last executing test programs: 1m7.632996443s ago: executing program 4 (id=5): r0 = syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbcf, &(0x7f0000002080)="$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") unshare(0x20040400) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040), &(0x7f0000000240)={'enc=', 'pkcs1', ' hash=', {'sha1-generic\x00'}}, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078) mlock(&(0x7f000071b000/0x4000)=nil, 0x4000) getrandom(&(0x7f0000000040)=""/31, 0x1f, 0x3) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000001c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0xffff, 0xa}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8004, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x40080) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, 0x0, 0x0) 1m6.431790072s ago: executing program 4 (id=9): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000a40)=ANY=[@ANYBLOB='iocharset=cp857,fmask=00000000000000000064347,errors=continue,iocharset=iso8859-7,fmask=00000000000000000000005,umask=00777777777777777777777,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646d61736b3d30303030a83730303030303030303030303030303030312c6572726f72733d636f6e74696e75652c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',rootcontext=user_u,obj_role=,obj_role=,obj_type=9p\x00,fscontext=system_u,\x00'], 0x1, 0x152f, &(0x7f00000037c0)="$eJzs3AucTVX7OPDnWWvtMSSdJrkMa61nc5LLIklySZJLkiRJkltC0iSvJCSG3JKGJCSXIbkMIblMTBr3+/2SkCRNkoTklqz/Z8r81Vvv/33f39svv/9vnu/nsz+znrP2s/ba85yzz977nJlvug6r1aR29UZEBP8R/OVHIgDEAsAgALgGAAIAKB9XPi6zP6fExP9sI+zP9VDKlZ4Bu5K4/tkb1z974/pnb1z/7I3rn71x/bM3rn/2xvVnLDvbMqPgtbxk34Xv/2dn/P7/v0hG6XFfrCt9fTeAmH81hev//z/8D3K5/v9rBf/KSlz/7I3rn13FXukJsP8B+PWfHeT4hz1c/+yN689Ydvbre8GxcOXvR//VC0Sy92cgV/r5xxhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsezjrL1MAkNW+0vNijDHGGGOMMcbYn8fnuNIzYIwxxhhjjDHG2H8/BAESFAQQAzkgFnJCLhAAMVn910IcXAd54XrIB/mhABSEeCgEhUGDAQsEIRSBohCFG6AY3AjFoQSUhFLgoDSUgZugLNwM5eAWKA+3QgW4DSpCJagMVeB2qAp3QDW4E6rDXVADakItqA13Qx24B+rCvVAP7oP6cD80gAegITwIjeAhaAwPQxN4BJrCo9AMmkMLaAmt/kv5L0BPeBF6QW9IhD7QF16CftAfBsBAGAQvw2B4BYbAq5AEQ2EYvAbD4XUYAW/ASBgFo+FNGANvwVgYB+NhAiTDRJgEb8NkeAemwFSYBtMhBWbATHgXZsFsmAPvwVx4H+bBfFgACyEVPoBFsBjS4ENYAh9BOiyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBR/DbvgE9sBe2Aefwn747N/MP/N3+d0QEFCgQIUKYzAGYzEWc2EuzI25MQ/mwQhGMA7jMC/mxXyYDwtgAYzHeCyMhdGgQULCIlgEoxjFYlgMi2NxLIkl0aHDMlgGy+LNWA7LYXksjxWwAlbESlgJq2AVrIpVsRpWw+pYHWtgDayFtfBuvBv7YF2si/WwHtbH+lm3p7ARNsLG2BibYBNsik2xGTbDFtgCW2ErbI2tsQ22wXbYDttje+yAHTABE7AjdsRO2Ak7Y2fsgl2wK3bFbtgdu2e8kAPwRXwRe2MN0Qf7Yl/sh0k5BuBAHIgv42B8BV/BVzEJh+IwfA1fw9dxBJ7GkTgKR+NorCrewrE4DklMwGRMxkk4CSfjZJyCU3EqTscUnIEzcSbOwtk4G9/Dufg+vo/zcT4uxFRMxUW4GNMwDZfgGUzHpbgMl+MKXIkrcDWuwdW4DtfjOtyIG3EzbsatuBW343bciTvxY1QA+Anuxb2YhPtxPx7AA3gQD+IhPIQZmIGH8TAewSN4FI/iMTyGx/EEnsQTeApP4Wk8g2fxLJ7H83gBn4v/qvHHJdYmgcikhBIxIkbEiliRS+QSuUVukUfkEREREXEiTuQVeUU+kU8UEAVEvIgXhUVhYYQRJMLMI4WIiqgoJoqJ4qK4KClKCiecKCPKiLKirCgnyony4lZRQdwmKopKoq2rIqqIqqKdqybuFNVFdVFD1BS1RG1RW9QRdURdUVfUE/VEfVFfNBAPiIaiDw7Ah0RmZZqIodhUDMNmormQl45QrcUIbCPainbiCTEKR2IH0doliKdFRzEWO4m/iXH4rOgiJmBX8bzoJrqLHuIF0VO0cb1EbzEF+4i+Yjr2E/3FADFQzMKa4j2cm7OWeFUkiaFimHhNLMTXxQjxhhgpRonR4k0xRrwlxopxYryYIJLFRDFJvC0mi3fEFDFVTBPTRYqYIWaKd8UsMVvMEe+JueJ9MU/MFwvEQpEqPhCLxGKRJj4US8RHIl0sFcvEcrFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHaxQ+wUu8THYrf4ROwRe8U+8anYLz4TB8Tn4qD4QhwSX4oM8ZU4LL4WR8Q34qj4VhwT34nj4oQ4Kb4Xp8QP4rQ4I86Kc+K8+FFcED+Ji8ILkCiFlFLJQMbIHDJW5pS55FUytwyyjv8yTl4n88rrZT6ZXxaQBWW8LCQLSy2NtJJkKIvIojIqb5DF5I2yuCwhS8pS0snSsoy8SZaVN8ty8hZZXt4qK8jbZEVZSVaWVeTtsqq8Q0Lkl23UkDVlLVlb3i0T4R5ZV94r68n7ZH15v2wgH5AN5YOykXxINpYPyybyEdlUPiqbyeayhWwpW8nHZGv5uGwj28p28gnZXj4pO8inZIJ8WnaU/tJT5FnZRT4nu8rnZTfZXfaQP8mL0stesreEPiD7ypdkP9lfDpAD5SD5shwsX5FD5KsySQ6Vw+Rrcrh8XY6Qb8iRcpQcLd+UY+RbcqwcJ8fLCTJZTpST5NtysnxHTpFT5TQ5XabIGXLApZHmSPlP89/+g/whP299s9wit8ptcrvcIXfKXfJjuVvulnvkHrlP7pP75X55QB6QB+VBeUgekhkyQx6Wh+UReUQelUflMXlMHpcn5Dn5vTwlf5Cn5Rl5Rp6T5+V5eeHS7wAUKqGkUipQMSqHilU5VS51lcqtrlZ51DUqoq5Vceo6lVddr/Kp/KqAKqjiVSFVWGlllFWkQlVEFVVRdQNeesKokqqUcqq0KqNu+nfyVTF1oyquSvwmP2t+if9gfq1UK9VatVZtVBvVTrVT7VV71UF1UAkqQXVUHVUn1Ul1Vp1VF9VFdVVdVTfVTfVQPVRP1VP1Ur1UokpUfdVLqp/qrwaogWqQellk7sMQNUQlqSQ1TA1Tw9VwNUKNUCPVSDVajVZj1Bg1Vo1V49V4layS1SQ1SU1Wk9UUNUVNU9NUikpRM9VMNUvNUnPUHDVXzVXz1Dy1QC1QqSpVLVKLVJpKU0vUEpWulqqlarlarlaqlWq1Wq3WqrVqvVqvNqqNKl1tUVvUNrVN7VA71C61S+1Wu9UetUftU/vUfrVfHVAH1EF1UB1Sh1SGylCH1WF1RB1RR9VRdUwdU8fVcXVSnVSn1Cl1Wp1WZ9VZdV6dVxfUBXVRXcw87QtEIAIVqCAmiAlig9ggV5AryB3kDvIEeYJIEAnigrggb3B9kC/IHxQICgbxQaGgcKADE9hAXCp6NLghKBbcGBQPSgQlg1KBC0oHZYKbgrLBzUG54JagfHBrUCG4LagYVAoqB1WC24OqwR1BteDOoHpwV1AjqBnUCmoHdwd1gnuCusG9Qb3gvqB+cH/QIHggaBg8GDQKHgoaBw8HTYJHgqbBo0GzoHnQImgZtPpTx/f+dP7HXS/dWyfqPrqvfkn30/31AD1QD9Iv68H6FT1Ev6qT9FA9TL+mh+vX9Qj9hh6pR+nR+k09Rr+lx+pxeryeoJP1RD1Jv60n63f0FD1VT9PTdYqeoWfqd/UsPVvP0e/pufp9PU/P1wv0Qp2qP9CL9GKdpj/US/RHOl0v1cv0cr1Cr9Sr9Gq9Rq/V6/R6vUFv1Jv0Zr1Fb9Xb9Ha9Q+/Uu/THerf+RO/Re/U+/anerz/TB/Tn+qD+Qh/SX+oM/ZU+rL/WR/Q3+qj+Vh/T3+nj+oQ+qb/Xp/QP+rQ+o8/qc/q8/lFf0D/pi9pnntxnvr0bZZSJMTEm1sSaXCaXyW1ymzwmj4mYiIkzcSavyWvymXymgClg4k28KWwKm0xkyBQxRUzURE0xU8wUN8VNSVPSOONMGVPGlDVlTTlTzpQ35U0FU8FUNBVNZVPZ3G5uN3eYO8yd5k5zl7nL1DQ1TW1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MU9PUNDPNTAvTwrQyrUxr09q0MW1MO9POtDftTQfTwSSYBNPRdDSdTCfT2XQ2XUwX09V0Nd1MN9PD9DA9TU/Ty/QyiSbR9DV9TT/TzwwwA8wgM8gMNoPNEDPEJJkkM8wMM8PNcDPCjDAjzSgzOvNE1bxlxppxZryZYJJNsplkJpnJZrKZYqaYaWaaSTEpZqaZaWaZWWaOmWPmmrlmnplnFpgFJtWkmkVmkUkzaWaJWWLSTbpZZpaZFWaFWWVWmTVmjVln1pkNsMFsMpvMFrPFbDPbzA6zw+wyu8xus9vsMXvMPrPP7Df7zQFzwBw0B80hc8hkmAxz2Bw2R8wRc9QcNcfMMXPcHDcnzUlzypwyp81pc9acNedN/kvvl97E2pw2l73K5rZX2zz2Gvv3cQFb0MbbQraw1Tafzf+b2Fhri9sStqQtZZ0tbcvYm34XV7SVbGVbxd5uq9o7bLXfxXXsPbauvdfWs/fZ2vbu38T17f22gX3ENkQEsM1tY9vSNrGP2Kb2UdvMNrctbEvb3j5pO9inbIJ92na0z/wuXmQX2zV2rV1n19s9dq89a8/ZI/Ybe97+aHvZ3naQfdkOtq/YIfZVm2SH/i4ebd+0Y+xbdqwdZ8fbCb+Lp9npNsXOsDPtu3aWnf27ONV+YOfaNDvPzrcL7MKf48w5pdkP7RL7kU23ASyzy+0Ku9Kusqv/71yX2412k91sd9tP7Da73e6wO+2urBNhu9fus5/a/fYze9h+bQ/aL+whe9Rm2K9+jjP376j91h6z39nj9oQ9ab+3p+wPKis7c9+/tz/Zi9ZbICQgSYoCiqEcFEs5KRddRbnpaspD11CErqU4uo7y0vWUj/JTASpI8VSICpMmQ5aIQipCRSlKN1DW9EpSKXJUmsrQTVSWbqZydAuVp1upAt1GFakSVaYqdDtVpTuoGt1J1ekuqkE1qRbVprupDt1Ddeleqkf3UX26nxrQA9SQHqRG9BA1poepCT1CTelRakbNqQW1pFb0GLWmx6kNtaV29AS1pyepAz1FCfQ0daRnqBP9jTrTs9SFnqOu9Dx1o+7Ug16gnvQi9aLelEh9qC+9RP2oPw2ggTSIXqbB9AoNoVcpiYbSMHqNhtPrNILeoJE0ikbTmzSG3qKxNI7G0wRKpok0id6myfQOTaGpNI2mUwrNoJn0Ls2i2TSH3qO59D7No/m0gBZSKn1Ai2gxpdGHtIQ+onRaSstoOa2glbSKVtMaWkvraD1toI20iTbTFtpK22g77aCdtIs+pt30Ce2hvbSPPqX99BkdoM/pIH1Bh+hLyqCv6DB9TUfoGzpK3/re9B0dpxN0kr6nU/QDnaYzdJbO0Xn6kS7QT3SRPEGIoQhlqMIgjAlzhLFhzjBXeFWYO7w6zBNeE0bCa8O48Lowb3h9mC/MHxYIC4bxYaGwcKhDE9qQwjAsEhYNo+ENYbHwxrB4WCIsGZYKXVg6LBPeFJYNbw7LhbeE5cNbwwrhbWHFsFL4yH1VwtvDquEdYbXwzrB6eFdYI6wZ1gprh3eHdcJ7wrrhvWG98L6wXHh/2CB8IGwYPhg2Ch8KG4cPh03CR8Km4aNhs7B52CJsGbYKHwtbh4+HbcK2YbvwqrB9+GTYIXwqTAifDjuGz/zcf//irP4nftefGPYJ+4YvhS+F3t8rF0QXRlOjH0QXRRdH06IfRpdEP4qmR5dGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGN0U3R72vnQMcOuGkUy5wMS6Hi3U5XS53lcvtrnZ53DUu4q51ce46l9dd7/K5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd4Mr5m50xV0JV9KVcs6VdmVcS9fKtXKt3eOujWvr2rkn3BPuSfeke8o95Z52Hd0zrpP7m+vsnnVd3HPuOfe86+a6ux7uBdfTTczzy2sy0fV1fV0/188NcAPcIDfIDXaD3RA3xCW5JDfMDXPD3XA3wo1wI91IN9qNdmPcGDfWjXXj3XiX7JLdJDfJTXaT3RQ3xU1z01yKS3Ez3Uw3y81yVWf/spV5bp5b4Ba4VJfqFrnMc8Y0t8Qtceku3S1zy9wKt8KtcqvcGrfGrXPr3Aa3wW1ym9wWt8Vtc9vcDrfD7XK73G632+3x1/wyqNvvDrgD7qA76A65L12G+8oddl+7I+4bd9R9646579xxd8KddN+7U+4Hd9qdcWfdOXfe/eguuJ/cReddcmRiZFLk7cjkyDuRKZGpkWmR6ZGUyIzIzMi7kVmR2ZE5kfcicyPvR+ZF5kcWRBZGUiMfRBZFFkfSIh9GlkQ+iqRHlkaWRZZHVkRWRrwvtC30RXxRH/U3+GL+Rl/cl/AlfSnvfGlfxt/ky/qbfTl/iy/vb/UV/G2+oq/kK/tHfTPf3LfwLX0r/5hv7R/3bXxb384/4dv7J30H/5RP8E/7jv4Z38n/zXf2z/ou/jnf1T/vu/nuvod/wff0L/pevrdP9H18X/+S7+f7+wF+oB/kX/aD/St+iH/VJ/mhfph/zQ/3r/sR/g0/0o/yo2Pe9GOyLpFhgk/2E/0k/7af7N/xU/xUP81P9yl+hp/p3/Wz/Gw/x7/n5/r3/Tw/3y/wC32q/8Av8ot9mv/QL/Ef+XS/NOumsV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mt/sdfqff5T/2u/0nfo/f6/f5T/1+/5k/4D/3B/0X/pD/0mf4r/xh/7U/4r/xR/23/pj/zh/3J/xJ/70/5X/wp/0Zf9af8+f9j/6C/8lf5L9ZY4wxxhj7l0y83BS/7fnldn6fP8gRv1q5LwBcvb1gxq/7M88oN+T7pd1fxLePAMDTvbs+lLXUqJGYmHhp3XQJQdH5AFmfBGX6+asHl+Kl0A6ehARoC2X/cP79Rffz9E/Gj94KkOtXObFwOb48/ucAmPgH4z/2xOhFFcKzcf+P8ecDFC96OScnXI6XQruf76+0hXL/YP75W/+T+ef8Ihmgza9ycsPl+PL8y8Dj8Awk/GZNxhhjjDHGGGPsF/1F5c5Z159Z3/j8o+vzeHU5Jwdcjv/Z9TljjDHGGGOMMcauvGe793jqsYSEtp3//Ua1/1LWv9xoCv9dI3PjDxveA2Q9ogDgPxwQILMh/8q92PqXbCvp0kvn77tWnPMB/M8o5Z/RuMIHJsYYY4wxxtif7vJJ/28fV1dqQowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWDb0V/w7sSu9j4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxtiV9n8CAAD//7wUAB0=") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000000, 0x0, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r4, &(0x7f0000002640)=[{&(0x7f0000001480)="38cd04", 0x3}, {&(0x7f0000001540)}], 0x2) 1m4.86822392s ago: executing program 4 (id=15): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000a40)=ANY=[@ANYBLOB='iocharset=cp857,fmask=00000000000000000064347,errors=continue,iocharset=iso8859-7,fmask=00000000000000000000005,umask=00777777777777777777777,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646d61736b3d30303030a83730303030303030303030303030303030312c6572726f72733d636f6e74696e75652c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',rootcontext=user_u,obj_role=,obj_role=,obj_type=9p\x00,fscontext=system_u,\x00'], 0x1, 0x152f, &(0x7f00000037c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000000, 0x0, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r4, &(0x7f0000002640)=[{&(0x7f0000001480)="38cd04", 0x3}, {&(0x7f0000001540)}], 0x2) 1m4.725221606s ago: executing program 32 (id=15): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000a40)=ANY=[@ANYBLOB='iocharset=cp857,fmask=00000000000000000064347,errors=continue,iocharset=iso8859-7,fmask=00000000000000000000005,umask=00777777777777777777777,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646d61736b3d30303030a83730303030303030303030303030303030312c6572726f72733d636f6e74696e75652c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',rootcontext=user_u,obj_role=,obj_role=,obj_type=9p\x00,fscontext=system_u,\x00'], 0x1, 0x152f, &(0x7f00000037c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000000, 0x0, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r4, &(0x7f0000002640)=[{&(0x7f0000001480)="38cd04", 0x3}, {&(0x7f0000001540)}], 0x2) 5.706119401s ago: executing program 2 (id=427): syz_socket_connect_nvme_tcp() r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4c840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvfrom(r5, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 5.305091081s ago: executing program 2 (id=431): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) preadv2(r0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/34, 0x22}, {0x0}], 0x2, 0x1, 0x3, 0x0) 5.285781802s ago: executing program 0 (id=432): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x7) r5 = socket(0xa, 0x1, 0x0) listen(r5, 0x7f) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5f22}) sendmsg$DCCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvmsg(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) 5.216256125s ago: executing program 0 (id=434): r0 = socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x6, 0x0) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) getsockopt$inet_mreqn(r0, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) 4.412518085s ago: executing program 0 (id=439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) setpriority(0x1, 0x0, 0x44) 4.247445132s ago: executing program 0 (id=441): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005980)=ANY=[@ANYBLOB="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"], 0x3, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x11, 0x0, 0x8000000) 3.937873467s ago: executing program 5 (id=444): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x601, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40) 3.083694629s ago: executing program 0 (id=449): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8010, &(0x7f00000000c0), 0xff, 0x57d, &(0x7f0000000100)="$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") mknod$loop(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) chdir(&(0x7f0000000000)='./file0\x00') 2.893370538s ago: executing program 2 (id=451): umount2(&(0x7f0000000040)='.\x00', 0x2) r0 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.776511504s ago: executing program 2 (id=453): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009"], 0x0) 2.66472352s ago: executing program 5 (id=455): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1a00, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) 2.384860654s ago: executing program 0 (id=458): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x1c, "e77de7754d00ac286c5967540fe49d6b6e4c5060907b3cd3e5dd2206"}, 0x0}) 2.183693574s ago: executing program 5 (id=463): syz_usb_connect(0x3, 0x3b9, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902a70301ab00000209046d000c3fdae20009050402ff03"], 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.756073764s ago: executing program 3 (id=469): ioperm(0x83, 0x6, 0x8) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) 1.721804616s ago: executing program 1 (id=471): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.204470471s ago: executing program 3 (id=472): syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}, 0x0) 1.204277491s ago: executing program 3 (id=473): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setgroups(0x0, 0x0) 1.196601322s ago: executing program 3 (id=474): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x7) ftruncate(r0, 0x0) 1.164447873s ago: executing program 3 (id=475): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x600, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x4008011) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x227f) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, 0x0) chdir(0x0) 832.396419ms ago: executing program 1 (id=476): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@barrier_val}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x100) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086604, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) 644.357578ms ago: executing program 1 (id=477): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = fsopen(&(0x7f0000000080)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000002780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 593.142591ms ago: executing program 1 (id=478): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c8900102c00fe800000000000000000000000000025ff2727"], 0x0) 515.119885ms ago: executing program 1 (id=479): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e1e, @private=0x4a010100}, 0x10) 514.852305ms ago: executing program 1 (id=480): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, 0x0, 0x9080) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='minix\x00', 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) 371.150571ms ago: executing program 5 (id=481): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x6, 0x0, 0x0) 214.635649ms ago: executing program 5 (id=482): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000841, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000100)) 214.061459ms ago: executing program 3 (id=492): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000540)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000001000)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)={0x40, 0x1e, 0x1, 0x6}, 0x0}) 83.630676ms ago: executing program 5 (id=483): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_adjtime(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 83.091296ms ago: executing program 2 (id=484): r0 = socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000000)) 0s ago: executing program 2 (id=485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.144' (ED25519) to the list of known hosts. [ 25.371710][ T30] audit: type=1400 audit(1773800214.682:64): avc: denied { mounton } for pid=273 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.375421][ T273] cgroup: Unknown subsys name 'net' [ 25.394530][ T30] audit: type=1400 audit(1773800214.682:65): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.421849][ T30] audit: type=1400 audit(1773800214.712:66): avc: denied { unmount } for pid=273 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.422342][ T273] cgroup: Unknown subsys name 'devices' [ 25.570324][ T273] cgroup: Unknown subsys name 'hugetlb' [ 25.575973][ T273] cgroup: Unknown subsys name 'rlimit' [ 25.746179][ T30] audit: type=1400 audit(1773800215.052:67): avc: denied { setattr } for pid=273 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.769858][ T30] audit: type=1400 audit(1773800215.052:68): avc: denied { mounton } for pid=273 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.795392][ T30] audit: type=1400 audit(1773800215.052:69): avc: denied { mount } for pid=273 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.814756][ T275] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.827928][ T30] audit: type=1400 audit(1773800215.142:70): avc: denied { relabelto } for pid=275 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.853409][ T30] audit: type=1400 audit(1773800215.142:71): avc: denied { write } for pid=275 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.881418][ T30] audit: type=1400 audit(1773800215.192:72): avc: denied { read } for pid=273 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.882656][ T273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.907146][ T30] audit: type=1400 audit(1773800215.192:73): avc: denied { open } for pid=273 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.550044][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.557138][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.564764][ T283] device bridge_slave_0 entered promiscuous mode [ 26.572118][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.579485][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.587021][ T283] device bridge_slave_1 entered promiscuous mode [ 26.616199][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.623466][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.631054][ T282] device bridge_slave_0 entered promiscuous mode [ 26.640764][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.648079][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.655568][ T282] device bridge_slave_1 entered promiscuous mode [ 26.708515][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.715590][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.723503][ T281] device bridge_slave_0 entered promiscuous mode [ 26.730736][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.737870][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.745547][ T281] device bridge_slave_1 entered promiscuous mode [ 26.764724][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.772234][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.779902][ T285] device bridge_slave_0 entered promiscuous mode [ 26.799978][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.807053][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.814631][ T284] device bridge_slave_0 entered promiscuous mode [ 26.821820][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.828934][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.836434][ T284] device bridge_slave_1 entered promiscuous mode [ 26.843100][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.850193][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.857575][ T285] device bridge_slave_1 entered promiscuous mode [ 26.980427][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.987594][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.994978][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.002074][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.033954][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.041063][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.048403][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.055591][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.104015][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.111212][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.118639][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.125679][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.135325][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.142608][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.150185][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.157237][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.171101][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.178279][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.185660][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.193034][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.206828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.215071][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.222614][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.230021][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.237205][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.244560][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.252074][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.259904][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.267225][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.274567][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.281846][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.296345][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.328737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.336667][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.344474][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.352768][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.359833][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.367477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.376095][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.383366][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.412845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.422731][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.431126][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.438214][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.445943][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.454917][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.462049][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.469457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.477598][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.484673][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.492130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.500468][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.507672][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.515195][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.523502][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.530830][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.540428][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.548122][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.556260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.564926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.578112][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.586632][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.594957][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.602171][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.609720][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.618259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.626359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.634575][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.655360][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.663660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.671928][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.680715][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.689252][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.696424][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.703949][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.712629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.721095][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.728210][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.735666][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.744144][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.752337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.760468][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.779217][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.787326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.802195][ T282] device veth0_vlan entered promiscuous mode [ 27.808989][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.817391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.826008][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.834649][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.843337][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.851511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.859828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.867453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.879618][ T281] device veth0_vlan entered promiscuous mode [ 27.890701][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.898812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.906875][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.915623][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.934275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.942388][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.949950][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.958864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.967346][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.975889][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.984262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.992472][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.002887][ T283] device veth0_vlan entered promiscuous mode [ 28.009417][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.017428][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.026205][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.034226][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.044767][ T281] device veth1_macvtap entered promiscuous mode [ 28.056122][ T282] device veth1_macvtap entered promiscuous mode [ 28.063993][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.072512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.086126][ T283] device veth1_macvtap entered promiscuous mode [ 28.094807][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.103963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.112621][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.121252][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.129507][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.137281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.145649][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.169634][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.178257][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.186632][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.195380][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.204880][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.213474][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.222030][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.230736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.239259][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.264680][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.273267][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.273578][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 28.282778][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.295773][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.304421][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.313703][ T284] device veth0_vlan entered promiscuous mode [ 28.325925][ T285] device veth0_vlan entered promiscuous mode [ 28.347576][ T285] device veth1_macvtap entered promiscuous mode [ 28.368651][ T284] device veth1_macvtap entered promiscuous mode [ 28.388607][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.397049][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.406135][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.414514][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.428775][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.437170][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.445959][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.454695][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.463471][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.471402][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.722364][ T305] loop1: detected capacity change from 0 to 131072 [ 28.739092][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.747359][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.767235][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.776766][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.791230][ T305] F2FS-fs (loop1): Found nat_bits in checkpoint [ 29.336884][ T313] loop3: detected capacity change from 0 to 131072 [ 29.349446][ T319] loop0: detected capacity change from 0 to 256 [ 29.379315][ T319] exfat: Deprecated parameter 'namecase' [ 29.385322][ T319] exfat: Deprecated parameter 'namecase' [ 29.425339][ T319] exFAT-fs (loop0): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 29.698768][ T305] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 29.755955][ T313] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.851468][ T313] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 29.877290][ T329] loop4: detected capacity change from 0 to 4096 [ 29.913704][ T313] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.019255][ T329] EXT4-fs (loop4): Test dummy encryption mode enabled [ 30.038324][ T334] loop0: detected capacity change from 0 to 4096 [ 30.055846][ T329] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 30.172746][ T334] EXT4-fs (loop0): Test dummy encryption mode enabled [ 30.245818][ T334] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 30.272184][ T334] System zones: 0-5 [ 30.308375][ T329] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 30.328597][ T334] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,nombcache,,errors=continue. Quota mode: writeback. [ 30.398188][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 30.398323][ T30] audit: type=1400 audit(1773800219.712:122): avc: denied { read } for pid=309 comm="syz.3.4" name="ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.468540][ T329] overlayfs: failed to resolve './file1': -2 [ 30.500150][ T30] audit: type=1400 audit(1773800219.742:123): avc: denied { read write } for pid=327 comm="syz.4.5" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 30.551227][ T332] loop2: detected capacity change from 0 to 512 [ 30.657512][ T30] audit: type=1400 audit(1773800219.742:124): avc: denied { open } for pid=327 comm="syz.4.5" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 30.685358][ T30] audit: type=1400 audit(1773800219.742:125): avc: denied { ioctl } for pid=327 comm="syz.4.5" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 30.759221][ T30] audit: type=1400 audit(1773800219.742:126): avc: denied { open } for pid=309 comm="syz.3.4" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.848157][ T332] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: writeback. [ 30.924599][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /0/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 30.946761][ T332] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.011996][ T358] loop0: detected capacity change from 0 to 256 [ 31.028717][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.055480][ T30] audit: type=1400 audit(1773800219.952:127): avc: denied { ioctl } for pid=309 comm="syz.3.4" path="/dev/ashmem" dev="devtmpfs" ino=265 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.086356][ T30] audit: type=1400 audit(1773800219.952:128): avc: denied { map } for pid=309 comm="syz.3.4" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.114719][ T30] audit: type=1400 audit(1773800219.962:129): avc: denied { setopt } for pid=309 comm="syz.3.4" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.136913][ T30] audit: type=1400 audit(1773800220.042:130): avc: denied { name_bind } for pid=327 comm="syz.4.5" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 31.160385][ T30] audit: type=1400 audit(1773800220.222:131): avc: denied { remove_name } for pid=285 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.477899][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 31.541096][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /0/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.564424][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.594424][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 31.615339][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /0/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.639291][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.690587][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 31.726232][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /0/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.776618][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.799315][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 31.811220][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 80: comm syz-executor: path /0/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.853082][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 31.899567][ T363] loop0: detected capacity change from 0 to 256 [ 31.946858][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 31.988327][ T363] exfat: Bad value for 'umask' [ 31.998655][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 32.046305][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 32.086514][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 32.147894][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 32.178242][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 32.279471][ T361] loop2: detected capacity change from 0 to 131072 [ 32.336114][ T369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 32.353584][ T366] loop3: detected capacity change from 0 to 4096 [ 32.394699][ T366] EXT4-fs (loop3): Test dummy encryption mode enabled [ 32.414496][ T373] bridge0: port 3(gretap0) entered blocking state [ 32.428060][ T373] bridge0: port 3(gretap0) entered disabled state [ 32.436151][ T361] F2FS-fs (loop2): Found nat_bits in checkpoint [ 32.436440][ T285] syz-executor (285) used greatest stack depth: 21760 bytes left [ 32.468515][ T373] device gretap0 entered promiscuous mode [ 32.474707][ T373] bridge0: port 3(gretap0) entered blocking state [ 32.481196][ T373] bridge0: port 3(gretap0) entered forwarding state [ 32.494866][ T366] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 32.504615][ T373] erofs: (device loop1): mounted with root inode @ nid 36. [ 32.511939][ T373] erofs: (device loop1): init_inode_xattrs: xattr_isize 12 of nid 36 is not supported yet [ 32.522138][ T373] SELinux: (dev loop1, type erofs) has no security xattr handler [ 32.528070][ T366] System zones: 0-5 [ 32.534049][ T361] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 32.593545][ T366] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,nombcache,,errors=continue. Quota mode: writeback. [ 32.685480][ T367] ======================================================= [ 32.685480][ T367] WARNING: The mand mount option has been deprecated and [ 32.685480][ T367] and is ignored by this kernel. Remove the mand [ 32.685480][ T367] option from the mount to silence this warning. [ 32.685480][ T367] ======================================================= [ 32.798216][ T367] EXT4-fs (loop0): Test dummy encryption mode enabled [ 32.878617][ T367] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 32.895236][ T367] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.077698][ T302] device bridge_slave_1 left promiscuous mode [ 33.083979][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.107924][ T301] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 33.128000][ T302] device bridge_slave_0 left promiscuous mode [ 33.144193][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.182360][ T302] device veth1_macvtap left promiscuous mode [ 33.217458][ T302] device veth0_vlan left promiscuous mode [ 33.407777][ T301] usb 2-1: device descriptor read/64, error -71 [ 33.662564][ T382] syz.2.10 (382) used greatest stack depth: 21416 bytes left [ 33.673895][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.691513][ T385] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.708216][ T385] device bridge_slave_0 entered promiscuous mode [ 33.716484][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.723751][ T385] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.731722][ T385] device bridge_slave_1 entered promiscuous mode [ 33.807821][ T301] usb 2-1: device descriptor read/64, error -71 [ 33.876136][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.883327][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.890671][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.897749][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.908426][ T389] fuse: root generation should be zero [ 33.970479][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.988045][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.998508][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.016039][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.039132][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.058521][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.065624][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.077750][ T301] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.087871][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.165230][ T396] set_capacity_and_notify: 2 callbacks suppressed [ 34.165250][ T396] loop3: detected capacity change from 0 to 256 [ 34.218979][ T396] exfat: Deprecated parameter 'namecase' [ 34.225078][ T396] exfat: Deprecated parameter 'namecase' [ 34.243337][ T396] exFAT-fs (loop3): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 34.387882][ T301] usb 2-1: device descriptor read/64, error -71 [ 34.412960][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.420268][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.497508][ T385] device veth0_vlan entered promiscuous mode [ 34.511416][ T385] device veth1_macvtap entered promiscuous mode [ 34.562131][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.594448][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.603304][ T401] fuse: Unknown parameter 'grou00000000000000000000' [ 34.618463][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.647187][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.655414][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.663296][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.671002][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.679481][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.687635][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.128121][ T406] loop2: detected capacity change from 0 to 131072 [ 35.238547][ T406] F2FS-fs (loop2): Found nat_bits in checkpoint [ 35.247354][ T408] loop3: detected capacity change from 0 to 131072 [ 35.254408][ T301] usb 2-1: device descriptor read/64, error -71 [ 35.279825][ T406] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 35.327683][ T408] F2FS-fs (loop3): Found nat_bits in checkpoint [ 35.376487][ T408] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 35.425553][ T301] usb usb2-port1: attempt power cycle [ 35.706580][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 35.706596][ T30] audit: type=1400 audit(1773800225.012:163): avc: denied { read } for pid=426 comm="syz.5.26" dev="nsfs" ino=4026532938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.849620][ T30] audit: type=1400 audit(1773800225.062:164): avc: denied { open } for pid=426 comm="syz.5.26" path="net:[4026532938]" dev="nsfs" ino=4026532938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.875367][ T432] loop5: detected capacity change from 0 to 256 [ 35.934028][ T30] audit: type=1400 audit(1773800225.062:165): avc: denied { create } for pid=426 comm="syz.5.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.955417][ T432] exfat: Bad value for 'umask' [ 35.964257][ T421] loop1: detected capacity change from 0 to 131072 [ 36.154080][ T421] F2FS-fs (loop1): Found nat_bits in checkpoint [ 36.268510][ T421] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 36.576992][ T445] loop5: detected capacity change from 0 to 128 [ 36.847202][ T445] EXT4-fs (loop5): Test dummy encryption mode enabled [ 36.857938][ T443] loop0: detected capacity change from 0 to 131072 [ 36.998943][ T445] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 37.043395][ T443] F2FS-fs (loop0): Found nat_bits in checkpoint [ 37.085602][ T443] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 37.098096][ T445] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.223874][ T459] loop3: detected capacity change from 0 to 4096 [ 38.301082][ T459] EXT4-fs (loop3): Test dummy encryption mode enabled [ 38.390221][ T459] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 38.403936][ T459] System zones: 0-5 [ 38.417654][ T459] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,nombcache,,errors=continue. Quota mode: writeback. [ 38.662804][ T461] loop1: detected capacity change from 0 to 131072 [ 38.758807][ T461] F2FS-fs (loop1): Found nat_bits in checkpoint [ 39.213670][ T467] loop3: detected capacity change from 0 to 131072 [ 39.277611][ T469] loop0: detected capacity change from 0 to 131072 [ 39.277980][ T461] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 39.308714][ T467] F2FS-fs (loop3): Found nat_bits in checkpoint [ 39.367830][ T467] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 39.370190][ T469] F2FS-fs (loop0): Found nat_bits in checkpoint [ 39.536943][ T469] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 39.976984][ T483] loop2: detected capacity change from 0 to 131072 [ 40.144117][ T483] F2FS-fs (loop2): Found nat_bits in checkpoint [ 40.227962][ T483] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 41.737127][ T503] loop0: detected capacity change from 0 to 4096 [ 41.768573][ T501] loop5: detected capacity change from 0 to 131072 [ 41.785339][ T503] EXT4-fs (loop0): Test dummy encryption mode enabled [ 41.808203][ T503] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 41.831003][ T503] System zones: 0-5 [ 41.878697][ T503] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,nombcache,,errors=continue. Quota mode: writeback. [ 41.908846][ T501] F2FS-fs (loop5): Found nat_bits in checkpoint [ 41.952386][ T507] loop3: detected capacity change from 0 to 4096 [ 41.982403][ T501] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 42.049838][ T507] EXT4-fs (loop3): Test dummy encryption mode enabled [ 42.059813][ T507] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 42.076255][ T507] System zones: 0-5 [ 42.102333][ T507] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,nombcache,,errors=continue. Quota mode: writeback. [ 42.169404][ T517] loop1: detected capacity change from 0 to 256 [ 42.209125][ T517] exfat: Deprecated parameter 'namecase' [ 42.215752][ T517] exfat: Deprecated parameter 'namecase' [ 42.222765][ T30] audit: type=1400 audit(1773800231.462:166): avc: denied { create } for pid=513 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 42.256211][ T517] exFAT-fs (loop1): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 42.562094][ T522] loop0: detected capacity change from 0 to 256 [ 42.605933][ T524] loop1: detected capacity change from 0 to 256 [ 42.618080][ T522] exfat: Bad value for 'umask' [ 42.645207][ T526] loop3: detected capacity change from 0 to 256 [ 42.658966][ T524] exfat: Bad value for 'umask' [ 42.769466][ T526] exfat: Bad value for 'umask' [ 42.787696][ T528] EXT4-fs (loop2): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,lazytime,sb=0x0000000000000abf,. Quota mode: writeback. [ 42.804340][ T528] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.859885][ T30] audit: type=1400 audit(1773800232.172:167): avc: denied { read write } for pid=527 comm="syz.2.40" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 42.886363][ T529] EXT4-fs (loop0): Test dummy encryption mode enabled [ 42.950190][ T528] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.40: bg 0: block 217: padding at end of block bitmap is not set [ 42.968332][ T529] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 42.982069][ T528] EXT4-fs (loop2): Remounting filesystem read-only [ 42.988150][ T529] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.082958][ T30] audit: type=1400 audit(1773800232.242:168): avc: denied { open } for pid=527 comm="syz.2.40" path="/7/bus/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.180607][ T536] EXT4-fs (loop3): Test dummy encryption mode enabled [ 43.342325][ T536] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 43.359045][ T536] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.162338][ T30] audit: type=1400 audit(1773800232.362:169): avc: denied { ioctl } for pid=527 comm="syz.2.40" path="/7/bus/file1" dev="loop2" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.246329][ T542] set_capacity_and_notify: 3 callbacks suppressed [ 44.246346][ T542] loop3: detected capacity change from 0 to 4096 [ 44.318474][ T542] EXT4-fs (loop3): Test dummy encryption mode enabled [ 44.333242][ T546] loop1: detected capacity change from 0 to 128 [ 44.345183][ T542] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 44.381205][ T542] System zones: 0-5 [ 44.442941][ T548] loop0: detected capacity change from 0 to 128 [ 44.560119][ T548] EXT4-fs (loop0): Test dummy encryption mode enabled [ 44.575663][ T546] EXT4-fs (loop1): Test dummy encryption mode enabled [ 44.589640][ T542] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,nombcache,,errors=continue. Quota mode: writeback. [ 44.732341][ T548] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 44.748562][ T548] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.442452][ T546] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 45.585472][ T546] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.885952][ T556] loop3: detected capacity change from 0 to 4096 [ 45.933140][ T556] EXT4-fs (loop3): Test dummy encryption mode enabled [ 45.988197][ T556] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 46.111553][ T553] loop0: detected capacity change from 0 to 131072 [ 46.118506][ T556] System zones: 0-5 [ 46.139585][ T556] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,nombcache,,errors=continue. Quota mode: writeback. [ 46.197329][ T553] F2FS-fs (loop0): Found nat_bits in checkpoint [ 46.257821][ T553] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 46.450760][ T559] loop2: detected capacity change from 0 to 131072 [ 46.508686][ T559] F2FS-fs (loop2): Found nat_bits in checkpoint [ 46.556133][ T559] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 46.738776][ T571] loop3: detected capacity change from 0 to 4096 [ 46.788970][ T571] EXT4-fs (loop3): Test dummy encryption mode enabled [ 46.848038][ T571] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 46.957854][ T571] System zones: 0-5 [ 47.021435][ T571] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,nombcache,,errors=continue. Quota mode: writeback. [ 47.321246][ T576] loop5: detected capacity change from 0 to 131072 [ 47.462069][ T576] F2FS-fs (loop5): Found nat_bits in checkpoint [ 47.517838][ T576] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 47.778524][ T584] loop3: detected capacity change from 0 to 4096 [ 47.937999][ T584] EXT4-fs (loop3): Test dummy encryption mode enabled [ 47.978735][ T584] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 48.018073][ T584] System zones: 0-5 [ 48.033176][ T584] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,nombcache,,errors=continue. Quota mode: writeback. [ 48.653564][ T601] loop0: detected capacity change from 0 to 4096 [ 48.671323][ T601] EXT4-fs (loop0): Test dummy encryption mode enabled [ 48.680952][ T601] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 48.689459][ T601] System zones: 0-5 [ 48.694439][ T601] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,nombcache,,errors=continue. Quota mode: writeback. [ 48.960486][ T612] exfat: Bad value for 'umask' [ 49.433169][ T615] set_capacity_and_notify: 1 callbacks suppressed [ 49.433234][ T615] loop0: detected capacity change from 0 to 256 [ 49.570102][ T30] audit: type=1400 audit(1773800238.862:170): avc: denied { perfmon } for pid=606 comm="syz.0.59" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.633106][ T30] audit: type=1400 audit(1773800238.872:171): avc: denied { map_read map_write } for pid=606 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.677265][ T30] audit: type=1400 audit(1773800238.902:172): avc: denied { prog_run } for pid=606 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 49.699938][ T620] loop5: detected capacity change from 0 to 256 [ 49.728523][ T620] exfat: Bad value for 'umask' [ 49.732459][ T30] audit: type=1400 audit(1773800239.012:173): avc: denied { create } for pid=617 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.756133][ T30] audit: type=1400 audit(1773800239.012:174): avc: denied { setopt } for pid=617 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.776924][ T30] audit: type=1400 audit(1773800239.022:175): avc: denied { ioctl } for pid=617 comm="syz.1.62" path="socket:[17593]" dev="sockfs" ino=17593 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.841061][ T30] audit: type=1400 audit(1773800239.022:176): avc: denied { write } for pid=617 comm="syz.1.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.968040][ T629] loop5: detected capacity change from 0 to 256 [ 49.983706][ T627] loop0: detected capacity change from 0 to 256 [ 49.992549][ T30] audit: type=1400 audit(1773800239.302:177): avc: granted { setsecparam } for pid=611 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 50.175512][ T633] loop0: detected capacity change from 0 to 256 [ 50.232754][ T633] exfat: Bad value for 'umask' [ 50.251733][ T622] loop1: detected capacity change from 0 to 131072 [ 50.307310][ T636] loop5: detected capacity change from 0 to 256 [ 50.578510][ T636] exfat: Deprecated parameter 'namecase' [ 50.584259][ T636] exfat: Deprecated parameter 'namecase' [ 50.602170][ T636] exFAT-fs (loop5): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 51.200424][ T639] loop0: detected capacity change from 0 to 128 [ 51.237723][ C0] sched: RT throttling activated [ 51.267854][ T639] EXT4-fs (loop0): Test dummy encryption mode enabled [ 51.385886][ T622] F2FS-fs (loop1): Found nat_bits in checkpoint [ 51.458372][ T622] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 51.480240][ T642] loop5: detected capacity change from 0 to 256 [ 51.583810][ T642] exfat: Bad value for 'umask' [ 51.604937][ T639] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 51.621104][ T639] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.137246][ T655] loop5: detected capacity change from 0 to 128 [ 52.188500][ T655] EXT4-fs (loop5): Test dummy encryption mode enabled [ 52.246005][ T655] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 52.262457][ T655] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.590996][ T30] audit: type=1400 audit(1773800241.902:178): avc: denied { create } for pid=660 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.989089][ T30] audit: type=1400 audit(1773800241.922:179): avc: denied { bind } for pid=660 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.404050][ T670] input: syz0 as /devices/virtual/input/input4 [ 53.461265][ T670] FAULT_INJECTION: forcing a failure. [ 53.461265][ T670] name failslab, interval 1, probability 0, space 0, times 1 [ 53.509362][ T663] F2FS-fs (loop3): Found nat_bits in checkpoint [ 53.570766][ T663] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 53.587916][ T670] CPU: 0 PID: 670 Comm: syz.5.74 Not tainted syzkaller #0 [ 53.595114][ T670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 53.605222][ T670] Call Trace: [ 53.608534][ T670] [ 53.611489][ T670] __dump_stack+0x21/0x30 [ 53.615889][ T670] dump_stack_lvl+0x110/0x170 [ 53.620598][ T670] ? show_regs_print_info+0x20/0x20 [ 53.625836][ T670] dump_stack+0x15/0x20 [ 53.630033][ T670] should_fail+0x3c1/0x510 [ 53.634481][ T670] __should_failslab+0xa4/0xe0 [ 53.639272][ T670] should_failslab+0x9/0x20 [ 53.643896][ T670] slab_pre_alloc_hook+0x3b/0xe0 [ 53.648878][ T670] __kmalloc+0x6d/0x2c0 [ 53.653069][ T670] ? kvmalloc_node+0x211/0x320 [ 53.657862][ T670] kvmalloc_node+0x211/0x320 [ 53.662485][ T670] ? __kasan_check_write+0x14/0x20 [ 53.667626][ T670] ? mutex_lock+0x9b/0x1c0 [ 53.672069][ T670] ? vm_mmap+0xb0/0xb0 [ 53.676179][ T670] ? path_openat+0x280e/0x2f20 [ 53.680982][ T670] seq_read_iter+0x1fc/0xd30 [ 53.685715][ T670] ? putname+0x111/0x160 [ 53.690002][ T670] ? do_sys_openat2+0x6df/0x7f0 [ 53.694886][ T670] ? __x64_sys_openat+0x136/0x160 [ 53.699951][ T670] ? do_syscall_64+0x4c/0xa0 [ 53.704580][ T670] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.710692][ T670] seq_read+0x3d9/0x4f0 [ 53.714880][ T670] ? seq_open+0x130/0x130 [ 53.719336][ T670] ? avc_policy_seqno+0x1b/0x70 [ 53.724326][ T670] ? seq_open+0x130/0x130 [ 53.728690][ T670] proc_reg_read+0x1c4/0x2b0 [ 53.733318][ T670] ? proc_reg_get_unmapped_area+0x390/0x390 [ 53.739432][ T670] vfs_read+0x28d/0xc40 [ 53.743634][ T670] ? kernel_read+0x1f0/0x1f0 [ 53.748269][ T670] ? __kasan_check_write+0x14/0x20 [ 53.753426][ T670] ? mutex_lock+0x9b/0x1c0 [ 53.757996][ T670] ? wait_for_completion_killable_timeout+0x10/0x10 [ 53.764727][ T670] ? __fget_files+0x2c4/0x320 [ 53.769450][ T670] ? __fdget_pos+0x2d2/0x380 [ 53.774405][ T670] ? ksys_read+0x71/0x250 [ 53.778883][ T670] ksys_read+0x149/0x250 [ 53.783256][ T670] ? vfs_write+0xfd0/0xfd0 [ 53.787805][ T670] ? debug_smp_processor_id+0x17/0x20 [ 53.793231][ T670] __x64_sys_read+0x7b/0x90 [ 53.797877][ T670] x64_sys_call+0x96d/0x9a0 [ 53.802621][ T670] do_syscall_64+0x4c/0xa0 [ 53.807079][ T670] ? clear_bhb_loop+0x50/0xa0 [ 53.811853][ T670] ? clear_bhb_loop+0x50/0xa0 [ 53.816581][ T670] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.822534][ T670] RIP: 0033:0x7f86b826f799 [ 53.827005][ T670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.846847][ T670] RSP: 002b:00007f86b6ca9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.855310][ T670] RAX: ffffffffffffffda RBX: 00007f86b84e9090 RCX: 00007f86b826f799 [ 53.863321][ T670] RDX: 0000000000002020 RSI: 0000200000001100 RDI: 0000000000000008 [ 53.871325][ T670] RBP: 00007f86b6ca9090 R08: 0000000000000000 R09: 0000000000000000 [ 53.879432][ T670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.887624][ T670] R13: 00007f86b84e9128 R14: 00007f86b84e9090 R15: 00007fff4114f578 [ 53.895640][ T670] [ 54.058261][ T665] F2FS-fs (loop0): Found nat_bits in checkpoint [ 54.136157][ T665] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 54.775810][ T30] kauditd_printk_skb: 94 callbacks suppressed [ 54.775826][ T30] audit: type=1400 audit(1773800244.082:274): avc: denied { read } for pid=664 comm="syz.0.73" name="ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.836948][ T686] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,stripe=0x000000000000000c,,errors=continue. Quota mode: writeback. [ 55.016127][ T30] audit: type=1400 audit(1773800244.132:275): avc: denied { read open } for pid=664 comm="syz.0.73" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.068064][ T686] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.097938][ T30] audit: type=1400 audit(1773800244.382:276): avc: denied { mount } for pid=685 comm="syz.5.76" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.127943][ T30] audit: type=1400 audit(1773800244.392:277): avc: denied { ioctl } for pid=664 comm="syz.0.73" path="/dev/ashmem" dev="devtmpfs" ino=265 ioctlcmd=0x7703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.234161][ T30] audit: type=1400 audit(1773800244.392:278): avc: denied { read write } for pid=685 comm="syz.5.76" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.312813][ T30] audit: type=1400 audit(1773800244.392:279): avc: denied { open } for pid=685 comm="syz.5.76" path="/dev/loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.337068][ T30] audit: type=1400 audit(1773800244.392:280): avc: denied { ioctl } for pid=685 comm="syz.5.76" path="/dev/loop5" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.362592][ T30] audit: type=1400 audit(1773800244.392:281): avc: denied { map } for pid=664 comm="syz.0.73" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.386629][ T30] audit: type=1400 audit(1773800244.392:282): avc: denied { read } for pid=664 comm="syz.0.73" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.422776][ T30] audit: type=1400 audit(1773800244.542:283): avc: denied { write } for pid=685 comm="syz.5.76" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.859082][ T701] FAULT_INJECTION: forcing a failure. [ 55.859082][ T701] name failslab, interval 1, probability 0, space 0, times 0 [ 55.871879][ T701] CPU: 0 PID: 701 Comm: syz.3.77 Not tainted syzkaller #0 [ 55.879045][ T701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 55.889126][ T701] Call Trace: [ 55.892428][ T701] [ 55.895383][ T701] __dump_stack+0x21/0x30 [ 55.899744][ T701] dump_stack_lvl+0x110/0x170 [ 55.904480][ T701] ? show_regs_print_info+0x20/0x20 [ 55.907878][ T658] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 55.909841][ T701] dump_stack+0x15/0x20 [ 55.921490][ T701] should_fail+0x3c1/0x510 [ 55.925941][ T701] __should_failslab+0xa4/0xe0 [ 55.930771][ T701] should_failslab+0x9/0x20 [ 55.935302][ T701] slab_pre_alloc_hook+0x3b/0xe0 [ 55.940271][ T701] ? dst_alloc+0x15c/0x1d0 [ 55.944843][ T701] kmem_cache_alloc+0x44/0x260 [ 55.949652][ T701] ? ipv6_sysctl_rtcache_flush+0x100/0x100 [ 55.955496][ T701] dst_alloc+0x15c/0x1d0 [ 55.959774][ T701] ip6_pol_route+0x985/0x1170 [ 55.964480][ T701] ? fib6_table_lookup+0xa20/0xa20 [ 55.969635][ T701] ip6_pol_route_input+0x56/0x80 [ 55.974711][ T701] fib6_rule_lookup+0x20a/0x5d0 [ 55.979604][ T701] ? ip6_route_input_lookup+0xd0/0xd0 [ 55.985013][ T701] ? fib6_lookup+0x2c0/0x2c0 [ 55.989648][ T701] ? ip6t_do_table+0x131f/0x14e0 [ 55.994724][ T701] ip6_route_input+0x607/0x8c0 [ 55.999620][ T701] ? ip6_multipath_l3_keys+0x5d0/0x5d0 [ 56.005117][ T701] ? ip6table_mangle_table_init+0x60/0x60 [ 56.010963][ T701] ip6_rcv_finish+0x156/0x360 [ 56.016002][ T701] ipv6_rcv+0xed/0x230 [ 56.020208][ T701] ? ip6_rcv_finish+0x360/0x360 [ 56.025088][ T701] ? refcount_add+0x80/0x80 [ 56.029617][ T701] ? ip6_rcv_finish+0x360/0x360 [ 56.034483][ T701] __netif_receive_skb+0xc8/0x280 [ 56.039619][ T701] netif_receive_skb+0x98/0x3f0 [ 56.044483][ T701] ? netif_receive_skb_core+0x100/0x100 [ 56.050174][ T701] ? slab_post_alloc_hook+0x6d/0x2b0 [ 56.055476][ T701] ? virtio_net_hdr_to_skb+0x970/0x11f0 [ 56.061044][ T701] tun_rx_batched+0x5f6/0x730 [ 56.065858][ T701] ? local_bh_enable+0x30/0x30 [ 56.070677][ T701] tun_get_user+0x27d3/0x3400 [ 56.075462][ T701] ? kmem_cache_free+0xa0/0x320 [ 56.080455][ T701] ? tun_do_read+0x1d30/0x1d30 [ 56.085318][ T701] ? kstrtouint_from_user+0x1c4/0x220 [ 56.090724][ T701] ? kstrtol_from_user+0x2a0/0x2a0 [ 56.096027][ T701] ? avc_policy_seqno+0x1b/0x70 [ 56.101031][ T701] ? selinux_file_permission+0x2aa/0x510 [ 56.106778][ T701] tun_chr_write_iter+0x1eb/0x2e0 [ 56.111825][ T701] vfs_write+0x835/0xfd0 [ 56.116076][ T701] ? file_end_write+0x1b0/0x1b0 [ 56.120942][ T701] ? __fget_files+0x2c4/0x320 [ 56.125717][ T701] ? __fdget_pos+0x1f7/0x380 [ 56.130330][ T701] ? ksys_write+0x71/0x250 [ 56.134846][ T701] ksys_write+0x149/0x250 [ 56.139272][ T701] ? __ia32_sys_read+0x90/0x90 [ 56.144050][ T701] ? debug_smp_processor_id+0x17/0x20 [ 56.149432][ T701] __x64_sys_write+0x7b/0x90 [ 56.154071][ T701] x64_sys_call+0x8ef/0x9a0 [ 56.158584][ T701] do_syscall_64+0x4c/0xa0 [ 56.163044][ T701] ? clear_bhb_loop+0x50/0xa0 [ 56.167738][ T701] ? clear_bhb_loop+0x50/0xa0 [ 56.172426][ T701] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.178330][ T701] RIP: 0033:0x7f8767f7ffce [ 56.182775][ T701] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 56.202487][ T701] RSP: 002b:00007f8766a19fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.210917][ T701] RAX: ffffffffffffffda RBX: 00007f8766a1a6c0 RCX: 00007f8767f7ffce [ 56.219078][ T701] RDX: 000000000000005e RSI: 00002000000004c0 RDI: 00000000000000c8 [ 56.227268][ T701] RBP: 00007f8766a1a090 R08: 0000000000000000 R09: 0000000000000000 [ 56.235394][ T701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.243389][ T701] R13: 00007f8768239038 R14: 00007f8768238fa0 R15: 00007fff7ab15d58 [ 56.251476][ T701] [ 56.292865][ T703] set_capacity_and_notify: 3 callbacks suppressed [ 56.292880][ T703] loop0: detected capacity change from 0 to 4096 [ 56.330250][ T703] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 56.406510][ T658] usb 3-1: Using ep0 maxpacket: 16 [ 56.443185][ T703] EXT4-fs (loop0): Test dummy encryption mode enabled [ 56.471941][ T703] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a856c019, mo2=0003] [ 56.486445][ T703] System zones: 0-5 [ 56.537819][ T658] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.574581][ T703] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,jqfmt=vfsv1,test_dummy_encryption,errors=continue,errors=continue,delalloc,nombcache,grpquota,,errors=continue. Quota mode: writeback. [ 56.596467][ T658] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.611625][ T707] loop1: detected capacity change from 0 to 4096 [ 56.618515][ T658] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 56.644617][ T707] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 56.809316][ T705] loop3: detected capacity change from 0 to 131072 [ 56.822461][ T714] loop5: detected capacity change from 0 to 256 [ 56.875119][ T707] EXT4-fs (loop1): Test dummy encryption mode enabled [ 56.910996][ T658] usb 3-1: config 0 interface 0 has no altsetting 0 [ 56.919463][ T714] exfat: Deprecated parameter 'namecase' [ 56.925302][ T714] exfat: Deprecated parameter 'namecase' [ 56.965723][ T714] exFAT-fs (loop5): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 57.071690][ T703] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 57.176045][ T705] F2FS-fs (loop3): Found nat_bits in checkpoint [ 57.188820][ T707] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,noquota,inode_readahead_blks=0x0000000000000000,auto_da_alloc=0x0000000000000001,minixdf,debug_want_extra_isize=0x0000000000000008,auto_da_alloc=0x000000000000000d,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 57.224798][ T658] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 57.276311][ T705] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 57.277208][ T658] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.301664][ T658] usb 3-1: config 0 descriptor?? [ 57.445114][ T727] loop0: detected capacity change from 0 to 256 [ 57.661911][ T733] loop0: detected capacity change from 0 to 256 [ 57.711888][ T738] loop5: detected capacity change from 0 to 256 [ 57.731259][ T738] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.981004][ T658] usb 3-1: USB disconnect, device number 2 [ 58.006708][ T738] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 58.022512][ T738] FAT-fs (loop5): Filesystem has been set read-only [ 58.629535][ T749] loop5: detected capacity change from 0 to 8192 [ 59.652208][ T775] loop1: detected capacity change from 0 to 2048 [ 59.673964][ T776] overlayfs: workdir and upperdir must reside under the same mount [ 59.737090][ T775] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 59.787653][ T30] kauditd_printk_skb: 338 callbacks suppressed [ 59.787667][ T30] audit: type=1400 audit(1773800249.092:622): avc: denied { read write } for pid=385 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.825797][ T30] audit: type=1400 audit(1773800249.092:623): avc: denied { open } for pid=385 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.854283][ T30] audit: type=1400 audit(1773800249.102:624): avc: denied { ioctl } for pid=385 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 59.881324][ T30] audit: type=1400 audit(1773800249.122:625): avc: denied { name_bind } for pid=787 comm="syz.5.107" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 59.903726][ T30] audit: type=1400 audit(1773800249.122:626): avc: denied { node_bind } for pid=787 comm="syz.5.107" saddr=::ffff:172.20.20.11 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 59.959900][ T30] audit: type=1400 audit(1773800249.232:627): avc: denied { read } for pid=774 comm="syz.1.103" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 60.038742][ T30] audit: type=1400 audit(1773800249.232:628): avc: denied { open } for pid=774 comm="syz.1.103" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 60.088215][ T792] loop0: detected capacity change from 0 to 1024 [ 60.139025][ T792] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 60.182743][ T30] audit: type=1400 audit(1773800249.242:629): avc: denied { read write } for pid=283 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.234290][ T30] audit: type=1400 audit(1773800249.242:630): avc: denied { open } for pid=283 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.261723][ T30] audit: type=1400 audit(1773800249.242:631): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.262425][ T792] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,nojournal_checksum,errors=remount-ro,grpquota,noblock_validity,user_xattr,noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 60.532632][ T816] futex_wake_op: syz.5.117 tries to shift op by -1; fix this program [ 60.610734][ T815] netlink: 'syz.0.116': attribute type 13 has an invalid length. [ 61.132501][ T808] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 61.141501][ T808] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 61.187754][ T808] F2FS-fs (loop1): invalid crc value [ 61.239701][ T808] F2FS-fs (loop1): Found nat_bits in checkpoint [ 61.504312][ T808] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 61.516360][ T808] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 61.598392][ T301] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.813805][ T825] set_capacity_and_notify: 1 callbacks suppressed [ 61.813955][ T825] loop2: detected capacity change from 0 to 40427 [ 61.857826][ T301] usb 1-1: Using ep0 maxpacket: 32 [ 61.885604][ T825] F2FS-fs (loop2): invalid crc value [ 61.988432][ T301] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.024597][ T825] F2FS-fs (loop2): Found nat_bits in checkpoint [ 62.041675][ T301] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 62.201214][ T825] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 62.275624][ T825] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 62.298191][ T301] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 62.308687][ T301] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 62.337780][ T301] usb 1-1: Product: syz [ 62.354406][ T301] usb 1-1: Manufacturer: syz [ 62.369846][ T301] usb 1-1: SerialNumber: syz [ 62.423408][ T301] usb 1-1: config 0 descriptor?? [ 62.429389][ T867] loop3: detected capacity change from 0 to 512 [ 62.458915][ T867] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.468636][ T301] hub 1-1:0.0: bad descriptor, ignoring hub [ 62.474982][ T301] hub: probe of 1-1:0.0 failed with error -5 [ 62.505338][ T870] overlayfs: failed to clone lowerpath [ 62.537261][ T867] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 62.550633][ T867] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 62.558956][ T867] System zones: 0-2, 18-18, 34-34 [ 62.594931][ T867] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.136: bad orphan inode 15 [ 62.605940][ T876] device bridge1 entered promiscuous mode [ 62.612818][ T867] ext4_test_bit(bit=14, block=18) = 1 [ 62.618895][ T867] is_bad_inode(inode)=0 [ 62.623163][ T867] NEXT_ORPHAN(inode)=2264924160 [ 62.628256][ T867] max_ino=32 [ 62.631563][ T867] i_nlink=0 [ 62.635369][ T867] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #15: comm syz.3.136: corrupted inode contents [ 62.648447][ T867] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #15: comm syz.3.136: mark_inode_dirty error [ 62.690946][ T867] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #15: comm syz.3.136: corrupted inode contents [ 62.697400][ T878] loop2: detected capacity change from 0 to 2048 [ 62.718670][ T867] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2952: inode #15: comm syz.3.136: mark_inode_dirty error [ 62.740754][ T867] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2955: inode #15: comm syz.3.136: mark inode dirty (error -117) [ 62.754858][ T867] EXT4-fs warning (device loop3): ext4_evict_inode:303: xattr delete (err -117) [ 62.764890][ T867] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 62.841135][ T878] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 62.998617][ T301] usb 1-1: USB disconnect, device number 2 [ 63.346911][ T892] loop1: detected capacity change from 0 to 512 [ 63.410908][ T895] loop2: detected capacity change from 0 to 256 [ 63.467868][ T301] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 63.471809][ T892] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.144: invalid indirect mapped block 4294967295 (level 1) [ 63.498803][ T892] EXT4-fs (loop1): Remounting filesystem read-only [ 63.543627][ T892] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.144: invalid indirect mapped block 4294967295 (level 1) [ 63.560166][ T892] EXT4-fs (loop1): Remounting filesystem read-only [ 63.568305][ T895] FAT-fs (loop2): Directory bread(block 64) failed [ 63.570211][ T892] EXT4-fs (loop1): 2 truncates cleaned up [ 63.581182][ T892] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,mb_optimize_scan=0x0000000000000001,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 63.642079][ T895] FAT-fs (loop2): Directory bread(block 65) failed [ 63.718243][ T895] FAT-fs (loop2): Directory bread(block 66) failed [ 63.768319][ T895] FAT-fs (loop2): Directory bread(block 67) failed [ 63.855524][ T895] FAT-fs (loop2): Directory bread(block 68) failed [ 63.930265][ T895] FAT-fs (loop2): Directory bread(block 69) failed [ 63.957996][ T301] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.971153][ T895] FAT-fs (loop2): Directory bread(block 70) failed [ 63.997103][ T301] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 64.006175][ T895] FAT-fs (loop2): Directory bread(block 71) failed [ 64.067823][ T895] FAT-fs (loop2): Directory bread(block 72) failed [ 64.076831][ T895] FAT-fs (loop2): Directory bread(block 73) failed [ 64.587916][ T301] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 64.604407][ T301] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 64.641893][ T301] usb 1-1: Product: syz [ 64.654573][ T911] loop5: detected capacity change from 0 to 256 [ 64.659478][ T301] usb 1-1: config 0 descriptor?? [ 64.687792][ T301] usb 1-1: can't set config #0, error -71 [ 64.694732][ T301] usb 1-1: USB disconnect, device number 3 [ 64.830984][ T30] kauditd_printk_skb: 359 callbacks suppressed [ 64.831008][ T30] audit: type=1400 audit(1773800254.142:991): avc: denied { create } for pid=916 comm="syz.3.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.927836][ T720] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 64.962958][ T30] audit: type=1400 audit(1773800254.272:992): avc: denied { ioctl } for pid=910 comm="syz.2.151" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.004281][ T30] audit: type=1400 audit(1773800254.272:993): avc: denied { read write } for pid=919 comm="syz.5.154" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.050929][ T30] audit: type=1400 audit(1773800254.272:994): avc: denied { open } for pid=919 comm="syz.5.154" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.057927][ T301] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 65.113670][ T925] loop3: detected capacity change from 0 to 128 [ 65.130323][ T30] audit: type=1400 audit(1773800254.302:995): avc: denied { ioctl } for pid=910 comm="syz.2.151" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.163620][ T926] loop1: detected capacity change from 0 to 2048 [ 65.168159][ T30] audit: type=1400 audit(1773800254.302:996): avc: denied { ioctl } for pid=919 comm="syz.5.154" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 65.194807][ T923] Illegal XDP return value 4294967294, expect packet loss! [ 65.210006][ T925] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 65.221710][ T30] audit: type=1400 audit(1773800254.382:997): avc: denied { read write } for pid=385 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.247557][ T30] audit: type=1400 audit(1773800254.382:998): avc: denied { open } for pid=385 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.294488][ T30] audit: type=1400 audit(1773800254.382:999): avc: denied { ioctl } for pid=385 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.310897][ T926] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.322892][ T30] audit: type=1400 audit(1773800254.402:1000): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 65.378342][ T301] usb 1-1: Using ep0 maxpacket: 32 [ 65.388993][ T720] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 65.407453][ T720] usb 3-1: config 1 has no interface number 0 [ 65.439438][ T720] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 65.451511][ T720] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.508144][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.538507][ T301] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.576363][ T301] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 65.591710][ T301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.648179][ T720] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 65.661246][ T720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.669776][ T301] usb 1-1: config 0 descriptor?? [ 65.677036][ T936] tipc: Started in network mode [ 65.682308][ T936] tipc: Node identity 467d67e3e428, cluster identity 4711 [ 65.690188][ T720] usb 3-1: Product: syz [ 65.694419][ T720] usb 3-1: Manufacturer: syz [ 65.699606][ T936] tipc: Enabled bearer , priority 0 [ 65.706270][ T720] usb 3-1: SerialNumber: syz [ 65.709463][ T926] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.157: bg 0: block 234: padding at end of block bitmap is not set [ 65.717056][ T936] device syzkaller0 entered promiscuous mode [ 65.729593][ T301] hub 1-1:0.0: USB hub found [ 65.741604][ T936] tipc: Resetting bearer [ 65.748928][ T926] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 538 with error 28 [ 65.761839][ T935] tipc: Resetting bearer [ 65.762459][ T913] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 65.775288][ T926] EXT4-fs (loop1): This should not happen!! Data will be lost [ 65.775288][ T926] [ 65.785746][ T935] tipc: Disabling bearer [ 65.793833][ T926] EXT4-fs (loop1): Total free blocks count 0 [ 65.800565][ T926] EXT4-fs (loop1): Free/Dirty block details [ 65.806581][ T926] EXT4-fs (loop1): free_blocks=0 [ 65.812205][ T926] EXT4-fs (loop1): dirty_blocks=544 [ 65.818075][ T926] EXT4-fs (loop1): Block reservation details [ 65.824159][ T926] EXT4-fs (loop1): i_reserved_data_blocks=34 [ 66.077814][ T301] hub 1-1:0.0: 1 port detected [ 66.112621][ T946] loop1: detected capacity change from 0 to 2048 [ 66.143490][ T948] device syzkaller0 entered promiscuous mode [ 66.177357][ T946] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 66.189368][ T953] loop3: detected capacity change from 0 to 512 [ 66.557761][ T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 66.686842][ T969] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 66.703785][ T969] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 66.728468][ T969] F2FS-fs (loop1): Found nat_bits in checkpoint [ 66.738250][ T301] hub 1-1:0.0: activate --> -90 [ 66.775465][ T969] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 66.782850][ T969] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 66.859633][ T281] attempt to access beyond end of device [ 66.859633][ T281] loop1: rw=2049, want=45104, limit=40427 [ 66.927846][ T26] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 66.938884][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.972375][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.982790][ T26] usb 6-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 67.007781][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.037871][ T26] usb 6-1: config 0 descriptor?? [ 67.198604][ T975] set_capacity_and_notify: 2 callbacks suppressed [ 67.198615][ T975] loop1: detected capacity change from 0 to 40427 [ 67.217814][ T301] usb 1-1-port1: cannot reset (err = -71) [ 67.225379][ T720] usb 1-1: USB disconnect, device number 4 [ 67.247803][ T301] usb 1-1-port1: cannot reset (err = -71) [ 67.253695][ T301] usb 1-1-port1: attempt power cycle [ 67.263174][ T975] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 67.271189][ T975] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 67.285528][ T978] loop3: detected capacity change from 0 to 128 [ 67.291981][ T975] F2FS-fs (loop1): invalid crc value [ 67.307391][ T978] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.329400][ T978] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.331116][ T975] F2FS-fs (loop1): Found nat_bits in checkpoint [ 67.381691][ T8] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 67.392383][ T975] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 67.399758][ T975] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 67.489958][ T984] loop3: detected capacity change from 0 to 256 [ 67.513426][ T975] attempt to access beyond end of device [ 67.513426][ T975] loop1: rw=2049, want=81920, limit=40427 [ 67.530109][ T26] wacom 0003:056A:0000.0002: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 67.541719][ T26] wacom 0003:056A:0000.0002: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.5-1/input0 [ 67.542570][ T975] attempt to access beyond end of device [ 67.542570][ T975] loop1: rw=2049, want=53248, limit=40427 [ 67.557970][ T26] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0000.0002/input/input5 [ 67.596112][ T984] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5658fca8, utbl_chksum : 0xe619d30d) [ 67.613535][ T975] attempt to access beyond end of device [ 67.613535][ T975] loop1: rw=2049, want=69288, limit=40427 [ 67.661553][ T988] attempt to access beyond end of device [ 67.661553][ T988] loop1: rw=524288, want=78080, limit=40427 [ 67.671194][ T58] usb 3-1: USB disconnect, device number 3 [ 67.698285][ T988] attempt to access beyond end of device [ 67.698285][ T988] loop1: rw=0, want=77840, limit=40427 [ 67.726567][ T988] attempt to access beyond end of device [ 67.726567][ T988] loop1: rw=0, want=77840, limit=40427 [ 67.791609][ T649] usb 6-1: USB disconnect, device number 2 [ 67.832398][ T993] fido_id[993]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 68.571575][ T1015] loop3: detected capacity change from 0 to 512 [ 68.647523][ T1019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.190'. [ 68.667887][ T1015] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 68.752408][ T1015] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 68.967901][ T1015] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.189: bg 0: block 104: invalid block bitmap [ 69.102199][ T1021] loop1: detected capacity change from 0 to 131072 [ 69.149193][ T1015] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 69.175828][ T1015] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.189: invalid indirect mapped block 1 (level 1) [ 69.191050][ T1015] EXT4-fs (loop3): 1 truncate cleaned up [ 69.196886][ T1015] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.213334][ T1021] F2FS-fs (loop1): invalid crc value [ 69.267771][ T1021] F2FS-fs (loop1): Found nat_bits in checkpoint [ 69.334226][ T1021] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 69.516167][ T1061] loop3: detected capacity change from 0 to 1024 [ 69.532338][ T1062] loop0: detected capacity change from 0 to 512 [ 69.544093][ T1061] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 69.575759][ T1061] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 69.616062][ T1061] EXT4-fs error (device loop3): ext4_get_journal_inode:5176: inode #5: comm syz.3.207: unexpected bad inode w/o EXT4_IGET_BAD [ 69.661143][ T1061] EXT4-fs (loop3): no journal found [ 69.666428][ T1061] EXT4-fs (loop3): can't get journal size [ 69.691574][ T1061] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 69.751844][ T1062] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.838679][ T30] kauditd_printk_skb: 497 callbacks suppressed [ 69.838693][ T30] audit: type=1400 audit(1773800259.152:1498): avc: denied { read write } for pid=1060 comm="syz.0.208" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 69.948232][ T1062] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 69.987596][ T1062] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 70.013790][ T30] audit: type=1400 audit(1773800259.182:1499): avc: denied { open } for pid=1060 comm="syz.0.208" path="/dev/loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.038518][ T30] audit: type=1400 audit(1773800259.182:1500): avc: denied { ioctl } for pid=1060 comm="syz.0.208" path="/dev/loop0" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.064337][ T30] audit: type=1400 audit(1773800259.232:1501): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.084288][ T1062] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 70.097875][ T30] audit: type=1400 audit(1773800259.282:1502): avc: denied { read } for pid=1069 comm="syz.2.210" dev="nsfs" ino=4026532551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.179137][ T30] audit: type=1400 audit(1773800259.282:1503): avc: denied { open } for pid=1069 comm="syz.2.210" path="net:[4026532551]" dev="nsfs" ino=4026532551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.363444][ T1077] loop2: detected capacity change from 0 to 512 [ 70.663333][ T1077] EXT4-fs error (device loop2): ext4_quota_enable:6429: comm syz.2.212: Bad quota inum: 5, type: 0 [ 70.720345][ T30] audit: type=1400 audit(1773800259.282:1504): avc: denied { create } for pid=1069 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 70.825267][ T1077] EXT4-fs (loop2): Remounting filesystem read-only [ 70.917781][ T1077] EXT4-fs warning (device loop2): ext4_enable_quotas:6477: Failed to enable quota tracking (type=0, err=-117, ino=5). Please run e2fsck to fix. [ 70.997625][ T30] audit: type=1400 audit(1773800259.282:1505): avc: denied { write } for pid=1069 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.053086][ T1077] EXT4-fs (loop2): mount failed [ 71.155622][ T30] audit: type=1400 audit(1773800259.282:1506): avc: denied { module_request } for pid=1069 comm="syz.2.210" kmod="net-pf-16-proto-16-family-nbd" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 71.185702][ T1101] fuse: Bad value for 'fd' [ 71.224010][ T1105] loop0: detected capacity change from 0 to 256 [ 71.236540][ T30] audit: type=1400 audit(1773800259.282:1507): avc: denied { read } for pid=1069 comm="syz.2.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.260732][ T1104] loop1: detected capacity change from 0 to 2048 [ 71.296250][ T1105] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 71.347365][ T1104] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.372385][ T1104] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.399002][ T1113] EXT4-fs (loop2): test_dummy_encryption requires encrypt feature [ 71.513497][ T1118] netlink: 'syz.1.227': attribute type 13 has an invalid length. [ 71.612120][ T1120] lo: Caught tx_queue_len zero misconfig [ 71.763338][ T1128] netlink: 'syz.2.231': attribute type 29 has an invalid length. [ 71.774454][ T1128] netlink: 'syz.2.231': attribute type 29 has an invalid length. [ 72.028975][ T1132] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 72.036897][ T1132] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 72.047336][ T1132] F2FS-fs (loop1): invalid crc value [ 72.136854][ T1132] F2FS-fs (loop1): Found nat_bits in checkpoint [ 72.184444][ T1132] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 72.191748][ T1132] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 73.384592][ T1163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.243'. [ 73.465736][ T1158] attempt to access beyond end of device [ 73.465736][ T1158] loop1: rw=2049, want=81360, limit=40427 [ 73.495016][ T1156] set_capacity_and_notify: 3 callbacks suppressed [ 73.495034][ T1156] loop5: detected capacity change from 0 to 40427 [ 73.511366][ T1158] attempt to access beyond end of device [ 73.511366][ T1158] loop1: rw=2049, want=81920, limit=40427 [ 73.555577][ T1171] loop3: detected capacity change from 0 to 512 [ 73.563186][ T1158] attempt to access beyond end of device [ 73.563186][ T1158] loop1: rw=2049, want=53248, limit=40427 [ 73.577899][ T1170] loop2: detected capacity change from 0 to 256 [ 73.584789][ T1156] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 73.597128][ T1156] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 73.606835][ T1156] F2FS-fs (loop5): invalid crc value [ 73.612824][ T1171] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 73.626573][ T1171] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.630674][ T1156] F2FS-fs (loop5): Found nat_bits in checkpoint [ 73.750001][ T1171] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,mblk_io_submit,nojournal_checksum,delalloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 73.770197][ T1171] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.813253][ T1156] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 73.823418][ T1158] attempt to access beyond end of device [ 73.823418][ T1158] loop1: rw=2049, want=66472, limit=40427 [ 73.841235][ T1156] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 73.898548][ T1158] attempt to access beyond end of device [ 73.898548][ T1158] loop1: rw=2049, want=70264, limit=40427 [ 73.920025][ T1187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 74.018080][ T399] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 74.088068][ T1158] attempt to access beyond end of device [ 74.088068][ T1158] loop1: rw=2049, want=74624, limit=40427 [ 74.277786][ T399] usb 1-1: Using ep0 maxpacket: 16 [ 74.397919][ T399] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 74.508075][ T399] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 74.529825][ T1158] attempt to access beyond end of device [ 74.529825][ T1158] loop1: rw=2049, want=77824, limit=40427 [ 74.544779][ T399] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 74.586576][ T1158] attempt to access beyond end of device [ 74.586576][ T1158] loop1: rw=2049, want=83112, limit=40427 [ 74.605438][ T399] usb 1-1: Manufacturer: syz [ 74.639730][ T399] usb 1-1: config 0 descriptor?? [ 74.647420][ T281] attempt to access beyond end of device [ 74.647420][ T281] loop1: rw=2049, want=40968, limit=40427 [ 74.926157][ T30] kauditd_printk_skb: 350 callbacks suppressed [ 74.926172][ T30] audit: type=1400 audit(1773800264.232:1858): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 74.968522][ T399] usb 1-1: USB disconnect, device number 9 [ 75.002958][ T30] audit: type=1400 audit(1773800264.232:1859): avc: denied { open } for pid=282 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.036706][ T1208] Zero length message leads to an empty skb [ 75.054260][ T30] audit: type=1400 audit(1773800264.232:1860): avc: denied { ioctl } for pid=282 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.080867][ T30] audit: type=1400 audit(1773800264.272:1861): avc: denied { read write } for pid=1203 comm="syz.2.259" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.105523][ T30] audit: type=1400 audit(1773800264.272:1862): avc: denied { read write open } for pid=1203 comm="syz.2.259" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.130528][ T30] audit: type=1400 audit(1773800264.272:1863): avc: denied { ioctl } for pid=1203 comm="syz.2.259" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.174400][ T30] audit: type=1400 audit(1773800264.282:1864): avc: denied { ioctl } for pid=1203 comm="syz.2.259" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.200903][ T30] audit: type=1400 audit(1773800264.282:1865): avc: denied { ioctl } for pid=1203 comm="syz.2.259" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.226439][ T30] audit: type=1400 audit(1773800264.332:1866): avc: denied { read write } for pid=282 comm="syz-executor" name="loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.250917][ T30] audit: type=1400 audit(1773800264.332:1867): avc: denied { open } for pid=282 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 75.295147][ T720] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 75.577811][ T720] usb 3-1: Using ep0 maxpacket: 8 [ 75.737803][ T720] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 75.746567][ T720] usb 3-1: config 0 has no interface number 0 [ 75.752750][ T720] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 75.763563][ T720] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 75.774412][ T720] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 75.788086][ T720] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 75.797314][ T720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.811918][ T720] usb 3-1: config 0 descriptor?? [ 76.133084][ T720] usb 3-1: USB disconnect, device number 4 [ 76.250500][ T1235] overlayfs: statfs failed on './file0' [ 76.477672][ T1238] loop3: detected capacity change from 0 to 2048 [ 76.589285][ T1238] loop3: p1 < > p2 p3 < > p4 < p5 > [ 76.615388][ T1238] loop3: partition table partially beyond EOD, truncated [ 76.622136][ T1242] loop0: detected capacity change from 0 to 256 [ 76.637880][ T1238] loop3: p1 start 65537 is beyond EOD, truncated [ 76.715212][ T1242] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 76.802159][ T679] udevd[679]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 76.816186][ T316] udevd[316]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 76.879912][ T1249] udevd[1249]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 76.889402][ T324] udevd[324]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 76.938986][ T1258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.282'. [ 76.968240][ T1258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.282'. [ 76.987251][ T1263] loop3: detected capacity change from 0 to 512 [ 77.055058][ T1263] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.117067][ T1217] loop5: detected capacity change from 0 to 131072 [ 77.150035][ T1263] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 77.166309][ T1263] EXT4-fs (loop3): 1 truncate cleaned up [ 77.172069][ T1263] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 77.231653][ T1217] F2FS-fs (loop5): Test dummy encryption mode enabled [ 77.253637][ T1217] F2FS-fs (loop5): invalid crc value [ 77.289583][ T1217] F2FS-fs (loop5): Found nat_bits in checkpoint [ 77.526394][ T1217] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 77.808633][ T1214] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 78.527787][ T399] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.989453][ T1321] process 'syz.5.297' launched '/dev/fd/7' with NULL argv: empty string added [ 79.038206][ T399] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.048559][ T399] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 79.057739][ T399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.067515][ T399] usb 4-1: config 0 descriptor?? [ 79.239139][ T1325] loop2: detected capacity change from 0 to 512 [ 79.320842][ T1325] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.305: iget: bad i_size value: 38620345925642 [ 79.352963][ T1325] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.305: couldn't read orphan inode 15 (err -117) [ 79.365101][ T1325] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback. [ 79.479800][ T1336] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.305: bg 0: block 5: invalid block bitmap [ 79.492731][ T1336] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 79.505748][ T1336] EXT4-fs (loop2): This should not happen!! Data will be lost [ 79.505748][ T1336] [ 79.516248][ T1336] EXT4-fs (loop2): Total free blocks count 0 [ 79.522480][ T1336] EXT4-fs (loop2): Free/Dirty block details [ 79.535918][ T1336] EXT4-fs (loop2): free_blocks=0 [ 79.541370][ T1336] EXT4-fs (loop2): dirty_blocks=2984 [ 79.546843][ T1336] EXT4-fs (loop2): Block reservation details [ 79.553089][ T1336] EXT4-fs (loop2): i_reserved_data_blocks=2984 [ 80.063481][ T30] kauditd_printk_skb: 467 callbacks suppressed [ 80.063522][ T30] audit: type=1400 audit(1773800269.372:2335): avc: denied { ioctl } for pid=1298 comm="syz.3.295" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.337461][ T720] usb 4-1: USB disconnect, device number 2 [ 81.356243][ T30] audit: type=1400 audit(1773800270.592:2336): avc: denied { read write } for pid=281 comm="syz-executor" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.453351][ T30] audit: type=1400 audit(1773800270.592:2337): avc: denied { open } for pid=281 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.527859][ T30] audit: type=1400 audit(1773800270.592:2338): avc: denied { ioctl } for pid=281 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=117 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.582612][ T30] audit: type=1400 audit(1773800270.592:2339): avc: denied { read write } for pid=385 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.610492][ T30] audit: type=1400 audit(1773800270.592:2340): avc: denied { open } for pid=385 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.726005][ T30] audit: type=1400 audit(1773800270.592:2341): avc: denied { ioctl } for pid=385 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 81.920286][ T30] audit: type=1400 audit(1773800270.612:2342): avc: denied { read write } for pid=284 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.083951][ T30] audit: type=1400 audit(1773800270.612:2343): avc: denied { read write } for pid=283 comm="syz-executor" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.194270][ T30] audit: type=1400 audit(1773800270.612:2344): avc: denied { open } for pid=283 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 82.456013][ T1391] binder: 1390:1391 ioctl 541b 0 returned -22 [ 82.771900][ T1400] syz.3.332 uses obsolete (PF_INET,SOCK_PACKET) [ 83.349119][ T1427] loop2: detected capacity change from 0 to 7 [ 83.433134][ T1431] netlink: 2088 bytes leftover after parsing attributes in process `syz.5.344'. [ 83.739633][ T1446] device batadv_slave_0 entered promiscuous mode [ 84.049094][ T1463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.358'. [ 84.165668][ T1473] loop0: detected capacity change from 0 to 1024 [ 84.181957][ T1478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.365'. [ 84.238127][ T1473] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 84.456847][ T1473] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,journal_dev=0x0000000000000d5b,data_err=ignore,nodiscard,user_xattr,grpquota,init_itable,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,lazytime,. Quota mode: writeback. [ 85.068471][ T30] kauditd_printk_skb: 385 callbacks suppressed [ 85.068488][ T30] audit: type=1400 audit(1773800274.382:2730): avc: denied { ioctl } for pid=1514 comm="syz.2.380" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.130234][ T30] audit: type=1400 audit(1773800274.382:2731): avc: denied { perfmon } for pid=1515 comm="syz.1.381" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.193060][ T30] audit: type=1400 audit(1773800274.382:2732): avc: denied { bpf } for pid=1515 comm="syz.1.381" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.217273][ T30] audit: type=1400 audit(1773800274.412:2733): avc: denied { read } for pid=1514 comm="syz.2.380" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.275373][ T30] audit: type=1400 audit(1773800274.412:2734): avc: denied { open } for pid=1514 comm="syz.2.380" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.309362][ T30] audit: type=1400 audit(1773800274.412:2735): avc: denied { ioctl } for pid=1514 comm="syz.2.380" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.335700][ T30] audit: type=1400 audit(1773800274.412:2736): avc: denied { set_context_mgr } for pid=1514 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 85.356231][ T30] audit: type=1400 audit(1773800274.422:2737): avc: denied { name_bind } for pid=1518 comm="syz.3.379" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 85.378716][ T30] audit: type=1400 audit(1773800274.422:2738): avc: denied { node_bind } for pid=1518 comm="syz.3.379" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 85.401153][ T30] audit: type=1400 audit(1773800274.452:2739): avc: denied { read write } for pid=284 comm="syz-executor" name="loop2" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 85.582341][ T1530] loop5: detected capacity change from 0 to 1024 [ 85.619461][ T1530] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,barrier,norecovery,,errors=continue. Quota mode: none. [ 86.580421][ T1554] loop0: detected capacity change from 0 to 256 [ 86.590176][ T1556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 86.681383][ T1554] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7b82335c, utbl_chksum : 0xe619d30d) [ 86.871648][ T1561] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 87.818345][ T1585] overlayfs: invalid redirect (./file0) [ 88.413786][ T1542] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 88.677810][ T1542] usb 3-1: Using ep0 maxpacket: 32 [ 88.808044][ T1542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.916713][ T1542] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.940175][ T1542] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 88.949803][ T1542] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.962870][ T1542] usb 3-1: config 0 descriptor?? [ 89.663266][ T1542] hid-generic 0003:0403:6030.0003: unknown main item tag 0x0 [ 89.680084][ T1542] hid-generic 0003:0403:6030.0003: unknown main item tag 0x0 [ 89.768523][ T1542] hid-generic 0003:0403:6030.0003: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 89.919832][ T1542] usb 3-1: USB disconnect, device number 5 [ 90.088622][ T1621] fido_id[1621]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 90.130913][ T30] kauditd_printk_skb: 231 callbacks suppressed [ 90.130928][ T30] audit: type=1400 audit(1773800279.442:2971): avc: denied { read write } for pid=1622 comm="syz.1.415" name="loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.132014][ T1624] loop1: detected capacity change from 0 to 512 [ 90.139381][ T30] audit: type=1400 audit(1773800279.442:2972): avc: denied { open } for pid=1622 comm="syz.1.415" path="/dev/loop1" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.247988][ T30] audit: type=1400 audit(1773800279.442:2973): avc: denied { ioctl } for pid=1622 comm="syz.1.415" path="/dev/loop1" dev="devtmpfs" ino=117 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.328596][ T30] audit: type=1400 audit(1773800279.532:2974): avc: denied { create } for pid=1623 comm="syz.5.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.389049][ T30] audit: type=1400 audit(1773800279.532:2975): avc: denied { ioctl } for pid=1623 comm="syz.5.416" path="socket:[21025]" dev="sockfs" ino=21025 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.454552][ T30] audit: type=1400 audit(1773800279.552:2976): avc: denied { mounton } for pid=1622 comm="syz.1.415" path="/79/file0" dev="tmpfs" ino=441 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 90.566561][ T30] audit: type=1400 audit(1773800279.612:2977): avc: denied { read write } for pid=385 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.578219][ T1635] loop0: detected capacity change from 0 to 512 [ 90.701137][ T30] audit: type=1400 audit(1773800279.612:2978): avc: denied { read write open } for pid=385 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.721579][ T1635] EXT4-fs (loop0): Ignoring removed bh option [ 90.735297][ T30] audit: type=1400 audit(1773800279.612:2979): avc: denied { ioctl } for pid=385 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 90.830320][ T1635] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,quota,quota,bh,dioread_lock,,errors=continue. Quota mode: writeback. [ 90.848701][ T1635] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.907893][ T30] audit: type=1400 audit(1773800279.612:2980): avc: denied { mount } for pid=1622 comm="syz.1.415" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 91.462451][ T1649] loop0: detected capacity change from 0 to 1024 [ 91.600622][ T1649] EXT4-fs (loop0): Ignoring removed nobh option [ 91.647871][ T1649] EXT4-fs (loop0): Ignoring removed bh option [ 91.654308][ T1649] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.711160][ T1649] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,nodelalloc,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 92.944645][ T1646] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 93.042070][ T1640] loop5: detected capacity change from 0 to 131072 [ 93.089714][ T1696] loop3: detected capacity change from 0 to 256 [ 93.104520][ T1640] F2FS-fs (loop5): Test dummy encryption mode enabled [ 93.124816][ T1640] F2FS-fs (loop5): invalid crc value [ 93.136256][ T1696] FAT-fs (loop3): Directory bread(block 64) failed [ 93.170304][ T1696] FAT-fs (loop3): Directory bread(block 65) failed [ 93.188030][ T1640] F2FS-fs (loop5): Found nat_bits in checkpoint [ 93.192460][ T1696] FAT-fs (loop3): Directory bread(block 66) failed [ 93.202038][ T1696] FAT-fs (loop3): Directory bread(block 67) failed [ 93.209590][ T1696] FAT-fs (loop3): Directory bread(block 68) failed [ 93.216273][ T1696] FAT-fs (loop3): Directory bread(block 69) failed [ 93.223977][ T1696] FAT-fs (loop3): Directory bread(block 70) failed [ 93.230804][ T1696] FAT-fs (loop3): Directory bread(block 71) failed [ 93.237454][ T1696] FAT-fs (loop3): Directory bread(block 72) failed [ 93.251558][ T1696] FAT-fs (loop3): Directory bread(block 73) failed [ 93.296490][ T1640] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 93.367688][ T1646] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.385922][ T1646] usb 3-1: config 0 has no interface number 0 [ 93.400805][ T1646] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 93.483384][ T1698] loop0: detected capacity change from 0 to 40427 [ 93.507464][ T1646] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 93.524014][ T1646] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 93.533463][ T1646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.534642][ T1698] F2FS-fs (loop0): fault_injection options not supported [ 93.560921][ T1698] F2FS-fs (loop0): fault_type options not supported [ 93.585764][ T1646] usb 3-1: config 0 descriptor?? [ 93.611187][ T1671] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.713362][ T1698] F2FS-fs (loop0): invalid crc value [ 93.831330][ T1698] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.909960][ T1646] usb 3-1: USB disconnect, device number 6 [ 94.056280][ T1698] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 94.258908][ T283] attempt to access beyond end of device [ 94.258908][ T283] loop0: rw=2049, want=45104, limit=40427 [ 94.419011][ T1721] binder_alloc: 1720: pid 1720 spamming oneway? 2 buffers allocated for a total size of 5120 [ 94.529004][ T1725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=1725 comm=syz.1.452 [ 94.629892][ T1733] loop0: detected capacity change from 0 to 512 [ 94.742718][ T1733] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.778097][ T1733] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.788933][ T1736] loop5: detected capacity change from 0 to 2048 [ 94.830646][ T1733] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #2: comm syz.0.449: corrupted inode contents [ 94.843034][ T1733] EXT4-fs error (device loop0): ext4_dirty_inode:6089: inode #2: comm syz.0.449: mark_inode_dirty error [ 94.857042][ T1733] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #2: comm syz.0.449: corrupted inode contents [ 94.870099][ T1733] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.449: mark_inode_dirty error [ 94.877920][ T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 94.929138][ T1736] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: none. [ 95.148909][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 95.157275][ T30] kauditd_printk_skb: 371 callbacks suppressed [ 95.157304][ T30] audit: type=1400 audit(2000000003.260:3352): avc: denied { read write } for pid=385 comm="syz-executor" name="loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.215152][ T30] audit: type=1400 audit(2000000003.260:3353): avc: denied { open } for pid=385 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.242910][ T30] audit: type=1400 audit(2000000003.260:3354): avc: denied { ioctl } for pid=385 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.298605][ T30] audit: type=1400 audit(2000000003.280:3355): avc: denied { read write } for pid=1759 comm="syz.5.463" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.322404][ T399] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 95.330803][ T30] audit: type=1400 audit(2000000003.280:3356): avc: denied { open } for pid=1759 comm="syz.5.463" path="/dev/raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.348543][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.355248][ T30] audit: type=1400 audit(2000000003.280:3357): avc: denied { ioctl } for pid=1759 comm="syz.5.463" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.380763][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.391233][ T30] audit: type=1400 audit(2000000003.350:3358): avc: denied { ioctl } for pid=1726 comm="syz.2.453" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.426266][ T30] audit: type=1400 audit(2000000003.380:3359): avc: denied { unmount } for pid=1758 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.449722][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 95.458527][ T30] audit: type=1400 audit(2000000003.380:3360): avc: denied { ioctl } for pid=1726 comm="syz.2.453" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.484147][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.494471][ T1646] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 95.496177][ T6] usb 3-1: config 0 descriptor?? [ 95.508088][ T30] audit: type=1400 audit(2000000003.400:3361): avc: denied { ioctl } for pid=1726 comm="syz.2.453" path="/dev/raw-gadget" dev="devtmpfs" ino=254 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 95.550042][ T6] hub 3-1:0.0: USB hub found [ 95.625686][ T1776] loop1: detected capacity change from 0 to 256 [ 95.632111][ T399] usb 1-1: Using ep0 maxpacket: 32 [ 95.664707][ T1776] FAT-fs (loop1): Directory bread(block 64) failed [ 95.671406][ T1776] FAT-fs (loop1): Directory bread(block 65) failed [ 95.678114][ T1776] FAT-fs (loop1): Directory bread(block 66) failed [ 95.684852][ T1776] FAT-fs (loop1): Directory bread(block 67) failed [ 95.691479][ T1776] FAT-fs (loop1): Directory bread(block 68) failed [ 95.698468][ T1776] FAT-fs (loop1): Directory bread(block 69) failed [ 95.705093][ T1776] FAT-fs (loop1): Directory bread(block 70) failed [ 95.712263][ T1776] FAT-fs (loop1): Directory bread(block 71) failed [ 95.718953][ T1776] FAT-fs (loop1): Directory bread(block 72) failed [ 95.725713][ T1776] FAT-fs (loop1): Directory bread(block 73) failed [ 95.747603][ T399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.759936][ T399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.771043][ T399] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 95.780722][ T399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.790032][ T399] usb 1-1: config 0 descriptor?? [ 95.797852][ T6] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 95.877565][ T1646] usb 6-1: config 171 has an invalid interface number: 109 but max is 0 [ 95.886114][ T1646] usb 6-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 95.896697][ T1646] usb 6-1: config 171 has no interface number 0 [ 95.903172][ T1646] usb 6-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 95.907710][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 95.913941][ T1646] usb 6-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 95.921684][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 96.099833][ T1646] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 96.108998][ T1646] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.117311][ T1646] usb 6-1: Product: syz [ 96.122160][ T1646] usb 6-1: Manufacturer: syz [ 96.126793][ T1646] usb 6-1: SerialNumber: syz [ 96.147767][ T6] usb 3-1: reset high-speed USB device number 7 using dummy_hcd [ 96.158226][ T1760] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 96.269014][ T399] hid-generic 0003:0403:6030.0004: unknown main item tag 0x0 [ 96.276763][ T399] hid-generic 0003:0403:6030.0004: unknown main item tag 0x0 [ 96.289415][ T399] hid-generic 0003:0403:6030.0004: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 96.416578][ T399] usb 6-1: USB disconnect, device number 3 [ 96.527020][ T1790] loop1: detected capacity change from 0 to 512 [ 96.558807][ T1790] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.476: invalid block [ 96.579726][ T1790] EXT4-fs (loop1): Remounting filesystem read-only [ 96.587562][ T1790] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.476: invalid indirect mapped block 4294967295 (level 1) [ 96.609133][ T1790] EXT4-fs (loop1): Remounting filesystem read-only [ 96.616008][ T1790] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.476: invalid indirect mapped block 4294967295 (level 1) [ 96.637571][ T1790] EXT4-fs (loop1): Remounting filesystem read-only [ 96.648593][ T1790] EXT4-fs (loop1): 2 truncates cleaned up [ 96.655664][ T1790] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,mb_optimize_scan=0x0000000000000001,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 96.812318][ T1799] syz.1.480 (1799): attempted to duplicate a private mapping with mremap. This is not supported. [ 96.871526][ T6] usb 3-1: USB disconnect, device number 7 [ 97.273698][ T1812] loop5: detected capacity change from 0 to 2048 [ 97.320287][ T1816] ================================================================== [ 97.328421][ T1816] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 97.336634][ T1816] Read of size 8 at addr ffff8881097c8bc0 by task syz.2.485/1816 [ 97.344392][ T1816] [ 97.346883][ T1816] CPU: 1 PID: 1816 Comm: syz.2.485 Not tainted syzkaller #0 [ 97.354211][ T1816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.364316][ T1816] Call Trace: [ 97.367900][ T1816] [ 97.370880][ T1816] __dump_stack+0x21/0x30 [ 97.375260][ T1816] dump_stack_lvl+0x110/0x170 [ 97.379994][ T1816] ? show_regs_print_info+0x20/0x20 [ 97.385257][ T1816] ? load_image+0x3e0/0x3e0 [ 97.389803][ T1816] print_address_description+0x7f/0x2c0 [ 97.395417][ T1816] ? tc_setup_flow_action+0x870/0x3240 [ 97.400913][ T1816] kasan_report+0xf1/0x140 [ 97.405377][ T1816] ? tc_setup_flow_action+0x870/0x3240 [ 97.410872][ T1816] __asan_report_load8_noabort+0x14/0x20 [ 97.416731][ T1816] tc_setup_flow_action+0x870/0x3240 [ 97.422069][ T1816] mall_replace_hw_filter+0x2cc/0x8b0 [ 97.427498][ T1816] ? pcpu_block_update_hint_alloc+0x8c4/0xc50 [ 97.433611][ T1816] ? mall_set_parms+0x520/0x520 [ 97.438614][ T1816] ? tcf_exts_destroy+0xb0/0xb0 [ 97.443507][ T1816] ? pcpu_alloc+0x1170/0x16e0 [ 97.448237][ T1816] ? mall_set_parms+0x1e8/0x520 [ 97.453135][ T1816] mall_change+0x544/0x760 [ 97.457606][ T1816] ? __kasan_check_write+0x14/0x20 [ 97.462803][ T1816] ? mall_get+0xa0/0xa0 [ 97.467113][ T1816] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 97.473065][ T1816] tc_new_tfilter+0x12e5/0x18e0 [ 97.478036][ T1816] ? tcf_gate_entry_destructor+0x20/0x20 [ 97.483692][ T1816] ? security_capable+0x87/0xb0 [ 97.488548][ T1816] ? ns_capable+0x8c/0xf0 [ 97.492320][ T1812] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 97.492924][ T1816] ? netlink_net_capable+0x125/0x160 [ 97.509019][ T1816] ? tcf_gate_entry_destructor+0x20/0x20 [ 97.514695][ T1816] rtnetlink_rcv_msg+0x871/0xce0 [ 97.519773][ T1816] ? rtnetlink_bind+0x80/0x80 [ 97.524502][ T1816] ? avc_has_perm_noaudit+0x391/0x490 [ 97.529921][ T1816] ? memcpy+0x56/0x70 [ 97.533938][ T1816] ? avc_has_perm_noaudit+0x30b/0x490 [ 97.539345][ T1816] ? arch_stack_walk+0xee/0x140 [ 97.544373][ T1816] ? avc_denied+0x1b0/0x1b0 [ 97.548923][ T1816] ? stack_trace_save+0xa6/0xf0 [ 97.553821][ T1816] ? avc_has_perm+0x163/0x250 [ 97.558542][ T1816] ? avc_has_perm_noaudit+0x490/0x490 [ 97.563960][ T1816] ? x64_sys_call+0x4b/0x9a0 [ 97.568794][ T1816] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 97.574223][ T1816] netlink_rcv_skb+0x1f5/0x440 [ 97.579179][ T1816] ? rtnetlink_bind+0x80/0x80 [ 97.583879][ T1816] ? netlink_ack+0xb50/0xb50 [ 97.588489][ T1816] ? __netlink_lookup+0x387/0x3b0 [ 97.593598][ T1816] rtnetlink_rcv+0x1c/0x20 [ 97.598031][ T1816] netlink_unicast+0x876/0xa40 [ 97.602817][ T1816] netlink_sendmsg+0x879/0xb80 [ 97.607598][ T1816] ? netlink_getsockopt+0x530/0x530 [ 97.612897][ T1816] ? do_futex+0xde8/0x2800 [ 97.617335][ T1816] ? security_socket_sendmsg+0x82/0xa0 [ 97.622812][ T1816] ? netlink_getsockopt+0x530/0x530 [ 97.628030][ T1816] ____sys_sendmsg+0x5b7/0x8f0 [ 97.632808][ T1816] ? __sys_sendmsg_sock+0x40/0x40 [ 97.637852][ T1816] ? import_iovec+0x7c/0xb0 [ 97.642377][ T1816] ___sys_sendmsg+0x236/0x2e0 [ 97.647069][ T1816] ? __sys_sendmsg+0x280/0x280 [ 97.651853][ T1816] ? sock_show_fdinfo+0xa0/0xa0 [ 97.656989][ T1816] ? __fdget+0x1a1/0x230 [ 97.661249][ T1816] __x64_sys_sendmsg+0x206/0x2f0 [ 97.666230][ T1816] ? ___sys_sendmsg+0x2e0/0x2e0 [ 97.671364][ T1816] ? __kasan_check_write+0x14/0x20 [ 97.676489][ T1816] ? switch_fpu_return+0x15d/0x2c0 [ 97.681617][ T1816] x64_sys_call+0x4b/0x9a0 [ 97.686057][ T1816] do_syscall_64+0x4c/0xa0 [ 97.690523][ T1816] ? clear_bhb_loop+0x50/0xa0 [ 97.695225][ T1816] ? clear_bhb_loop+0x50/0xa0 [ 97.699927][ T1816] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.705933][ T1816] RIP: 0033:0x7fbe712cb799 [ 97.710455][ T1816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.730339][ T1816] RSP: 002b:00007fbe6fd26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.738775][ T1816] RAX: ffffffffffffffda RBX: 00007fbe71544fa0 RCX: 00007fbe712cb799 [ 97.746763][ T1816] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 97.754763][ T1816] RBP: 00007fbe71361c99 R08: 0000000000000000 R09: 0000000000000000 [ 97.762754][ T1816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.770745][ T1816] R13: 00007fbe71545038 R14: 00007fbe71544fa0 R15: 00007ffe86a281e8 [ 97.778736][ T1816] [ 97.781767][ T1816] [ 97.784100][ T1816] Allocated by task 1816: [ 97.788431][ T1816] __kasan_kmalloc+0xda/0x110 [ 97.793208][ T1816] __kmalloc+0x13d/0x2c0 [ 97.797490][ T1816] tcf_idr_create+0x5f/0x790 [ 97.802099][ T1816] tcf_idr_create_from_flags+0x61/0x70 [ 97.808007][ T1816] tcf_gact_init+0x342/0x570 [ 97.812613][ T1816] tcf_action_init_1+0x3ff/0x6b0 [ 97.817563][ T1816] tcf_action_init+0x233/0x7a0 [ 97.822365][ T1816] tcf_exts_validate+0x24a/0x580 [ 97.827311][ T1816] mall_set_parms+0x48/0x520 [ 97.831918][ T1816] mall_change+0x478/0x760 [ 97.836355][ T1816] tc_new_tfilter+0x12e5/0x18e0 [ 97.841225][ T1816] rtnetlink_rcv_msg+0x871/0xce0 [ 97.846178][ T1816] netlink_rcv_skb+0x1f5/0x440 [ 97.850952][ T1816] rtnetlink_rcv+0x1c/0x20 [ 97.855384][ T1816] netlink_unicast+0x876/0xa40 [ 97.860168][ T1816] netlink_sendmsg+0x879/0xb80 [ 97.864950][ T1816] ____sys_sendmsg+0x5b7/0x8f0 [ 97.869813][ T1816] ___sys_sendmsg+0x236/0x2e0 [ 97.874507][ T1816] __x64_sys_sendmsg+0x206/0x2f0 [ 97.879654][ T1816] x64_sys_call+0x4b/0x9a0 [ 97.884272][ T1816] do_syscall_64+0x4c/0xa0 [ 97.888698][ T1816] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.894705][ T1816] [ 97.897049][ T1816] The buggy address belongs to the object at ffff8881097c8b00 [ 97.897049][ T1816] which belongs to the cache kmalloc-192 of size 192 [ 97.911280][ T1816] The buggy address is located 0 bytes to the right of [ 97.911280][ T1816] 192-byte region [ffff8881097c8b00, ffff8881097c8bc0) [ 97.924998][ T1816] The buggy address belongs to the page: [ 97.930651][ T1816] page:ffffea000425f200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1097c8 [ 97.940909][ T1816] flags: 0x4000000000000200(slab|zone=1) [ 97.946583][ T1816] raw: 4000000000000200 ffffea0004107940 0000000900000007 ffff888100042c00 [ 97.955186][ T1816] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 97.964117][ T1816] page dumped because: kasan: bad access detected [ 97.970538][ T1816] page_owner tracks the page as allocated [ 97.976375][ T1816] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 2691374391, free_ts 0 [ 97.991476][ T1816] post_alloc_hook+0x192/0x1b0 [ 97.996361][ T1816] prep_new_page+0x1c/0x110 [ 98.000972][ T1816] get_page_from_freelist+0x2d3a/0x2dc0 [ 98.006562][ T1816] __alloc_pages+0x1a2/0x460 [ 98.011172][ T1816] new_slab+0xa1/0x4d0 [ 98.015352][ T1816] ___slab_alloc+0x381/0x810 [ 98.019963][ T1816] __slab_alloc+0x49/0x90 [ 98.024323][ T1816] kmem_cache_alloc_trace+0x146/0x270 [ 98.029710][ T1816] blk_stat_alloc_callback+0x61/0x210 [ 98.035360][ T1816] blk_mq_init_allocated_queue+0x92/0x17e0 [ 98.041207][ T1816] blk_mq_init_queue+0x6c/0xd0 [ 98.045994][ T1816] scsi_alloc_sdev+0x66c/0x9c0 [ 98.050865][ T1816] scsi_probe_and_add_lun+0x188/0x3650 [ 98.056344][ T1816] __scsi_scan_target+0x1d2/0xb70 [ 98.061385][ T1816] scsi_scan_host_selected+0x343/0x5f0 [ 98.067076][ T1816] scsi_scan_host+0x39e/0x660 [ 98.071775][ T1816] page_owner free stack trace missing [ 98.077162][ T1816] [ 98.079495][ T1816] Memory state around the buggy address: [ 98.085223][ T1816] ffff8881097c8a80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 98.093308][ T1816] ffff8881097c8b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 98.101401][ T1816] >ffff8881097c8b80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 98.109470][ T1816] ^ [ 98.115631][ T1816] ffff8881097c8c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 98.123700][ T1816] ffff8881097c8c80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 98.131763][ T1816] ================================================================== [ 98.139913][ T1816] Disabling lock debugging due to kernel taint [ 98.164686][ T1646] usb 1-1: USB disconnect, device number 10 [ 98.206967][ T1821] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.483: bg 0: block 234: padding at end of block bitmap is not set [ 98.222339][ T1821] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 492 with error 28 [ 98.236402][ T1821] EXT4-fs (loop5): This should not happen!! Data will be lost [ 98.236402][ T1821] [ 98.246989][ T1821] EXT4-fs (loop5): Total free blocks count 0 [ 98.255242][ T1821] EXT4-fs (loop5): Free/Dirty block details [ 98.261922][ T1821] EXT4-fs (loop5): free_blocks=0 [ 98.266962][ T1821] EXT4-fs (loop5): dirty_blocks=496 [ 98.272953][ T1821] EXT4-fs (loop5): Block reservation details [ 98.279846][ T1821] EXT4-fs (loop5): i_reserved_data_blocks=31