928935][T11003] syz-executor.4: attempt to access beyond end of device [ 769.928935][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 769.950083][ T7545] syz-executor.2: attempt to access beyond end of device [ 769.950083][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 770.717660][T16058] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 770.723652][ T8386] Bluetooth: hci0: command 0x1003 tx timeout [ 772.609722][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 774.827663][T11003] bio_check_eod: 8621 callbacks suppressed [ 774.827696][T11003] syz-executor.4: attempt to access beyond end of device [ 774.827696][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 774.828029][ T7545] syz-executor.2: attempt to access beyond end of device [ 774.828029][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 774.834614][T11003] syz-executor.4: attempt to access beyond end of device [ 774.834614][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 774.847547][ T7545] syz-executor.2: attempt to access beyond end of device [ 774.847547][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 774.861800][T11003] syz-executor.4: attempt to access beyond end of device [ 774.861800][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 774.876142][ T7545] syz-executor.2: attempt to access beyond end of device [ 774.876142][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 774.890422][T11003] syz-executor.4: attempt to access beyond end of device [ 774.890422][T11003] loop4: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 774.903023][ T7545] syz-executor.2: attempt to access beyond end of device [ 774.903023][ T7545] loop2: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 774.917237][T11003] syz-executor.4: attempt to access beyond end of device [ 774.917237][T11003] loop4: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 774.931530][ T7545] syz-executor.2: attempt to access beyond end of device [ 774.931530][ T7545] loop2: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 775.279007][T16610] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 775.912610][T16612] kvm [16611]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x4500004b00 [ 775.935091][T16612] kvm [16611]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x3600004300 [ 775.948609][T16612] kvm [16611]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x4500004b00 [ 777.088713][T16643] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 777.100267][T16643] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 777.108517][T16643] CPU: 1 PID: 16643 Comm: syz-executor.1 Tainted: G W 6.1.78-syzkaller-00009-g25216be1ac5e #0 [ 777.119967][T16643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 777.129884][T16643] RIP: 0010:dev_map_generic_redirect+0x90/0x7d0 2033/05/18 03:38:06 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 777.136025][T16643] Code: f1 f1 00 f2 f2 f2 4b 89 04 26 43 c7 44 26 0f f3 f3 f3 f3 43 c6 44 26 13 f3 e8 ac 07 de ff 48 89 d8 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 20 00 74 08 48 89 df e8 f1 04 25 00 48 89 5c 24 18 4c 8b [ 777.155556][T16643] RSP: 0018:ffffc90000b376c0 EFLAGS: 00010246 [ 777.161462][T16643] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 777.169269][T16643] RDX: ffffc90014951000 RSI: 0000000000000428 RDI: 0000000000000429 [ 777.177093][T16643] RBP: ffffc90000b37818 R08: 0000000000000005 R09: ffffffff8411e7b3 [ 777.184891][T16643] R10: 0000000000000004 R11: ffff8881159d3cc0 R12: dffffc0000000000 [ 777.192708][T16643] R13: ffff8881324df140 R14: 1ffff92000166ee4 R15: 0000000000000000 [ 777.200517][T16643] FS: 00007f36d60096c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 777.209280][T16643] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 777.215700][T16643] CR2: 0000000020010000 CR3: 00000001359f3000 CR4: 00000000003506a0 [ 777.223517][T16643] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 777.231324][T16643] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 777.239135][T16643] Call Trace: [ 777.242277][T16643] [ 777.245037][T16643] ? __die_body+0x62/0xb0 [ 777.249216][T16643] ? die_addr+0x9f/0xd0 [ 777.253193][T16643] ? exc_general_protection+0x317/0x4c0 [ 777.258616][T16643] ? asm_exc_general_protection+0x27/0x30 [ 777.264130][T16643] ? xdp_do_generic_redirect+0x303/0xad0 [ 777.269624][T16643] ? dev_map_generic_redirect+0x90/0x7d0 [ 777.275449][T16643] ? __free_pages_core+0x180/0x180 [ 777.280476][T16643] ? __this_cpu_preempt_check+0x13/0x20 [ 777.285857][T16643] ? bq_enqueue+0x3e0/0x3e0 [ 777.290204][T16643] ? bpf_prog_run_generic_xdp+0x9aa/0x1110 [ 777.295845][T16643] xdp_do_generic_redirect+0x411/0xad0 [ 777.301140][T16643] do_xdp_generic+0x53e/0x800 [ 777.305645][T16643] ? generic_xdp_tx+0x560/0x560 [ 777.310331][T16643] ? __schedule+0xcaf/0x1550 [ 777.314769][T16643] ? tun_get_user+0x2340/0x3a90 [ 777.319446][T16643] tun_get_user+0x238a/0x3a90 [ 777.324132][T16643] ? futex_q_unlock+0x30/0x30 [ 777.328644][T16643] ? tun_do_read+0x1ee0/0x1ee0 [ 777.333226][T16643] ? ref_tracker_alloc+0x31d/0x450 [ 777.338176][T16643] ? ref_tracker_dir_print+0x160/0x160 [ 777.343468][T16643] ? futex_wait+0x4b7/0x7e0 [ 777.347812][T16643] ? avc_policy_seqno+0x1b/0x70 [ 777.352497][T16643] ? tun_get+0xe9/0x120 [ 777.356488][T16643] tun_chr_write_iter+0x129/0x210 [ 777.361351][T16643] vfs_write+0x902/0xeb0 [ 777.365433][T16643] ? __x64_sys_prctl+0xd0/0xd0 [ 777.370030][T16643] ? file_end_write+0x1c0/0x1c0 [ 777.374825][T16643] ? __fget_files+0x2cb/0x330 [ 777.379316][T16643] ? __fdget_pos+0x204/0x390 [ 777.383742][T16643] ? ksys_write+0x77/0x2c0 [ 777.387997][T16643] ksys_write+0x199/0x2c0 [ 777.392158][T16643] ? __x64_sys_futex+0x100/0x100 [ 777.396952][T16643] ? __ia32_sys_read+0x90/0x90 [ 777.401533][T16643] ? fpregs_restore_userregs+0x130/0x290 [ 777.407009][T16643] __x64_sys_write+0x7b/0x90 [ 777.411431][T16643] do_syscall_64+0x3d/0xb0 [ 777.415679][T16643] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 777.421408][T16643] RIP: 0033:0x7f36d527bbef [ 777.425663][T16643] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 777.445189][T16643] RSP: 002b:00007f36d6009090 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 777.453438][T16643] RAX: ffffffffffffffda RBX: 00007f36d53b3f80 RCX: 00007f36d527bbef [ 777.461249][T16643] RDX: 000000000000fdef RSI: 0000000020000780 RDI: 00000000000000c8 [ 777.469058][T16643] RBP: 00007f36d52ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 777.476865][T16643] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 777.484679][T16643] R13: 000000000000000b R14: 00007f36d53b3f80 R15: 00007ffe636da138 [ 777.492500][T16643] [ 777.495355][T16643] Modules linked in: [ 777.499160][T16643] ---[ end trace 0000000000000000 ]--- [ 777.504379][T16643] RIP: 0010:dev_map_generic_redirect+0x90/0x7d0 [ 777.510478][T16643] Code: f1 f1 00 f2 f2 f2 4b 89 04 26 43 c7 44 26 0f f3 f3 f3 f3 43 c6 44 26 13 f3 e8 ac 07 de ff 48 89 d8 48 c1 e8 03 48 89 44 24 48 <42> 80 3c 20 00 74 08 48 89 df e8 f1 04 25 00 48 89 5c 24 18 4c 8b [ 777.529942][T16643] RSP: 0018:ffffc90000b376c0 EFLAGS: 00010246 [ 777.535797][T16643] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 777.543666][T16643] RDX: ffffc90014951000 RSI: 0000000000000428 RDI: 0000000000000429 [ 777.551436][T16643] RBP: ffffc90000b37818 R08: 0000000000000005 R09: ffffffff8411e7b3 [ 777.559264][T16643] R10: 0000000000000004 R11: ffff8881159d3cc0 R12: dffffc0000000000 [ 777.567045][T16643] R13: ffff8881324df140 R14: 1ffff92000166ee4 R15: 0000000000000000 [ 777.574875][T16643] FS: 00007f36d60096c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 777.583669][T16643] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 777.590059][T16643] CR2: 0000000020010000 CR3: 00000001359f3000 CR4: 00000000003506a0 [ 777.597897][T16643] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 777.605666][T16643] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 777.613498][T16643] Kernel panic - not syncing: Fatal exception in interrupt [ 777.620804][T16643] Kernel Offset: disabled [ 777.624937][T16643] Rebooting in 86400 seconds..