last executing test programs: 20m14.859423489s ago: executing program 0 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x5, 0x0, 0x2, "0a08cf30c194"}}) 20m13.931215335s ago: executing program 0 (id=46): socket$inet(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r4, 0x29, 0x50, 0x0, &(0x7f0000000340)=0x1c) socket(0x26, 0x800, 0x7fff) 20m13.626484529s ago: executing program 0 (id=50): ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) 20m11.113621472s ago: executing program 0 (id=55): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x3, {{@in=@private, @in6=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8000000000}, 0x2000000, 0x0, 0x0, 0x1, 0x4, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0xc0}}, 0x4040000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r8, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4f, 0x46]}, 0x2c) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) 20m9.914158609s ago: executing program 0 (id=59): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="200004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20m8.771468712s ago: executing program 0 (id=63): r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001400)={0xa0, 0x0, &(0x7f0000001280)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000011c0)={@ptr={0x70742a85, 0x0, &(0x7f0000001100)=""/115, 0x73, 0x1, 0x13}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000001180)=""/16, 0x10, 0x2, 0x1b}}, &(0x7f0000001240)={0x0, 0x28, 0x40}}}, @request_death={0x400c630e, 0x3}, @request_death, @acquire_done={0x40106309, 0x3}, @request_death={0x400c630e, 0x3}, @request_death], 0xb8, 0x0, &(0x7f0000001340)="6982a620a88f9fad1af6164098ee59158d6572053b7327949bf349f3e8301b28ebfd4845edf13eb85ebba3efac94810d6d8112b763a64aa3fdbd67965c97252aac92650a8b96be521d847c5415d988974ef43669c0258e7c339ef4e44169150ed8c3b0f82639468712d9e129859c7e2826855b4b9ed23f70e990405a3220953de3d7c4e8a92008a3fc5331d93c2260228bc058185e84f36dfd8a0789f95f6dd76467a6e6768a81c3a4c46f9920b7a38a316503fb35fb56f9"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f00004ca000/0x2000)=nil, 0x2000, 0xc) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x5, 0x529, 0x400, 0x1, 0x9, 0xffffffffffffffff}) syz_open_procfs(r3, &(0x7f0000000100)='clear_refs\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 20m8.635522603s ago: executing program 32 (id=63): r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001400)={0xa0, 0x0, &(0x7f0000001280)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000011c0)={@ptr={0x70742a85, 0x0, &(0x7f0000001100)=""/115, 0x73, 0x1, 0x13}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000001180)=""/16, 0x10, 0x2, 0x1b}}, &(0x7f0000001240)={0x0, 0x28, 0x40}}}, @request_death={0x400c630e, 0x3}, @request_death, @acquire_done={0x40106309, 0x3}, @request_death={0x400c630e, 0x3}, @request_death], 0xb8, 0x0, &(0x7f0000001340)="6982a620a88f9fad1af6164098ee59158d6572053b7327949bf349f3e8301b28ebfd4845edf13eb85ebba3efac94810d6d8112b763a64aa3fdbd67965c97252aac92650a8b96be521d847c5415d988974ef43669c0258e7c339ef4e44169150ed8c3b0f82639468712d9e129859c7e2826855b4b9ed23f70e990405a3220953de3d7c4e8a92008a3fc5331d93c2260228bc058185e84f36dfd8a0789f95f6dd76467a6e6768a81c3a4c46f9920b7a38a316503fb35fb56f9"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f00004ca000/0x2000)=nil, 0x2000, 0xc) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x5, 0x529, 0x400, 0x1, 0x9, 0xffffffffffffffff}) syz_open_procfs(r3, &(0x7f0000000100)='clear_refs\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 38.588659821s ago: executing program 3 (id=2883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 37.007621229s ago: executing program 3 (id=2889): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x81}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 36.834826323s ago: executing program 3 (id=2897): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x1000) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000000c0)={0x0, 0x0, "873ea7acdb224d37859a9b2dfe607c56"}) 36.737281111s ago: executing program 3 (id=2899): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x28, &(0x7f0000000240)=ANY=[@ANYBLOB='max=7440737095']) 36.664875447s ago: executing program 3 (id=2901): syz_mount_image$f2fs(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x2008412, &(0x7f0000000b40)=ANY=[], 0x1, 0x5566, &(0x7f000000b9c0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) statx(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x6000, 0x0) 35.404328969s ago: executing program 3 (id=2918): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000001ac0)=""/4096, 0x1000}], 0x1) 20.186092228s ago: executing program 33 (id=2918): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000001ac0)=""/4096, 0x1000}], 0x1) 3.803392713s ago: executing program 5 (id=3285): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r0, &(0x7f0000000680)=""/99, 0x63) 3.691510671s ago: executing program 5 (id=3289): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x1, 0x0, 0x4}, 'syz1\x00', 0x3a}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.571305091s ago: executing program 5 (id=3293): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0003020000000203d73da719aea3a8b88ffcc75c192822670f0b7e"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000480)={0x40, 0x8, 0x2, "aa85"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) 2.572545412s ago: executing program 4 (id=3300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) syncfs(0xffffffffffffffff) 2.523528176s ago: executing program 4 (id=3302): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8030) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 2.523197026s ago: executing program 4 (id=3305): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x1, 0x200, 0xe, 0x800, 0x6, 0x3}) 2.403413835s ago: executing program 6 (id=3309): bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="00000000000000000000000011000000000000000014993ea9d1ada3af1430a0000000000000009cac36fc2518c480088eb2a0f65f621385dbb461e9228ad38146aae6152f1cf802ec72c6e015f7452a8a291ccf5ecb0df60e"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001dc0)={&(0x7f0000000380)='mce_record\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$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") setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}}, 0x4001) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000001cc0)='net/rt_cache\x00') preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1, 0xfffffffb, 0xa) sendmsg$tipc(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000000740)="a6dee4f9", 0x4}], 0x2, &(0x7f00000008c0), 0x0, 0x4000}, 0x4804) renameat(r7, &(0x7f0000000240)='./file0\x00', r8, &(0x7f0000000280)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200001499520e2100"/18], 0x48) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x5cc3, &(0x7f0000001c40)={0x0, 0xf563, 0x400, 0x0, 0xfffffffc}, &(0x7f0000000300), &(0x7f00000003c0)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r0}, 0xc) 2.308112393s ago: executing program 1 (id=3313): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$incfs(r0, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x40106726, &(0x7f00000000c0)) 2.307966033s ago: executing program 1 (id=3314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x4000844) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f00000004c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000500)="338fd26dc804c77a9f5affa300a278760414d141071a0bd2b3d057d8fe0c2e742e0bc6ad7444ca0fb645a77446cb450d99aaaad7a82a9862539ccc51a3e6500c876996359ec5cc45c7342a0ba452e8b3ed765866e5fe366e7ef9c55db06b", 0x5e}], 0x1}}], 0x1, 0x200009c0) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="03000800ec0639000c006472347a12273a0100000000000000000000ffffac141439ff020000000000000000000000000001"], 0x1259) 1.471136491s ago: executing program 1 (id=3315): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"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"}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00'], 0x28}, 0x4080) 1.470163271s ago: executing program 6 (id=3317): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 1.457199302s ago: executing program 1 (id=3318): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1eb42d00000000000109022400010000002209040000010300020009210000000122040009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000000)={0x3b, 0x2, 0x2, 0x6, 0x0, [@rand_addr=' \x01\x00']}, 0x18) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.387413548s ago: executing program 6 (id=3320): bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="00000000000000000000000011000000000000000014993ea9d1ada3af1430a0000000000000009cac36fc2518c480088eb2a0f65f621385dbb461e9228ad38146aae6152f1cf802ec72c6e015f7452a8a291ccf5ecb0df60e"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001dc0)={&(0x7f0000000380)='mce_record\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$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") setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}}, 0x4001) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000001cc0)='net/rt_cache\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1, 0xfffffffb, 0xa) 1.36759206s ago: executing program 2 (id=3325): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, 0x0, 0x26) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x26, 0x0) 1.045427065s ago: executing program 5 (id=3326): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) futimesat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 946.621983ms ago: executing program 5 (id=3327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) 946.178623ms ago: executing program 1 (id=3328): bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="00000000000000000000000011000000000000000014993ea9d1ada3af1430a0000000000000009cac36fc2518c480088eb2a0f65f621385dbb461e9228ad38146aae6152f1cf802ec72c6e015f7452a8a291ccf5ecb0df60e"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001dc0)={&(0x7f0000000380)='mce_record\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340), 0x4, 0x241, &(0x7f00000009c0)="$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") setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}}, 0x4001) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000001cc0)='net/rt_cache\x00') preadv(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/85, 0x55}], 0x1, 0xfffffffb, 0xa) sendmsg$tipc(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000000740)="a6dee4f9", 0x4}], 0x2, &(0x7f00000008c0), 0x0, 0x4000}, 0x4804) renameat(r6, &(0x7f0000000240)='./file0\x00', r7, &(0x7f0000000280)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200001499520e2100"/18], 0x48) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x5cc3, &(0x7f0000001c40)={0x0, 0xf563, 0x400, 0x0, 0xfffffffc}, &(0x7f0000000300), &(0x7f00000003c0)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r0}, 0xc) 899.652157ms ago: executing program 5 (id=3329): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f00000000c0), 0x0, 0x101000) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B') setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) 525.342677ms ago: executing program 2 (id=3330): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000680)={0x79, 0x0, 0x100000000000e3a}) 512.584428ms ago: executing program 2 (id=3331): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 483.914411ms ago: executing program 2 (id=3332): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r0 = open$dir(&(0x7f0000001000)='.\x00', 0x20000, 0x50) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @aes128, 0x2, @desc2}) 483.450901ms ago: executing program 6 (id=3333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000880), &(0x7f00000008c0)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 442.313714ms ago: executing program 2 (id=3334): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x101042, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x2, 0x92) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000400)="6f961318", 0x4}], 0x1) rename(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000300)='./file1\x00') 442.052594ms ago: executing program 2 (id=3335): epoll_create1(0x0) socket$unix(0x1, 0x5, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r1, @ANYRESDEC], 0x0) 438.641184ms ago: executing program 4 (id=3336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) 421.247416ms ago: executing program 6 (id=3337): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x4, 0x10000, 0x0, 0xffffffff}}}}]}, 0x4c}}, 0x0) 358.520321ms ago: executing program 4 (id=3338): mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 358.368051ms ago: executing program 4 (id=3339): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="f71cc09f8f5f246ad3c69760f6336af50e6205a645056d3f1482f239", 0xffffffa5, 0x20008050, 0x0, 0x0) 358.171831ms ago: executing program 6 (id=3340): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f646973636172642c6a71666d743d76667376312c646973636172645f756e69743d73656374696f6e2c616c6c6f635f6d6f64653d72657573652c636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f6e2c6163746976655f6c6f67733d342c6673796e635f6d6f64653d706f7369782c6d6f64653d667261676d656e743a626c6f636b2c636f6d70726573735f63616368652c686561702c6a71666d743d7666736f6c642c6e6f696e6c696e655f64656e7472792c00da0f099cbbd03bcf8e31bbb823e25495bb"], 0x1, 0x550f, &(0x7f000000cf00)="$eJzs3E1vG1UXAODjpGn69faNEAt2HalCSqTaivNRwS5AKz5EqqjAghU4tmO5tT1R7DghKxYsEQv+CQKJFUt+AwvW7BALEDskkGcm0FAQlXBskj6PND5zr6/PnGtVlc5M5ACeWgvJzz+W4npcjojZiLgWkZ2XiiOzkYfnIuJGRMw8cpSK+d8nLkbElYi4Pkqe5ywVb316a3hz/Yc3fvrqm/kLVz/78tvp7RqYtucjorubnx9085i28vigmK8N21nsrg2LmL/RfViM0zweNLezDAe143W1LK628vXp7n5/FHc6tfootto72fxuL79gf9g6zpN94EFtLxs3mttZbPfTLLaO8roOj/L/2476gzxPo8j3QZY+BoPjmM83D5v5fnYfZrHeGxTzed600TwcxWERi8tFPe00sjq2/803/d/2Zru3f5gMm3v9dtpL1ivVFyrV2+XqXtpoDppr5Vq3cXstWWx1RsvKg2atu9FK01anWamn3aVksVWvl6vVZPFOc7td6yXVamW1slxeXyrObiWv3nsn6TSSxVF8ud3bH7Q7/WQn3UvyTywlK5XVF5eSm9Xkrc2tZOv+3bubW2+/d+fdey9tvv5KseixspLFleWVlXJ1ubxSXXp8T/Pndf8fFUX/w/5hYkrTLgDg7NH/A9Nwev3/3v2I0+//Q/8/Fmeq/33C/t/+YUL0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT63v5j5/LTtZyMdXi/n/FVPPFONSRMxExK9/YTYunsg5W+SZ+5v1c3+q4etSZBlG15gvjisRsVEcv/z/tL8FAAAAOL+++PDGJ3m3nr8sTLsgJim/aTNz7f0x5StFxNzC92PKNjN6eXZMybJ/3xficEzZshtYl8aUbD675XZhTNmezOyJcOmRUMrDzETLAQAAJuJkJzDZLgQAAIBJ+njaBTAdpTh+lHn8LDj7y/s/HghePjECAAAAzqDStAsAAAAATl3W//v9PwAAADjf8t//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnbnKWBuI4AP9b3r7gVyTGvVdxB8fwCC5dGg7gJTiAC7yCF+AMuPMIBgydEUG6MOm0jeZ5kjJMW37MELqYmWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgSN+a3frLxzef+uYcT/2U6Q0AAADQ5dDs1u2bZao/y+df5FOvcr2KiDoiusbus3i8yZzlnOb3/Z+v72/+aMPXiDbh/B3zfDyNiLf5+PFy6F8BAAAA/l/7zXaVRuvpZTl1gxhTmrSpn78rlFdFRLP8XiitPue9LhTW/r8f4kOhtHYCa1EoLE25PZRK+yvt436ZtVtcFVUq6s6PXRpZrO8AAMCIZjfFuKMQAAAAxvR+6gYwjSp+LWVelgLnqcjLe09uagAAAMA/qJq6AQAAAMDg2vH/SPv/nez/BwAAANNI+/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwpEOzW+8321XfnOPp3mO+1nHpTv+eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2Z93FAiBMAiDves7k7n/YaVBY0OTKhA+/sZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjzu7/8n5gaZ5K518bS80iydmpsnRp758bRH8bXrwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBif15SIASCIArmjP+d9P0PKwl6BhEioOFRRS0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvuh3v/yfmBpnkrnTxtLxSLJ21di6auw9aBw9GG//BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBi535e46jiAIB/Z2Zna6pijJJDRBQ86MWm29ram3hQggf/BCGk2xq79Uebgy1FzMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnstM24PprZpt8PvDmfXcY5n3fBEK+814WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnsaZ8VhcRKn1blb969tFP3th/rCjZ07K0Ur4qTNpB8PLzY/JMvdJQIAAMDhkdX1fUTczXfXij5dLOv/vL6mqPm/fXoS1/X8w3V/3de1f9F++fne83sDLU7GKW56bnM0PP5oKr3/b5bz7Zm/vKJXPvny3UsWC5FG+t72c+O8fJ7J1zdvvtMvwyNtZAsA/BPH6r4K6r+Hin7QZWIAHBq9RuFd1//ZYrc5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALRhvB1P1nESESu9aVy4ff/axn79jZ07K3U7ff36Tnw5vWdxizwizm2Ohsdbnc18u3zl6oX10Wh4qf3gpYjoavS3qulf+GCGiyM6eT6C/yhIqx/2vOTzeAQd/lICAOBAyqtW1PV389214lyyFPHHdw/W/6824pix/r/34elbzbGa9f+gtRnOv9Wti5+uXr5y9fXNi+vnh+eHH79xYvDm4OSZU6fOrJbvSla9MQEAAODf6VetWf+nS4+u/x9txDFj/f/ZN4MvmmNl6v99TRf9us4EAADgcHv25d9/S/Y5n/T78fn61talweS49/nE5NhBqn/bkao16/9sqeusAAAAgDaMt5MH1v/PNuKYcf3/qe9f+LF5zywiFqr1/2Mbn4zOtjedudbGvxN3PUcAAAC6tVC15vp/Xu7/T/e2PKQR8dork7j6GsCZ6v/s3a9+aI7V3P9/sr0pzqV0efI8yn45orfcdUYAAAAcZE9UrSj2f8131z766ej7ffv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANr2ZwAAAP//uCM2tw==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) 0s ago: executing program 1 (id=3341): syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd010203010902"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) kernel console output (not intermixed with test programs): [ 1039.097338][ T9784] bridge0: port 3(vlan0) entered disabled state [ 1039.590037][ T28] audit: type=1400 audit(1782.399:1886): avc: denied { create } for pid=9788 comm="syz.4.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1039.623231][ T28] audit: type=1400 audit(1782.419:1887): avc: denied { ioctl } for pid=9788 comm="syz.4.2150" path="socket:[43631]" dev="sockfs" ino=43631 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1040.076000][ T28] audit: type=1400 audit(1782.800:1888): avc: denied { ioctl } for pid=9785 comm="syz.5.2149" path="socket:[45089]" dev="sockfs" ino=45089 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1041.507671][ T9816] overlayfs: failed to resolve './file1/file0': -2 [ 1041.733221][ T9806] kvm: apic: phys broadcast and lowest prio [ 1042.467121][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 1042.506781][ T28] audit: type=1400 audit(1785.721:1889): avc: denied { read } for pid=9823 comm="syz.3.2157" name="usbmon2" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1042.530970][ T9828] device bridge0 entered promiscuous mode [ 1042.541618][ T9825] binder: 9823:9825 unknown command 0 [ 1042.547417][ T9828] device macsec1 entered promiscuous mode [ 1042.553441][ T28] audit: type=1400 audit(1785.761:1890): avc: denied { ioctl } for pid=9823 comm="syz.3.2157" path="/dev/usbmon2" dev="devtmpfs" ino=165 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1042.579317][ T9828] bridge0: port 3(macsec1) entered blocking state [ 1042.592375][ T9825] binder: 9823:9825 ioctl c0306201 200000000080 returned -22 [ 1042.600181][ T9828] bridge0: port 3(macsec1) entered disabled state [ 1042.610924][ T9828] device bridge0 left promiscuous mode [ 1043.090631][ T9843] input: syz1 as /devices/virtual/input/input20 [ 1044.066363][ T9854] overlayfs: failed to clone upperpath [ 1045.314690][ T28] audit: type=1326 audit(1787.662:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6398ebe9 code=0x7ffc0000 [ 1045.344369][ T28] audit: type=1326 audit(1787.662:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6398ebe9 code=0x7ffc0000 [ 1045.349931][ T9858] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1045.367365][ T28] audit: type=1326 audit(1787.662:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7ffb6398ebe9 code=0x7ffc0000 [ 1045.375397][ T9858] bridge0: port 3(vlan0) entered blocking state [ 1045.404039][ T9858] bridge0: port 3(vlan0) entered disabled state [ 1045.412885][ T28] audit: type=1326 audit(1787.662:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6398ebe9 code=0x7ffc0000 [ 1045.449432][ T28] audit: type=1326 audit(1787.662:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6398ebe9 code=0x7ffc0000 [ 1045.472658][ T28] audit: type=1326 audit(1787.662:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb6398ebe9 code=0x7ffc0000 [ 1045.854630][ T9880] overlayfs: failed to resolve './file1/file0': -2 [ 1045.959596][ T28] audit: type=1326 audit(1787.662:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6398ebe9 code=0x7ffc0000 [ 1046.157221][ T28] audit: type=1326 audit(1787.662:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6398ebe9 code=0x7ffc0000 [ 1046.340354][ T28] audit: type=1326 audit(1787.662:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb6398ebe9 code=0x7ffc0000 [ 1046.373174][ T28] audit: type=1326 audit(1787.662:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9860 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6398ebe9 code=0x7ffc0000 [ 1046.503435][ T9886] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2168'. [ 1046.508753][ T9881] overlayfs: failed to clone upperpath [ 1048.750451][ T9910] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1048.916849][ T9914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.924018][ T9914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.644438][ T9931] bridge0: port 2(vlan0) entered blocking state [ 1049.656619][ T9931] bridge0: port 2(vlan0) entered disabled state [ 1050.178034][ T9934] overlayfs: failed to clone upperpath [ 1050.879973][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 1052.793030][T10096] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1052.884420][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1052.885448][ T28] audit: type=1400 audit(1796.096:1905): avc: denied { mount } for pid=10090 comm="syz.5.2188" name="/" dev="ramfs" ino=45630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1053.669174][T10116] overlayfs: failed to resolve './file1/file0': -2 [ 1056.155131][T10146] 9pnet_fd: Insufficient options for proto=fd [ 1057.014241][ T28] audit: type=1400 audit(1800.118:1906): avc: denied { create } for pid=10133 comm="syz.3.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1058.311158][ T28] audit: type=1400 audit(1800.118:1907): avc: denied { sys_admin } for pid=10133 comm="syz.3.2204" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1058.402691][ T28] audit: type=1326 audit(1801.629:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10158 comm="syz.1.2210" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff5e1f8ebe9 code=0x0 [ 1060.594114][ T28] audit: type=1400 audit(1803.820:1909): avc: denied { create } for pid=10192 comm="syz.5.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1060.687673][T10196] binder: Unknown parameter 'euid<' [ 1060.830918][ T28] audit: type=1400 audit(1804.050:1910): avc: denied { execute_no_trans } for pid=10192 comm="syz.5.2216" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1061.548141][T10235] overlayfs: failed to clone lowerpath [ 1062.954346][T10252] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1062.963940][T10254] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1065.797894][ T7671] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1065.952231][ T28] audit: type=1400 audit(1809.183:1911): avc: denied { read } for pid=10282 comm="syz.4.2246" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1065.975120][ T28] audit: type=1400 audit(1809.183:1912): avc: denied { open } for pid=10282 comm="syz.4.2246" path="/dev/ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1065.998648][ T28] audit: type=1400 audit(1809.183:1913): avc: denied { ioctl } for pid=10282 comm="syz.4.2246" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1066.091897][T10287] overlayfs: overlapping lowerdir path [ 1066.190256][ T8264] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1066.371479][ T8264] usb 4-1: config 0 has no interfaces? [ 1066.381191][ T8264] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1066.410279][ T8264] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1066.540085][ T8264] usb 4-1: Manufacturer: syz [ 1066.572694][ T8264] usb 4-1: config 0 descriptor?? [ 1066.598537][ T8264] usb 4-1: can't set config #0, error -71 [ 1066.672202][ T8264] usb 4-1: USB disconnect, device number 13 [ 1068.688344][T10316] syz.1.2256[10316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1068.688429][T10316] syz.1.2256[10316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1068.729662][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2257'. [ 1068.795665][T10318] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1068.990900][T10331] overlayfs: failed to clone lowerpath [ 1069.098895][ T414] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1069.308663][ T414] usb 6-1: Using ep0 maxpacket: 16 [ 1069.316038][ T414] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1069.330526][ T414] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.349722][ T414] usb 6-1: config 0 has no interface number 0 [ 1069.361492][ T414] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1069.378308][ T414] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.389857][ T414] usb 6-1: Product: syz [ 1069.394034][ T414] usb 6-1: Manufacturer: syz [ 1069.398663][ T414] usb 6-1: SerialNumber: syz [ 1069.404018][ T414] usb 6-1: config 0 descriptor?? [ 1069.409953][ T414] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 1069.416419][ T414] usb 6-1: No valid video chain found. [ 1069.615753][ T8264] usb 6-1: USB disconnect, device number 8 [ 1071.566875][ T28] audit: type=1400 audit(1814.796:1914): avc: denied { append } for pid=10362 comm="syz.5.2272" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1074.180119][T10376] overlayfs: overlapping lowerdir path [ 1084.020452][T10393] overlayfs: failed to resolve './file1/file0': -2 [ 1084.034257][T10397] kthread_run failed with err -4 [ 1084.591182][T10423] 9pnet_fd: Insufficient options for proto=fd [ 1085.140091][T10430] overlayfs: overlapping lowerdir path [ 1087.729902][ T28] audit: type=1400 audit(1830.944:1915): avc: denied { bind } for pid=10436 comm="syz.5.2291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1087.750007][ T7310] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1088.092148][ T7310] usb 5-1: config 0 has no interfaces? [ 1088.117282][ T7310] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1088.120135][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2301'. [ 1088.137422][ T7310] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1088.146589][ T7310] usb 5-1: Manufacturer: syz [ 1088.304091][ T28] audit: type=1400 audit(1831.544:1916): avc: denied { getopt } for pid=10456 comm="syz.2.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1088.410214][ T7310] usb 5-1: config 0 descriptor?? [ 1090.741543][T10463] overlayfs: failed to clone upperpath [ 1090.927711][ T7310] usb 5-1: USB disconnect, device number 21 [ 1090.993587][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2302'. [ 1091.020259][T10467] Invalid ELF header magic: != ELF [ 1091.030170][ T28] audit: type=1400 audit(1834.255:1917): avc: denied { sys_module } for pid=10465 comm="syz.5.2302" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1091.102347][ T28] audit: type=1400 audit(1834.255:1918): avc: denied { module_load } for pid=10465 comm="syz.5.2302" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="tmpfs" ino=539 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 1091.144169][T10476] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1091.313264][T10478] bridge0: port 2(vlan0) entered blocking state [ 1091.330627][T10478] bridge0: port 2(vlan0) entered disabled state [ 1091.904017][T10490] overlayfs: overlapping lowerdir path [ 1092.287739][T10497] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2308'. [ 1093.420412][T10512] overlayfs: failed to clone lowerpath [ 1094.349548][T10516] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1094.400476][T10521] device bridge0 entered promiscuous mode [ 1094.406471][T10521] device macsec1 entered promiscuous mode [ 1094.412682][T10521] bridge0: port 2(macsec1) entered blocking state [ 1094.419597][T10521] bridge0: port 2(macsec1) entered disabled state [ 1094.426990][T10521] device bridge0 left promiscuous mode [ 1094.523470][T10523] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1094.939117][T10534] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1096.425448][T10541] overlayfs: failed to clone upperpath [ 1096.624914][T10542] overlayfs: failed to resolve './file1/file0': -2 [ 1097.239208][T10550] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2317'. [ 1097.436466][T10556] overlayfs: overlapping lowerdir path [ 1097.817016][ T28] audit: type=1326 audit(1840.989:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10557 comm="syz.2.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1097.894392][ T28] audit: type=1326 audit(1840.989:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10557 comm="syz.2.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1097.919175][ T28] audit: type=1326 audit(1840.989:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10557 comm="syz.2.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1098.830914][T10569] overlayfs: failed to clone upperpath [ 1099.436905][ T28] audit: type=1326 audit(1840.989:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10557 comm="syz.2.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1099.492187][ T28] audit: type=1326 audit(1840.989:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10557 comm="syz.2.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1099.603638][ T28] audit: type=1326 audit(1840.989:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10557 comm="syz.2.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1099.706013][T10576] overlayfs: overlapping lowerdir path [ 1099.789521][ T28] audit: type=1326 audit(1840.989:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10557 comm="syz.2.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1099.872751][ T28] audit: type=1326 audit(1840.989:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10557 comm="syz.2.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1099.902248][ T28] audit: type=1326 audit(1840.989:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10557 comm="syz.2.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1099.925266][ T28] audit: type=1326 audit(1840.989:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10557 comm="syz.2.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1100.013321][ T8264] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1100.223391][ T8264] usb 5-1: Using ep0 maxpacket: 16 [ 1100.231570][ T8264] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1100.239293][ T8264] usb 5-1: config 0 has no interfaces? [ 1100.246862][ T8264] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 1100.260021][ T8264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.272853][ T8264] usb 5-1: Product: syz [ 1100.288079][ T8264] usb 5-1: Manufacturer: syz [ 1100.293025][ T8264] usb 5-1: SerialNumber: syz [ 1100.303644][ T8264] usb 5-1: config 0 descriptor?? [ 1100.568207][ T8264] usb 5-1: USB disconnect, device number 22 [ 1100.829277][T10591] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 1101.299340][T10595] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1102.107999][ T7310] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1102.603564][ T7310] usb 5-1: config 0 has no interfaces? [ 1102.683443][T10616] overlayfs: overlapping lowerdir path [ 1105.224413][ T7310] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1105.257313][ T7310] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1105.269506][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 1105.269520][ T28] audit: type=1326 audit(1848.512:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.5.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fd98ebe9 code=0x7ffc0000 [ 1105.298933][ T28] audit: type=1326 audit(1848.512:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.5.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1fd98ebe9 code=0x7ffc0000 [ 1105.324701][ T28] audit: type=1326 audit(1848.512:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.5.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fd98ebe9 code=0x7ffc0000 [ 1106.250640][T10641] overlayfs: missing 'lowerdir' [ 1107.224326][ T7310] usb 5-1: Manufacturer: syz [ 1107.231107][ T28] audit: type=1326 audit(1848.512:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.5.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1fd98ebe9 code=0x7ffc0000 [ 1107.258094][ T7310] usb 5-1: config 0 descriptor?? [ 1107.267173][ T28] audit: type=1326 audit(1848.512:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.5.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fd98ebe9 code=0x7ffc0000 [ 1107.740005][T10639] overlayfs: failed to clone lowerpath [ 1108.648446][ T28] audit: type=1326 audit(1848.512:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.5.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1fd98ebe9 code=0x7ffc0000 [ 1108.677433][ T7310] usb 5-1: can't set config #0, error -71 [ 1108.686736][ T7310] usb 5-1: USB disconnect, device number 23 [ 1108.696220][ T28] audit: type=1326 audit(1848.512:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.5.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fd98ebe9 code=0x7ffc0000 [ 1108.720935][ T28] audit: type=1326 audit(1848.512:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.5.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe1fd98ebe9 code=0x7ffc0000 [ 1108.752347][ T28] audit: type=1326 audit(1848.512:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.5.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1fd98ebe9 code=0x7ffc0000 [ 1108.802633][ T28] audit: type=1326 audit(1848.512:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.5.2339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe1fd98ebe9 code=0x7ffc0000 [ 1108.933385][T10658] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1111.556419][T10685] syz.5.2362[10685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1111.557517][T10685] syz.5.2362[10685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1111.646853][T10685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1112.854903][T10698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10698 comm=syz.1.2353 [ 1112.887519][ T1088] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1114.935316][T10713] overlayfs: overlapping lowerdir path [ 1115.624845][T10714] overlayfs: missing 'lowerdir' [ 1117.128316][T10726] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1117.244381][T10731] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2365'. [ 1117.720421][T10738] overlayfs: failed to clone lowerpath [ 1120.911143][T10776] overlayfs: overlapping lowerdir path [ 1121.708825][T10800] overlayfs: missing 'lowerdir' [ 1123.161743][ T414] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1123.467693][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 1123.467707][ T28] audit: type=1400 audit(1866.722:1977): avc: denied { getopt } for pid=10826 comm="syz.1.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1123.579923][ T414] usb 5-1: config 0 has no interfaces? [ 1123.586758][ T414] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1123.596958][ T414] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1123.608826][ T414] usb 5-1: Manufacturer: syz [ 1123.629085][ T414] usb 5-1: config 0 descriptor?? [ 1124.398075][T10847] syz.2.2395[10847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1124.398148][T10847] syz.2.2395[10847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1124.412788][T10847] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1125.134529][ T1033] usb 5-1: USB disconnect, device number 24 [ 1126.078737][ T28] audit: type=1326 audit(1869.133:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.4.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b38ebe9 code=0x7ffc0000 [ 1126.101944][ T28] audit: type=1326 audit(1869.133:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.4.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b38ebe9 code=0x7ffc0000 [ 1126.153699][ T28] audit: type=1326 audit(1869.143:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.4.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f0e2b38ebe9 code=0x7ffc0000 [ 1126.177586][ T28] audit: type=1326 audit(1869.143:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.4.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b38ebe9 code=0x7ffc0000 [ 1126.200677][ T28] audit: type=1326 audit(1869.143:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.4.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b38ebe9 code=0x7ffc0000 [ 1126.225593][ T28] audit: type=1326 audit(1869.143:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.4.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e2b38ebe9 code=0x7ffc0000 [ 1126.262980][ T28] audit: type=1326 audit(1869.143:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.4.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b38ebe9 code=0x7ffc0000 [ 1126.290093][ T28] audit: type=1326 audit(1869.143:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.4.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e2b38ebe9 code=0x7ffc0000 [ 1126.519751][ T28] audit: type=1326 audit(1869.143:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10853 comm="syz.4.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e2b38ebe9 code=0x7ffc0000 [ 1126.734710][T10886] bridge0: port 2(vlan0) entered blocking state [ 1126.740987][T10886] bridge0: port 2(vlan0) entered disabled state [ 1126.826837][T10893] syz.2.2410[10893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1126.826912][T10893] syz.2.2410[10893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1126.840401][T10893] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1127.582038][ T8264] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1127.680492][T10894] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2404'. [ 1128.613900][T10908] overlayfs: failed to resolve './file1/file0': -2 [ 1128.624248][ T8264] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1128.641097][T10916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10916 comm=syz.5.2413 [ 1128.654114][ T8264] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1128.669208][ T8264] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.690254][ T8264] usb 4-1: config 220 has no interface number 2 [ 1128.701671][ T8264] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1128.721168][ T8264] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1128.734704][ T8264] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1128.748264][ T8264] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1128.758295][ T8264] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1129.556277][ T8264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.567718][ T8264] usb 4-1: Product: syz [ 1129.573643][ T8264] usb 4-1: Manufacturer: syz [ 1129.580242][ T8264] usb 4-1: SerialNumber: syz [ 1129.594433][ T8264] usb 4-1: can't set config #220, error -71 [ 1129.612179][ T8264] usb 4-1: USB disconnect, device number 15 [ 1130.445221][T10945] overlayfs: overlapping lowerdir path [ 1130.599550][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1130.599639][ T28] audit: type=1326 audit(1873.385:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.2.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1130.669751][ T28] audit: type=1326 audit(1873.385:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.2.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1130.816807][ T28] audit: type=1326 audit(1873.395:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.2.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1131.165889][ T28] audit: type=1326 audit(1873.395:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.2.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1131.189567][ T28] audit: type=1326 audit(1873.395:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.2.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1131.212875][ T28] audit: type=1326 audit(1873.405:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.2.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1131.238723][ T28] audit: type=1326 audit(1873.405:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.2.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1131.261753][ T28] audit: type=1326 audit(1873.415:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.2.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1131.285293][ T28] audit: type=1326 audit(1873.425:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.2.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1131.308432][ T28] audit: type=1326 audit(1873.425:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10925 comm="syz.2.2417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1131.370862][T10956] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2423'. [ 1131.427612][ T7990] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1131.480622][T10961] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2424'. [ 1131.617543][ T7990] usb 5-1: Using ep0 maxpacket: 8 [ 1131.623029][T10959] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2420'. [ 1131.632980][ T7990] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1131.648164][ T7990] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1131.673703][ T7990] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 1131.708833][ T7990] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1131.737420][ T7990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.745421][ T7990] usb 5-1: Product: syz [ 1131.757792][T10968] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2427'. [ 1131.787430][ T7990] usb 5-1: Manufacturer: syz [ 1131.792301][ T7990] usb 5-1: SerialNumber: syz [ 1131.817915][T10952] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1131.825115][T10952] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1132.052029][ T7990] usb 5-1: bad CDC descriptors [ 1132.058347][ T7990] usb 5-1: USB disconnect, device number 25 [ 1132.652619][T10976] overlayfs: failed to clone upperpath [ 1133.165429][T10985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10985 comm=syz.3.2433 [ 1133.581561][T11005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2435'. [ 1134.646725][T11018] syz.5.2447[11018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1134.646875][T11018] syz.5.2447[11018] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1135.176100][T11018] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1136.922664][T11038] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1137.907329][T11040] overlayfs: failed to resolve './file1/file0': -2 [ 1138.616460][T11054] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2441'. [ 1138.660232][T11055] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2440'. [ 1138.783976][ T7310] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1138.906433][T11072] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2451'. [ 1138.993795][ T7310] usb 4-1: Using ep0 maxpacket: 32 [ 1139.001248][ T7310] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1139.011606][ T7310] usb 4-1: config 0 has no interface number 0 [ 1139.019967][ T7310] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1139.033534][ T7310] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1139.048893][ T7310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.073093][ T7310] usb 4-1: Product: syz [ 1139.085762][ T7310] usb 4-1: Manufacturer: syz [ 1139.099553][ T7310] usb 4-1: SerialNumber: syz [ 1139.241201][ T7310] usb 4-1: config 0 descriptor?? [ 1139.309856][ T7310] smsc75xx v1.0.0 [ 1139.313794][ T7310] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1139.327618][ T7310] smsc75xx: probe of 4-1:0.184 failed with error -22 [ 1139.345149][T11082] syz.2.2453[11082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1139.345524][T11082] syz.2.2453[11082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1139.802615][T11084] syz.1.2454[11084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1139.814519][T11084] syz.1.2454[11084] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1140.054165][T11082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1140.113972][T11084] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1140.380358][ T7310] usb 4-1: USB disconnect, device number 16 [ 1140.413134][ T1088] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1140.478716][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'. [ 1140.604093][ T1088] usb 6-1: config 0 has no interfaces? [ 1140.610449][ T1088] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1140.620922][ T1088] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1140.629119][ T1088] usb 6-1: Manufacturer: syz [ 1140.638464][ T1088] usb 6-1: config 0 descriptor?? [ 1141.074082][ T1088] usb 6-1: USB disconnect, device number 9 [ 1141.620589][T11136] syz.2.2470[11136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1141.620756][T11136] syz.2.2470[11136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1141.636862][T11136] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1142.048522][T11138] syz.5.2471[11138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1142.049774][T11138] syz.5.2471[11138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1143.071914][T11138] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1145.151690][T11155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11155 comm=syz.5.2477 [ 1145.302852][T11166] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2478'. [ 1145.372234][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2479'. [ 1145.620801][T11175] syz.5.2492[11175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1145.620878][T11175] syz.5.2492[11175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1145.944456][T11175] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1147.419663][ T1088] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1147.710408][ T1088] usb 5-1: config 0 has no interfaces? [ 1147.716512][ T1088] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1147.728938][ T1088] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1147.744932][ T1088] usb 5-1: Manufacturer: syz [ 1147.779927][T11183] syz.5.2483[11183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1147.780288][T11183] syz.5.2483[11183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1147.810907][T11183] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1147.871852][ T1088] usb 5-1: config 0 descriptor?? [ 1148.470176][ T315] usb 5-1: USB disconnect, device number 26 [ 1149.154121][T11208] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1149.192210][T11209] syz.5.2488[11209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1149.192877][T11209] syz.5.2488[11209] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1149.268794][T11209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1149.945203][T11213] binder: 11211:11213 ioctl 400c620e 200000000640 returned -22 [ 1150.145323][T11225] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2501'. [ 1150.168835][T11226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2487'. [ 1150.398755][T11229] syz.4.2500[11229] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1150.398903][T11229] syz.4.2500[11229] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1150.523448][T11230] syz.3.2495[11230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1150.536015][T11230] syz.3.2495[11230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1150.968199][T11229] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1151.610735][T11230] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1152.586401][T11239] usb usb9: usbfs: process 11239 (syz.4.2505) did not claim interface 0 before use [ 1152.636987][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1152.637003][ T28] audit: type=1400 audit(1895.816:2007): avc: denied { nlmsg_read } for pid=11232 comm="syz.2.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1152.788699][T11241] device bridge0 entered promiscuous mode [ 1152.805118][T11241] device macsec1 entered promiscuous mode [ 1152.811708][T11241] bridge0: port 1(macsec1) entered blocking state [ 1152.819814][T11241] bridge0: port 1(macsec1) entered disabled state [ 1152.889223][T11241] device bridge0 left promiscuous mode [ 1154.058498][T11294] syz.2.2523[11294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1154.059619][T11294] syz.2.2523[11294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1154.141585][T11294] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1154.594025][ T7504] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1154.787168][ T7990] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1155.416755][ T7504] usb 6-1: config 0 has no interfaces? [ 1155.423135][ T7504] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1155.432546][ T7504] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1155.441320][ T7504] usb 6-1: Manufacturer: syz [ 1155.454482][ T7504] usb 6-1: config 0 descriptor?? [ 1155.518121][T11300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2524'. [ 1155.596022][T11301] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2518'. [ 1155.665419][ T315] usb 6-1: USB disconnect, device number 10 [ 1155.673098][ T7990] usb 5-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=cf.a5 [ 1155.686507][ T7990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.700968][ T7990] usb 5-1: config 0 descriptor?? [ 1155.905463][ T1033] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1156.096587][ T1033] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1156.104942][ T1033] usb 4-1: config 14 has an invalid interface number: 21 but max is 0 [ 1156.113141][ T1033] usb 4-1: config 14 has no interface number 0 [ 1156.119842][ T7990] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1156.129798][ T7990] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1156.140006][ T1033] usb 4-1: config 14 interface 21 altsetting 251 bulk endpoint 0xA has invalid maxpacket 32 [ 1156.150132][ T7990] asix: probe of 5-1:0.0 failed with error -71 [ 1156.156321][ T1033] usb 4-1: config 14 interface 21 has no altsetting 0 [ 1156.174936][ T7990] usb 5-1: USB disconnect, device number 27 [ 1156.182883][ T1033] usb 4-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 1156.191961][ T1033] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.200054][ T1033] usb 4-1: Product: syz [ 1156.204213][ T1033] usb 4-1: Manufacturer: syz [ 1156.208838][ T1033] usb 4-1: SerialNumber: syz [ 1156.214206][T11303] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1156.426813][ T1033] usb 4-1: MIDIStreaming interface descriptor not found [ 1156.438559][ T1033] usb 4-1: USB disconnect, device number 17 [ 1156.449373][T11278] udevd[11278]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:14.21/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1156.939517][T11314] device macsec1 entered promiscuous mode [ 1156.948819][T11314] device bridge0 entered promiscuous mode [ 1156.954856][T11314] bridge0: port 3(macsec1) entered blocking state [ 1156.961418][T11314] bridge0: port 3(macsec1) entered disabled state [ 1156.969267][T11314] device bridge0 left promiscuous mode [ 1158.406622][T11330] overlayfs: failed to clone upperpath [ 1158.975458][T11335] bridge0: port 1(vlan1) entered blocking state [ 1158.981772][T11335] bridge0: port 1(vlan1) entered disabled state [ 1160.137114][T11360] syz.3.2535[11360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1160.137265][T11360] syz.3.2535[11360] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1160.565696][ T28] audit: type=1400 audit(1902.439:2008): avc: denied { bind } for pid=11350 comm="syz.1.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1160.662427][ T28] audit: type=1400 audit(1902.439:2009): avc: denied { name_bind } for pid=11350 comm="syz.1.2541" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1160.921371][T11351] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2537'. [ 1160.921374][ T28] audit: type=1400 audit(1902.439:2010): avc: denied { node_bind } for pid=11350 comm="syz.1.2541" saddr=fc01:: src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1161.569946][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2552'. [ 1161.936287][T11386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2552'. [ 1161.953419][T11386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2552'. [ 1162.019807][ T28] audit: type=1400 audit(1905.291:2011): avc: denied { setopt } for pid=11399 comm="syz.2.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1162.106945][T11395] bridge0: port 1(vlan1) entered blocking state [ 1162.115027][T11395] bridge0: port 1(vlan1) entered disabled state [ 1162.318563][T11411] syz.4.2558[11411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1162.319680][T11411] syz.4.2558[11411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1163.313973][T11412] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2557'. [ 1163.351633][ T7990] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 1163.446322][T11425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11425 comm=syz.4.2563 [ 1163.504537][T11432] tmpfs: Unknown parameter 'siz' [ 1163.542820][ T7990] usb 6-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1163.560523][ T7990] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1163.570516][ T7990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.582814][ T7990] usb 6-1: Product: syz [ 1163.588566][ T7990] usb 6-1: Manufacturer: syz [ 1163.594250][ T7990] usb 6-1: SerialNumber: syz [ 1163.601319][ T7990] usb 6-1: config 0 descriptor?? [ 1164.598071][T11437] overlayfs: failed to clone upperpath [ 1164.644359][ T7990] cdc_ether 6-1:0.0: skipping garbage [ 1164.650069][ T7990] cdc_ether 6-1:0.0: skipping garbage [ 1164.656507][ T7990] usb 6-1: bad CDC descriptors [ 1164.662933][ T7990] usb 6-1: unsupported MDLM descriptors [ 1164.695179][ T7990] usb 6-1: USB disconnect, device number 11 [ 1165.970703][T11458] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2564'. [ 1165.992997][ T28] audit: type=1400 audit(1909.273:2012): avc: denied { setopt } for pid=11460 comm="syz.5.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1166.091965][ T28] audit: type=1400 audit(1909.273:2013): avc: denied { write } for pid=11460 comm="syz.5.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1166.150327][T11469] tmpfs: Unknown parameter 'siz' [ 1166.588025][T11474] overlayfs: failed to resolve './file1/file0': -2 [ 1166.661918][T11471] bridge0: port 2(vlan0) entered blocking state [ 1166.716228][T11471] bridge0: port 2(vlan0) entered disabled state [ 1166.968718][T11475] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2574'. [ 1167.117135][ T28] audit: type=1400 audit(1910.393:2014): avc: denied { read write } for pid=11477 comm="syz.3.2575" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1167.201131][ T28] audit: type=1400 audit(1910.423:2015): avc: denied { open } for pid=11477 comm="syz.3.2575" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1167.433470][T11492] syz.1.2585[11492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1167.433543][T11492] syz.1.2585[11492] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1168.700156][T11512] tmpfs: Unknown parameter 'siz' [ 1168.956286][T11521] overlayfs: failed to clone upperpath [ 1169.041930][T11528] random: crng reseeded on system resumption [ 1169.048204][ T28] audit: type=1400 audit(1912.324:2016): avc: denied { write } for pid=11527 comm="syz.4.2597" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1169.119290][ T28] audit: type=1400 audit(1912.324:2017): avc: denied { open } for pid=11527 comm="syz.4.2597" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1169.148777][ T1033] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1169.240102][T11536] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2593'. [ 1169.252466][ T28] audit: type=1400 audit(1912.534:2018): avc: denied { read } for pid=11537 comm="syz.5.2600" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1169.275401][T11538] random: crng reseeded on system resumption [ 1169.354161][T11539] syz.4.2599[11539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1169.354503][T11539] syz.4.2599[11539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1169.372169][T11539] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1169.438462][ T28] audit: type=1400 audit(1912.564:2019): avc: denied { ioctl } for pid=11537 comm="syz.5.2600" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1170.194918][ T1033] usb 4-1: config 0 has no interfaces? [ 1170.201121][ T1033] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1170.211098][ T1033] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1170.219131][ T1033] usb 4-1: Manufacturer: syz [ 1170.224287][ T1033] usb 4-1: config 0 descriptor?? [ 1170.358122][ T1088] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1170.507494][ T1033] usb 4-1: USB disconnect, device number 18 [ 1170.564081][ T7504] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1170.599263][ T1088] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.610252][ T1088] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.620456][ T1088] usb 6-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 1170.629954][ T1088] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.641748][ T1088] usb 6-1: config 0 descriptor?? [ 1170.777923][ T7504] usb 5-1: Using ep0 maxpacket: 32 [ 1170.785069][ T7504] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.804904][ T7504] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.857238][ T7504] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1170.881257][ T7504] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1170.891215][ T7504] usb 5-1: Product: syz [ 1170.897958][ T7504] usb 5-1: Manufacturer: syz [ 1170.907931][ T1033] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1170.908812][ T7504] hub 5-1:4.0: USB hub found [ 1171.050935][ T1088] wacom 0003:056A:00C6.0003: hidraw0: USB HID v0.00 Device [HID 056a:00c6] on usb-dummy_hcd.5-1/input0 [ 1171.224027][T11562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.278767][ T7504] hub 5-1:4.0: 7 ports detected [ 1171.319952][ T7504] hub 5-1:4.0: insufficient power available to use all downstream ports [ 1171.364198][ T7310] usb 6-1: USB disconnect, device number 12 [ 1171.483724][T11563] fido_id[11563]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1171.501595][ T7504] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 1171.532299][ T7504] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 1171.668846][ T7504] usb 5-1: USB disconnect, device number 28 [ 1172.048565][ T1033] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1172.056593][ T1033] usb 4-1: not running at top speed; connect to a high speed hub [ 1172.065330][ T1033] usb 4-1: config 12 has an invalid interface number: 131 but max is 0 [ 1172.073611][ T1033] usb 4-1: config 12 has no interface number 0 [ 1172.080037][ T1033] usb 4-1: config 12 interface 131 has no altsetting 0 [ 1172.088411][ T1033] usb 4-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=52.18 [ 1172.097571][ T1033] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.105592][ T1033] usb 4-1: Product: syz [ 1172.109807][ T1033] usb 4-1: Manufacturer: syz [ 1172.114390][ T1033] usb 4-1: SerialNumber: syz [ 1172.307152][ T7310] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1172.324726][ T1033] rtl8150 4-1:12.131: couldn't find required endpoints [ 1172.332017][ T1033] rtl8150: probe of 4-1:12.131 failed with error -5 [ 1172.342849][ T1033] usb 4-1: USB disconnect, device number 19 [ 1172.488096][ T7310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1172.499056][ T7310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1172.508800][ T7310] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1172.517963][ T7310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.526424][ T7310] usb 6-1: config 0 descriptor?? [ 1172.607061][ T7504] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1172.703783][T11576] syz.2.2614[11576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1172.704114][T11576] syz.2.2614[11576] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1172.762885][T11576] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1172.876925][ T7504] usb 5-1: Using ep0 maxpacket: 32 [ 1172.884203][ T7504] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1172.894951][ T7504] usb 5-1: config 0 has no interface number 0 [ 1172.901805][ T7504] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1172.911993][ T7504] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1172.922126][ T7504] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.930834][ T7504] usb 5-1: Product: syz [ 1172.935425][ T7504] usb 5-1: Manufacturer: syz [ 1172.940954][ T7504] usb 5-1: SerialNumber: syz [ 1172.950471][ T7504] usb 5-1: config 0 descriptor?? [ 1172.959215][ T7504] smsc75xx v1.0.0 [ 1172.962975][ T7504] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1172.974875][ T7504] smsc75xx: probe of 5-1:0.184 failed with error -22 [ 1173.055382][ T7310] sony 0003:054C:0268.0004: item fetching failed at offset 4/5 [ 1173.072263][ T7310] sony 0003:054C:0268.0004: parse failed [ 1173.084134][ T7310] sony: probe of 0003:054C:0268.0004 failed with error -22 [ 1173.241813][ T7310] usb 5-1: USB disconnect, device number 29 [ 1173.355433][ T7504] usb 6-1: USB disconnect, device number 13 [ 1175.044489][T11613] overlayfs: failed to resolve './file1/file0': -2 [ 1175.205846][ T7990] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1175.397756][ T7990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1175.409193][ T7990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1175.430436][ T7990] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1175.446760][ T7990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.509800][ T7990] usb 6-1: config 0 descriptor?? [ 1175.521542][T11610] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1175.906566][T11631] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2624'. [ 1175.940537][ T7990] hid-rmi 0003:0461:4E72.0005: unknown main item tag 0x0 [ 1175.955423][ T7990] hid-rmi 0003:0461:4E72.0005: unknown main item tag 0x0 [ 1175.962497][ T7990] hid-rmi 0003:0461:4E72.0005: unknown main item tag 0x0 [ 1175.975424][ T7990] hid-rmi 0003:0461:4E72.0005: unknown main item tag 0x0 [ 1175.982484][ T7990] hid-rmi 0003:0461:4E72.0005: unknown main item tag 0x0 [ 1175.997313][ T7990] hid-rmi 0003:0461:4E72.0005: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.5-1/input0 [ 1176.115247][T11581] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1176.184951][ T7990] usb 6-1: USB disconnect, device number 14 [ 1176.346570][T11581] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1176.359629][T11581] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1176.388105][T11581] usb 4-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 1176.410083][T11581] usb 4-1: config 220 has no interface number 2 [ 1176.416493][T11581] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1176.429888][T11581] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1176.436817][T11581] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1176.443777][T11581] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1176.458727][T11581] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1176.467951][T11581] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.476044][T11581] usb 4-1: Product: syz [ 1176.480310][T11581] usb 4-1: Manufacturer: syz [ 1176.484982][T11581] usb 4-1: SerialNumber: syz [ 1176.486958][T11649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11649 comm=syz.4.2640 [ 1176.753745][T11581] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1176.769233][T11581] usb 4-1: No valid video chain found. [ 1176.775684][T11581] usb 4-1: selecting invalid altsetting 0 [ 1176.811641][T11581] usb 4-1: USB disconnect, device number 20 [ 1176.893959][T11661] overlayfs: overlapping lowerdir path [ 1177.195044][ T7310] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1177.417926][ T7310] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1177.428663][ T7310] usb 6-1: config 0 has no interface number 0 [ 1177.446444][ T7310] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1177.469439][ T7310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.496380][ T7310] usb 6-1: Product: syz [ 1177.511324][ T7310] usb 6-1: Manufacturer: syz [ 1177.527019][ T7310] usb 6-1: SerialNumber: syz [ 1177.558013][ T7310] usb 6-1: config 0 descriptor?? [ 1177.646709][T11679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11679 comm=syz.3.2653 [ 1177.777732][ T7310] usb 6-1: Found UVC 0.08 device syz (046d:0823) [ 1177.831853][ T7310] usb 6-1: No valid video chain found. [ 1178.099136][T11693] overlayfs: failed to clone upperpath [ 1178.174208][ T7990] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1178.193279][ T7310] usb 6-1: USB disconnect, device number 15 [ 1178.366021][ T7990] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1178.382851][ T7990] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1178.451844][ T7990] usb 4-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 1178.529522][ T7990] usb 4-1: config 220 has no interface number 2 [ 1178.562642][ T7990] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1178.646895][ T7990] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1178.661201][ T7990] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1178.678475][ T7990] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1178.697717][ T7990] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1178.715751][ T7990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.739149][ T7990] usb 4-1: Product: syz [ 1178.748788][T11702] tmpfs: Unknown parameter 'siz' [ 1178.754198][ T7990] usb 4-1: Manufacturer: syz [ 1178.764864][ T7990] usb 4-1: SerialNumber: syz [ 1178.916295][T11708] overlayfs: failed to resolve './file1/file0': -2 [ 1178.990456][ T7990] usb 4-1: selecting invalid altsetting 0 [ 1178.999926][ T7990] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1179.015055][ T7990] usb 4-1: No valid video chain found. [ 1179.062791][ T7990] usb 4-1: USB disconnect, device number 21 [ 1179.073891][ T315] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1179.325457][ T315] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.386634][ T315] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.403431][T11715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11715 comm=syz.1.2665 [ 1179.435021][ T315] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1179.447675][ T315] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1179.473320][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.515559][ T315] usb 5-1: config 0 descriptor?? [ 1179.927340][ T315] hid (null): report_id 2139688843 is invalid [ 1180.013319][ T8264] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1180.266653][ T315] usb 5-1: string descriptor 0 read error: -71 [ 1180.283398][ T315] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 1180.292387][ T315] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 1180.300742][ T315] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 1180.309248][ T315] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 1180.318008][ T8264] usb 6-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 1180.327116][ T315] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 1180.334646][ T8264] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.343156][ T7990] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 1180.373452][ T315] usb 5-1: USB disconnect, device number 30 [ 1180.389672][ T8264] usb 6-1: config 0 descriptor?? [ 1180.462016][T11736] bridge0: port 1(vlan1) entered blocking state [ 1180.468487][T11736] bridge0: port 1(vlan1) entered disabled state [ 1180.554525][ T7990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1180.565709][ T7990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.575914][ T7990] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1180.585065][ T7990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.600376][ T7990] usb 4-1: config 0 descriptor?? [ 1180.953525][ T8264] smartjoyplus 0003:0925:8888.0007: unknown main item tag 0x0 [ 1180.961711][ T8264] smartjoyplus 0003:0925:8888.0007: unknown main item tag 0x0 [ 1180.969787][ T8264] smartjoyplus 0003:0925:8888.0007: unknown main item tag 0x0 [ 1180.977612][ T8264] smartjoyplus 0003:0925:8888.0007: unknown main item tag 0x0 [ 1181.007619][ T8264] smartjoyplus 0003:0925:8888.0007: unknown main item tag 0x0 [ 1181.027399][ T7990] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 1181.044323][ T8264] smartjoyplus 0003:0925:8888.0007: hidraw0: USB HID v0.00 Device [HID 0925:8888] on usb-dummy_hcd.5-1/input0 [ 1181.056278][ T7990] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 1181.063250][ T7990] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 1181.070134][ T8264] smartjoyplus 0003:0925:8888.0007: no output reports found [ 1181.077780][ T7990] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 1181.175860][ T7990] savu 0003:1E7D:2D5A.0008: unknown main item tag 0x0 [ 1181.201863][ T8264] usb 6-1: USB disconnect, device number 16 [ 1181.239379][ T7990] savu 0003:1E7D:2D5A.0008: unbalanced collection at end of report description [ 1181.283207][T11581] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1181.285536][ T7990] savu 0003:1E7D:2D5A.0008: parse failed [ 1181.296703][ T7990] savu: probe of 0003:1E7D:2D5A.0008 failed with error -22 [ 1181.411568][ T7990] usb 4-1: USB disconnect, device number 22 [ 1181.545019][T11581] usb 5-1: config 0 has no interfaces? [ 1181.554348][T11581] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1181.568600][T11744] fido_id[11744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1181.583605][T11581] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1181.596349][T11581] usb 5-1: Manufacturer: syz [ 1181.629933][T11581] usb 5-1: config 0 descriptor?? [ 1181.914835][T11750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11750 comm=syz.5.2679 [ 1182.113464][T11756] tipc: Enabling of bearer rejected, failed to enable media [ 1182.213459][T11762] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2677'. [ 1182.777334][T11776] syz.5.2687[11776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1182.777482][T11776] syz.5.2687[11776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1182.781698][T11776] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1183.888215][ T7310] usb 5-1: USB disconnect, device number 31 [ 1184.149700][T11784] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2690'. [ 1184.201271][ T7504] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1184.326258][T11793] xt_hashlimit: size too large, truncated to 1048576 [ 1184.353356][T11798] tmpfs: Unknown parameter 'siz' [ 1184.401088][ T7504] usb 6-1: Using ep0 maxpacket: 32 [ 1184.407372][ T7504] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.512812][T11806] overlayfs: failed to clone upperpath [ 1184.643364][T11808] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1185.864510][ T7504] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1185.921271][ T7504] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1185.941782][ T7504] usb 6-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 1185.974962][ T7504] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.017437][ T7504] usb 6-1: config 0 descriptor?? [ 1186.027209][T11812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11812 comm=syz.2.2701 [ 1186.310222][T11831] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2704'. [ 1186.458033][ T7504] wacom 0003:056A:0094.0009: Using device in hidraw-only mode [ 1186.469285][ T7504] wacom 0003:056A:0094.0009: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.5-1/input0 [ 1186.510077][ T7310] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1186.660122][ T7504] usb 6-1: USB disconnect, device number 17 [ 1186.689992][ T7310] usb 5-1: Using ep0 maxpacket: 16 [ 1186.696423][ T7310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1186.707540][ T7310] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1186.721155][ T7310] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1186.730666][ T7310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.742453][ T7310] usb 5-1: config 0 descriptor?? [ 1187.156427][ T7310] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1187.166579][ T7310] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1187.177566][ T7310] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1187.190756][T11843] tmpfs: Bad value for 'size' [ 1187.192118][ T7310] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1187.212870][ T7310] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1187.225103][ T7310] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1187.242230][ T7310] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1187.256723][ T7310] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1187.716284][T11845] overlayfs: failed to resolve './file1/file0': -2 [ 1187.864436][ T7310] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1188.078670][ T7310] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 1188.088427][ T7310] HID 045e:07da: Invalid code 65791 type 1 [ 1188.102261][ T7310] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000A/input/input24 [ 1188.119793][ T7310] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1188.147386][ T7310] usb 5-1: USB disconnect, device number 32 [ 1188.192712][T11846] fido_id[11846]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1188.248457][ T28] audit: type=1400 audit(1931.534:2020): avc: denied { mount } for pid=11847 comm="syz.3.2713" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1188.279645][ T28] audit: type=1400 audit(1931.564:2021): avc: denied { remount } for pid=11847 comm="syz.3.2713" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1188.310641][ T28] audit: type=1400 audit(1931.594:2022): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1188.390497][ T28] audit: type=1400 audit(1931.644:2023): avc: denied { append } for pid=11855 comm="syz.3.2717" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1188.519618][T11868] syz.1.2715[11868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1188.519694][T11868] syz.1.2715[11868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1188.533444][T11868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1188.693712][ T8264] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1188.817618][ T7990] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1188.960158][ T8264] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1188.980555][ T8264] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.989613][ T8264] usb 6-1: Product: syz [ 1188.993811][ T8264] usb 6-1: Manufacturer: syz [ 1188.998449][ T8264] usb 6-1: SerialNumber: syz [ 1189.080250][ T7990] usb 4-1: Using ep0 maxpacket: 16 [ 1189.099815][ T7990] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1189.139928][ T8264] usb 6-1: config 0 descriptor?? [ 1189.228560][ T7990] usb 4-1: config 0 has no interface number 0 [ 1189.234829][ T7990] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1189.244770][ T7990] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1189.256855][ T7990] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1189.266092][ T7990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.274318][ T7990] usb 4-1: Product: syz [ 1189.278595][ T7990] usb 4-1: Manufacturer: syz [ 1189.283512][ T7990] usb 4-1: SerialNumber: syz [ 1189.293611][ T7990] usb 4-1: config 0 descriptor?? [ 1189.299168][T11867] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1189.306362][T11867] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1189.517277][T11867] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1189.524694][T11867] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1189.757411][ T8264] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1189.767507][ T8264] asix: probe of 6-1:0.0 failed with error -71 [ 1189.779207][ T8264] usb 6-1: USB disconnect, device number 18 [ 1189.934101][ T7990] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1189.944642][ T7990] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1189.956641][ T7990] asix: probe of 4-1:0.251 failed with error -71 [ 1189.966288][ T7990] usb 4-1: USB disconnect, device number 23 [ 1190.112107][ T28] audit: type=1400 audit(1933.405:2024): avc: denied { bind } for pid=11888 comm="syz.1.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1190.234274][T11896] overlayfs: failed to clone lowerpath [ 1190.272654][T11898] tun0: tun_chr_ioctl cmd 1074025676 [ 1190.277984][T11898] tun0: owner set to 0 [ 1190.505439][T11908] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2736'. [ 1190.597453][T11916] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1190.661983][T11924] raw_sendmsg: syz.2.2744 forgot to set AF_INET. Fix it! [ 1190.739835][T11937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11937 comm=syz.2.2750 [ 1191.077805][ T7990] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1191.245543][ T28] audit: type=1400 audit(1934.535:2025): avc: denied { map } for pid=11955 comm="syz.5.2758" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1191.272248][ T7990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.283439][ T7990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.293359][ T7990] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1191.302723][ T7990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.311169][ T7990] usb 5-1: config 0 descriptor?? [ 1191.371854][T11964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11964 comm=syz.5.2761 [ 1191.440420][ T28] audit: type=1400 audit(1934.736:2026): avc: denied { connect } for pid=11966 comm="syz.5.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1191.460515][ T28] audit: type=1400 audit(1934.756:2027): avc: denied { write } for pid=11966 comm="syz.5.2762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1191.529875][T11974] tmpfs: Bad value for 'size' [ 1191.587184][T11977] overlayfs: overlapping lowerdir path [ 1191.955794][T11979] overlayfs: failed to clone upperpath [ 1192.003220][ T7990] hkems 0003:2006:0118.000B: unknown main item tag 0xe [ 1192.012813][ T7990] hkems 0003:2006:0118.000B: item fetching failed at offset 4/7 [ 1192.082721][ T7990] hkems 0003:2006:0118.000B: parse failed [ 1192.093144][ T7990] hkems: probe of 0003:2006:0118.000B failed with error -22 [ 1192.285175][ T7990] usb 5-1: USB disconnect, device number 33 [ 1192.530267][ T315] kernel write not supported for file /rfkill (pid: 315 comm: kworker/0:2) [ 1192.585336][T11981] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2766'. [ 1192.603902][ T28] audit: type=1400 audit(1935.896:2028): avc: denied { mount } for pid=11997 comm="syz.2.2773" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1192.640211][T12002] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1192.779568][T12012] overlayfs: failed to clone lowerpath [ 1192.981288][T12017] syz.3.2779[12017] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1192.981590][T12017] syz.3.2779[12017] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1193.011129][T12017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1193.728973][T12021] syz.4.2780[12021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1193.729049][T12021] syz.4.2780[12021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1193.742541][T12021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1194.525825][T12031] overlayfs: failed to clone upperpath [ 1194.846450][T12038] block device autoloading is deprecated and will be removed. [ 1195.444247][T12048] syz.5.2789[12048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1195.445373][T12048] syz.5.2789[12048] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1195.527588][T12048] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1197.444780][T12059] overlayfs: overlapping lowerdir path [ 1197.638385][T12061] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1197.940195][T12077] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2794'. [ 1198.016649][T12078] bridge0: port 2(vlan0) entered blocking state [ 1198.022944][T12078] bridge0: port 2(vlan0) entered disabled state [ 1198.287135][T12086] syz.5.2800[12086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1198.287541][T12086] syz.5.2800[12086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1198.317802][T12086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1199.386485][T12110] overlayfs: failed to clone lowerpath [ 1200.471081][ T28] audit: type=1400 audit(1943.760:2029): avc: denied { compute_member } for pid=12127 comm="syz.4.2817" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1200.585573][ T7310] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1200.692597][T12133] syz.4.2818[12133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1200.692690][T12133] syz.4.2818[12133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1200.706230][T12133] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1200.770740][T12134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2815'. [ 1200.836075][ T7310] usb 6-1: config 0 has an invalid interface number: 46 but max is 0 [ 1200.861545][ T7310] usb 6-1: config 0 has no interface number 0 [ 1200.900849][ T7310] usb 6-1: config 0 interface 46 has no altsetting 0 [ 1200.944146][ T7310] usb 6-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 1200.997109][ T7310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.081792][ T7310] usb 6-1: config 0 descriptor?? [ 1201.119817][ T7310] usb-storage 6-1:0.46: USB Mass Storage device detected [ 1201.301353][ T7310] usb-storage 6-1:0.46: Quirks match for vid 0781 pid 0100: 1 [ 1201.476797][ T7310] usb 6-1: USB disconnect, device number 19 [ 1201.835818][T12159] overlayfs: overlapping lowerdir path [ 1202.139812][ T28] audit: type=1400 audit(1945.431:2030): avc: denied { write } for pid=12169 comm="syz.5.2831" name="ppp" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1202.219025][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2827'. [ 1202.242237][ T7310] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1202.267713][T12171] Invalid ELF header magic: != ELF [ 1202.380581][T12175] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2833'. [ 1202.395113][T12175] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2833'. [ 1202.453491][ T7310] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1202.476528][ T7310] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1202.535314][ T7310] usb 5-1: config 1 has no interface number 1 [ 1202.555560][ T7310] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1202.587151][ T7310] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1202.617848][ T7310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.633073][ T7310] usb 5-1: Product: syz [ 1202.642183][ T7310] usb 5-1: Manufacturer: syz [ 1202.646799][ T7310] usb 5-1: SerialNumber: syz [ 1202.851565][T12186] syz.3.2836[12186] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1202.852011][T12186] syz.3.2836[12186] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1202.884608][T12186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1202.954629][ T7310] usb 5-1: 2:1 : sample bitwidth 204 in over sample bytes 18 [ 1203.055523][ T7310] usb 5-1: 2:1 : unsupported sample bitwidth 204 in 18 bytes [ 1203.206170][ T7310] usb 5-1: USB disconnect, device number 34 [ 1203.373534][T12193] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2837'. [ 1203.651181][ T28] audit: type=1400 audit(1946.942:2031): avc: denied { validate_trans } for pid=12201 comm="syz.4.2842" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1203.861384][ T7310] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1203.948033][T12217] bridge0: port 2(vlan0) entered blocking state [ 1203.954541][T12217] bridge0: port 2(vlan0) entered disabled state [ 1204.054801][ T7310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.067890][T12234] syz.2.2853[12234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1204.068181][T12234] syz.2.2853[12234] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1204.143086][T12234] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1204.185062][T12235] syz.1.2854[12235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1204.186166][T12235] syz.1.2854[12235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1204.314539][T12233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1204.380154][ T7310] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1204.401581][ T7310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.425915][ T7310] usb 6-1: config 0 descriptor?? [ 1204.859030][ T7310] lenovo 0003:17EF:60A3.000C: item fetching failed at offset 2/5 [ 1204.873418][ T7310] lenovo 0003:17EF:60A3.000C: hid_parse failed [ 1204.885884][ T7310] lenovo: probe of 0003:17EF:60A3.000C failed with error -22 [ 1205.272794][ T7990] usb 6-1: USB disconnect, device number 20 [ 1205.936530][T12265] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2862'. [ 1206.027009][T12267] syz.3.2866[12267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1206.027358][T12267] syz.3.2866[12267] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1206.057501][T12267] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1206.832595][T12272] SELinux: Context Ü is not valid (left unmapped). [ 1206.849957][ T28] audit: type=1400 audit(1950.113:2032): avc: denied { read write } for pid=12260 comm="syz.5.2865" name="cgroup.subtree_control" dev="cgroup2" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1206.880045][ T28] audit: type=1400 audit(1950.113:2033): avc: denied { open } for pid=12260 comm="syz.5.2865" path="" dev="cgroup2" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1206.902796][ T28] audit: type=1400 audit(1950.113:2034): avc: denied { ioctl } for pid=12260 comm="syz.5.2865" path="" dev="cgroup2" ino=304 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1207.465057][T12290] syz.2.2871[12290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1207.466187][T12290] syz.2.2871[12290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1207.490655][T12291] syz.3.2873[12291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1207.503328][T12291] syz.3.2873[12291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1208.721322][T12290] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1208.744247][T12291] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1212.148609][T12298] overlayfs: unrecognized mount option " 2640 kB [ 1212.148609][T12298] SecPageTables: 0 kB [ 1212.148609][T12298] NFS_Unstable: 0 kB [ 1212.148609][T12298] Bounce: 0 kB [ 1212.148609][T12298] WritebackTmp: 0 kB [ 1212.148609][T12298] CommitLimit: 3625424 kB [ 1212.148609][T12298] Committed_AS: 642576 kB [ 1212.148609][T12298] VmallocTotal: 34359738367 kB [ 1212.148609][T12298] VmallocUsed: 246528 kB [ 1212.148609][T12298] VmallocChunk: 0 kB [ 1212.148609][T12298] Percpu: 2648 kB [ 1212.148609][T12298] AnonHugePages: 0 kB [ 1212.148609][T12298] ShmemHugePages: 0 kB [ 1212.148609][T12298] ShmemPmdMapped: 0 kB [ 1212.148609][T12298] FileHugePages: 0 kB [ 1212.148609][T12298] FilePmdMapped: 0 kB [ 1212.148609][T12298] CmaTotal: 0 kB [ 1212.148609][T12298] CmaFree: 0 kB [ 1212.148609][T12298] DirectMap4k: 42996 kB [ 1212.651820][T12315] syz.1.2881[12315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1212.652973][T12315] syz.1.2881[12315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1212.734057][T12315] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1213.727050][T12316] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2880'. [ 1213.838232][T12327] device veth0_vlan left promiscuous mode [ 1213.888052][T12330] usb usb1: usbfs: process 12330 (syz.5.2890) did not claim interface 0 before use [ 1213.932401][T12333] input: syz1 as /devices/virtual/input/input25 [ 1213.990237][T12346] syz.2.2894[12346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1213.990318][T12346] syz.2.2894[12346] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1214.166515][ T28] audit: type=1400 audit(1957.477:2035): avc: denied { mount } for pid=12355 comm="syz.3.2899" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1214.199834][ T7990] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1214.234715][ T28] audit: type=1400 audit(1957.477:2036): avc: denied { remount } for pid=12355 comm="syz.3.2899" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1214.264950][ T28] audit: type=1400 audit(1957.477:2037): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1214.359006][ T28] audit: type=1400 audit(1957.667:2038): avc: denied { listen } for pid=12369 comm="syz.4.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1214.387710][ T28] audit: type=1400 audit(1957.697:2039): avc: denied { create } for pid=12371 comm="syz.4.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1214.387727][ T7990] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1214.416906][ T28] audit: type=1400 audit(1957.717:2040): avc: denied { setopt } for pid=12371 comm="syz.4.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1214.424633][ T7990] usb 6-1: config 0 has no interface number 0 [ 1214.442547][ T7990] usb 6-1: config 0 interface 85 altsetting 151 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.467259][ T7990] usb 6-1: config 0 interface 85 altsetting 151 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.484263][ T7990] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1214.496166][ T7990] usb 6-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 1214.506368][ T7990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.529632][ T7990] usb 6-1: config 0 descriptor?? [ 1215.296994][ T7990] hid-led 0003:1D34:0004.000D: unknown main item tag 0x0 [ 1215.304070][ T7990] hid-led 0003:1D34:0004.000D: unknown main item tag 0x0 [ 1215.315646][ T7990] hid-led 0003:1D34:0004.000D: unknown main item tag 0x0 [ 1215.322688][ T7990] hid-led 0003:1D34:0004.000D: unknown main item tag 0x0 [ 1215.329952][ T7990] hid-led 0003:1D34:0004.000D: unknown main item tag 0x0 [ 1215.337242][ T7990] hid-led 0003:1D34:0004.000D: unknown main item tag 0x0 [ 1215.344291][ T7990] hid-led 0003:1D34:0004.000D: unknown main item tag 0x0 [ 1215.416576][ T7990] hid-led 0003:1D34:0004.000D: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.5-1/input85 [ 1215.436521][ T7990] hid-led 0003:1D34:0004.000D: Dream Cheeky Webmail Notifier initialized [ 1215.438257][ T28] audit: type=1400 audit(1958.748:2041): avc: denied { setattr } for pid=283 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1215.593332][ T28] audit: type=1400 audit(1958.898:2042): avc: denied { getopt } for pid=12413 comm="syz.4.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1215.686616][ T7990] usb 6-1: USB disconnect, device number 21 [ 1215.896924][ T28] audit: type=1400 audit(1959.208:2043): avc: denied { mounton } for pid=12433 comm="syz.4.2931" path="/563/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1215.923827][ T28] audit: type=1400 audit(1959.228:2044): avc: denied { remount } for pid=12433 comm="syz.4.2931" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1216.235213][ T7504] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1216.644511][T12479] overlayfs: failed to resolve './file1/file0': -2 [ 1217.521505][T12489] 9pnet_fd: Insufficient options for proto=fd [ 1217.532830][ T7504] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.549421][T12481] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2953'. [ 1217.559670][ T7504] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.584508][ T7504] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1217.610648][ T7504] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1217.619754][ T7504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.637451][ T7504] usb 5-1: config 0 descriptor?? [ 1217.899703][T12511] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2966'. [ 1218.056645][ T7504] plantronics 0003:047F:FFFF.000E: unbalanced delimiter at end of report description [ 1218.066418][ T7504] plantronics 0003:047F:FFFF.000E: parse failed [ 1218.072682][ T7504] plantronics: probe of 0003:047F:FFFF.000E failed with error -22 [ 1218.266259][ T7990] usb 5-1: USB disconnect, device number 35 [ 1218.357030][T12554] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2988'. [ 1218.472166][T12578] syz.2.2999[12578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1218.472241][T12578] syz.2.2999[12578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1218.491365][T12578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1218.765093][T12598] overlayfs: overlapping lowerdir path [ 1218.963834][T12591] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3004'. [ 1218.973486][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3007'. [ 1219.146272][T12600] Invalid ELF header magic: != ELF [ 1219.211568][T12605] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3009'. [ 1219.319127][T12616] syz.4.3014[12616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1219.319201][T12616] syz.4.3014[12616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1219.332656][T12616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1219.747911][T12649] overlayfs: overlapping lowerdir path [ 1219.824893][T12651] syz.5.3029[12651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1219.824969][T12651] syz.5.3029[12651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1219.838391][T12651] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1220.208456][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1220.208469][ T28] audit: type=1400 audit(1963.510:2047): avc: denied { setattr } for pid=12677 comm="syz.5.3041" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1220.507335][ T28] audit: type=1400 audit(1963.810:2048): avc: denied { ioctl } for pid=12690 comm="syz.1.3046" path="socket:[56931]" dev="sockfs" ino=56931 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1220.540001][ T28] audit: type=1400 audit(1963.840:2049): avc: denied { create } for pid=12689 comm="syz.4.3047" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1220.564855][ T28] audit: type=1400 audit(1963.840:2050): avc: denied { setattr } for pid=12689 comm="syz.4.3047" name="file0" dev="tmpfs" ino=3247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1220.587623][ T28] audit: type=1400 audit(1963.860:2051): avc: denied { unlink } for pid=287 comm="syz-executor" name="file0" dev="tmpfs" ino=3247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1221.026992][T12702] incfs: Options parsing error. -22 [ 1221.033308][T12702] incfs: mount failed -22 [ 1221.206942][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3053'. [ 1221.232336][T12706] Invalid ELF header magic: != ELF [ 1221.295836][T12712] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3052'. [ 1221.418043][T12715] overlayfs: failed to clone lowerpath [ 1221.809028][T12733] bridge0: port 1(vlan1) entered blocking state [ 1221.815389][T12733] bridge0: port 1(vlan1) entered disabled state [ 1221.862427][ T315] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1222.052279][ T315] usb 5-1: Using ep0 maxpacket: 16 [ 1222.058584][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.079614][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.099545][ T315] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1222.118319][ T315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.138878][ T315] usb 5-1: config 0 descriptor?? [ 1222.459555][T12740] overlayfs: failed to clone upperpath [ 1222.731416][ T315] konepure 0003:1E7D:2DB4.000F: unknown main item tag 0x0 [ 1222.749469][ T315] konepure 0003:1E7D:2DB4.000F: unknown main item tag 0x0 [ 1222.782621][ T315] konepure 0003:1E7D:2DB4.000F: unknown main item tag 0x2 [ 1222.815515][ T315] konepure 0003:1E7D:2DB4.000F: item fetching failed at offset 3/4 [ 1222.901580][ T315] konepure 0003:1E7D:2DB4.000F: parse failed [ 1222.962150][ T315] konepure: probe of 0003:1E7D:2DB4.000F failed with error -22 [ 1223.101943][ T315] usb 5-1: USB disconnect, device number 36 [ 1223.249474][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3065'. [ 1223.274219][T12742] Invalid ELF header magic: != ELF [ 1223.396260][T12752] overlayfs: failed to clone upperpath [ 1223.425517][ T28] audit: type=1400 audit(1966.731:2052): avc: denied { read } for pid=12758 comm="syz.5.3072" path="socket:[57084]" dev="sockfs" ino=57084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1223.622229][T12770] overlayfs: overlapping lowerdir path [ 1224.619424][ T28] audit: type=1400 audit(1967.922:2053): avc: denied { mount } for pid=12789 comm="syz.2.3084" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1225.211254][ T28] audit: type=1326 audit(1968.512:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.2.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1225.238268][ T28] audit: type=1326 audit(1968.512:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.2.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1225.273483][ T28] audit: type=1326 audit(1968.512:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.2.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1225.297938][ T28] audit: type=1326 audit(1968.512:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.2.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1225.321621][ T28] audit: type=1326 audit(1968.512:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.2.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1225.345097][ T28] audit: type=1326 audit(1968.512:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.2.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1225.368336][ T28] audit: type=1326 audit(1968.522:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12812 comm="syz.2.3095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157058ebe9 code=0x7ffc0000 [ 1225.579229][T12832] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3104'. [ 1225.599688][T12832] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3104'. [ 1225.805340][T12844] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3110'. [ 1226.070824][T12857] syz.4.3112[12857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1226.071249][T12857] syz.4.3112[12857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1226.088047][T12857] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1226.982035][T12868] syz.2.3116[12868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1226.982347][T12868] syz.2.3116[12868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1227.032737][T12868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1227.153193][ T28] audit: type=1326 audit(1970.463:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12869 comm="syz.1.3117" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff5e1f8ebe9 code=0x0 [ 1228.002817][ T28] audit: type=1400 audit(1971.314:2062): avc: denied { mounton } for pid=12884 comm="syz.4.3124" path="/602/file0" dev="tmpfs" ino=3386 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1228.078719][T12888] syz.2.3122[12888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1228.079032][T12888] syz.2.3122[12888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1228.127497][T12888] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1228.310196][ T28] audit: type=1400 audit(1971.604:2063): avc: denied { setcurrent } for pid=12889 comm="syz.4.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1228.951340][T12892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3127'. [ 1228.987550][T12899] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3130'. [ 1229.008845][ T7990] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1229.208762][ T7990] usb 6-1: Using ep0 maxpacket: 16 [ 1229.216723][ T7990] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.237836][ T7990] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.250417][ T7990] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1229.257039][ T7990] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1229.266164][ T7990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.268685][ T7504] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1229.275261][ T7990] usb 6-1: config 0 descriptor?? [ 1230.450445][ T7504] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.460948][ T7504] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1230.475531][T12924] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3142'. [ 1230.491003][ T7504] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1230.508098][ T7504] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.665957][T12928] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1230.688189][ T7504] usb 5-1: Product: syz [ 1230.692648][ T7504] usb 5-1: Manufacturer: syz [ 1230.697300][ T7504] usb 5-1: SerialNumber: syz [ 1230.752962][ T7504] usb 5-1: config 0 descriptor?? [ 1230.832599][ T7504] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 1230.917471][ T7504] usb 5-1: No valid video chain found. [ 1231.051900][ T7504] usb 5-1: USB disconnect, device number 37 [ 1231.308089][ T7310] usb 6-1: USB disconnect, device number 22 [ 1231.420891][ T28] audit: type=1400 audit(1974.735:2064): avc: denied { mounton } for pid=12932 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1231.500279][T12932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.507418][T12932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.514961][T12932] device bridge_slave_0 entered promiscuous mode [ 1231.522542][T12932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.530064][T12932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.537577][T12932] device bridge_slave_1 entered promiscuous mode [ 1231.545720][T10058] tipc: Disabling bearer [ 1231.553377][T10058] tipc: Left network mode [ 1231.692534][T12932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.699622][T12932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1231.706900][T12932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.713944][T12932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.125424][T12966] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1233.365265][T12968] input: syz0 as /devices/virtual/input/input26 [ 1233.378284][T12953] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3153'. [ 1233.389437][ T9967] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.415639][ T9967] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.435494][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1233.445317][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1233.512259][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1233.529866][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1233.538485][ T9967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.545544][ T9967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.687119][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1233.736819][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1233.798729][ T9967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.805787][ T9967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.813311][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1233.821813][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1233.830810][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1233.839127][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1233.852486][T12979] bridge0: port 2(vlan0) entered blocking state [ 1233.861946][T12979] bridge0: port 2(vlan0) entered disabled state [ 1233.896086][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1233.906929][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1233.922234][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1233.931602][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1233.939883][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1233.949572][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1233.961812][T12932] device veth0_vlan entered promiscuous mode [ 1233.983992][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1233.995066][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1234.008658][T12932] device veth1_macvtap entered promiscuous mode [ 1234.020293][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1234.028130][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1234.036602][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1234.053382][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1234.062126][ T28] audit: type=1400 audit(1977.377:2065): avc: denied { mounton } for pid=12932 comm="syz-executor" path="/root/syzkaller.17kpJY/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1234.064509][ T9967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1234.108659][ T28] audit: type=1400 audit(1977.377:2066): avc: denied { mounton } for pid=12932 comm="syz-executor" path="/root/syzkaller.17kpJY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1234.137383][T10058] device bridge_slave_1 left promiscuous mode [ 1234.144560][T10058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.155209][T10058] device bridge_slave_0 left promiscuous mode [ 1234.167569][T10058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.175696][T10058] device veth1_macvtap left promiscuous mode [ 1234.183169][ T28] audit: type=1400 audit(1977.377:2067): avc: denied { mounton } for pid=12932 comm="syz-executor" path="/root/syzkaller.17kpJY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=57574 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1234.279517][ T28] audit: type=1400 audit(1977.407:2068): avc: denied { mounton } for pid=12932 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1234.302013][ T28] audit: type=1400 audit(1977.417:2069): avc: denied { mounton } for pid=12932 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1234.391784][T13006] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1234.616036][ T7310] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1234.815974][ T7310] usb 5-1: Using ep0 maxpacket: 16 [ 1234.823296][ T7310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.928812][ T7310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1235.085828][ T7310] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1235.117049][ T7310] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1235.137284][ T7310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.188178][ T7310] usb 5-1: config 0 descriptor?? [ 1235.271628][T13024] syz.6.3178[13024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1235.271699][T13024] syz.6.3178[13024] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1235.530123][T13030] overlayfs: unrecognized mount option "/" or missing value [ 1235.771189][ T7310] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1235.778586][ T7310] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1235.786133][ T7310] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1235.793420][ T7310] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1235.800684][ T7310] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1235.808038][ T7310] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1235.815294][ T7310] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1235.825715][ T7310] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1235.841293][ T7310] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1235.856849][ T7310] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 1235.891019][ T7310] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0011/input/input27 [ 1235.976527][ T7310] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1236.014663][ T7310] usb 5-1: USB disconnect, device number 38 [ 1236.049669][T13045] fido_id[13045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1236.466081][ T28] audit: type=1400 audit(1979.788:2070): avc: denied { relabelfrom } for pid=13072 comm="syz.6.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1236.485588][ T28] audit: type=1400 audit(1979.788:2071): avc: denied { relabelto } for pid=13072 comm="syz.6.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1236.520879][T13075] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1236.529425][T13075] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1236.537282][T13075] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1236.561033][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1236.571202][ T315] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1236.787381][T13094] syz.5.3200[13094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1236.787456][T13094] syz.5.3200[13094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1236.816115][T13094] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1237.044828][ T1088] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1237.225941][ T1088] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1237.239369][ T1088] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1237.254539][ T1088] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1237.274238][ T1088] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1237.288273][ T1088] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.304526][ T1088] usb 7-1: config 0 descriptor?? [ 1237.715401][ T1088] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1237.725946][ T1088] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1237.742602][ T1088] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1237.760443][ T1088] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1237.777074][ T1088] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1237.794763][ T1088] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1237.810544][ T1088] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 1237.832876][ T1088] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1237.986078][ T1088] usb 7-1: USB disconnect, device number 2 [ 1238.310226][T13112] bridge0: port 2(vlan0) entered blocking state [ 1238.316671][T13112] bridge0: port 2(vlan0) entered disabled state [ 1238.324468][T13118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1238.535301][T13129] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3214'. [ 1238.793963][ T7310] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1238.991800][ T7310] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1239.007708][ T7310] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1239.050204][ T7310] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.060675][ T7310] usb 7-1: config 220 has no interface number 2 [ 1239.069370][ T7310] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1239.083055][ T7310] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1239.089893][ T7310] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1239.096860][ T7310] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1239.107317][ T7310] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1239.125020][ T7310] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.141235][ T7310] usb 7-1: Product: syz [ 1239.146566][ T7310] usb 7-1: Manufacturer: syz [ 1239.151556][ T7310] usb 7-1: SerialNumber: syz [ 1239.564028][T13142] syz.1.3217[13142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1239.564167][T13142] syz.1.3217[13142] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1239.863713][T13143] overlayfs: unrecognized mount option "/" or missing value [ 1240.343298][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1240.393397][T13142] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1241.424573][ T7310] usb 7-1: selecting invalid altsetting 0 [ 1241.434571][ T7310] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 1241.515041][ T7310] usb 7-1: No valid video chain found. [ 1241.893020][T13154] syz.5.3223[13154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1241.893180][T13154] syz.5.3223[13154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1242.215980][T13154] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1243.574389][ T7310] usb 7-1: USB disconnect, device number 3 [ 1243.745460][T13174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1244.664031][T13194] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1244.714790][T13193] syz.4.3237[13193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1244.715209][T13193] syz.4.3237[13193] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1244.741293][T13195] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1245.581511][ T28] audit: type=1400 audit(1988.903:2072): avc: denied { mount } for pid=13203 comm="syz.6.3242" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1245.613248][ T28] audit: type=1400 audit(1988.923:2073): avc: denied { getopt } for pid=13203 comm="syz.6.3242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1245.636322][ T28] audit: type=1400 audit(1988.923:2074): avc: denied { remount } for pid=13203 comm="syz.6.3242" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1245.662056][ T28] audit: type=1400 audit(1988.923:2075): avc: denied { unmount } for pid=12932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1245.685956][T13210] netlink: 'syz.6.3245': attribute type 3 has an invalid length. [ 1245.694627][T13210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3245'. [ 1245.700477][ T7671] Bluetooth: hci0: command 0x1003 tx timeout [ 1245.709592][ T1327] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1246.078259][T13245] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1246.280888][T13276] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3262'. [ 1246.345556][T13265] bridge0: port 3(vlan2) entered blocking state [ 1246.352095][T13265] bridge0: port 3(vlan2) entered disabled state [ 1246.497818][T13282] syz.1.3274[13282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1246.498514][T13282] syz.1.3274[13282] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1246.538651][T13282] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1247.143423][T13316] input: syz1 as /devices/virtual/input/input28 [ 1247.149810][T13316] input: failed to attach handler leds to device input28, error: -6 [ 1247.183399][ T28] audit: type=1400 audit(1990.503:2076): avc: denied { load_policy } for pid=13317 comm="syz.4.3290" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1247.184531][T13318] SELinux: unknown common ocket [ 1247.211453][T13318] SELinux: failed to load policy [ 1247.404671][T13329] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1247.539575][ T28] audit: type=1400 audit(1990.834:2077): avc: denied { read } for pid=13328 comm="syz.4.3294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1247.589575][ T7310] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1247.626766][ T28] audit: type=1400 audit(1990.894:2078): avc: denied { setopt } for pid=13328 comm="syz.4.3294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1247.699786][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1247.839443][ T7310] usb 6-1: Using ep0 maxpacket: 16 [ 1247.862570][ T7310] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1247.903311][ T7310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.026763][ T7310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1248.120272][ T7310] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1248.132682][ T7310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.150996][ T7310] usb 6-1: Product: syz [ 1248.160640][ T7310] usb 6-1: Manufacturer: syz [ 1248.171789][ T7310] usb 6-1: SerialNumber: syz [ 1248.544713][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1248.554052][T13379] IPv6: ADDRCONF(NETDEV_CHANGE): wg2: link becomes ready [ 1248.584235][T10058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1248.609510][T13031] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1248.631367][T13380] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1248.674811][ T1088] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1248.798329][ T7310] usb 6-1: 0:2 : does not exist [ 1248.814096][ T7310] usb 6-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1248.853923][ T7310] usb 6-1: USB disconnect, device number 23 [ 1248.889066][ T1088] usb 5-1: Using ep0 maxpacket: 32 [ 1248.897007][ T1088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1249.014109][ T1088] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.034528][ T1088] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1249.045147][ T1088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.075696][ T1088] usb 5-1: config 0 descriptor?? [ 1249.084358][T13031] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1249.407796][T13386] netem: change failed [ 1249.592858][ T1088] savu 0003:1E7D:2D5A.0013: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 1249.608054][T13404] syz.6.3320[13404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1249.608337][T13404] syz.6.3320[13404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1249.635921][T13404] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1249.902080][ T1088] usb 5-1: USB disconnect, device number 39 [ 1250.046947][T13414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1250.198200][ T7990] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1250.378118][ T7990] usb 6-1: Using ep0 maxpacket: 16 [ 1250.387996][ T7990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.399161][ T7990] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1250.412136][ T7990] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1250.421398][ T7990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.434198][T13428] sch_fq: defrate 0 ignored. [ 1250.443038][ T7990] usb 6-1: config 0 descriptor?? [ 1250.454378][ T28] audit: type=1400 audit(1993.775:2079): avc: denied { write } for pid=13431 comm="syz.4.3338" name="/" dev="incremental-fs" ino=3566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1250.476971][ T287] ------------[ cut here ]------------ [ 1250.477249][ T28] audit: type=1400 audit(1993.775:2080): avc: denied { add_name } for pid=13431 comm="syz.4.3338" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1250.482523][ T287] WARNING: CPU: 0 PID: 287 at fs/inode.c:332 drop_nlink+0xc5/0x110 [ 1250.502989][ T28] audit: type=1400 audit(1993.775:2081): avc: denied { create } for pid=13431 comm="syz.4.3338" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1250.511017][ T287] Modules linked in: [ 1250.534706][ T287] CPU: 0 PID: 287 Comm: syz-executor Not tainted syzkaller #0 [ 1250.542195][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1250.552286][ T287] RIP: 0010:drop_nlink+0xc5/0x110 [ 1250.557323][ T287] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 ea f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8b 85 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 1250.576966][ T287] RSP: 0000:ffffc9000db0fc38 EFLAGS: 00010293 [ 1250.583077][ T287] RAX: ffffffff81c383e5 RBX: ffff8881237c1ec0 RCX: ffff888121b0d100 [ 1250.591091][ T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1250.599086][ T287] RBP: ffffc9000db0fc60 R08: 0000000000000004 R09: 0000000000000003 [ 1250.607076][ T287] R10: fffff52001b61f78 R11: 1ffff92001b61f78 R12: dffffc0000000000 [ 1250.615089][ T287] R13: 1ffff110246f83e1 R14: ffff8881237c1f08 R15: 0000000000000000 [ 1250.623091][ T287] FS: 0000555582c38500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1250.632078][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1250.638691][ T287] CR2: 00007f9fac452000 CR3: 0000000130460000 CR4: 00000000003506b0 [ 1250.646685][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1250.654702][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1250.662697][ T287] Call Trace: [ 1250.665981][ T287] [ 1250.669031][ T287] shmem_rmdir+0x5b/0x90 [ 1250.673288][ T287] vfs_rmdir+0x393/0x500 [ 1250.677544][ T287] incfs_kill_sb+0x105/0x220 [ 1250.682166][ T287] deactivate_locked_super+0xb5/0x120 [ 1250.687550][ T287] deactivate_super+0xaf/0xe0 [ 1250.692290][ T287] cleanup_mnt+0x45f/0x4e0 [ 1250.696722][ T287] __cleanup_mnt+0x19/0x20 [ 1250.701173][ T287] task_work_run+0x1db/0x240 [ 1250.705778][ T287] ? __cfi_task_work_run+0x10/0x10 [ 1250.710923][ T287] ? __x64_sys_umount+0x125/0x160 [ 1250.715950][ T287] ? __cfi___x64_sys_umount+0x10/0x10 [ 1250.721368][ T287] exit_to_user_mode_loop+0x9b/0xb0 [ 1250.726564][ T287] exit_to_user_mode_prepare+0x5a/0xa0 [ 1250.732035][ T287] syscall_exit_to_user_mode+0x1a/0x30 [ 1250.737492][ T287] do_syscall_64+0x58/0xa0 [ 1250.741947][ T287] ? clear_bhb_loop+0x30/0x80 [ 1250.746623][ T287] ? clear_bhb_loop+0x30/0x80 [ 1250.751314][ T287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1250.757201][ T287] RIP: 0033:0x7f0e2b38ff17 [ 1250.761655][ T287] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1250.781287][ T287] RSP: 002b:00007ffcb124c1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1250.789713][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0e2b38ff17 [ 1250.797683][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb124c2a0 [ 1250.805672][ T287] RBP: 00007ffcb124c2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1250.813658][ T287] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb124d330 [ 1250.821647][ T287] R13: 00007f0e2b411c05 R14: 0000000000131598 R15: 00007ffcb124d370 [ 1250.829637][ T287] [ 1250.832643][ T287] ---[ end trace 0000000000000000 ]--- [ 1250.838407][ T287] ================================================================== [ 1250.846568][ T287] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 1250.852814][ T287] Write of size 4 at addr 0000000000000170 by task syz-executor/287 [ 1250.860782][ T287] [ 1250.863113][ T287] CPU: 1 PID: 287 Comm: syz-executor Tainted: G W syzkaller #0 [ 1250.872039][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1250.882182][ T287] Call Trace: [ 1250.885451][ T287] [ 1250.888402][ T287] __dump_stack+0x21/0x24 [ 1250.892818][ T287] dump_stack_lvl+0xee/0x150 [ 1250.897404][ T287] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1250.902421][ T287] ? ihold+0x20/0x60 [ 1250.906302][ T287] ? ihold+0x20/0x60 [ 1250.910180][ T287] print_report+0x3d/0x60 [ 1250.914501][ T287] kasan_report+0x122/0x150 [ 1250.918993][ T287] ? ihold+0x20/0x60 [ 1250.922870][ T287] kasan_check_range+0x280/0x290 [ 1250.927796][ T287] __kasan_check_write+0x14/0x20 [ 1250.932730][ T287] ihold+0x20/0x60 [ 1250.936436][ T287] vfs_rmdir+0x25f/0x500 [ 1250.940663][ T287] incfs_kill_sb+0x105/0x220 [ 1250.945241][ T287] deactivate_locked_super+0xb5/0x120 [ 1250.950609][ T287] deactivate_super+0xaf/0xe0 [ 1250.955278][ T287] cleanup_mnt+0x45f/0x4e0 [ 1250.959682][ T287] __cleanup_mnt+0x19/0x20 [ 1250.964086][ T287] task_work_run+0x1db/0x240 [ 1250.968660][ T287] ? __cfi_task_work_run+0x10/0x10 [ 1250.973755][ T287] ? __x64_sys_umount+0x125/0x160 [ 1250.978762][ T287] ? __cfi___x64_sys_umount+0x10/0x10 [ 1250.984118][ T287] exit_to_user_mode_loop+0x9b/0xb0 [ 1250.989303][ T287] exit_to_user_mode_prepare+0x5a/0xa0 [ 1250.994759][ T287] syscall_exit_to_user_mode+0x1a/0x30 [ 1251.000200][ T287] do_syscall_64+0x58/0xa0 [ 1251.004595][ T287] ? clear_bhb_loop+0x30/0x80 [ 1251.009256][ T287] ? clear_bhb_loop+0x30/0x80 [ 1251.013916][ T287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1251.019792][ T287] RIP: 0033:0x7f0e2b38ff17 [ 1251.024188][ T287] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1251.043812][ T287] RSP: 002b:00007ffcb124c1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1251.052208][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0e2b38ff17 [ 1251.060162][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb124c2a0 [ 1251.068114][ T287] RBP: 00007ffcb124c2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1251.076067][ T287] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb124d330 [ 1251.084020][ T287] R13: 00007f0e2b411c05 R14: 0000000000131598 R15: 00007ffcb124d370 [ 1251.091979][ T287] [ 1251.094982][ T287] ================================================================== [ 1251.103551][ T287] Disabling lock debugging due to kernel taint [ 1251.111272][ T7990] HID 045e:07da: Invalid code 65791 type 1 [ 1251.117263][ T287] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 1251.121014][ T7990] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0014/input/input29 [ 1251.125063][ T287] #PF: supervisor write access in kernel mode [ 1251.125073][ T287] #PF: error_code(0x0002) - not-present page [ 1251.125092][ T287] PGD 132a13067 [ 1251.138668][ T7990] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1251.142466][ T287] P4D 132a13067 PUD 0 [ 1251.142486][ T287] Oops: 0002 [#1] PREEMPT SMP KASAN [ 1251.165627][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1251.165640][ T28] audit: type=1400 audit(1994.465:2086): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1251.167872][ T287] CPU: 1 PID: 287 Comm: syz-executor Tainted: G B W syzkaller #0 [ 1251.167889][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1251.167898][ T287] RIP: 0010:ihold+0x26/0x60 [ 1251.167919][ T287] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 f1 7c ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 e1 [ 1251.173456][ T28] audit: type=1400 audit(1994.465:2087): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1251.179043][ T287] RSP: 0018:ffffc9000db0fc78 EFLAGS: 00010246 [ 1251.179060][ T287] RAX: ffff888121b0d100 RBX: 0000000000000000 RCX: ffff888121b0d100 [ 1251.179072][ T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1251.179082][ T287] RBP: ffffc9000db0fc88 R08: dffffc0000000000 R09: fffffbfff0f2d4fd [ 1251.179094][ T287] R10: fffffbfff0f2d4fd R11: 1ffffffff0f2d4fc R12: ffff8881237c1ecc [ 1251.200717][ T28] audit: type=1400 audit(1994.465:2088): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1251.209265][ T287] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1251.209278][ T287] FS: 0000555582c38500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1251.209306][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1251.209318][ T287] CR2: 0000000000000170 CR3: 0000000130460000 CR4: 00000000003506a0 [ 1251.219800][ T28] audit: type=1400 audit(1994.465:2089): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1251.223833][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1251.223846][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1251.243971][ T28] audit: type=1400 audit(1994.465:2090): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1251.264223][ T287] Call Trace: [ 1251.264231][ T287] [ 1251.264237][ T287] vfs_rmdir+0x25f/0x500 [ 1251.264260][ T287] incfs_kill_sb+0x105/0x220 [ 1251.264279][ T287] deactivate_locked_super+0xb5/0x120 [ 1251.270721][ T28] audit: type=1400 audit(1994.465:2091): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1251.278284][ T287] deactivate_super+0xaf/0xe0 [ 1251.278308][ T287] cleanup_mnt+0x45f/0x4e0 [ 1251.286565][ T28] audit: type=1400 audit(1994.465:2092): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1251.294224][ T287] __cleanup_mnt+0x19/0x20 [ 1251.294250][ T287] task_work_run+0x1db/0x240 [ 1251.294269][ T287] ? __cfi_task_work_run+0x10/0x10 [ 1251.498126][ T287] ? __x64_sys_umount+0x125/0x160 [ 1251.503138][ T287] ? __cfi___x64_sys_umount+0x10/0x10 [ 1251.508501][ T287] exit_to_user_mode_loop+0x9b/0xb0 [ 1251.513695][ T287] exit_to_user_mode_prepare+0x5a/0xa0 [ 1251.519144][ T287] syscall_exit_to_user_mode+0x1a/0x30 [ 1251.524615][ T287] do_syscall_64+0x58/0xa0 [ 1251.529029][ T287] ? clear_bhb_loop+0x30/0x80 [ 1251.533686][ T287] ? clear_bhb_loop+0x30/0x80 [ 1251.538349][ T287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1251.544233][ T287] RIP: 0033:0x7f0e2b38ff17 [ 1251.548636][ T287] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1251.568315][ T287] RSP: 002b:00007ffcb124c1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1251.576739][ T287] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0e2b38ff17 [ 1251.584702][ T287] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb124c2a0 [ 1251.592659][ T287] RBP: 00007ffcb124c2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1251.600624][ T287] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb124d330 [ 1251.609019][ T287] R13: 00007f0e2b411c05 R14: 0000000000131598 R15: 00007ffcb124d370 [ 1251.617059][ T287] [ 1251.620073][ T287] Modules linked in: [ 1251.623965][ T287] CR2: 0000000000000170 [ 1251.628111][ T287] ---[ end trace 0000000000000000 ]--- [ 1251.633556][ T287] RIP: 0010:ihold+0x26/0x60 [ 1251.638064][ T287] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 f1 7c ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 e1 [ 1251.657670][ T287] RSP: 0018:ffffc9000db0fc78 EFLAGS: 00010246 [ 1251.663742][ T287] RAX: ffff888121b0d100 RBX: 0000000000000000 RCX: ffff888121b0d100 [ 1251.671707][ T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1251.679671][ T287] RBP: ffffc9000db0fc88 R08: dffffc0000000000 R09: fffffbfff0f2d4fd [ 1251.687630][ T287] R10: fffffbfff0f2d4fd R11: 1ffffffff0f2d4fc R12: ffff8881237c1ecc [ 1251.695604][ T287] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1251.703575][ T287] FS: 0000555582c38500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1251.712495][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1251.719079][ T287] CR2: 0000000000000170 CR3: 0000000130460000 CR4: 00000000003506a0 [ 1251.727049][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1251.735006][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1251.742959][ T287] Kernel panic - not syncing: Fatal exception [ 1251.749273][ T287] Kernel Offset: disabled [ 1251.753581][ T287] Rebooting in 86400 seconds..