last executing test programs: 36.947927423s ago: executing program 0 (id=350): r0 = syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000080)='./file7\x00', 0x812, &(0x7f0000000600)=ANY=[], 0x1, 0x1520, &(0x7f0000000a40)="$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") truncate(&(0x7f0000000340)='./file0/file0\x00', 0x41a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) chdir(&(0x7f0000000400)='./file0\x00') mkdirat(r0, 0x0, 0x1f0) syz_mount_image$vfat(&(0x7f0000002540), &(0x7f0000002580)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000025c0)) unlink(&(0x7f0000002f40)='./file0\x00') 34.364846128s ago: executing program 0 (id=354): mkdir(&(0x7f0000000000)='./bus\x00', 0x57) unshare(0x2020600) mount$incfs(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000300), 0xc002, 0x0) unshare(0x2020600) chdir(0x0) setxattr$security_capability(&(0x7f0000000500)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 32.635947893s ago: executing program 0 (id=355): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@remote, @in=@empty, 0x0, 0x5, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d3, 0x32}, @in6=@loopback, {0x1, 0x3, 0x9, 0x9, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1, 0xc0000000}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@multicast1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74bc}, 0x0, 0x1a0b0}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 32.615877363s ago: executing program 0 (id=357): mkdirat(0xffffffffffffff9c, &(0x7f0000019640)='./trace\x00', 0x1ff) syz_create_resource$futex(0x0) mount(0x0, &(0x7f0000019680)='./trace\x00', &(0x7f00000196c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000019700)='./trace/trace\x00', 0x0, 0x42) read(r0, &(0x7f0000019740), 0x1000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) preadv(r0, 0x0, 0x0, 0x802e, 0x79654e17) 32.501872156s ago: executing program 0 (id=359): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r4, 0xc) 32.35115894s ago: executing program 0 (id=362): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffe6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x80102, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) preadv2(r1, 0x0, 0x0, 0xfffffffa, 0x6, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000040)) 32.285892711s ago: executing program 32 (id=362): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffe6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x80102, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) preadv2(r1, 0x0, 0x0, 0xfffffffa, 0x6, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000040)) 24.148170037s ago: executing program 2 (id=380): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0xa04080, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x2, 0x553e, &(0x7f000000ab40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f000000ab00)='./file1\x00', 0x101042, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = open(&(0x7f0000000d80)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x9000) fallocate(r1, 0x0, 0x0, 0x8800000) 23.567654652s ago: executing program 2 (id=384): prlimit64(0x0, 0xe, &(0x7f0000000b80)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000fc0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000001000)) timer_settime(0x0, 0x1, &(0x7f0000001040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000300)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000440)={0x1, 0x0, 0x1, 0xffffffffffffffff}) 21.445122006s ago: executing program 5 (id=372): mkdirat(0xffffffffffffff9c, &(0x7f0000019640)='./trace\x00', 0x1ff) syz_create_resource$futex(0x0) mount(0x0, &(0x7f0000019680)='./trace\x00', &(0x7f00000196c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000019700)='./trace/trace\x00', 0x0, 0x42) read(r0, &(0x7f0000019740), 0x1000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) preadv(r0, 0x0, 0x0, 0x802e, 0x79654e17) 21.437842076s ago: executing program 5 (id=391): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x80080, &(0x7f0000000280)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x0, 0x4ab, &(0x7f0000000540)="$eJzs3c1rXFUbAPBnZpo0SfO+/XhfpK1gCxXqB83kA2miLnSlLgpiwY1Cjck01kwyITOpTegi1V0XLkRREBfu/Qvc2JVFENe6FxdS0RpBBWFk7syk+Zp20HQGcn8/mM6599ze55wMz+HOuffODSC1Ttb+yUQMRsQ3EXGwvrh5g5P1t7XbV6dqr0xUq+d/ziTb1Zabmzb/34GIWI2Ivoh46bmI1zPb45aXV2Yni8XCYmM5X5lbyJeXV85cmpucKcwU5kfGz05MjA+PjU7sWl+vv/vm9XOfv9D72e/v3Lr53pdf1Jo12Kjb2I/dVO96TxzesG5fRDx9P4J1Qa7Rn/5uN4R/pPb5/S8iTiX5fzByyacJpEG1Wq3+Vd3fqnq1CuxZ2eQYOJMdioh6OZsdGqofw/8/BrLFUrny+MXS0vx0/Vj5UPRkL14qFoYb3xUORU+mtjySlO8sj25ZHotIjoHfz/Uny0NTpeJ0Z4c6YIsDW/L/t1w9/+8h25HGAfefr/yQXvIf0kv+Q3rJf0gv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5DKr147lztVW3e/z59eXlptnT5zHShPDs0tzQ1NFVaXBiaKZVmknt25u61v2KptDDyRCxdyVcK5Uq+vLxyYa60NF+5kNzXf6HQ05FeAe04fOLGd5mIWH2yP3nV9Dbq5CrsbdVqJrp9DzLQHbluD0BA15j6g/TyHR/Y4Sd6N+lrVbGw+20BOsMPeUF6nT7m/B+klfl/SC/z/5BejvEB8/+QPub/Ib0GWzz/6z8bnt01HBH/jYhvcz37m8/6AvaC7I+ZxvH/6YMPD26t7c38kZwi6I2Itz4+/+GVyUplcaS2/pf19ZWPGutHu9F+oF3NPG3mMQCQXmu3r041X52M+9Oz9YsQtsff15ib7EvOUQ6sZTZdq5DZpWsXVq9FxNGd4mcazzuvn/kYWMtti3+k8Z6p7yJp777kuemdiX9sQ/yHNsQ//q//KpAON2rjz/BO+ZdNcjrW82/z+DO4S9dOtB7/suvjX67F+Hdi++52HBLf+OTtH1rGvxZxfMf4zXh9Sayt8WttO91mH2+9+vIDreqqn9b3s1P8plopX5lbyJeXV84kvyM3U5gfGT87MTE+PDY6kU/mqPPNmertnjr69c279X+gRfxW/X+m0aZH2+z/nw9+9crJu8R/5NTOn/+RFvFr+iPisTbj/zr6/Wut6mrxp1v0P3uX+LV1Y23GL3/w/P42NwUAOqC8vDI7WSwWFhUUFBTWC90emYD77U7Sd7slAAAAAAAAAAAAQLs6cTlxt/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAX/B0AAP//KpzWoQ==") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000f80)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000fc0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001000)=0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000180)=ANY=[], 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001040)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r2, &(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001140), 0x318, 0x0) recvmmsg(r2, &(0x7f0000001180), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000011c0)=0x2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x2, 0x1}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r6, 0x111, 0x3, 0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001200), 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r7, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) recvfrom(r8, 0x0, 0x0, 0x40, 0x0, 0x0) 20.828964052s ago: executing program 5 (id=395): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x20, "", [{{0x9, 0x4, 0x0, 0x18, 0x2, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1001, 0xb, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7d, 0x5, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map, 0x13, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x6}, @global=@item_012={0x0, 0x1, 0x1}, @main=@item_012={0x2, 0x0, 0xc, "ae68"}, @global=@item_012={0x0, 0x1, 0x2}]}}, 0x0}, 0x0) 20.554550059s ago: executing program 33 (id=395): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x20, "", [{{0x9, 0x4, 0x0, 0x18, 0x2, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1001, 0xb, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7d, 0x5, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map, 0x13, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x6, {[@global=@item_012={0x0, 0x1, 0x6}, @global=@item_012={0x0, 0x1, 0x1}, @main=@item_012={0x2, 0x0, 0xc, "ae68"}, @global=@item_012={0x0, 0x1, 0x2}]}}, 0x0}, 0x0) 20.551969209s ago: executing program 2 (id=397): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f00000000c0)={0x1f, @none}, 0x8) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000180)={0x1f, @none}, 0x8) listen(r4, 0x401) listen(r5, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) close_range(r3, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda5) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@security={'security\x00', 0x64, 0x4, 0x2d0, 0x100000c, 0x130, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3b}, 0x7f7fffff, 0xff, 'pim6reg\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x7e}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x98, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "be45"}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x8, 0x4, 0x1, 0x0, "edeefc7a46ef3cea9319261fc16bf346b02017e99505b0c7009c97ca57e52d700c2a13d2f6801ec1f9e235d607748a457ab960a3c75db8c7a293fee516de6c61"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 18.868459811s ago: executing program 2 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000019640)='./trace\x00', 0x1ff) syz_create_resource$futex(0x0) mount(0x0, &(0x7f0000019680)='./trace\x00', &(0x7f00000196c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000019700)='./trace/trace\x00', 0x0, 0x42) read(r0, &(0x7f0000019740), 0x1000) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) preadv(r0, &(0x7f0000019780), 0x0, 0x802e, 0x79654e17) 18.805788723s ago: executing program 2 (id=403): open(&(0x7f0000000000)='./file2\x00', 0x800, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x10e, &(0x7f0000000140), 0x3, 0x470, &(0x7f0000000180)="$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") openat(0xffffffffffffff9c, &(0x7f0000000600)='./file2\x00', 0x80200, 0x6ab858183a7ef6ba) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x129240, 0x84) 18.54530001s ago: executing program 2 (id=406): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x80080, &(0x7f0000000280)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x0, 0x4ab, &(0x7f0000000540)="$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") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000f80)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000fc0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001000)=0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000180)=ANY=[], 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001040)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r2, &(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001140), 0x318, 0x0) recvmmsg(r2, &(0x7f0000001180), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000011c0)=0x2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x2, 0x1}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r6, 0x111, 0x3, 0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001200), 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r7, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) recvfrom(r8, 0x0, 0x0, 0x40, 0x0, 0x0) 17.139548406s ago: executing program 34 (id=406): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x80080, &(0x7f0000000280)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x0, 0x4ab, &(0x7f0000000540)="$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") socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000f80)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000fc0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000001000)=0x2) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000180)=ANY=[], 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001040)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r2, &(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001140), 0x318, 0x0) recvmmsg(r2, &(0x7f0000001180), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000011c0)=0x2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x2, 0x1}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r6, 0x111, 0x3, 0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001200), 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r7, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) recvfrom(r8, 0x0, 0x0, 0x40, 0x0, 0x0) 9.513887339s ago: executing program 3 (id=426): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='huge=always']) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 9.322852134s ago: executing program 1 (id=428): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) getdents64(r0, &(0x7f00000002c0)=""/49, 0x31) 9.310956274s ago: executing program 6 (id=429): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a80), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000ac0), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000b40)='./file1\x00', 0x2200002, &(0x7f0000000b80), 0x1, 0x585, &(0x7f0000000bc0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001180)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000001200)='./bus\x00', &(0x7f0000001240), 0x8, &(0x7f0000000880)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './proc'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@uuid_on}]}) chdir(&(0x7f00000012c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='.\x00', 0x0, 0x0) flistxattr(r3, &(0x7f0000001340)=""/214, 0xd6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) shutdown(r4, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000000c0), 0x1, 0x250, &(0x7f0000000100)="$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") syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000640)) creat(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdir(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 9.193695707s ago: executing program 3 (id=430): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) fsopen(0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) readv(r0, &(0x7f0000000780)=[{&(0x7f00000007c0)=""/155, 0x9b}], 0x1) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 7.4804757s ago: executing program 1 (id=432): r0 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x90001) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file1\x00', 0x42402, 0x0) fallocate(r1, 0x8, 0x0, 0x8000) 7.47462991s ago: executing program 6 (id=433): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, 0x0, 0x0) 7.355388034s ago: executing program 1 (id=434): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000880)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r1, &(0x7f00000009c0), 0x4000087, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0xfff3}}}, 0x24}}, 0x800) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000001900)='\x00', 0x89901) fchdir(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f0000000180)={0x6, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x5}, @generic={0x8}]}, 0x18) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000007c0)=0x1) close(r3) 7.147274869s ago: executing program 6 (id=436): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x5) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xe, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000001680)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000016c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001700)=0x40) r7 = socket$nl_generic(0x11, 0x3, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, 0x0, &(0x7f00000001c0)) sendmsg(r7, 0x0, 0x0) 3.073662892s ago: executing program 4 (id=437): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt_trace\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/176, 0xb0}], 0x1) 3.061858422s ago: executing program 1 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f00000000c0)={0x1f, @none}, 0x8) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000180)={0x1f, @none}, 0x8) listen(r4, 0x401) listen(r5, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) close_range(r3, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@security={'security\x00', 0x64, 0x4, 0x2d0, 0x100000c, 0x130, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3b}, 0x7f7fffff, 0xff, 'pim6reg\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x7e}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 'veth1_to_bond\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x98, 0x108, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "be45"}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x8, 0x4, 0x1, 0x0, "edeefc7a46ef3cea9319261fc16bf346b02017e99505b0c7009c97ca57e52d700c2a13d2f6801ec1f9e235d607748a457ab960a3c75db8c7a293fee516de6c61"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) 3.011179184s ago: executing program 3 (id=439): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='huge=always']) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 2.655178413s ago: executing program 3 (id=440): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f00000000c0)={0x1f, @none}, 0x8) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000180)={0x1f, @none}, 0x8) listen(r3, 0x401) 2.534632996s ago: executing program 6 (id=441): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = gettid() timer_create(0x0, &(0x7f00000012c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000001300)) mlock2(&(0x7f000043c000/0x3000)=nil, 0x3000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x38f9, 0x0) fcntl$setstatus(r1, 0x4, 0x42c00) 2.426189999s ago: executing program 4 (id=442): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) getdents64(r0, &(0x7f00000002c0)=""/49, 0x31) 2.295251532s ago: executing program 1 (id=443): r0 = syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000800)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0x1, 0x269, &(0x7f0000000840)="$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") setpriority(0x0, 0x0, 0x200002a14b56) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@bridge_getneigh={0x28, 0x1e, 0x101, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x18, 0x414}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x54800}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x80, 0x7, 0x8000, 0xffffffff, {{0x19, 0x4, 0x2, 0x3b, 0x64, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x18, [@broadcast, @broadcast]}, @cipso={0x86, 0x3e, 0x3, [{0x1, 0x3, '\v'}, {0x0, 0x6, "d1e43b5b"}, {0x6, 0xd, "85677c46e803913a773c69"}, {0x2, 0x9, "8383ac97ac2e77"}, {0x7, 0xa, "bab3940ff9f89287"}, {0x0, 0xf, "ba9b3e04e4be6f850dd9e1f8df"}]}]}}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x0, &(0x7f0000000400), 0x4, 0xbaf, &(0x7f0000000f80)="$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") mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x7) r7 = openat(0xffffffffffffff9c, &(0x7f0000001b40)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='./bus\x00', 0x1c1002, 0x12) write(r8, &(0x7f0000001bc0)="c7", 0x1) sendfile(r8, r7, 0x0, 0x7ffff000) 1.949343861s ago: executing program 4 (id=444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[], 0x0) 1.949126741s ago: executing program 7 (id=408): r0 = syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000800)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0x1, 0x269, &(0x7f0000000840)="$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") setpriority(0x0, 0x0, 0x200002a14b56) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@bridge_getneigh={0x28, 0x1e, 0x101, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x18, 0x414}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x54800}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x80, 0x7, 0x8000, 0xffffffff, {{0x19, 0x4, 0x2, 0x3b, 0x64, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0x18, [@broadcast, @broadcast]}, @cipso={0x86, 0x3e, 0x3, [{0x1, 0x3, '\v'}, {0x0, 0x6, "d1e43b5b"}, {0x6, 0xd, "85677c46e803913a773c69"}, {0x2, 0x9, "8383ac97ac2e77"}, {0x7, 0xa, "bab3940ff9f89287"}, {0x0, 0xf, "ba9b3e04e4be6f850dd9e1f8df"}]}]}}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup3(r5, r4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x0, &(0x7f0000000400), 0x4, 0xbaf, &(0x7f0000000f80)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x7) r7 = openat(0xffffffffffffff9c, &(0x7f0000001b80)='./bus\x00', 0x1c1002, 0x12) write(r7, &(0x7f0000001bc0)="c7", 0x1) sendfile(r7, 0xffffffffffffffff, 0x0, 0x3ffff) 1.929932731s ago: executing program 4 (id=445): mkdir(&(0x7f0000000000)='./bus\x00', 0x57) unshare(0x2020600) mount$incfs(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./bus\x00', &(0x7f0000000300), 0xc002, 0x0) unshare(0x2020600) chdir(&(0x7f0000000340)='./bus\x00') setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 1.879845912s ago: executing program 4 (id=446): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000400), 0x4000087, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0xfffff, 0xfffffffffffffffc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='mnt\x00', 0x4, &(0x7f0000000240), 0x0, 0x236, &(0x7f00000006c0)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='mnt/encrypted_dir\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000940)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000980)=@v2={0x2, @aes128, 0x9a72c52451d98354, '\x00', @c}) 1.769392265s ago: executing program 7 (id=447): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, 0x0, 0x0) 1.769022605s ago: executing program 7 (id=448): pivot_root(0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000009c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==") getuid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) socket$inet6(0xa, 0x80002, 0x0) r1 = getpid() add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) get_robust_list(r1, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000008c0), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000900)=0x2) recvmmsg(r2, &(0x7f0000000940), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f000000b7c0)={0x0, 0x500, &(0x7f000000b800)={&(0x7f000000b840)={0x28, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) 1.632147649s ago: executing program 6 (id=449): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) unshare(0x64000600) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = dup(r1) r3 = open(0x0, 0x109cc2, 0x18d) ftruncate(r3, 0x200004) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x9, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000009, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x2, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xf0b, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x7f, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x5], [0x10000007, 0x9, 0x80000130, 0x8, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xd, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0xb, 0x0, 0x5, 0x42f, 0x0, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x3, 0x4, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x4000003, 0x3, 0x9, 0x400, 0x3, 0x3, 0xbc45, 0x48c93694, 0xa74, 0x9], [0x7, 0x8, 0x0, 0x5, 0xfbfffffc, 0x100, 0x9, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x200000, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x7, 0x2950bfb0, 0x2, 0x4, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x6d, 0x7, 0x0, 0x2, 0x2, 0x120000, 0x6, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x1, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1f, 0x0, 0x4, 0x929, 0xb1e, 0x2140738a, 0x1, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001080)=0x8000000000000001) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) 1.5809047s ago: executing program 3 (id=450): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000180)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 1.505355232s ago: executing program 3 (id=451): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x5) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xe, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000200), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r4, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000001680)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000016c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001700)=0x40) r7 = socket$nl_generic(0x11, 0x3, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, 0x0, &(0x7f00000001c0)) sendmsg(r7, 0x0, 0x0) 1.153149001s ago: executing program 1 (id=452): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./mnt_trace\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000380)=""/176, 0xb0}], 0x1) 437.2µs ago: executing program 4 (id=453): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@test_dummy_encryption}, {@init_itable}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) getdents64(r0, &(0x7f00000002c0)=""/49, 0x31) 0s ago: executing program 6 (id=454): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. [ 20.036240][ T28] audit: type=1400 audit(1792621168.919:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.037400][ T279] cgroup: Unknown subsys name 'net' [ 20.058915][ T28] audit: type=1400 audit(1792621168.919:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.086164][ T28] audit: type=1400 audit(1792621168.949:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.086308][ T279] cgroup: Unknown subsys name 'devices' [ 20.229874][ T279] cgroup: Unknown subsys name 'hugetlb' [ 20.235498][ T279] cgroup: Unknown subsys name 'rlimit' [ 20.367334][ T28] audit: type=1400 audit(1792621169.249:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.390569][ T28] audit: type=1400 audit(1792621169.249:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.398938][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.415498][ T28] audit: type=1400 audit(1792621169.249:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.446962][ T28] audit: type=1400 audit(1792621169.319:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.472504][ T28] audit: type=1400 audit(1792621169.319:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.499873][ T28] audit: type=1400 audit(1792621169.389:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.525399][ T28] audit: type=1400 audit(1792621169.389:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.525461][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.399438][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.406493][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.414018][ T287] device bridge_slave_0 entered promiscuous mode [ 21.423849][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.430981][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.438456][ T287] device bridge_slave_1 entered promiscuous mode [ 21.444957][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.452111][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.459536][ T288] device bridge_slave_0 entered promiscuous mode [ 21.477975][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.485064][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.492501][ T288] device bridge_slave_1 entered promiscuous mode [ 21.520496][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.527981][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.535511][ T289] device bridge_slave_0 entered promiscuous mode [ 21.545172][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.552326][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.559786][ T289] device bridge_slave_1 entered promiscuous mode [ 21.569242][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.576289][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.583755][ T291] device bridge_slave_0 entered promiscuous mode [ 21.594233][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.601352][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.608796][ T291] device bridge_slave_1 entered promiscuous mode [ 21.674581][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.682053][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.689516][ T290] device bridge_slave_0 entered promiscuous mode [ 21.709024][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.716100][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.723811][ T290] device bridge_slave_1 entered promiscuous mode [ 21.871061][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.878113][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.885426][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.892464][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.914908][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.921990][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.929270][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.936305][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.947658][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.954726][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.962007][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.969041][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.979099][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.986150][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.993465][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.000503][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.019302][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.026351][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.033638][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.040675][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.069802][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.077093][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.084626][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.092393][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.099881][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.107007][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.114304][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.121507][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.128776][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.135904][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.143687][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.151104][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.162532][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.183384][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.191698][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.198834][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.206332][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.215257][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.222305][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.231171][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.251997][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.259771][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.267370][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.275752][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.282820][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.290695][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.298976][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.305986][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.313339][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.321512][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.328541][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.335877][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.343382][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.351573][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.358646][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.398212][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.406610][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.416725][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.423811][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.431688][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.440035][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.448131][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.455200][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.462578][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.470871][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.478966][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.486947][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.494924][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.503028][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.511128][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.519184][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.527068][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.535599][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.543943][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.551016][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.558616][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.566883][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.575103][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.582137][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.589602][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.597655][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.605727][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.613756][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.621964][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.630251][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.638265][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.646742][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.665309][ T291] device veth0_vlan entered promiscuous mode [ 22.678559][ T288] device veth0_vlan entered promiscuous mode [ 22.685894][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.694470][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.704111][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.712223][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.720493][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.728964][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.737175][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.745438][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.753524][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.761557][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.769672][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.777557][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.785708][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.794230][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.802985][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.810788][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.818424][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.825794][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.837334][ T287] device veth0_vlan entered promiscuous mode [ 22.849691][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.857697][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.867892][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.875724][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.885207][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.897843][ T289] device veth0_vlan entered promiscuous mode [ 22.909915][ T288] device veth1_macvtap entered promiscuous mode [ 22.918588][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.926609][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.934132][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.941654][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.950122][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.958497][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.966788][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.976077][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.984628][ T291] device veth1_macvtap entered promiscuous mode [ 22.997234][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.010273][ T290] device veth0_vlan entered promiscuous mode [ 23.021097][ T289] device veth1_macvtap entered promiscuous mode [ 23.029610][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.037902][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.046206][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.054372][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.062532][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.071039][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.079580][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.087048][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.099459][ T287] device veth1_macvtap entered promiscuous mode [ 23.108683][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.117050][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.125737][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.134241][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.151458][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 23.160300][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.169495][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.177951][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.187401][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.204210][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.212657][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.234136][ T290] device veth1_macvtap entered promiscuous mode [ 23.250435][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.258944][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.267428][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.275963][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.284499][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.293326][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.301950][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.336451][ T316] loop1: detected capacity change from 0 to 512 [ 23.357546][ T322] loop2: detected capacity change from 0 to 256 [ 23.366064][ T322] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 23.379543][ T321] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 23.398804][ T322] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 23.423138][ T322] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 23.762168][ T334] loop2: detected capacity change from 0 to 2048 [ 23.780680][ T334] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 23.799003][ T339] loop0: detected capacity change from 0 to 2048 [ 23.829931][ T339] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 25.570247][ T344] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 25.585111][ T344] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 25.597535][ T344] EXT4-fs (loop0): This should not happen!! Data will be lost [ 25.597535][ T344] [ 25.607243][ T344] EXT4-fs (loop0): Total free blocks count 0 [ 25.613290][ T344] EXT4-fs (loop0): Free/Dirty block details [ 25.619260][ T344] EXT4-fs (loop0): free_blocks=2415919504 [ 25.625046][ T344] EXT4-fs (loop0): dirty_blocks=32 [ 25.630508][ T344] EXT4-fs (loop0): Block reservation details [ 25.636529][ T344] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 25.678528][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 25.678937][ T28] audit: type=1400 audit(1792621174.449:124): avc: denied { bpf } for pid=333 comm="syz.2.8" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.138695][ T290] EXT4-fs (loop2): unmounting filesystem. [ 26.208119][ T28] audit: type=1400 audit(1792621174.449:125): avc: denied { create } for pid=333 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 26.227229][ T28] audit: type=1400 audit(1792621174.449:126): avc: denied { write } for pid=333 comm="syz.2.8" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.248566][ T28] audit: type=1400 audit(1792621174.449:127): avc: denied { add_name } for pid=333 comm="syz.2.8" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.269680][ T28] audit: type=1400 audit(1792621174.449:128): avc: denied { create } for pid=333 comm="syz.2.8" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.367970][ T28] audit: type=1400 audit(1792621174.459:129): avc: denied { read write } for pid=338 comm="syz.0.9" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.515106][ T28] audit: type=1400 audit(1792621174.459:130): avc: denied { open } for pid=338 comm="syz.0.9" path="/2/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.550737][ T28] audit: type=1400 audit(1792621174.529:131): avc: denied { ioctl } for pid=338 comm="syz.0.9" path="/2/file1/file1" dev="loop0" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 26.558824][ T8] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 26.576940][ T28] audit: type=1400 audit(1792621175.039:132): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 26.612100][ T28] audit: type=1400 audit(1792621175.079:133): avc: denied { map_create } for pid=347 comm="syz.3.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.651853][ T365] loop1: detected capacity change from 0 to 256 [ 26.681325][ T365] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 26.693450][ T365] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 27.087399][ T378] loop0: detected capacity change from 0 to 2048 [ 27.252066][ T378] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 27.304786][ T365] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 29.899761][ T337] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 29.915683][ T388] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 29.928093][ T388] EXT4-fs (loop0): This should not happen!! Data will be lost [ 29.928093][ T388] [ 29.937863][ T388] EXT4-fs (loop0): Total free blocks count 0 [ 29.943946][ T388] EXT4-fs (loop0): Free/Dirty block details [ 29.949909][ T388] EXT4-fs (loop0): free_blocks=2415919504 [ 29.955649][ T388] EXT4-fs (loop0): dirty_blocks=32 [ 29.960842][ T388] EXT4-fs (loop0): Block reservation details [ 29.966827][ T388] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 29.980220][ T392] loop3: detected capacity change from 0 to 512 [ 29.986620][ T395] loop2: detected capacity change from 0 to 2048 [ 30.019929][ T395] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 30.045095][ T406] loop1: detected capacity change from 0 to 256 [ 30.062003][ T406] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 30.090229][ T321] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 30.103510][ T406] syz.1.30: attempt to access beyond end of device [ 30.103510][ T406] loop1: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 30.122969][ T355] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 30.127146][ T406] syz.1.30: attempt to access beyond end of device [ 30.127146][ T406] loop1: rw=524288, sector=696, nr_sectors = 256 limit=256 [ 30.150097][ T406] syz.1.30: attempt to access beyond end of device [ 30.150097][ T406] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 30.165470][ T406] syz.1.30: attempt to access beyond end of device [ 30.165470][ T406] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 30.217502][ T412] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 30.232233][ T412] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 30.244597][ T412] EXT4-fs (loop2): This should not happen!! Data will be lost [ 30.244597][ T412] [ 30.254256][ T412] EXT4-fs (loop2): Total free blocks count 0 [ 30.260258][ T412] EXT4-fs (loop2): Free/Dirty block details [ 30.266150][ T412] EXT4-fs (loop2): free_blocks=2415919504 [ 30.272489][ T412] EXT4-fs (loop2): dirty_blocks=32 [ 30.277663][ T412] EXT4-fs (loop2): Block reservation details [ 30.283719][ T412] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 30.522643][ T406] syz.1.30: attempt to access beyond end of device [ 30.522643][ T406] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 31.481309][ T355] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 31.493697][ T406] syz.1.30: attempt to access beyond end of device [ 31.493697][ T406] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 31.513462][ T406] syz.1.30: attempt to access beyond end of device [ 31.513462][ T406] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 31.526884][ T406] syz.1.30: attempt to access beyond end of device [ 31.526884][ T406] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 31.540197][ T406] syz.1.30: attempt to access beyond end of device [ 31.540197][ T406] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 31.555042][ T417] loop3: detected capacity change from 0 to 256 [ 31.578173][ T417] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 31.580929][ T419] loop4: detected capacity change from 0 to 4096 [ 31.589170][ T406] syz.1.30: attempt to access beyond end of device [ 31.589170][ T406] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 31.618291][ T417] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 31.628481][ T417] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 31.641144][ T419] EXT4-fs (loop4): Test dummy encryption mode enabled [ 31.855411][ T419] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.093412][ T419] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 32.193603][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 32.193624][ T28] audit: type=1400 audit(1792621181.079:152): avc: denied { mounton } for pid=418 comm="syz.4.35" path=2F342F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6530 dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.273396][ T436] loop0: detected capacity change from 0 to 4096 [ 32.377636][ T443] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 32.485989][ T436] EXT4-fs (loop0): Test dummy encryption mode enabled [ 32.586678][ T436] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 32.591005][ T28] audit: type=1400 audit(1792621181.169:153): avc: denied { write } for pid=418 comm="syz.4.35" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.621358][ T28] audit: type=1400 audit(1792621181.169:154): avc: denied { add_name } for pid=418 comm="syz.4.35" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.633859][ T443] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 32.647784][ T28] audit: type=1400 audit(1792621181.179:155): avc: denied { setattr } for pid=418 comm="syz.4.35" name="work" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.688989][ T28] audit: type=1400 audit(1792621181.399:156): avc: denied { read write } for pid=418 comm="syz.4.35" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 32.712363][ T28] audit: type=1400 audit(1792621181.399:157): avc: denied { open } for pid=418 comm="syz.4.35" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 32.731742][ T452] loop2: detected capacity change from 0 to 2048 [ 32.749419][ T28] audit: type=1400 audit(1792621181.469:158): avc: denied { write open } for pid=418 comm="syz.4.35" path=2F202864656C6574656429 dev="loop4" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.774998][ T28] audit: type=1400 audit(1792621181.469:159): avc: denied { remove_name } for pid=418 comm="syz.4.35" name="#1" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.798996][ T453] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 32.810953][ T28] audit: type=1400 audit(1792621181.469:160): avc: denied { rename } for pid=418 comm="syz.4.35" name="#1" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.838942][ T28] audit: type=1400 audit(1792621181.469:161): avc: denied { unlink } for pid=418 comm="syz.4.35" name="#1" dev="loop4" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 32.841794][ T452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 32.875140][ T291] EXT4-fs (loop4): unmounting filesystem. [ 32.936522][ T436] syz.0.38 (436) used greatest stack depth: 21704 bytes left [ 32.966926][ T289] EXT4-fs (loop0): unmounting filesystem. [ 36.907194][ T402] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 37.315693][ T290] EXT4-fs (loop2): unmounting filesystem. [ 37.324086][ T478] loop4: detected capacity change from 0 to 256 [ 37.374785][ T482] loop2: detected capacity change from 0 to 2048 [ 37.402078][ T478] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 37.419625][ T482] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 37.450483][ T478] bio_check_eod: 767 callbacks suppressed [ 37.450500][ T478] syz.4.49: attempt to access beyond end of device [ 37.450500][ T478] loop4: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 37.587791][ T493] loop0: detected capacity change from 0 to 1024 [ 38.405546][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 38.405565][ T28] audit: type=1400 audit(1792621186.419:173): avc: denied { read write } for pid=485 comm="syz.1.51" name="inject" dev="tracefs" ino=7927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 38.524304][ T493] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 38.731705][ T501] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 38.746469][ T501] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 38.758825][ C1] sched: RT throttling activated [ 38.766669][ T478] syz.4.49: attempt to access beyond end of device [ 38.766669][ T478] loop4: rw=524288, sector=696, nr_sectors = 256 limit=256 [ 38.784089][ T478] syz.4.49: attempt to access beyond end of device [ 38.784089][ T478] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 38.798257][ T501] EXT4-fs (loop2): This should not happen!! Data will be lost [ 38.798257][ T501] [ 38.807997][ T501] EXT4-fs (loop2): Total free blocks count 0 [ 38.814115][ T501] EXT4-fs (loop2): Free/Dirty block details [ 38.820073][ T501] EXT4-fs (loop2): free_blocks=2415919504 [ 38.825836][ T501] EXT4-fs (loop2): dirty_blocks=32 [ 38.831018][ T501] EXT4-fs (loop2): Block reservation details [ 38.837067][ T501] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 39.566973][ T28] audit: type=1400 audit(1792621186.419:174): avc: denied { open } for pid=485 comm="syz.1.51" path="/11/trace/events/dwc3/dwc3_ctrl_req/inject" dev="tracefs" ino=7927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 39.630073][ T478] syz.4.49: attempt to access beyond end of device [ 39.630073][ T478] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 39.712862][ T478] syz.4.49: attempt to access beyond end of device [ 39.712862][ T478] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 39.819735][ T28] audit: type=1400 audit(1792621187.399:175): avc: denied { read } for pid=495 comm="syz.1.53" dev="nsfs" ino=4026532293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.897224][ T478] syz.4.49: attempt to access beyond end of device [ 39.897224][ T478] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 39.962391][ T28] audit: type=1400 audit(1792621187.399:176): avc: denied { open } for pid=495 comm="syz.1.53" path="net:[4026532293]" dev="nsfs" ino=4026532293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 40.130168][ T28] audit: type=1400 audit(1792621187.399:177): avc: denied { read write } for pid=495 comm="syz.1.53" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 40.347914][ T28] audit: type=1400 audit(1792621187.399:178): avc: denied { open } for pid=495 comm="syz.1.53" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 40.393351][ T510] loop3: detected capacity change from 0 to 4096 [ 40.411192][ T289] EXT4-fs (loop0): unmounting filesystem. [ 40.440691][ T43] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 40.442539][ T28] audit: type=1400 audit(1792621187.429:179): avc: denied { read } for pid=487 comm="syz.0.50" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.475658][ T28] audit: type=1400 audit(1792621187.429:180): avc: denied { open } for pid=487 comm="syz.0.50" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.480361][ T510] EXT4-fs (loop3): Test dummy encryption mode enabled [ 40.498657][ T28] audit: type=1400 audit(1792621187.429:181): avc: denied { create } for pid=487 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.524854][ T28] audit: type=1400 audit(1792621189.289:182): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.535437][ T518] loop1: detected capacity change from 0 to 2048 [ 40.551906][ T510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 40.583234][ T518] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 40.905842][ T528] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 40.921165][ T528] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 40.933632][ T528] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.933632][ T528] [ 40.943379][ T528] EXT4-fs (loop1): Total free blocks count 0 [ 40.949473][ T528] EXT4-fs (loop1): Free/Dirty block details [ 40.955516][ T528] EXT4-fs (loop1): free_blocks=2415919504 [ 40.961331][ T528] EXT4-fs (loop1): dirty_blocks=32 [ 40.966507][ T528] EXT4-fs (loop1): Block reservation details [ 40.972610][ T528] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 41.642595][ T526] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 41.688671][ T510] syz.3.54 (510) used greatest stack depth: 21024 bytes left [ 41.884235][ T43] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 41.979721][ T288] EXT4-fs (loop3): unmounting filesystem. [ 42.166743][ T544] loop2: detected capacity change from 0 to 4096 [ 42.759375][ T544] EXT4-fs (loop2): Test dummy encryption mode enabled [ 42.767616][ T544] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.022022][ T552] loop0: detected capacity change from 0 to 1024 [ 43.068956][ T552] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.131822][ T557] loop4: detected capacity change from 0 to 256 [ 43.167078][ T557] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 43.782018][ T557] syz.4.69: attempt to access beyond end of device [ 43.782018][ T557] loop4: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 43.811366][ T557] syz.4.69: attempt to access beyond end of device [ 43.811366][ T557] loop4: rw=524288, sector=696, nr_sectors = 256 limit=256 [ 43.826297][ T557] syz.4.69: attempt to access beyond end of device [ 43.826297][ T557] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 43.839396][ T557] syz.4.69: attempt to access beyond end of device [ 43.839396][ T557] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 43.853552][ T557] syz.4.69: attempt to access beyond end of device [ 43.853552][ T557] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 43.866644][ T557] syz.4.69: attempt to access beyond end of device [ 43.866644][ T557] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 43.883026][ T289] EXT4-fs (loop0): unmounting filesystem. [ 43.887425][ T557] syz.4.69: attempt to access beyond end of device [ 43.887425][ T557] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 43.905325][ T544] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 43.922282][ T557] syz.4.69: attempt to access beyond end of device [ 43.922282][ T557] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 43.935702][ T557] syz.4.69: attempt to access beyond end of device [ 43.935702][ T557] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 43.948917][ T557] syz.4.69: attempt to access beyond end of device [ 43.948917][ T557] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 44.064768][ T290] EXT4-fs (loop2): unmounting filesystem. [ 44.161392][ T579] loop3: detected capacity change from 0 to 2048 [ 44.179110][ T575] loop4: detected capacity change from 0 to 4096 [ 44.208754][ T575] EXT4-fs (loop4): Test dummy encryption mode enabled [ 44.220350][ T579] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 44.231521][ T575] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 44.470212][ T587] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 44.486443][ T587] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 44.499148][ T587] EXT4-fs (loop3): This should not happen!! Data will be lost [ 44.499148][ T587] [ 44.509053][ T587] EXT4-fs (loop3): Total free blocks count 0 [ 44.515134][ T587] EXT4-fs (loop3): Free/Dirty block details [ 44.521129][ T587] EXT4-fs (loop3): free_blocks=2415919504 [ 44.526968][ T587] EXT4-fs (loop3): dirty_blocks=32 [ 44.532177][ T587] EXT4-fs (loop3): Block reservation details [ 44.538276][ T587] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 44.660782][ T588] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 45.382228][ T549] loop1: detected capacity change from 0 to 131072 [ 45.518861][ T43] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 45.597430][ T291] EXT4-fs (loop4): unmounting filesystem. [ 45.656804][ T549] F2FS-fs (loop1): Found nat_bits in checkpoint [ 46.249872][ T590] loop2: detected capacity change from 0 to 40427 [ 46.277085][ T590] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 46.433519][ T590] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 46.477252][ T590] F2FS-fs (loop2): invalid crc value [ 46.539235][ T590] F2FS-fs (loop2): Found nat_bits in checkpoint [ 46.697290][ T616] loop3: detected capacity change from 0 to 1024 [ 46.718573][ T590] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 46.726727][ T616] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 46.727973][ T590] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 46.794444][ T288] EXT4-fs (loop3): unmounting filesystem. [ 46.850400][ T633] loop3: detected capacity change from 0 to 256 [ 46.868744][ T633] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 46.945585][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 46.945609][ T28] audit: type=1400 audit(1792621195.829:192): avc: denied { prog_run } for pid=589 comm="syz.2.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 47.326089][ T640] loop0: detected capacity change from 0 to 4096 [ 47.363243][ T640] EXT4-fs (loop0): Test dummy encryption mode enabled [ 47.396907][ T640] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 47.590459][ T649] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 47.756103][ T654] loop2: detected capacity change from 0 to 2048 [ 47.805391][ T654] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 47.903078][ T28] audit: type=1400 audit(1792621196.789:193): avc: denied { write } for pid=657 comm="syz.3.96" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 47.926094][ T658] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 47.944522][ T28] audit: type=1400 audit(1792621196.809:194): avc: denied { ioctl } for pid=657 comm="syz.3.96" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 48.028500][ T661] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 48.043497][ T661] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 48.055943][ T661] EXT4-fs (loop2): This should not happen!! Data will be lost [ 48.055943][ T661] [ 48.065664][ T661] EXT4-fs (loop2): Total free blocks count 0 [ 48.071732][ T661] EXT4-fs (loop2): Free/Dirty block details [ 48.077692][ T661] EXT4-fs (loop2): free_blocks=2415919504 [ 48.083469][ T661] EXT4-fs (loop2): dirty_blocks=32 [ 48.088627][ T661] EXT4-fs (loop2): Block reservation details [ 48.094639][ T661] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 48.245068][ T289] EXT4-fs (loop0): unmounting filesystem. [ 48.292184][ T28] audit: type=1400 audit(1792621197.029:195): avc: denied { create } for pid=657 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 48.713676][ T666] loop1: detected capacity change from 0 to 1024 [ 48.761024][ T28] audit: type=1400 audit(1792621197.159:196): avc: denied { setattr } for pid=657 comm="syz.3.96" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 48.809361][ T666] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 48.861821][ T287] EXT4-fs (loop1): unmounting filesystem. [ 48.870913][ T668] FAULT_INJECTION: forcing a failure. [ 48.870913][ T668] name failslab, interval 1, probability 0, space 0, times 1 [ 48.895817][ T28] audit: type=1400 audit(1792621197.319:197): avc: denied { create } for pid=657 comm="syz.3.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 48.915047][ T668] CPU: 0 PID: 668 Comm: syz.0.97 Not tainted syzkaller #0 [ 48.915187][ T437] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 48.922173][ T668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 48.922201][ T668] Call Trace: [ 48.922207][ T668] [ 48.922215][ T668] __dump_stack+0x21/0x24 [ 48.922250][ T668] dump_stack_lvl+0x110/0x170 [ 48.922266][ T668] ? __cfi_dump_stack_lvl+0x8/0x8 [ 48.922286][ T668] dump_stack+0x15/0x24 [ 48.922301][ T668] should_fail_ex+0x3bf/0x510 [ 48.973560][ T668] ? vm_area_dup+0x65/0x280 [ 48.978097][ T668] __should_failslab+0xac/0xf0 [ 48.982884][ T668] should_failslab+0x9/0x20 [ 48.987404][ T668] kmem_cache_alloc+0x3b/0x320 [ 48.992194][ T668] vm_area_dup+0x65/0x280 [ 48.994405][ T645] loop4: detected capacity change from 0 to 131072 [ 48.996550][ T668] __split_vma+0x1c6/0x980 [ 49.007463][ T668] split_vma+0x7c/0xd0 [ 49.011562][ T668] mlock_fixup+0x7a9/0x8a0 [ 49.016001][ T668] apply_vma_lock_flags+0x219/0x370 [ 49.021231][ T668] ? do_mlock+0x670/0x670 [ 49.025582][ T668] ? do_futex+0x2e2/0x430 [ 49.029931][ T668] ? __cfi_do_futex+0x10/0x10 [ 49.034628][ T668] ? __kasan_check_write+0x14/0x20 [ 49.039763][ T668] do_mlock+0x4d3/0x670 [ 49.043952][ T668] ? __se_sys_futex+0x136/0x310 [ 49.048825][ T668] ? lru_gen_add_folio+0x880/0x880 [ 49.053957][ T668] ? xfd_validate_state+0x70/0x150 [ 49.059092][ T668] ? fpregs_restore_userregs+0x128/0x260 [ 49.064745][ T668] __x64_sys_mlock+0x60/0x70 [ 49.069358][ T668] x64_sys_call+0x506/0x9a0 [ 49.073883][ T668] do_syscall_64+0x4c/0xa0 [ 49.078314][ T668] ? clear_bhb_loop+0x30/0x80 [ 49.083014][ T668] ? clear_bhb_loop+0x30/0x80 [ 49.087718][ T668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.093638][ T668] RIP: 0033:0x7f3ac739f559 [ 49.098088][ T668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.117706][ T668] RSP: 002b:00007f3ac82e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 49.126136][ T668] RAX: ffffffffffffffda RBX: 00007f3ac7625fa0 RCX: 00007f3ac739f559 [ 49.134123][ T668] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffb000 [ 49.142109][ T668] RBP: 00007f3ac7436b20 R08: 0000000000000000 R09: 0000000000000000 [ 49.150095][ T668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.158081][ T668] R13: 00007f3ac7626038 R14: 00007f3ac7625fa0 R15: 00007ffcb42466f8 [ 49.166076][ T668] [ 49.207867][ T645] F2FS-fs (loop4): Found nat_bits in checkpoint [ 49.298919][ T645] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 49.336996][ T645] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 49.358288][ T28] audit: type=1400 audit(1792621198.239:198): avc: denied { setattr } for pid=644 comm="syz.4.92" name="file1" dev="loop4" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.730722][ T683] loop0: detected capacity change from 0 to 40427 [ 49.753158][ T683] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 49.762277][ T683] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 49.815135][ T683] F2FS-fs (loop0): invalid crc value [ 49.871775][ T683] F2FS-fs (loop0): Found nat_bits in checkpoint [ 49.950473][ T683] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 49.957673][ T683] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 49.971365][ T703] loop3: detected capacity change from 0 to 256 [ 49.993954][ T703] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 50.013437][ T703] bio_check_eod: 3354 callbacks suppressed [ 50.013455][ T703] syz.3.107: attempt to access beyond end of device [ 50.013455][ T703] loop3: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 50.036251][ T703] syz.3.107: attempt to access beyond end of device [ 50.036251][ T703] loop3: rw=524288, sector=696, nr_sectors = 256 limit=256 [ 50.050255][ T703] syz.3.107: attempt to access beyond end of device [ 50.050255][ T703] loop3: rw=0, sector=440, nr_sectors = 8 limit=256 [ 50.063631][ T703] syz.3.107: attempt to access beyond end of device [ 50.063631][ T703] loop3: rw=0, sector=440, nr_sectors = 8 limit=256 [ 50.077547][ T703] syz.3.107: attempt to access beyond end of device [ 50.077547][ T703] loop3: rw=0, sector=440, nr_sectors = 8 limit=256 [ 50.465916][ T713] loop2: detected capacity change from 0 to 1024 [ 50.511212][ T713] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.569715][ T290] EXT4-fs (loop2): unmounting filesystem. [ 50.916463][ T736] loop0: detected capacity change from 0 to 2048 [ 51.011106][ T736] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 51.112422][ T746] loop3: detected capacity change from 0 to 128 [ 51.133074][ T746] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 51.151137][ T746] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.699814][ T755] loop2: detected capacity change from 0 to 1024 [ 53.310435][ T716] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 53.377622][ T28] audit: type=1400 audit(1792621202.259:199): avc: denied { read } for pid=745 comm="syz.3.121" path="/25/file1/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.502085][ T755] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 53.794344][ T289] EXT4-fs (loop0): unmounting filesystem. [ 53.823800][ T760] loop4: detected capacity change from 0 to 256 [ 53.845118][ T28] audit: type=1400 audit(1792621202.309:200): avc: denied { append } for pid=745 comm="syz.3.121" name="file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.893192][ T760] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 53.946315][ T760] syz.4.124: attempt to access beyond end of device [ 53.946315][ T760] loop4: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 53.980711][ T760] syz.4.124: attempt to access beyond end of device [ 53.980711][ T760] loop4: rw=524288, sector=696, nr_sectors = 256 limit=256 [ 54.007817][ T760] syz.4.124: attempt to access beyond end of device [ 54.007817][ T760] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 54.029001][ T290] EXT4-fs (loop2): unmounting filesystem. [ 54.038246][ T760] syz.4.124: attempt to access beyond end of device [ 54.038246][ T760] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 54.061841][ T760] syz.4.124: attempt to access beyond end of device [ 54.061841][ T760] loop4: rw=0, sector=440, nr_sectors = 8 limit=256 [ 54.146247][ T288] EXT4-fs (loop3): unmounting filesystem. [ 54.284182][ T765] loop0: detected capacity change from 0 to 40427 [ 54.338342][ T765] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 54.360351][ T765] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 54.369478][ T765] F2FS-fs (loop0): invalid crc value [ 54.374868][ T28] audit: type=1400 audit(1792621203.259:201): avc: denied { create } for pid=787 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.375048][ T788] Zero length message leads to an empty skb [ 54.396157][ T28] audit: type=1400 audit(1792621203.259:202): avc: denied { write } for pid=787 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 54.424451][ T765] F2FS-fs (loop0): Found nat_bits in checkpoint [ 54.473272][ T794] loop4: detected capacity change from 0 to 2048 [ 54.487717][ T765] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 54.497832][ T765] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 54.641405][ T805] loop3: detected capacity change from 0 to 1024 [ 54.663725][ T794] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 54.734642][ T805] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 57.269962][ T291] EXT4-fs (loop4): unmounting filesystem. [ 57.294076][ T28] audit: type=1400 audit(1792621206.179:203): avc: denied { getopt } for pid=812 comm="syz.2.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.784785][ T28] audit: type=1400 audit(1792621206.449:204): avc: denied { map } for pid=812 comm="syz.2.140" path="socket:[16253]" dev="sockfs" ino=16253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 59.814318][ T288] EXT4-fs (loop3): unmounting filesystem. [ 59.834153][ T822] loop0: detected capacity change from 0 to 4096 [ 59.857777][ T827] loop3: detected capacity change from 0 to 512 [ 59.877245][ T822] EXT4-fs (loop0): Test dummy encryption mode enabled [ 59.889499][ T822] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 59.899565][ T556] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 60.245668][ T837] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 60.611248][ T846] loop4: detected capacity change from 0 to 40427 [ 60.614147][ T851] loop2: detected capacity change from 0 to 2048 [ 60.621912][ T846] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 60.632277][ T846] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 60.643080][ T846] F2FS-fs (loop4): invalid crc value [ 60.653892][ T851] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 60.654121][ T822] syz.0.138 (822) used greatest stack depth: 20480 bytes left [ 60.673521][ T846] F2FS-fs (loop4): Found nat_bits in checkpoint [ 60.725499][ T289] EXT4-fs (loop0): unmounting filesystem. [ 60.775464][ T846] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 60.782707][ T846] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 62.705241][ T865] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 62.720098][ T865] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 62.732548][ T865] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.732548][ T865] [ 62.742282][ T865] EXT4-fs (loop2): Total free blocks count 0 [ 62.748339][ T865] EXT4-fs (loop2): Free/Dirty block details [ 62.754268][ T865] EXT4-fs (loop2): free_blocks=2415919504 [ 62.760067][ T865] EXT4-fs (loop2): dirty_blocks=32 [ 62.765213][ T865] EXT4-fs (loop2): Block reservation details [ 62.771262][ T865] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 63.506234][ T866] loop1: detected capacity change from 0 to 1024 [ 64.749627][ T866] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 64.761334][ T355] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 65.636963][ T870] loop3: detected capacity change from 0 to 131072 [ 65.693182][ T870] F2FS-fs (loop3): Found nat_bits in checkpoint [ 65.729037][ T897] loop1: detected capacity change from 0 to 512 [ 65.794525][ T870] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 65.810595][ T870] F2FS-fs (loop3): lookup inode (7) has corrupted xattr [ 70.622184][ T915] loop3: detected capacity change from 0 to 1024 [ 71.441066][ T915] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.509558][ T909] loop0: detected capacity change from 0 to 40427 [ 71.534246][ T909] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 71.542429][ T915] EXT4-fs: error -4 creating inode table initialization thread [ 71.546670][ T909] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 71.550735][ T915] EXT4-fs (loop3): mount failed [ 71.563199][ T909] F2FS-fs (loop0): invalid crc value [ 71.572036][ T909] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4) [ 71.818699][ T939] loop1: detected capacity change from 0 to 1024 [ 71.887897][ T28] audit: type=1400 audit(1792621220.769:205): avc: denied { bind } for pid=934 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.076517][ T28] audit: type=1400 audit(1792621220.769:206): avc: denied { listen } for pid=934 comm="syz.2.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.135324][ T939] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 72.308408][ T955] loop2: detected capacity change from 0 to 512 [ 72.378512][ T484] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 72.597578][ T960] loop3: detected capacity change from 0 to 512 [ 74.399437][ T974] loop2: detected capacity change from 0 to 1024 [ 74.410646][ T974] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.886064][ T974] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 75.292465][ T290] EXT4-fs (loop2): unmounting filesystem. [ 75.307406][ T970] loop3: detected capacity change from 0 to 40427 [ 75.328192][ T970] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 75.335982][ T970] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 75.350650][ T970] F2FS-fs (loop3): invalid crc value [ 75.373237][ T970] F2FS-fs (loop3): Found nat_bits in checkpoint [ 75.516112][ T970] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 75.529202][ T970] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 75.705389][ T998] loop0: detected capacity change from 0 to 256 [ 75.765297][ T28] audit: type=1400 audit(1792621224.649:207): avc: denied { mount } for pid=997 comm="syz.0.188" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 75.823985][ T28] audit: type=1400 audit(1792621224.709:208): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 75.830491][ T1005] loop4: detected capacity change from 0 to 512 [ 75.989625][ T484] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.183945][ T287] EXT4-fs (loop1): unmounting filesystem. [ 77.549360][ T28] audit: type=1400 audit(1792621226.439:209): avc: denied { write } for pid=1033 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.580521][ T28] audit: type=1400 audit(1792621226.459:210): avc: denied { nlmsg_write } for pid=1033 comm="syz.4.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.157115][ T28] audit: type=1400 audit(1792621226.899:211): avc: denied { getopt } for pid=1023 comm="syz.0.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.748705][ T1032] loop1: detected capacity change from 0 to 40427 [ 78.793938][ T1032] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 78.828340][ T1032] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 78.837005][ T1032] F2FS-fs (loop1): invalid crc value [ 78.855220][ T1032] F2FS-fs (loop1): Found nat_bits in checkpoint [ 79.005508][ T1032] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 79.020491][ T1067] loop0: detected capacity change from 0 to 1024 [ 79.021045][ T1032] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 79.044194][ T1054] loop4: detected capacity change from 0 to 40427 [ 79.073765][ T1054] F2FS-fs (loop4): invalid crc value [ 79.094839][ T1054] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.095958][ T1067] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 79.461744][ T1054] F2FS-fs (loop4): Start checkpoint disabled! [ 79.697839][ T1054] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 79.838067][ T1054] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 80.063336][ T1056] loop2: detected capacity change from 0 to 40427 [ 80.101502][ T28] audit: type=1400 audit(1792621228.959:212): avc: denied { ioctl } for pid=1050 comm="syz.4.205" path="/42/file0/file1" dev="loop4" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.113985][ T1085] loop3: detected capacity change from 0 to 512 [ 80.125643][ T28] audit: type=1400 audit(1792621228.959:213): avc: denied { map } for pid=1050 comm="syz.4.205" path="/42/file0/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.133144][ T1056] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 80.154155][ T28] audit: type=1400 audit(1792621228.959:214): avc: denied { execute } for pid=1050 comm="syz.4.205" path="/42/file0/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.188205][ T1056] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 80.206501][ T1056] F2FS-fs (loop2): Unrecognized mount option "whint_mode=user-based" or missing value [ 80.237893][ T309] bio_check_eod: 243 callbacks suppressed [ 80.237908][ T309] kworker/u4:3: attempt to access beyond end of device [ 80.237908][ T309] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 80.640046][ T1091] loop4: detected capacity change from 0 to 128 [ 80.666019][ T1091] ======================================================= [ 80.666019][ T1091] WARNING: The mand mount option has been deprecated and [ 80.666019][ T1091] and is ignored by this kernel. Remove the mand [ 80.666019][ T1091] option from the mount to silence this warning. [ 80.666019][ T1091] ======================================================= [ 80.731600][ T1095] loop2: detected capacity change from 0 to 4096 [ 80.762718][ T1095] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 80.787059][ T1097] netlink: 'syz.4.212': attribute type 29 has an invalid length. [ 80.797331][ T1097] netlink: 'syz.4.212': attribute type 29 has an invalid length. [ 81.077358][ T289] EXT4-fs (loop0): unmounting filesystem. [ 81.320189][ T1123] loop4: detected capacity change from 0 to 256 [ 81.358462][ T1123] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.398374][ T1123] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 81.406144][ T1115] loop0: detected capacity change from 0 to 40427 [ 81.419055][ T1123] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 81.433585][ T1115] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 81.443715][ T1115] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 81.455138][ T1115] F2FS-fs (loop0): invalid crc value [ 81.464558][ T1115] F2FS-fs (loop0): Found nat_bits in checkpoint [ 81.500050][ T1128] loop4: detected capacity change from 0 to 128 [ 81.515469][ T1115] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 81.523359][ T1115] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 81.531957][ T1128] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 81.597474][ T1128] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.663617][ T291] EXT4-fs (loop4): unmounting filesystem. [ 81.670107][ T290] EXT4-fs (loop2): unmounting filesystem. [ 81.711366][ T28] audit: type=1400 audit(1792621230.599:215): avc: denied { create } for pid=1136 comm="syz.0.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.747899][ T1137] erofs: (device loop0): mounted with root inode @ nid 36. [ 82.228984][ T1155] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.260311][ T1155] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 82.289945][ T1162] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 82.303505][ T1155] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 82.377849][ T1164] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 82.420538][ T756] kworker/u4:7: attempt to access beyond end of device [ 82.420538][ T756] loop0: rw=1, sector=138, nr_sectors = 112 limit=128 [ 82.476137][ T1159] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 82.484295][ T1159] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 82.495693][ T1159] F2FS-fs (loop3): invalid crc value [ 82.529111][ T1159] F2FS-fs (loop3): Found nat_bits in checkpoint [ 82.548620][ T1174] EXT4-fs (loop0): Test dummy encryption mode enabled [ 82.593961][ T1174] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.607940][ T1174] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.621410][ T1174] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.240: bad orphan inode 131083 [ 82.622684][ T1159] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 82.638959][ T1159] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 82.639111][ T1174] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 82.729872][ T289] EXT4-fs (loop0): unmounting filesystem. [ 82.964179][ T28] audit: type=1400 audit(1792621231.849:216): avc: denied { mount } for pid=1193 comm="syz.0.247" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 83.197582][ T290] EXT4-fs (loop2): unmounting filesystem. [ 83.218764][ T1199] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.229671][ T1199] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 83.239851][ T1199] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 83.751334][ T28] audit: type=1400 audit(1792621232.639:217): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 83.905155][ T1225] set_capacity_and_notify: 10 callbacks suppressed [ 83.905168][ T1225] loop1: detected capacity change from 0 to 16 [ 83.918942][ T1225] erofs: (device loop1): erofs_superblock_csum_verify: invalid checksum 0x4d5306ce, 0x7bbbea8c expected [ 83.922627][ T484] udevd[484]: incorrect erofs checksum on /dev/loop1 [ 83.942684][ T484] udevd[484]: incorrect erofs checksum on /dev/loop1 [ 83.943408][ T28] audit: type=1400 audit(1792621232.829:218): avc: denied { unlink } for pid=1224 comm="syz.1.258" name="#2f" dev="tmpfs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 83.994282][ T28] audit: type=1400 audit(1792621232.879:219): avc: denied { write } for pid=1226 comm="syz.1.259" name="route" dev="proc" ino=4026532308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 84.023441][ T1229] loop1: detected capacity change from 0 to 256 [ 84.030597][ T1229] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.041276][ T1229] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 84.051232][ T1229] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 84.098318][ T1233] loop1: detected capacity change from 0 to 128 [ 84.118064][ T1233] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 84.127282][ T1233] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 84.883870][ T28] audit: type=1400 audit(1792621233.769:220): avc: denied { read write } for pid=1259 comm="syz.3.270" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.908570][ T28] audit: type=1400 audit(1792621233.799:221): avc: denied { open } for pid=1259 comm="syz.3.270" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.932127][ T28] audit: type=1400 audit(1792621233.799:222): avc: denied { ioctl } for pid=1259 comm="syz.3.270" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 84.975522][ T287] EXT4-fs (loop1): unmounting filesystem. [ 84.975854][ T1262] loop0: detected capacity change from 0 to 256 [ 84.991757][ T1262] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.994572][ T1264] loop2: detected capacity change from 0 to 128 [ 85.010641][ T1262] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 85.036777][ T1262] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 85.080023][ T28] audit: type=1400 audit(1792621233.969:223): avc: denied { name_bind } for pid=1265 comm="syz.1.272" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 85.089985][ T1273] loop0: detected capacity change from 0 to 512 [ 85.109699][ T28] audit: type=1400 audit(1792621233.969:224): avc: denied { node_bind } for pid=1265 comm="syz.1.272" saddr=100.1.1.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 85.295428][ T614] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.428212][ T614] usb 4-1: Using ep0 maxpacket: 8 [ 86.434456][ T614] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.445711][ T614] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 1023 [ 86.456301][ T614] usb 4-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 86.469304][ T614] usb 4-1: config 1 interface 0 has no altsetting 0 [ 86.478710][ T1297] loop0: detected capacity change from 0 to 128 [ 86.481777][ T614] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.494621][ T614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.503023][ T1297] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 86.511602][ T614] usb 4-1: SerialNumber: syz [ 86.516281][ T1297] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.528840][ T1260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.790884][ T614] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 86.800038][ T614] usb 4-1: USB disconnect, device number 2 [ 87.244627][ T289] EXT4-fs (loop0): unmounting filesystem. [ 87.455978][ T28] audit: type=1400 audit(1792621236.339:225): avc: denied { bind } for pid=1311 comm="syz.4.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 88.673855][ T1331] loop4: detected capacity change from 0 to 512 [ 89.164442][ T1342] loop1: detected capacity change from 0 to 256 [ 89.175952][ T1342] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 89.190821][ T1342] syz.1.295: attempt to access beyond end of device [ 89.190821][ T1342] loop1: rw=524288, sector=440, nr_sectors = 256 limit=256 [ 89.204885][ T1342] syz.1.295: attempt to access beyond end of device [ 89.204885][ T1342] loop1: rw=524288, sector=696, nr_sectors = 256 limit=256 [ 89.218762][ T1342] syz.1.295: attempt to access beyond end of device [ 89.218762][ T1342] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 89.232144][ T1342] syz.1.295: attempt to access beyond end of device [ 89.232144][ T1342] loop1: rw=0, sector=440, nr_sectors = 8 limit=256 [ 89.532352][ T1355] loop0: detected capacity change from 0 to 128 [ 89.542863][ T1355] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 89.552129][ T1355] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.088784][ T1372] loop2: detected capacity change from 0 to 128 [ 90.142970][ T1372] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 90.152406][ T1372] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.182598][ T290] EXT4-fs (loop2): unmounting filesystem. [ 90.197928][ T1378] loop2: detected capacity change from 0 to 256 [ 90.295744][ T289] EXT4-fs (loop0): unmounting filesystem. [ 90.298104][ T28] audit: type=1400 audit(1792621239.179:226): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 90.332073][ T1384] loop1: detected capacity change from 0 to 512 [ 92.592181][ T1396] loop4: detected capacity change from 0 to 4096 [ 92.612288][ T1396] EXT4-fs (loop4): Test dummy encryption mode enabled [ 92.621212][ T1407] loop1: detected capacity change from 0 to 128 [ 92.692044][ T1407] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 92.699686][ T1396] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 92.708775][ T1407] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.743415][ T1410] loop2: detected capacity change from 0 to 128 [ 92.769254][ T1410] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.777929][ T1410] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.790273][ T1416] loop0: detected capacity change from 0 to 256 [ 92.790531][ T287] EXT4-fs (loop1): unmounting filesystem. [ 92.803653][ T1417] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 92.838238][ T1243] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.964239][ T1419] loop0: detected capacity change from 0 to 40427 [ 92.975236][ T1419] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 92.983703][ T1419] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 93.001368][ T1419] F2FS-fs (loop0): invalid crc value [ 93.008645][ T1419] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.028263][ T1243] usb 4-1: Using ep0 maxpacket: 16 [ 93.035351][ T1243] usb 4-1: unable to get BOS descriptor or descriptor too short [ 93.046572][ T1419] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 93.048980][ T1243] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.064200][ T1419] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.074143][ T1243] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 237, changing to 7 [ 93.085282][ T1243] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 93.159812][ T1243] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 93.168981][ T1243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.177037][ T1243] usb 4-1: Product: syz [ 93.181323][ T1243] usb 4-1: Manufacturer: syz [ 93.185987][ T1243] usb 4-1: SerialNumber: syz [ 93.440457][ T1243] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 93.448891][ T1243] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 93.458728][ T291] EXT4-fs (loop4): unmounting filesystem. [ 93.490082][ T290] EXT4-fs (loop2): unmounting filesystem. [ 94.837542][ T1430] syz.0.321 (1430) used greatest stack depth: 18504 bytes left [ 94.882538][ T1444] loop4: detected capacity change from 0 to 512 [ 95.615288][ T1451] tmpfs: Bad value for 'huge' [ 95.689571][ T1453] loop0: detected capacity change from 0 to 128 [ 95.738932][ T1453] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 95.739944][ T1459] loop1: detected capacity change from 0 to 256 [ 95.757032][ T1453] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.762731][ T1243] usb 4-1: USB disconnect, device number 3 [ 95.833374][ T289] EXT4-fs (loop0): unmounting filesystem. [ 95.845199][ T1464] loop2: detected capacity change from 0 to 4096 [ 95.847143][ T1466] loop3: detected capacity change from 0 to 256 [ 95.859107][ T1466] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.876029][ T1466] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 95.889777][ T1464] EXT4-fs (loop2): Test dummy encryption mode enabled [ 95.896512][ T1466] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 95.914262][ T1464] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.009278][ T1477] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 96.138323][ T19] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.388228][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 96.395820][ T19] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.407728][ T19] usb 5-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 96.422338][ T19] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.429900][ T19] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 96.440440][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.462337][ T19] usb 5-1: config 0 descriptor?? [ 96.475112][ T19] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 96.751358][ T290] EXT4-fs (loop2): unmounting filesystem. [ 96.800350][ T1487] loop1: detected capacity change from 0 to 512 [ 96.826047][ T1491] loop2: detected capacity change from 0 to 128 [ 96.835524][ T1491] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 96.844674][ T1491] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.412830][ T1498] loop4: detected capacity change from 0 to 16 [ 97.447660][ T1498] erofs: (device loop4): mounted with root inode @ nid 36. [ 97.555759][ T1498] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 97.592359][ T290] EXT4-fs (loop2): unmounting filesystem. [ 97.599090][ T1498] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 97.628881][ T1502] loop2: detected capacity change from 0 to 2048 [ 97.656764][ T1507] loop0: detected capacity change from 0 to 256 [ 97.672241][ T1507] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.701977][ T1507] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 97.714521][ T1507] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0x84a6b859, utbl_chksum : 0xe619d30d) [ 97.735198][ T1502] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 97.747159][ T1511] EXT4-fs (loop3): Test dummy encryption mode enabled [ 97.769260][ T1511] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 99.594995][ T1517] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 99.612356][ T1517] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 99.624789][ T1517] EXT4-fs (loop2): This should not happen!! Data will be lost [ 99.624789][ T1517] [ 99.634479][ T1517] EXT4-fs (loop2): Total free blocks count 0 [ 99.640505][ T1517] EXT4-fs (loop2): Free/Dirty block details [ 99.646532][ T1517] EXT4-fs (loop2): free_blocks=2415919504 [ 99.652573][ T1517] EXT4-fs (loop2): dirty_blocks=32 [ 99.657693][ T1517] EXT4-fs (loop2): Block reservation details [ 99.663711][ T1517] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 100.109815][ T1339] usb 5-1: USB disconnect, device number 2 [ 101.963908][ T355] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 102.003600][ T28] audit: type=1400 audit(1792621250.889:227): avc: denied { read } for pid=289 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 102.025374][ T1537] set_capacity_and_notify: 1 callbacks suppressed [ 102.025392][ T1537] loop2: detected capacity change from 0 to 128 [ 102.030336][ T28] audit: type=1400 audit(1792621250.889:228): avc: denied { open } for pid=289 comm="syz-executor" path="/65/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 102.036902][ T1539] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 102.040085][ T28] audit: type=1400 audit(1792621250.889:229): avc: denied { write } for pid=289 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 102.083216][ T1537] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 102.096735][ T28] audit: type=1400 audit(1792621250.889:230): avc: denied { setattr } for pid=289 comm="syz-executor" path="/65/trace/instances" dev="tracefs" ino=13402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 102.137770][ T1541] loop1: detected capacity change from 0 to 512 [ 102.163366][ T1537] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.223117][ T1527] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.235624][ T288] EXT4-fs (loop3): unmounting filesystem. [ 102.249441][ T290] EXT4-fs (loop2): unmounting filesystem. [ 102.607647][ T1552] loop3: detected capacity change from 0 to 512 [ 102.638534][ T28] audit: type=1400 audit(1792621251.529:231): avc: denied { mounton } for pid=1555 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 102.667578][ T1552] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #17: comm syz.3.365: iget: bogus i_mode (0) [ 102.679471][ T1552] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.365: couldn't read orphan inode 17 (err -117) [ 102.691959][ T1552] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 102.697633][ T1559] loop2: detected capacity change from 0 to 2048 [ 102.707277][ T28] audit: type=1400 audit(1792621251.529:232): avc: denied { create } for pid=1555 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.779185][ T1543] loop4: detected capacity change from 0 to 40427 [ 102.793148][ T1543] F2FS-fs (loop4): invalid crc value [ 102.806354][ T1559] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 102.807996][ T1555] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.815635][ T1543] F2FS-fs (loop4): Found nat_bits in checkpoint [ 102.821924][ T1555] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.906710][ T1555] device bridge_slave_0 entered promiscuous mode [ 102.938216][ T28] audit: type=1400 audit(1792621251.789:233): avc: denied { name_bind } for pid=1551 comm="syz.3.365" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 107.073425][ T288] EXT4-fs (loop3): unmounting filesystem. [ 107.079212][ T1458] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 107.096475][ T1543] F2FS-fs (loop4): Start checkpoint disabled! [ 107.112110][ T1543] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 107.112435][ T1555] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.135262][ T1555] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.178623][ T1555] device bridge_slave_1 entered promiscuous mode [ 107.189045][ T290] EXT4-fs (loop2): unmounting filesystem. [ 107.239188][ T756] device bridge_slave_1 left promiscuous mode [ 107.246449][ T756] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.254485][ T756] device bridge_slave_0 left promiscuous mode [ 107.260841][ T756] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.269279][ T756] device veth1_macvtap left promiscuous mode [ 107.275475][ T756] device veth0_vlan left promiscuous mode [ 109.312801][ T1589] loop4: detected capacity change from 0 to 128 [ 109.370245][ T1589] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 109.389087][ T1589] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.411821][ T1597] loop3: detected capacity change from 0 to 512 [ 110.624784][ T28] audit: type=1400 audit(1792621259.509:234): avc: denied { create } for pid=1609 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.645160][ T291] EXT4-fs (loop4): unmounting filesystem. [ 110.652524][ T28] audit: type=1400 audit(1792621259.529:235): avc: denied { write } for pid=1609 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.703074][ T1620] loop4: detected capacity change from 0 to 2048 [ 110.723491][ T28] audit: type=1400 audit(1792621259.579:236): avc: denied { mount } for pid=1609 comm="syz.3.381" name="/" dev="configfs" ino=14440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 110.759971][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.791485][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.798821][ T1608] loop2: detected capacity change from 0 to 40427 [ 110.808495][ T28] audit: type=1400 audit(1792621259.579:237): avc: denied { search } for pid=1609 comm="syz.3.381" name="/" dev="configfs" ino=14440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 110.818573][ T1620] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 110.839668][ T1608] F2FS-fs (loop2): invalid crc value [ 110.840358][ T1632] tmpfs: Bad value for 'huge' [ 110.855571][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.865437][ T1608] F2FS-fs (loop2): Found nat_bits in checkpoint [ 110.888518][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.902755][ T1608] F2FS-fs (loop2): Start checkpoint disabled! [ 110.909737][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.916805][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.924608][ T1608] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 110.932236][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.940815][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.949122][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.956206][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.964368][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.989068][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.997278][ T1608] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 111.002707][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.013588][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.030053][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.051399][ T1555] device veth0_vlan entered promiscuous mode [ 111.072113][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.266918][ T1555] device veth1_macvtap entered promiscuous mode [ 111.280275][ T756] kworker/u4:7: attempt to access beyond end of device [ 111.280275][ T756] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 111.376503][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 111.384736][ T28] audit: type=1400 audit(1792621260.249:238): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 111.434015][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.844270][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.862133][ T291] EXT4-fs (loop4): unmounting filesystem. [ 111.973860][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 112.053892][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 112.264047][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.073002][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.086706][ T1657] loop3: detected capacity change from 0 to 512 [ 113.130451][ T1657] EXT4-fs (loop3): invalid journal inode [ 113.141566][ T1657] EXT4-fs (loop3): can't get journal size [ 113.162299][ T1657] EXT4-fs (loop3): 1 truncate cleaned up [ 113.254312][ T1674] loop1: detected capacity change from 0 to 128 [ 113.261214][ T1657] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 113.364858][ T1674] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 113.436020][ T1674] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.690065][ T288] EXT4-fs (loop3): unmounting filesystem. [ 113.730892][ T287] EXT4-fs (loop1): unmounting filesystem. [ 114.392760][ T1686] loop1: detected capacity change from 0 to 128 [ 115.407125][ T1686] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 115.436653][ T1686] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.538933][ T309] device bridge_slave_1 left promiscuous mode [ 115.545109][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.578619][ T309] device bridge_slave_0 left promiscuous mode [ 115.597021][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.605786][ T287] EXT4-fs (loop1): unmounting filesystem. [ 115.619457][ T309] device veth1_macvtap left promiscuous mode [ 115.635741][ T309] device veth0_vlan left promiscuous mode [ 115.814005][ T1691] loop3: detected capacity change from 0 to 40427 [ 115.825601][ T1691] F2FS-fs (loop3): invalid crc value [ 115.835557][ T1691] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.872405][ T1691] F2FS-fs (loop3): Start checkpoint disabled! [ 115.893716][ T1706] loop1: detected capacity change from 0 to 128 [ 115.898927][ T1691] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 115.914224][ T1691] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 115.914346][ T1706] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 115.931880][ T1706] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.950331][ T1692] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.957475][ T1692] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.965456][ T1692] device bridge_slave_0 entered promiscuous mode [ 115.972807][ T1692] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.974961][ T355] kworker/u4:4: attempt to access beyond end of device [ 115.974961][ T355] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 115.980656][ T1692] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.014937][ T287] EXT4-fs (loop1): unmounting filesystem. [ 116.018758][ T1692] device bridge_slave_1 entered promiscuous mode [ 117.477003][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 117.485074][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 117.515502][ T1692] device veth0_vlan entered promiscuous mode [ 117.530932][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 117.548574][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 117.566975][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.574082][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.775455][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.829703][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.879929][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.887011][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.963659][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.013705][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.065030][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.113907][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.196857][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.260944][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.598579][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.626845][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.656934][ T1692] device veth1_macvtap entered promiscuous mode [ 118.669616][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.687559][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.696340][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.714178][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.730216][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.824600][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.833148][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.841741][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.850324][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.956998][ T1733] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.973320][ T1733] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.006576][ T1733] device bridge_slave_0 entered promiscuous mode [ 119.111797][ T1733] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.214092][ T1733] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.251539][ T1733] device bridge_slave_1 entered promiscuous mode [ 119.316769][ T1756] loop1: detected capacity change from 0 to 1024 [ 119.412233][ T1756] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 120.816650][ T309] device bridge_slave_1 left promiscuous mode [ 120.824817][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.833867][ T309] device bridge_slave_0 left promiscuous mode [ 120.917455][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.925889][ T287] EXT4-fs (loop1): unmounting filesystem. [ 120.936010][ T309] device veth1_macvtap left promiscuous mode [ 120.942205][ T309] device veth0_vlan left promiscuous mode [ 125.285405][ T1795] loop1: detected capacity change from 0 to 512 [ 125.293678][ T1795] EXT4-fs (loop1): Test dummy encryption mode enabled [ 125.314627][ T1795] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.472247][ T1802] loop6: detected capacity change from 0 to 1024 [ 125.598797][ T1795] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.428: bad orphan inode 131083 [ 125.659154][ T1802] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 125.676620][ T1795] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 125.679639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 127.082455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 127.108892][ T287] EXT4-fs (loop1): unmounting filesystem. [ 127.122324][ T1692] EXT4-fs (loop6): unmounting filesystem. [ 127.129013][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 127.139512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 127.152495][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.159601][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.179172][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 127.190759][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 127.199395][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.206442][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.214686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 127.222877][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 127.231218][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 127.380043][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 127.388786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.397821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.406926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 127.641626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.535698][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.545890][ T1836] ------------[ cut here ]------------ [ 131.551430][ T1836] fmt: 'level=%s [ 131.551430][ T1836] ' current_buffer: ' <...>-494 [000] ..... 37.541832: dwc3_ctrl_req: Get Device Status(Length = 0) [ 131.551430][ T1836] <...>-1970561396 [000] .p.35 37.597124: Unknown type 25955 [ 131.551430][ T1836] -0 [000] ..... 37.622356: initcall_level: level=' [ 131.552134][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.578303][ T1836] WARNING: CPU: 1 PID: 1836 at kernel/trace/trace.c:3890 trace_check_vprintf+0xd2c/0x1050 [ 131.591389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.592251][ T1836] Modules linked in: [ 131.613284][ T1836] CPU: 1 PID: 1836 Comm: syz.4.437 Not tainted syzkaller #0 [ 131.620630][ T1836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 131.630752][ T1836] RIP: 0010:trace_check_vprintf+0xd2c/0x1050 [ 131.636775][ T1836] Code: ea ae fc ff c6 05 ca eb 1a 06 01 48 8b 7d 88 e8 5a 04 00 00 48 c7 c7 60 f3 aa 85 48 8b b5 60 ff ff ff 48 89 c2 e8 74 31 cd ff <0f> 0b e9 d6 fd ff ff 48 8b 4d 98 80 e1 07 38 c1 0f 8c d5 f7 ff ff [ 131.656431][ T1836] RSP: 0018:ffffc9000dc67800 EFLAGS: 00010246 [ 131.662543][ T1836] RAX: dabebbff9b9dba00 RBX: dffffc0000000000 RCX: 0000000000080000 [ 131.670582][ T1836] RDX: ffffc90003261000 RSI: 00000000000023b2 RDI: 00000000000023b3 [ 131.678585][ T1836] RBP: ffffc9000dc678d0 R08: ffff8881f6e2759b R09: 1ffff1103edc4eb3 [ 131.686599][ T1836] R10: dffffc0000000000 R11: ffffed103edc4eb4 R12: ffffffff87017250 [ 131.694653][ T1836] R13: ffff8881266ec078 R14: 0000000000000000 R15: 0000000000000002 [ 131.702662][ T1836] FS: 00007efda85e46c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 131.711641][ T1836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.718245][ T1836] CR2: 0000200000406000 CR3: 0000000126fd3000 CR4: 00000000003506a0 [ 131.726239][ T1836] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 131.734256][ T1836] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 131.742269][ T1836] Call Trace: [ 131.745538][ T1836] [ 131.748482][ T1836] trace_event_printf+0xea/0x140 [ 131.753442][ T1836] ? __cfi_trace_seq_printf+0x10/0x10 [ 131.758846][ T1836] ? __cfi_trace_event_printf+0x10/0x10 [ 131.764398][ T1836] ? trace_print_context+0x3a1/0x4d0 [ 131.769724][ T1836] ? trace_handle_return+0xa5/0xe0 [ 131.774845][ T1836] ? trace_raw_output_prep+0x1c9/0x240 [ 131.780327][ T1836] trace_raw_output_initcall_level+0x98/0xd0 [ 131.786317][ T1836] print_trace_fmt+0x4fe/0x720 [ 131.791328][ T1836] print_trace_line+0x393/0x6b0 [ 131.796182][ T1836] tracing_read_pipe+0x517/0xaf0 [ 131.801151][ T1836] do_iter_read+0x493/0xb30 [ 131.805669][ T1836] ? vfs_iter_read+0xa0/0xa0 [ 131.810298][ T1836] ? import_iovec+0x7c/0xb0 [ 131.814808][ T1836] do_readv+0x25d/0x450 [ 131.818994][ T1836] ? generic_file_rw_checks+0x2a0/0x2a0 [ 131.824558][ T1836] ? fpregs_restore_userregs+0x128/0x260 [ 131.830218][ T1836] __x64_sys_readv+0x7d/0x90 [ 131.834820][ T1836] x64_sys_call+0x3bd/0x9a0 [ 131.839353][ T1836] do_syscall_64+0x4c/0xa0 [ 131.843777][ T1836] ? clear_bhb_loop+0x30/0x80 [ 131.848482][ T1836] ? clear_bhb_loop+0x30/0x80 [ 131.853164][ T1836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.859077][ T1836] RIP: 0033:0x7efda779f559 [ 131.863506][ T1836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.883162][ T1836] RSP: 002b:00007efda85e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 131.891606][ T1836] RAX: ffffffffffffffda RBX: 00007efda7a25fa0 RCX: 00007efda779f559 [ 131.899603][ T1836] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 131.907581][ T1836] RBP: 00007efda7836b20 R08: 0000000000000000 R09: 0000000000000000 [ 131.915630][ T1836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.923634][ T1836] R13: 00007efda7a26038 R14: 00007efda7a25fa0 R15: 00007ffcf3b1f6c8 [ 131.931634][ T1836] [ 131.934657][ T1836] ---[ end trace 0000000000000000 ]--- [ 132.075253][ T1733] device veth0_vlan entered promiscuous mode [ 132.187431][ T1733] device veth1_macvtap entered promiscuous mode [ 132.341830][ T1852] loop1: detected capacity change from 0 to 128 [ 132.349904][ T1848] loop4: detected capacity change from 0 to 512 [ 132.390550][ T1848] EXT4-fs (loop4): Test dummy encryption mode enabled [ 132.420995][ T1852] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 132.465819][ T1848] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 132.481512][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.490096][ T1852] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.492646][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.531816][ T756] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.532308][ T1848] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.442: bad orphan inode 131083 [ 132.552914][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.557087][ T1848] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 132.570196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.591761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.602151][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.603680][ T291] EXT4-fs (loop4): unmounting filesystem. [ 132.639873][ T1860] Illegal XDP return value 512913744 on prog (id 11) dev syz_tun, expect packet loss! [ 132.650167][ T1862] loop7: detected capacity change from 0 to 128 [ 132.671676][ T1862] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 132.681034][ T1862] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.782495][ T1733] EXT4-fs (loop7): unmounting filesystem. [ 132.832358][ T1868] loop4: detected capacity change from 0 to 128 [ 132.872479][ T1868] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 132.881301][ T1868] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.893923][ T1868] fscrypt (loop4, inode 12): Unsupported encryption flags (0x54) [ 132.956111][ T1872] loop7: detected capacity change from 0 to 40427 [ 132.968080][ T1872] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 132.976158][ T1872] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 132.986882][ T1872] F2FS-fs (loop7): invalid crc value [ 132.997158][ T1872] F2FS-fs (loop7): Found nat_bits in checkpoint [ 133.117149][ T1872] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 133.124266][ T1872] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 133.124870][ T28] audit: type=1400 audit(1792621282.019:239): avc: denied { create } for pid=1874 comm="syz.6.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 133.396772][ T28] audit: type=1400 audit(1792621282.279:240): avc: denied { ioctl } for pid=1874 comm="syz.6.449" path="socket:[20972]" dev="sockfs" ino=20972 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 133.436926][ T287] EXT4-fs (loop1): unmounting filesystem. [ 134.439267][ T291] EXT4-fs (loop4): unmounting filesystem. [ 134.450061][ T1889] ------------[ cut here ]------------ [ 134.455543][ T1889] WARNING: CPU: 0 PID: 1889 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 134.465814][ T1889] Modules linked in: [ 134.469721][ T1889] CPU: 0 PID: 1889 Comm: syz.1.452 Tainted: G W syzkaller #0 [ 134.478487][ T1889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.488543][ T1889] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 134.494365][ T1889] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 134.513976][ T1889] RSP: 0018:ffffc9000e5cf6e0 EFLAGS: 00010002 [ 134.520055][ T1889] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 134.528033][ T1889] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 134.536012][ T1889] RBP: ffffc9000e5cf850 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 134.543995][ T1889] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 134.551981][ T1889] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000000ac [ 134.559963][ T1889] FS: 00007f20cc1956c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 134.568908][ T1889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.575504][ T1889] CR2: 000000110c2b7918 CR3: 0000000126d33000 CR4: 00000000003506b0 [ 134.583491][ T1889] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 134.591474][ T1889] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 134.599455][ T1889] Call Trace: [ 134.602744][ T1889] [ 134.605674][ T1889] ? ring_buffer_read_page+0x1260/0x1260 [ 134.611302][ T1889] ? __kasan_check_write+0x14/0x20 [ 134.616409][ T1889] ? _raw_spin_lock+0x94/0xf0 [ 134.621075][ T1889] rb_buffer_peek+0x5f/0x930 [ 134.625652][ T1889] ring_buffer_peek+0x184/0x3b0 [ 134.630489][ T1889] ? __cfi_ring_buffer_peek+0x10/0x10 [ 134.635852][ T1889] ? __kasan_check_write+0x14/0x20 [ 134.640956][ T1889] ? _raw_spin_lock+0x94/0xf0 [ 134.645623][ T1889] ? _find_next_bit+0x8a/0x130 [ 134.650377][ T1889] __find_next_entry+0x33c/0x6c0 [ 134.655313][ T1889] ? trace_find_next_entry+0x380/0x380 [ 134.660775][ T1889] ? __cfi_ring_buffer_consume+0x10/0x10 [ 134.666419][ T1889] ? print_trace_line+0x393/0x6b0 [ 134.671449][ T1889] tracing_read_pipe+0x3d2/0xaf0 [ 134.676386][ T1889] do_iter_read+0x493/0xb30 [ 134.680883][ T1889] ? vfs_iter_read+0xa0/0xa0 [ 134.685466][ T1889] ? import_iovec+0x7c/0xb0 [ 134.689963][ T1889] do_readv+0x25d/0x450 [ 134.694114][ T1889] ? generic_file_rw_checks+0x2a0/0x2a0 [ 134.699659][ T1889] ? fpregs_restore_userregs+0x128/0x260 [ 134.705291][ T1889] __x64_sys_readv+0x7d/0x90 [ 134.709885][ T1889] x64_sys_call+0x3bd/0x9a0 [ 134.714388][ T1889] do_syscall_64+0x4c/0xa0 [ 134.718792][ T1889] ? clear_bhb_loop+0x30/0x80 [ 134.723462][ T1889] ? clear_bhb_loop+0x30/0x80 [ 134.728137][ T1889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.734025][ T1889] RIP: 0033:0x7f20cb39f559 [ 134.738427][ T1889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.758027][ T1889] RSP: 002b:00007f20cc195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 134.766446][ T1889] RAX: ffffffffffffffda RBX: 00007f20cb625fa0 RCX: 00007f20cb39f559 [ 134.774432][ T1889] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 134.782409][ T1889] RBP: 00007f20cb436b20 R08: 0000000000000000 R09: 0000000000000000 [ 134.790399][ T1889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.798367][ T1889] R13: 00007f20cb626038 R14: 00007f20cb625fa0 R15: 00007ffc43098db8 [ 134.806345][ T1889] [ 134.809353][ T1889] ---[ end trace 0000000000000000 ]--- [ 134.814826][ T1889] ================================================================== [ 134.822883][ T1889] BUG: KASAN: use-after-free in rb_buffer_peek+0x88d/0x930 [ 134.830080][ T1889] Read of size 4 at addr ffff88817e06b071 by task syz.1.452/1889 [ 134.837789][ T1889] [ 134.840104][ T1889] CPU: 0 PID: 1889 Comm: syz.1.452 Tainted: G W syzkaller #0 [ 134.848849][ T1889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.858895][ T1889] Call Trace: [ 134.862172][ T1889] [ 134.865092][ T1889] __dump_stack+0x21/0x24 [ 134.869416][ T1889] dump_stack_lvl+0x110/0x170 [ 134.874083][ T1889] ? __cfi_dump_stack_lvl+0x8/0x8 [ 134.879092][ T1889] ? rb_get_reader_page+0x9f6/0xc60 [ 134.884283][ T1889] ? rb_buffer_peek+0x88d/0x930 [ 134.889125][ T1889] print_address_description+0x71/0x200 [ 134.894666][ T1889] print_report+0x4a/0x60 [ 134.898997][ T1889] kasan_report+0x122/0x150 [ 134.903495][ T1889] ? rb_buffer_peek+0x88d/0x930 [ 134.908334][ T1889] ? __kasan_check_write+0x14/0x20 [ 134.913442][ T1889] __asan_report_load4_noabort+0x14/0x20 [ 134.919066][ T1889] rb_buffer_peek+0x88d/0x930 [ 134.923729][ T1889] ring_buffer_peek+0x184/0x3b0 [ 134.928565][ T1889] ? __cfi_ring_buffer_peek+0x10/0x10 [ 134.933926][ T1889] ? __kasan_check_write+0x14/0x20 [ 134.939025][ T1889] ? _raw_spin_lock+0x94/0xf0 [ 134.943688][ T1889] ? _find_next_bit+0x8a/0x130 [ 134.948442][ T1889] __find_next_entry+0x33c/0x6c0 [ 134.953377][ T1889] ? trace_find_next_entry+0x380/0x380 [ 134.958828][ T1889] ? __cfi_ring_buffer_consume+0x10/0x10 [ 134.964451][ T1889] ? print_trace_line+0x393/0x6b0 [ 134.969467][ T1889] tracing_read_pipe+0x3d2/0xaf0 [ 134.974401][ T1889] do_iter_read+0x493/0xb30 [ 134.978895][ T1889] ? vfs_iter_read+0xa0/0xa0 [ 134.983473][ T1889] ? import_iovec+0x7c/0xb0 [ 134.987976][ T1889] do_readv+0x25d/0x450 [ 134.992127][ T1889] ? generic_file_rw_checks+0x2a0/0x2a0 [ 134.997671][ T1889] ? fpregs_restore_userregs+0x128/0x260 [ 135.003302][ T1889] __x64_sys_readv+0x7d/0x90 [ 135.007884][ T1889] x64_sys_call+0x3bd/0x9a0 [ 135.012387][ T1889] do_syscall_64+0x4c/0xa0 [ 135.016791][ T1889] ? clear_bhb_loop+0x30/0x80 [ 135.021508][ T1889] ? clear_bhb_loop+0x30/0x80 [ 135.026176][ T1889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.032063][ T1889] RIP: 0033:0x7f20cb39f559 [ 135.036470][ T1889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.056067][ T1889] RSP: 002b:00007f20cc195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 135.064475][ T1889] RAX: ffffffffffffffda RBX: 00007f20cb625fa0 RCX: 00007f20cb39f559 [ 135.072440][ T1889] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 135.080401][ T1889] RBP: 00007f20cb436b20 R08: 0000000000000000 R09: 0000000000000000 [ 135.088361][ T1889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.096321][ T1889] R13: 00007f20cb626038 R14: 00007f20cb625fa0 R15: 00007ffc43098db8 [ 135.104286][ T1889] [ 135.107293][ T1889] [ 135.109601][ T1889] The buggy address belongs to the physical page: [ 135.115992][ T1889] page:ffffea0005f81ac0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x17e06b [ 135.126238][ T1889] flags: 0x4000000000000000(zone=1) [ 135.131436][ T1889] raw: 4000000000000000 ffffea0005f81ac8 ffffea0005f81ac8 0000000000000000 [ 135.140006][ T1889] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 135.148570][ T1889] page dumped because: kasan: bad access detected [ 135.154984][ T1889] page_owner info is not present (never set?) [ 135.161027][ T1889] [ 135.163338][ T1889] Memory state around the buggy address: [ 135.168951][ T1889] ffff88817e06af00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 135.177003][ T1889] ffff88817e06af80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 135.185050][ T1889] >ffff88817e06b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 135.193095][ T1889] ^ [ 135.200795][ T1889] ffff88817e06b080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 135.208843][ T1889] ffff88817e06b100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 135.216887][ T1889] ================================================================== [ 135.224930][ T1889] Disabling lock debugging due to kernel taint [ 135.246668][ T1889] ------------[ cut here ]------------ [ 135.246678][ T1889] WARNING: CPU: 1 PID: 1889 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 135.246713][ T1889] Modules linked in: [ 135.246724][ T1889] CPU: 1 PID: 1889 Comm: syz.1.452 Tainted: G B W syzkaller #0 [ 135.246744][ T1889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.246755][ T1889] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 135.246777][ T1889] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 135.246794][ T1889] RSP: 0018:ffffc9000e5cf800 EFLAGS: 00010002 [ 135.246811][ T1889] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 135.246826][ T1889] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 135.246839][ T1889] RBP: ffffc9000e5cf970 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 135.246854][ T1889] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 135.246869][ T1889] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000000ac [ 135.246884][ T1889] FS: 00007f20cc1956c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 135.246902][ T1889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.246916][ T1889] CR2: 00007f20cb3ecc40 CR3: 0000000126d33000 CR4: 00000000003506a0 [ 135.246934][ T1889] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 135.246946][ T1889] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 135.246958][ T1889] Call Trace: [ 135.246964][ T1889] [ 135.246975][ T1889] ? ring_buffer_read_page+0x1260/0x1260 [ 135.246998][ T1889] ? __kasan_check_write+0x14/0x20 [ 135.247019][ T1889] ? _raw_spin_lock+0x94/0xf0 [ 135.247036][ T1889] rb_buffer_peek+0x5f/0x930 [ 135.247055][ T1889] ring_buffer_consume+0x1aa/0x370 [ 135.247077][ T1889] ? print_trace_fmt+0x598/0x720 [ 135.247097][ T1889] ? __cfi_ring_buffer_consume+0x10/0x10 [ 135.247116][ T1889] ? print_trace_line+0x393/0x6b0 [ 135.247134][ T1889] tracing_read_pipe+0x5b3/0xaf0 [ 135.247161][ T1889] do_iter_read+0x493/0xb30 [ 135.247185][ T1889] ? vfs_iter_read+0xa0/0xa0 [ 135.247207][ T1889] ? import_iovec+0x7c/0xb0 [ 135.247228][ T1889] do_readv+0x25d/0x450 [ 135.247252][ T1889] ? generic_file_rw_checks+0x2a0/0x2a0 [ 135.247283][ T1889] ? fpregs_restore_userregs+0x128/0x260 [ 135.247307][ T1889] __x64_sys_readv+0x7d/0x90 [ 135.247328][ T1889] x64_sys_call+0x3bd/0x9a0 [ 135.247351][ T1889] do_syscall_64+0x4c/0xa0 [ 135.247368][ T1889] ? clear_bhb_loop+0x30/0x80 [ 135.247390][ T1889] ? clear_bhb_loop+0x30/0x80 [ 135.247413][ T1889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.247435][ T1889] RIP: 0033:0x7f20cb39f559 [ 135.247449][ T1889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.247472][ T1889] RSP: 002b:00007f20cc195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 135.247491][ T1889] RAX: ffffffffffffffda RBX: 00007f20cb625fa0 RCX: 00007f20cb39f559 [ 135.247506][ T1889] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 135.247518][ T1889] RBP: 00007f20cb436b20 R08: 0000000000000000 R09: 0000000000000000 [ 135.247531][ T1889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.247543][ T1889] R13: 00007f20cb626038 R14: 00007f20cb625fa0 R15: 00007ffc43098db8 [ 135.247561][ T1889] [ 135.247567][ T1889] ---[ end trace 0000000000000000 ]--- [ 135.247621][ T1889] ------------[ cut here ]------------ [ 135.247626][ T1889] WARNING: CPU: 1 PID: 1889 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 135.247655][ T1889] Modules linked in: [ 135.247663][ T1889] CPU: 1 PID: 1889 Comm: syz.1.452 Tainted: G B W syzkaller #0 [ 135.247682][ T1889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.247692][ T1889] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 135.247713][ T1889] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 135.247729][ T1889] RSP: 0018:ffffc9000e5cf800 EFLAGS: 00010006 [ 135.247745][ T1889] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 135.247760][ T1889] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 135.247773][ T1889] RBP: ffffc9000e5cf978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 135.247788][ T1889] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 135.247803][ T1889] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000000ac [ 135.247817][ T1889] FS: 00007f20cc1956c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 135.247835][ T1889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.247849][ T1889] CR2: 00007f20cb3ecc40 CR3: 0000000126d33000 CR4: 00000000003506a0 [ 135.247866][ T1889] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 135.247878][ T1889] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 135.247891][ T1889] Call Trace: [ 135.247895][ T1889] [ 135.247905][ T1889] ? ring_buffer_read_page+0x1260/0x1260 [ 135.247930][ T1889] rb_advance_reader+0x2b/0x770 [ 135.247949][ T1889] ring_buffer_consume+0x1e7/0x370 [ 135.247968][ T1889] ? print_trace_fmt+0x598/0x720 [ 135.247987][ T1889] ? __cfi_ring_buffer_consume+0x10/0x10 [ 135.248007][ T1889] ? print_trace_line+0x393/0x6b0 [ 135.248025][ T1889] tracing_read_pipe+0x5b3/0xaf0 [ 135.248051][ T1889] do_iter_read+0x493/0xb30 [ 135.248073][ T1889] ? vfs_iter_read+0xa0/0xa0 [ 135.248094][ T1889] ? import_iovec+0x7c/0xb0 [ 135.248114][ T1889] do_readv+0x25d/0x450 [ 135.248138][ T1889] ? generic_file_rw_checks+0x2a0/0x2a0 [ 135.248162][ T1889] ? fpregs_restore_userregs+0x128/0x260 [ 135.248182][ T1889] __x64_sys_readv+0x7d/0x90 [ 135.248203][ T1889] x64_sys_call+0x3bd/0x9a0 [ 135.248224][ T1889] do_syscall_64+0x4c/0xa0 [ 135.248240][ T1889] ? clear_bhb_loop+0x30/0x80 [ 135.248263][ T1889] ? clear_bhb_loop+0x30/0x80 [ 135.248285][ T1889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.248307][ T1889] RIP: 0033:0x7f20cb39f559 [ 135.248320][ T1889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.248337][ T1889] RSP: 002b:00007f20cc195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 135.248355][ T1889] RAX: ffffffffffffffda RBX: 00007f20cb625fa0 RCX: 00007f20cb39f559 [ 135.248370][ T1889] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 135.248382][ T1889] RBP: 00007f20cb436b20 R08: 0000000000000000 R09: 0000000000000000 [ 135.248395][ T1889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.248407][ T1889] R13: 00007f20cb626038 R14: 00007f20cb625fa0 R15: 00007ffc43098db8 [ 135.248425][ T1889] [ 135.248431][ T1889] ---[ end trace 0000000000000000 ]--- [ 135.256944][ T1889] ------------[ cut here ]------------ [ 135.256956][ T1889] WARNING: CPU: 1 PID: 1889 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 135.256993][ T1889] Modules linked in: [ 135.257004][ T1889] CPU: 1 PID: 1889 Comm: syz.1.452 Tainted: G B W syzkaller #0 [ 135.257023][ T1889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.257033][ T1889] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 135.257056][ T1889] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 135.257073][ T1889] RSP: 0018:ffffc9000e5cf6e0 EFLAGS: 00010002 [ 135.257089][ T1889] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 135.257105][ T1889] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 135.257118][ T1889] RBP: ffffc9000e5cf850 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 135.257133][ T1889] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 135.257148][ T1889] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000000ac [ 135.257162][ T1889] FS: 00007f20cc1956c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 135.257180][ T1889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.257195][ T1889] CR2: 00007f1b15f6e380 CR3: 0000000126d33000 CR4: 00000000003506a0 [ 135.257213][ T1889] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 135.257225][ T1889] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 135.257237][ T1889] Call Trace: [ 135.257243][ T1889] [ 135.257253][ T1889] ? release_firmware_map_entry+0x190/0x190 [ 135.257276][ T1889] ? ring_buffer_read_page+0x1260/0x1260 [ 135.257297][ T1889] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 135.257321][ T1889] ? __kasan_check_write+0x14/0x20 [ 135.257341][ T1889] ? _raw_spin_lock+0x94/0xf0 [ 135.257360][ T1889] rb_buffer_peek+0x5f/0x930 [ 135.257379][ T1889] ring_buffer_peek+0x184/0x3b0 [ 135.257397][ T1889] ? irqentry_exit+0x37/0x40 [ 135.257423][ T1889] ? __cfi_ring_buffer_peek+0x10/0x10 [ 135.257442][ T1889] ? _find_next_bit+0x8a/0x130 [ 135.257473][ T1889] __find_next_entry+0x33c/0x6c0 [ 135.257504][ T1889] ? trace_find_next_entry+0x380/0x380 [ 135.257532][ T1889] ? __cfi_ring_buffer_consume+0x10/0x10 [ 135.257552][ T1889] ? print_trace_line+0x393/0x6b0 [ 135.257571][ T1889] tracing_read_pipe+0x3d2/0xaf0 [ 135.257597][ T1889] do_iter_read+0x493/0xb30 [ 135.257620][ T1889] ? vfs_iter_read+0xa0/0xa0 [ 135.257642][ T1889] ? import_iovec+0x7c/0xb0 [ 135.257662][ T1889] do_readv+0x25d/0x450 [ 135.257686][ T1889] ? generic_file_rw_checks+0x2a0/0x2a0 [ 135.257718][ T1889] ? fpregs_restore_userregs+0x128/0x260 [ 135.257742][ T1889] __x64_sys_readv+0x7d/0x90 [ 135.257762][ T1889] x64_sys_call+0x3bd/0x9a0 [ 135.257785][ T1889] do_syscall_64+0x4c/0xa0 [ 135.257805][ T1889] ? clear_bhb_loop+0x30/0x80 [ 135.257828][ T1889] ? clear_bhb_loop+0x30/0x80 [ 135.257851][ T1889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.257872][ T1889] RIP: 0033:0x7f20cb39f559 [ 135.257888][ T1889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.257904][ T1889] RSP: 002b:00007f20cc195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 135.257923][ T1889] RAX: ffffffffffffffda RBX: 00007f20cb625fa0 RCX: 00007f20cb39f559 [ 135.257938][ T1889] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 135.257950][ T1889] RBP: 00007f20cb436b20 R08: 0000000000000000 R09: 0000000000000000 [ 135.257963][ T1889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.257975][ T1889] R13: 00007f20cb626038 R14: 00007f20cb625fa0 R15: 00007ffc43098db8 [ 135.257993][ T1889] [ 135.257998][ T1889] ---[ end trace 0000000000000000 ]--- [ 135.263407][ T1889] ------------[ cut here ]------------ [ 135.263416][ T1889] WARNING: CPU: 1 PID: 1889 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 135.263457][ T1889] Modules linked in: [ 135.263468][ T1889] CPU: 1 PID: 1889 Comm: syz.1.452 Tainted: G B W syzkaller #0 [ 135.263487][ T1889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.263499][ T1889] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 135.263522][ T1889] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 135.263539][ T1889] RSP: 0000:ffffc9000e5cf800 EFLAGS: 00010006 [ 135.263556][ T1889] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 135.263571][ T1889] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 135.263584][ T1889] RBP: ffffc9000e5cf970 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 135.263599][ T1889] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 135.263614][ T1889] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000000ac [ 135.263629][ T1889] FS: 00007f20cc1956c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 135.263647][ T1889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.263661][ T1889] CR2: 000055555e1588c8 CR3: 0000000126d33000 CR4: 00000000003506a0 [ 135.263678][ T1889] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 135.263690][ T1889] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 135.263703][ T1889] Call Trace: [ 135.263708][ T1889] [ 135.263719][ T1889] ? ring_buffer_read_page+0x1260/0x1260 [ 135.263743][ T1889] ? __kasan_check_write+0x14/0x20 [ 135.263764][ T1889] ? _raw_spin_lock+0x94/0xf0 [ 135.263782][ T1889] rb_buffer_peek+0x5f/0x930 [ 135.263802][ T1889] ring_buffer_consume+0x1aa/0x370 [ 135.263823][ T1889] ? __cfi_ring_buffer_consume+0x10/0x10 [ 135.263843][ T1889] ? print_trace_line+0x393/0x6b0 [ 135.263862][ T1889] tracing_read_pipe+0x5b3/0xaf0 [ 135.263889][ T1889] do_iter_read+0x493/0xb30 [ 135.263913][ T1889] ? vfs_iter_read+0xa0/0xa0 [ 135.263934][ T1889] ? import_iovec+0x7c/0xb0 [ 135.263955][ T1889] do_readv+0x25d/0x450 [ 135.263978][ T1889] ? generic_file_rw_checks+0x2a0/0x2a0 [ 135.264009][ T1889] ? fpregs_restore_userregs+0x128/0x260 [ 135.264033][ T1889] __x64_sys_readv+0x7d/0x90 [ 135.264055][ T1889] x64_sys_call+0x3bd/0x9a0 [ 135.264078][ T1889] do_syscall_64+0x4c/0xa0 [ 135.264095][ T1889] ? clear_bhb_loop+0x30/0x80 [ 135.264118][ T1889] ? clear_bhb_loop+0x30/0x80 [ 135.264141][ T1889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.264163][ T1889] RIP: 0033:0x7f20cb39f559 [ 135.264178][ T1889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.264194][ T1889] RSP: 002b:00007f20cc195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 135.264214][ T1889] RAX: ffffffffffffffda RBX: 00007f20cb625fa0 RCX: 00007f20cb39f559 [ 135.264229][ T1889] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 135.264241][ T1889] RBP: 00007f20cb436b20 R08: 0000000000000000 R09: 0000000000000000 [ 135.264254][ T1889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.264267][ T1889] R13: 00007f20cb626038 R14: 00007f20cb625fa0 R15: 00007ffc43098db8 [ 135.264285][ T1889] [ 135.264290][ T1889] ---[ end trace 0000000000000000 ]--- [ 135.264345][ T1889] ------------[ cut here ]------------ [ 135.264351][ T1889] WARNING: CPU: 1 PID: 1889 at kernel/trace/ring_buffer.c:4773 rb_get_reader_page+0xada/0xc60 [ 135.264380][ T1889] Modules linked in: [ 135.264388][ T1889] CPU: 1 PID: 1889 Comm: syz.1.452 Tainted: G B W syzkaller #0 [ 135.264406][ T1889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.264417][ T1889] RIP: 0010:rb_get_reader_page+0xada/0xc60 [ 135.264438][ T1889] Code: df 42 80 3c 20 00 74 0d 48 8d 7b 10 e8 4f 3b 43 00 48 8d 4b 10 48 8b 19 48 8d 7b 08 be 04 00 00 00 e8 da 3d 43 00 f0 ff 43 08 <0f> 0b 48 83 7c 24 20 00 0f 85 74 ff ff ff e8 53 a1 fd ff e9 13 fe [ 135.264460][ T1889] RSP: 0000:ffffc9000e5cf800 EFLAGS: 00010006 [ 135.264476][ T1889] RAX: 1ffff1102000aa01 RBX: ffff888100052600 RCX: ffffffff8173cd66 [ 135.264491][ T1889] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888100052608 [ 135.264504][ T1889] RBP: ffffc9000e5cf978 R08: ffff88810005260b R09: 1ffff1102000a4c1 [ 135.264519][ T1889] R10: dffffc0000000000 R11: ffffed102000a4c2 R12: dffffc0000000000 [ 135.264534][ T1889] R13: 1ffff1102000a126 R14: 1ffff1102000a123 R15: 00000000000000ac [ 135.264549][ T1889] FS: 00007f20cc1956c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 135.264567][ T1889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.264581][ T1889] CR2: 000055555e1588c8 CR3: 0000000126d33000 CR4: 00000000003506a0 [ 135.264598][ T1889] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 135.264610][ T1889] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 135.264623][ T1889] Call Trace: [ 135.264627][ T1889] [ 135.264637][ T1889] ? ring_buffer_read_page+0x1260/0x1260 [ 135.264662][ T1889] rb_advance_reader+0x2b/0x770 [ 135.264681][ T1889] ring_buffer_consume+0x1e7/0x370 [ 135.264703][ T1889] ? __cfi_ring_buffer_consume+0x10/0x10 [ 135.264723][ T1889] ? print_trace_line+0x393/0x6b0 [ 135.264741][ T1889] tracing_read_pipe+0x5b3/0xaf0 [ 135.264767][ T1889] do_iter_read+0x493/0xb30 [ 135.264790][ T1889] ? vfs_iter_read+0xa0/0xa0 [ 135.264811][ T1889] ? import_iovec+0x7c/0xb0 [ 135.264832][ T1889] do_readv+0x25d/0x450 [ 135.264856][ T1889] ? generic_file_rw_checks+0x2a0/0x2a0 [ 135.264887][ T1889] ? fpregs_restore_userregs+0x128/0x260 [ 135.264911][ T1889] __x64_sys_readv+0x7d/0x90 [ 135.264932][ T1889] x64_sys_call+0x3bd/0x9a0 [ 135.264953][ T1889] do_syscall_64+0x4c/0xa0 [ 135.264970][ T1889] ? clear_bhb_loop+0x30/0x80 [ 135.264992][ T1889] ? clear_bhb_loop+0x30/0x80 [ 135.265014][ T1889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.265036][ T1889] RIP: 0033:0x7f20cb39f559 [ 135.265050][ T1889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.265066][ T1889] RSP: 002b:00007f20cc195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 135.265084][ T1889] RAX: ffffffffffffffda RBX: 00007f20cb625fa0 RCX: 00007f20cb39f559 [ 135.265098][ T1889] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 135.265111][ T1889] RBP: 00007f20cb436b20 R08: 0000000000000000 R09: 0000000000000000 [ 135.265123][ T1889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.265135][ T1889] R13: 00007f20cb626038 R14: 00007f20cb625fa0 R15: 00007ffc43098db8 [ 135.265153][ T1889] [ 135.265158][ T1889] ---[ end trace 0000000000000000 ]--- [ 135.382062][ T28] audit: type=1400 audit(1792621284.269:241): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 136.995429][ T28] audit: type=1400 audit(1792621284.269:242): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.022191][ T28] audit: type=1400 audit(1792621284.269:243): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.040979][ T1900] loop4: detected capacity change from 0 to 512 [ 137.048862][ T28] audit: type=1400 audit(1792621284.269:244): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 137.056573][ T1900] EXT4-fs (loop4): Test dummy encryption mode enabled [ 137.079143][ T28] audit: type=1400 audit(1792621284.269:245): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.099735][ T1900] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 137.117266][ T28] audit: type=1400 audit(1792621284.269:246): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.126545][ T1900] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.453: bad orphan inode 131083 [ 137.151194][ T1900] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 137.159095][ T28] audit: type=1400 audit(1792621284.269:247): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 137.183212][ T291] EXT4-fs (loop4): unmounting filesystem.