last executing test programs: 58.550008154s ago: executing program 32 (id=179): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./bus\x00', 0x2218050, &(0x7f0000000140)=ANY=[], 0x1, 0x1528, &(0x7f0000001800)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8c1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) syslog(0x2, &(0x7f0000001240)=""/4120, 0x1018) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 54.823086485s ago: executing program 3 (id=245): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008000200"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x200000000622c, 0x0) 53.966324025s ago: executing program 3 (id=256): pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f00000000c0)=0x5, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 53.108428115s ago: executing program 3 (id=271): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x40000) 51.7526389s ago: executing program 3 (id=296): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x18b341, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x40) 51.470917303s ago: executing program 3 (id=300): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1fb, 0x4, 0x0, 0x3, 0x8001, 0x8}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x0, 0x6, 0xfffffffb}}]}]}}}]}, 0x64}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x830, &(0x7f0000000440)={0x11, 0x8100, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 50.374871585s ago: executing program 3 (id=330): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x10, "1b09000040000000000000e678000000001000"}) r1 = syz_open_pts(r0, 0xca440) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 50.357843296s ago: executing program 33 (id=330): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x10, "1b09000040000000000000e678000000001000"}) r1 = syz_open_pts(r0, 0xca440) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 46.805201525s ago: executing program 4 (id=406): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {r2, r3+60000000}}, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) futex_waitv(&(0x7f00000000c0)=[{0x800000000, &(0x7f0000000080), 0x82}], 0x1, 0x0, &(0x7f0000000180)={0x77359400}, 0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0xc1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 46.722700726s ago: executing program 4 (id=409): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x813) r1 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf32(r2, &(0x7f0000000600)=ANY=[], 0x858) pread64(r2, &(0x7f0000000080)=""/234, 0xea, 0x2) 46.658626397s ago: executing program 4 (id=412): openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) 46.584992908s ago: executing program 4 (id=414): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 46.541612498s ago: executing program 4 (id=415): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x40002102, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="c3ee719735", 0x5}], 0x1}, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)='J', 0x1) close(r1) 46.3988063s ago: executing program 4 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 46.35887444s ago: executing program 34 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 16.770654312s ago: executing program 2 (id=868): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0x40, 0x7f, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x3, 0xf, 0x1, {0x22, 0xf7e}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0xfc, 0xf}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}, 0x0, 0x0}, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) syz_usb_control_io$hid(r0, &(0x7f00000014c0)={0x24, 0x0, &(0x7f0000001400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42f}}, &(0x7f0000001440)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xc, "88c244a1"}, @global=@item_012={0x2, 0x1, 0x9, '+s'}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_4={0x3, 0x1, 0x1, "32a9d4f3"}, @local=@item_012={0x0, 0x2, 0x1}]}}, &(0x7f0000001480)={0x0, 0x21, 0x9, {0x9, 0x21, 0xf, 0x3, 0x1, {0x22, 0x32e}}}}, &(0x7f0000001740)={0x2c, &(0x7f0000001500)={0x0, 0x8, 0xbd, "a2fce7f059217bc44d92eb8ee518c86fc1f1275e3d8fcd4b3d0af4ff36a5705fc8f68195e048060bd98782cdc76e5c4577355e3ce0a2c9166c538827b50d7bde5f2848b48b9067621c354cda2f19bd70731f082fd0f6de9e6992dc88438ecb428b222c44d99047d7a159adfb7e8bb99597af617a3c3b2733cc250134634993bb79b08a742815d075c56077e4a413d93f0a20d40c8e5be75ab1389c9804d846fc891aa5eb709167cff0e1ba51b02f95df202723006c9110855128f158be"}, &(0x7f0000001600)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001640)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001680)={0x20, 0x1, 0x71, "9a6a25b2e189bbc1bd15062464138810d32883201d49516718fe8838ee7184de4f3c3f2fb6a01c1b273e29f870d27d5ef9e91b2210cbfef80a4e2f40d38f70eedf807abe1621fa6d4df2051393970656490243e1b9696b3b67f3baef22387bf1cad123e59432964f047d91698f51c9ac6f"}, &(0x7f0000001700)={0x20, 0x3, 0x1}}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000001780)) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000001bc0)={0x14, &(0x7f0000001a40)={0x40, 0x21, 0x40, {0x40, 0x22, "a6a08fb0a0172502007b53b8b0e7f2cbaba000917e18036f4a309c94928e7b7dfe4e4207e96473ebe1d3c74a67e48fcf4636fbda8c1c5728f22411680b91"}}, &(0x7f0000001ac0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000020c0)={0x24, 0x0, &(0x7f0000001f40)={0x0, 0x3, 0x7, @string={0x7, 0x3, "bccacf39fe"}}, 0x0, 0x0}, 0x0) 15.919789231s ago: executing program 6 (id=888): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x5d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 15.884851582s ago: executing program 7 (id=889): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r3, 0x0) 15.853819562s ago: executing program 7 (id=890): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = eventfd2(0x0, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) syz_clone(0x40800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="380c97a58c5743c45e732e3b487ae66b148b5e3a677bc0e01a") close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 15.813193852s ago: executing program 7 (id=893): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @local}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) unshare(0x400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x2007fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x9, 0x702, 0x3, 0x1, 0xfffffffa, 0xe, 0xa, 0x9, 0x4, 0x7, 0x10001, 0x100000, 0x762, 0x1, 0xd, 0xe, 0x2b12, 0x80100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x10fdf, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd3, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0xd, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x9, 0x27f, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x800084, 0x100, 0x5, 0x2, 0x6, 0xb, 0x5, 0x20006, 0x5, 0x15, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x1, 0x9fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 15.673208294s ago: executing program 7 (id=894): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4ef07ec3ad71e14dc00000000c2ab00c60e000000000000080000090100", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mount(0x0, 0x0, 0x0, 0x2000, &(0x7f0000000300)='@\x00') 15.435421756s ago: executing program 7 (id=895): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r5, r3, 0x15, 0x0, @val=@netkit={@void, @value, @void, @void, r4}}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000080)) 15.17579234s ago: executing program 6 (id=899): syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@abort}, {@delalloc}, {@nombcache}, {@test_dummy_encryption}, {@errors_continue}, {@data_err_ignore}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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") ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200060000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 15.11056542s ago: executing program 7 (id=900): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r4, 0x0, 0x1, 0x3, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 15.034262721s ago: executing program 35 (id=900): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r4, 0x0, 0x1, 0x3, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 14.787594254s ago: executing program 2 (id=902): creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) inotify_init1(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r1, &(0x7f00000020c0)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x44000) 14.600184096s ago: executing program 2 (id=903): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) open(0x0, 0x10000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000380)={[{@nombcache}, {@delalloc}, {@data_err_ignore}, {@nojournal_checksum}, {@noauto_da_alloc}, {@bsdgroups}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) 14.410594768s ago: executing program 2 (id=904): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x9a5840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 14.410384118s ago: executing program 6 (id=905): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(0x0, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = syz_io_uring_setup(0x67fc, &(0x7f0000000080)={0x0, 0xc25e, 0x1000, 0x1, 0x341}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x70db, 0x1, 0x1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 14.359484129s ago: executing program 2 (id=906): socket$tipc(0x1e, 0x2, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r0 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x401f8a, 0x10, 0x3, 0x28c}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.910835994s ago: executing program 2 (id=909): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 13.822309625s ago: executing program 36 (id=909): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e00"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 13.769686175s ago: executing program 6 (id=911): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000057c0)=ANY=[@ANYBLOB='alloc_mode=default,active_logs=4,mode=fragment:block,noinline_xattr,background_gc=sync,background_gc=off,noinline_xattr,fastboot,fsync_mode=strict,discard_unit=section,noquota,disable_ext_identify,extent_cache,resgid=', @ANYRESOCT, @ANYBLOB="2c757365725f78610974722c009683b8ed5d18a7ccd5d4b167e3be683f8dd883774abefdb0f4044e811c8bf7ada4f0a6b5dc9cc39fa0e1fdea3b4f14f894bb3d02aefe22bac31dc746e403a27286fb1437f973a3a21b75fe3496cdf483bd6ca86c63dd03e15e0c34f51622764e2f1148d8f9d6398821e2d5638494f409f88f099537510ac3bb6b6442b01084ba28a49930cd9f07e6151945964d5e00ba00f6aa921b4cb0ace886a1"], 0x21, 0x554e, &(0x7f0000000240)="$eJzs3E1vG0UYAOBx0vSbEiEO3LqoQkqk2qrTD8EtQCs+RKqowIETOLZjubG9Uew4IScOHBEH/gkCiRNHfgMHztwQBxA3JJB3JqgpTUGKEzfJ80jrd2d2992ZTWTp3V05AKfWbPbHb6VwJVwIIUyHEC6HUKyX0lJYjOGlEMLVEMLUI0sp9f/TcTaEcDGEcGWUPOYspU1fXR9eu/3ru79//+O5M5e+/u6nyc0amLRXQgjd9bi+1Y0xb8X4MPXXhu0idm8NU4wbumupnce41VwpMmzVdverFfFmK+6fr2/2R3G1U6uPYqu9WvSv9+IJ+8PWbp7igIe1jaLdaK4Usd3Pi9jaiePa3onfbTv9QczTSPk+LdKHwWA3xv7mdjPOZ32tiPXeIPXHvHmjuT2KwxTT6UI97zSKcawc5Eo/015+r93b3M6GzY1+O+9ltyvVVyvVO+XqRt5oDpq3yrVu486tbK7VGe1WHjRr3cVWnrc6zUo9785nc616vVytZnN3myvtWi+rVis3KzfKt+fT2vXsrfsfZp1GNjeKb7R7m4N2p5+t5htZPGI+W6jcfG0+u1bN3l9azpYf3Lu3tPzBx3c/uv/60jtvZjOjv9q/h5XNLdxYWChXb5QXqvMHuwDP9vxT2t1hfZ4GPcb5w4GUJj0AgONH/Q9MwuHV/xsPQnh6/b/73fa0+n/6P+r/oP4fi2NV/572+v8Q5g8Hov4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fp755u1iZTa2L6X+51LXC6ldCiFMhRD+eoLpcHZPzumUZ2af/WceG8MPpVBkGJ3jXFouhhAW0/Ln84d9FQAAAODk+vazq1/Gaj1+zE56QIxZKS1PFG/aTF3+ZIwnm5n9ZUzZpkYfL44pWfH/fSZsjylbcQPr/JiSxVtuZ8aV7X+Z3hPOPxJKMUw9fsTYZgsAAEzM3krgaKsQAAAAjtIX+25ZO9JxcMSKB8PpXfz0Av+5GNLDvgux7dEfAAAAHF/7vhgOAAAAnBhF/e/3/wAAAOBki7//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzNzr3cJg7EcQD+G+PF+9Ki1d63ldygjJSQY44RBaQJSiAtpAFqILeUEEHkB1GIiIDYjkX0fZI9sWX9ZsbhwMygAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALj1ki+ndzf/bpjnrTQNFQNpKdwAAAIA9VtliWv4xrq5/1vd/17f+1tdJRAwiYt/wPY1vO5lpnZO983z2pg33EWVCUceoPn5ExEV1bOJP128BAAAAvqRhcVrO5pN64b08jftuFY0d/T/M63Lw67KlqpOIyMaPLaUNirx/LYWVn+9hXO+t53TlBFbevFWVcspt2FbaUaof22xn7fJXRVIVB95Ka30HAAA+UbpTHBqF+N4PAABwvq76bgBd+H7wiSS2S5kvS4Gjqsh3Igz6AQAA4HwlfTcAAAAA6Fw5/j9l/7/oZ/+/eLL/HwAAAHxYtf8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXVpli+lyNp80zVlvmmmnNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwzP68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fv20YVBwD83Z3P/QEIE5CHIAQSAyzUdUtLN8QAihj4E5Ci1C2hLj/aDLSqkLKwocxdEIwIIYHC1n+AqRtSK3UpWwcPRWJhMbrzXXxpKtVtlDsn+Xykd+9rx7n3fWfJ8vfeSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKI0+mMZJduhM4rh47s7DGytZf/eRPnNr495i1rI4qjPp/eG16oOo21wiAAAAHB5JWd+HEO6nm0tZH3fy+j8tX5PV/D++MInLev7Rur/sy9o/a3/8/uCVrYE6k3Gyk15YHQ5O7kyltXeznG8vPvEVrfzK5/dekvwNiT9ef3mU5tcz+v727Q/beXikjmwBgGdxouyLoPw+lPX9JhMD4NBoVQrvsv5POs3mBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCH0Xp4royjEMJiaxpn7j68sfK4/tbGvcWynb15c6N6zuwUaQjhwupwcLLGucy7q9euX1oeDgdX6g9eDyE0Nfr7xfQvfTrDi0No5PrsVfDfeDx+qt862nzOuwri4s2el3z2R/Dkz45OtJefTAAAHDRp0bKvkffTzaXsuWghhPFP2+v/typxmLH+f/DZ2TvVsar1f7+2Gc6/3trlr3pXr11/Z/Xy8sXBxcEX757qv9c/fe7MmXO9/F5Jzx0TAAAAdqddtGr9Hy/sXP8/XonDjPX/1z/0v52O9Fd+VP/vNF30azoTAACAw+2lN/7953HbLKN2O3yzvLZ2pT85bj0+NTk2kOpTO1K0av2fLDSdFQAAAFCH0Xq0bf3/fCUOM67/P//zq79Wz5mEEI4V6/8nVr4cnq9vOnOtjj8nbnqOAAAANOtY0arr/2m+/z/e2vIQhxDefnMSF/8GcKb6P/nou1+qYyWV/f+n65viXIq7k+uR990QWt1tP/6zscQAAAA4kI4WLSv2/043lz7/7fgnbfv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2fwAAAP//Fwg9JA==") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xc0000, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 13.121028822s ago: executing program 6 (id=914): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x5d81, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 12.48278001s ago: executing program 6 (id=921): bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0xf5) close(r1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) 12.47088335s ago: executing program 37 (id=921): bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0xf5) close(r1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) 2.297155374s ago: executing program 5 (id=1080): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) r2 = fsmount(r0, 0x1, 0x0) fchdir(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000001c0)='.\x00', 0x813) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) 2.255421144s ago: executing program 5 (id=1081): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x1}, 0x10) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x3000, 0x4) 2.170744985s ago: executing program 0 (id=1083): socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070020001f00001a000000030000a95a6e870200010000e9ff070040000200ee1500050005000000cc580a"], 0x80}}, 0x20000000) 2.163477956s ago: executing program 9 (id=1084): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ftruncate(r2, 0x80796c) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) 2.143135546s ago: executing program 5 (id=1085): unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000100)={0x1b, 0x0, 0xff}) syz_usb_connect(0x3, 0x164, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e010000082406", @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRESHEX=r2], 0x0) r3 = socket(0x15, 0x6, 0x0) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r3, @ANYRES8=r3], 0x1, 0x550d, &(0x7f0000005880)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwCZtuu+it6i5+YJey6sGTpkkasptkSpOmtScPHsWD/4koePLo3+DBszfxoHgTlMxMZOvXpUljt78fTJ5537x55nlDKTwzkADOraXk159LcT0uR8R8RFyLyM5LxZHZyMMLEXEjIuaeOErF/J8TFyLiSkRcHyXPc5aKtz6/Nby5/tNbv3zz3cWFq198/f3sdg3M2osR0d3Nzw+6eUxbeXxUzNeG7Sx214ZFzN/oPi7GaR4PmttZhoPaeF0ti3da+fp0d78/ijudWn0UW+2dbH63l1+wP2yN82QfeFTby8aN5nYW2/00i62jvK7Do/x/21F/kOdpFPk+ytLHYDCO+XzzsJnvZ/dxFuu9QTGf500bzcNRHBaxuFzU004jq2P7JN/0/9vb7d7+YTJs7vXbaS9Zr1RfqlTvlqt7aaM5aK6Va93G3bVkudUZLSsPmrXuRitNW51mpZ52V5LlVr1erlaT5XvN7Xatl1SrlTuV2+X1leLsVvL6g/eSTiNZHsVX2739QbvTT3bSvST/xEqyWrnz8kpys5q8s7mVbD28f39z690P7r3/4JXNN18rFv2trGR59fbqarl6u7xaXTlH+/+kKHqC+4cTKc26AICzR/8PzML0+v+9hxHT7/9D/z8RZ6r/Pe/9/xT2Dyei/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLd+WPzyjexkKR9fLeafKaaeK8aliJiLiN//wXxcOJZzvsiz+C/rF/9Sw7elyDKMrnGxOK5ExEZx/PbstL8FAAAAeHp99fGNz/JuPX9ZmnVBnKb8ps3ctQ8nlK8UEYtLP04o29zo5fkJJcv+vhficELZshtYlyaULL/ltjAeXZxU2v8yfyxceiKU8jB3GlUAAACn63gnsDDTWgAAAJimT2ddALNRivGjzPGz4PHDx+KB4OVjIwAAAOAMKs26AAAAAGDqsv7f7/8BAADA0y3//T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAPdu4nN20gigPws8GF/lNR1X2v0h0cooseoctuKlUcoJfgAFmQK+QCnIHscoQIIjwOgYhISIxtJfo+yQw25scbBIuZkQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADadFstZ9f/vv+/NGezvUye3gAAAACnrKvlrH4ySecfm+ufm0tfm/MiIsqIODV2H8S7o8xBk1M93X91eH/1rIabiDph9xmj5vgQET+a4/5L298CAAAAvF2r+WKaRuvpYdJ3QXQpTdqUn35lyisioprcZUord3nfMoXVv+9h/MmUVk9gjTOFpSm3Ya60s9R/9/2s3figKVJTnnzbvshsfQcAADo0OGq6HYUAAADQpd99F0A/inhcytwvBY5S0yzvvT86AwAAAF6hou8CAAAAgNbV4/+O9v/b2v8PAAAA+pH2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBN62o5W80X00tzNtsz/P0Z8cJLeXoDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OZ3f/k/MTXOJHOvjaXnkWTt1Ng6NfbOjaM/jK9fAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB80e9++T8xNc4kc6eNpeORZO2qsXXV2HvQOHow3v4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFzP69xVHEAwN/M7GxtVVyj7CEiCh70Yrfb2tqbeFCCB/8EIaTbGrv1R5uDLUXMxZvk3IvoUURQ4q3/Q84J5BJvOewhgmdlZmeykx/g+mtmk3w+8OZ9dxjmfd8shHznvQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNLo7UmcZIfOOI6Lc5t7D5eyfutQn3m8tj2ftSyO6kz6ZHix+iHqNpcIAAAAZ0dS1vchhJ10fSHr405e/6flNVnN/+3T47is5w/X/WVf1v5Z++Xn3ef3B+qMx8luenN5OLh0NJXW/zfL2fbMX17Ryp98/u4lyb+Q+L3V50Zp/jyjrzc23mnn4bk6sgUA/omLZV8E5e9DWd9vMjEAzoxWpfAu6/+k02xOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHUYrYYnyzgKIcy3JnFma+/h0nH947Xt+bJde/RoLXw5uWd2izSEcHN5OLhU62xm2737D24vDoeDu/UHL4UQmhr9rWL6tz+Y4uIQGnk+gv8oiIsve1byORlBgz+UAAA4ldKiZXX9Trq+kJ2L5kL447uD9f+rlThMWf/vfnhtszpWtf7v1zbD2ddbufNp7979B68v31m8Nbg1+PiNy/03+1euX716vZe/K+l5YwIAAMC/0y5atf6P546u/1+oxGHK+v+zb/pfVMdK1P/Hmiz6NZ0JAADA2fbsy7//Fh1zPmq3w+eLKyt3++Pj/ufL42MDqf5t54pWrf+TuaazAgAAAOowWo0OrP/fqMRhyvX/p75/4cfqPZMQwvli/f/i0ifDG/VNZ6bV8efETc8RAACAZp0vWnX9P833/8f7Wx7iEMJrr4zj4t8ATlX/J+9+9UN1rOr+/yv1TXEmxd3x88j7bgitbtMZAQAAcJo9UbSs2P81XV/46KcL77ft/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo258BAAD//7mfO3Y=") ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000000)) 2.130733306s ago: executing program 0 (id=1086): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0xc0ed008e, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@min_batch_time={'min_batch_time', 0x3d, 0xd23b}}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@acl}]}, 0xfe, 0x47d, &(0x7f0000000dc0)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r1, 0x0, 0x0) 2.023882817s ago: executing program 9 (id=1087): pipe(&(0x7f0000019480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) fcntl$setown(r0, 0x8, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x5a57, 0x8, 0x3, 0x400000}) r2 = io_uring_setup(0x4f73, &(0x7f00000000c0)={0x0, 0xec19, 0x80, 0x1000000, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x18, &(0x7f0000000000), 0x1) 1.901867638s ago: executing program 9 (id=1089): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x50f1}, 0x4040) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000240)='?', 0x1, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.831138989s ago: executing program 9 (id=1091): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) getdents(r3, &(0x7f0000000080)=""/43, 0x2b) getdents(r3, 0x0, 0xbb) 1.75380214s ago: executing program 9 (id=1095): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, 0x0, 0x0) sendmsg(r0, &(0x7f0000000580)={&(0x7f0000000000)=@nfc_llcp={0x27, 0x0, 0x0, 0x5, 0x3, 0x9, "57cfa1e04f596def6c11e57740138164d19caea2717d4fe5f68cd91a46208aad04b5b6af2b89dd597608ca95c4e946ffc557dd09d3d3ed241e2c1896658143", 0x2}, 0x80, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000200)}], 0x2, &(0x7f00000002c0)}, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f000000000000090507"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) 1.105902208s ago: executing program 0 (id=1102): r0 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}], &(0x7f0000001540)=[0x2]}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r1 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 1.023092218s ago: executing program 8 (id=1103): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x1c0, 0x0, 0x400, [{{0x4, 0xffffffffffffffff, 0x7ff, 0x7ffffffffffffdff, 0x1fff, 0x7ff, {0x3, 0xfffffffffffffffc, 0x3, 0x2, 0x5, 0x2, 0x2, 0x6, 0x7, 0xc000, 0x0, r2, r3, 0x1, 0x6}}, {0x0, 0x7, 0x116, 0x300, '\x00\x1bdy\x19`\x04\n\x91\xbc\x19\x81\xe4C\x88!\n\x06\xf4\x05\r\x96_L\xe1\x1c\xb9\x0e\xcd\xe7KE\xc3\x19\xf5\xc6\xb8v\x82\xd6\xe2\xda\xed\'\xc0\x0e$\x87\xad*\xc3\x92}+`[\xe8g\xd7\xdc\x0eu\xa18@6\xdd\xc7w\x10\x99\xe1\x88\x110v%\x04!\xa8&\xae\xd1^]\xbdcvI\xb9.\xe9L\xf3\x1c\xfc\xaf\xbdH\xb2\xd3*\xb6\xa2F4\x9e*\xf4\vSU\x052\xe4Bp\x8e\x13\xe5_\xb9h\xbe\xb8\xd8(A\x19\x92\x01\x00\x8ao\xd5\xeb\v\x80p\x88\xd1T\xcd`g\xc64\xe1D\xbdsJ,\x18ov\xdb\xeeJ+\xdfa\xe9\xc7\x9c\x03\xc7\xad\xa6\b\xc4\x81\xa7A\xb9\xe7KqJJ\xe4_n\x11A\x9d\xa3\xb8J\x13\xc95\xec[]\x98\xe8yO\xea+,\xb6\xc1-\xf3\xe1i\x14j;\xa2)h\xec\xcd\x88]\xaf\xad#\xaf\xd2\xd0\xfbm7\xb6JP\xbe\xcc\x14\xdf\x9a*\x83N\'6\xf8\n\x02\x89H\x83\x8c\xa97\xf3@C\xdb.Yhs\x14\x92\xd9\xdaa\\b\xc6\xc3\x15\xaf\x8f\x9d\x13\x8c\xb0\x93\x96\x90Y\xaa'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x2e) 647.817432ms ago: executing program 0 (id=1107): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0xffffc000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 487.271764ms ago: executing program 1 (id=1108): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0b48cc35abc7a02b0cdf915d9cf8b199868a294d5ede5b2dce6671d12df38848f829086458e661863e3d56b6a781316c0199fc4abc6f2bde7144e57be6535633748e5e449195a9634b233f502a2238648c376342aebbb332695a3172"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x30}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f00000001c0), 0x15) dup3(r0, r1, 0x0) 442.869345ms ago: executing program 1 (id=1109): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0118020003110000280012800b00010065727370616e0000180002800400120005001700000000000500160002"], 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x6f4}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 442.298215ms ago: executing program 1 (id=1110): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2, 0xb, 0x8, 0x3, 0x2, 0x0, 0x70bd27, 0x25dfdbfc}, 0x10}}, 0x40000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) 384.032605ms ago: executing program 0 (id=1111): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x572, &(0x7f0000001700)="$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") chdir(&(0x7f0000000100)='./file0\x00') r1 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 304.223136ms ago: executing program 1 (id=1112): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x80) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x7ffffffe, 0x1) getdents64(r3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 278.596267ms ago: executing program 1 (id=1113): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0xffffffffffffffff, 0x9, 0x900) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000680)=0x5, 0x4) syz_mount_image$exfat(&(0x7f0000000380), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB='gid}', @ANYRESHEX=0xee00, @ANYBLOB=',sys_tz,errors=remount-ro,iocharset=macinuit,errors=remount-ro,errors=remount-ro,fmask=00000000000000002000000,fmask=00000000000000000000002,errors=remount-ro,keep_last_dots,dont_measure,fsmagic=0x000000000000000b,\x00'], 0x0, 0x1536, &(0x7f0000001f40)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000440)='./file0\x00', r0}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x109342, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3003000) 261.564357ms ago: executing program 1 (id=1114): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f00000001c0)={0x20, 0x1, 0x6, "3bf74cb32a45"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000300)={0x20, 0x13, 0x1, "dd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000003c0)={0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="401203"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 213.807938ms ago: executing program 0 (id=1115): r0 = io_uring_setup(0x2043, &(0x7f0000000000)={0x0, 0xd992, 0x10, 0x1, 0xc0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) epoll_create1(0x0) socket$inet(0x2, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 138.303118ms ago: executing program 8 (id=1116): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe6c11ffe4afd7b0e, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1f, &(0x7f00000000c0)=""/36, &(0x7f0000000080)=0x24) 138.103698ms ago: executing program 8 (id=1117): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000271) lseek(r2, 0x103, 0x0) getdents64(r2, 0x0, 0x4f) 137.926388ms ago: executing program 8 (id=1118): r0 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x62040200) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x6d5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) socket$inet6(0xa, 0x2, 0x0) 118.172538ms ago: executing program 5 (id=1119): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r2, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, 0x0, &(0x7f0000000000)) 105.080519ms ago: executing program 5 (id=1120): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 90.978289ms ago: executing program 8 (id=1121): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x9, r2}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000004c40)={@ipv4={'\x00', '\xff\xff', @multicast2}, r2}, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003e00290600000000fdffffff0a"], 0x14}, 0x1, 0x6000000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008040}, 0x44080) gettid() 90.543509ms ago: executing program 5 (id=1122): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) close_range(r0, 0xffffffffffffffff, 0x0) 154.28µs ago: executing program 9 (id=1123): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xffffffeffffffff5]}, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1e, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 0s ago: executing program 8 (id=1124): clock_adjtime(0x0, &(0x7f0000000440)={0x5, 0x7fffffff, 0x0, 0xa, 0x7ff, 0x0, 0x2, 0xd, 0x800000000000000, 0x2000040, 0x2, 0x334a, 0x2000000, 0x9, 0x4, 0x1, 0x3, 0x9, 0x9, 0x9, 0xfffffffffffffffb, 0x20000000000000b, 0xaf, 0x67, 0x5, 0x8}) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. [ 24.212461][ T28] audit: type=1400 audit(1778084488.130:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.216140][ T278] cgroup: Unknown subsys name 'net' [ 24.235135][ T28] audit: type=1400 audit(1778084488.130:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.262482][ T28] audit: type=1400 audit(1778084488.160:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.282457][ T278] cgroup: Unknown subsys name 'devices' [ 24.406028][ T278] cgroup: Unknown subsys name 'hugetlb' [ 24.411656][ T278] cgroup: Unknown subsys name 'rlimit' [ 24.546193][ T28] audit: type=1400 audit(1778084488.470:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.569425][ T28] audit: type=1400 audit(1778084488.470:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.594239][ T28] audit: type=1400 audit(1778084488.470:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.618835][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.627665][ T28] audit: type=1400 audit(1778084488.550:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.653168][ T28] audit: type=1400 audit(1778084488.550:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.691320][ T28] audit: type=1400 audit(1778084488.610:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.717694][ T28] audit: type=1400 audit(1778084488.610:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.717734][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.493969][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.501060][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.508703][ T286] device bridge_slave_0 entered promiscuous mode [ 25.515862][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.522928][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.530530][ T286] device bridge_slave_1 entered promiscuous mode [ 25.637886][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.645030][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.652416][ T289] device bridge_slave_0 entered promiscuous mode [ 25.662961][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.670068][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.677669][ T289] device bridge_slave_1 entered promiscuous mode [ 25.696598][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.703709][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.711251][ T287] device bridge_slave_0 entered promiscuous mode [ 25.721042][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.728147][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.735667][ T287] device bridge_slave_1 entered promiscuous mode [ 25.759116][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.766289][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.773939][ T290] device bridge_slave_0 entered promiscuous mode [ 25.784294][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.791345][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.798849][ T288] device bridge_slave_0 entered promiscuous mode [ 25.805910][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.812963][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.820494][ T288] device bridge_slave_1 entered promiscuous mode [ 25.827298][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.834439][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.841908][ T290] device bridge_slave_1 entered promiscuous mode [ 25.960675][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.967801][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.975143][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.982178][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.038944][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.046156][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.053455][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.060536][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.084514][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.091595][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.098915][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.105974][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.129262][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.136346][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.143597][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.150658][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.163117][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.170224][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.177546][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.184610][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.226205][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.233530][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.240994][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.248711][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.256688][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.264097][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.272358][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.280882][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.288282][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.295936][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.303365][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.310711][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.330249][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.338062][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.345624][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.354128][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.361173][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.368625][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.377083][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.384170][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.391592][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.399953][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.406995][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.423871][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.431850][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.439901][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.450263][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.458747][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.467440][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.474578][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.507085][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.524410][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.532669][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.539744][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.547304][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.556228][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.563307][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.570793][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.578890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.586986][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.595167][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.602182][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.609591][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.617793][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.624859][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.632203][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.640419][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.648477][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.656545][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.664724][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.672761][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.681982][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.690194][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.699689][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.707880][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.716906][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.725196][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.739719][ T290] device veth0_vlan entered promiscuous mode [ 26.751501][ T289] device veth0_vlan entered promiscuous mode [ 26.757846][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.765865][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.773306][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.781612][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.789715][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.798232][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.806800][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.814873][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.822903][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.830496][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.847171][ T290] device veth1_macvtap entered promiscuous mode [ 26.856179][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.864771][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.872961][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.887830][ T289] device veth1_macvtap entered promiscuous mode [ 26.899717][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.908162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.916729][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.925373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.933714][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.944896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.952737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.962087][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.969971][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.983167][ T286] device veth0_vlan entered promiscuous mode [ 26.992663][ T288] device veth0_vlan entered promiscuous mode [ 27.004150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.012523][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.020079][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.028394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.036830][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.045271][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.053456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.061846][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.069868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.078181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.086583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.094984][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.103193][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.111701][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.120255][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.127910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.145582][ T287] device veth0_vlan entered promiscuous mode [ 27.158819][ T288] device veth1_macvtap entered promiscuous mode [ 27.168629][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.179436][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.188447][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.188517][ T290] request_module fs-gadgetfs succeeded, but still no fs? [ 27.200870][ T286] device veth1_macvtap entered promiscuous mode [ 27.219855][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.234773][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.248091][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.259100][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.279145][ T287] device veth1_macvtap entered promiscuous mode [ 27.290293][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.301028][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.310247][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.318671][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.327406][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.341640][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.373419][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.382399][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.397572][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.406121][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.421675][ T322] Illegal XDP return value 4294967294 on prog (id 1) dev syz_tun, expect packet loss! [ 27.522707][ T334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 27.602974][ T344] syz.2.15 uses obsolete (PF_INET,SOCK_PACKET) [ 27.680164][ T357] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.707101][ T361] xt_hashlimit: size too large, truncated to 1048576 [ 27.736621][ T363] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24'. [ 27.940227][ T388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.36'. [ 27.962734][ T390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.35'. [ 28.008967][ T396] xt_hashlimit: size too large, truncated to 1048576 [ 28.162452][ T400] loop3: detected capacity change from 0 to 256 [ 28.173663][ T402] binder_alloc: 401: binder_alloc_buf, no vma [ 28.224789][ T309] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 28.237815][ T404] kvm: pic: non byte read [ 28.249176][ T404] kvm: pic: non byte read [ 28.265457][ T404] kvm: pic: level sensitive irq not supported [ 28.265530][ T404] kvm: pic: non byte read [ 28.294255][ T411] netlink: 60 bytes leftover after parsing attributes in process `syz.3.44'. [ 28.414186][ T418] input: syz0 as /devices/virtual/input/input4 [ 28.426571][ T420] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 28.440176][ T398] syz.2.38 (398) used greatest stack depth: 21248 bytes left [ 28.465762][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 28.492438][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 28.519343][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 28.528527][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 28.536982][ T404] kvm: pic: non byte read [ 28.538412][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 28.550499][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 28.559109][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 28.577360][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 28.593232][ T427] xt_hashlimit: size too large, truncated to 1048576 [ 28.710619][ T433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.52'. [ 29.259050][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 29.259065][ T28] audit: type=1400 audit(1778084493.180:155): avc: denied { write } for pid=486 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.424074][ T497] wireguard: wireguard0: Could not create IPv6 socket [ 29.519240][ T28] audit: type=1400 audit(1778084493.440:156): avc: denied { create } for pid=501 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.567170][ T28] audit: type=1400 audit(1778084493.460:157): avc: denied { ioctl } for pid=501 comm="syz.1.83" path="socket:[16612]" dev="sockfs" ino=16612 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.629044][ T28] audit: type=1400 audit(1778084493.460:158): avc: denied { connect } for pid=501 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.650095][ T28] audit: type=1400 audit(1778084493.460:159): avc: denied { write } for pid=501 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.669496][ T28] audit: type=1400 audit(1778084493.540:160): avc: denied { create } for pid=512 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 29.691518][ T28] audit: type=1400 audit(1778084493.550:161): avc: denied { write } for pid=512 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 29.771804][ T28] audit: type=1400 audit(1778084493.690:162): avc: denied { create } for pid=529 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.809061][ T28] audit: type=1400 audit(1778084493.690:163): avc: denied { write } for pid=529 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.853405][ T28] audit: type=1400 audit(1778084493.690:164): avc: denied { nlmsg_write } for pid=529 comm="syz.0.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 29.957184][ T547] loop0: detected capacity change from 0 to 4096 [ 29.982443][ T547] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 30.183915][ T479] loop4: detected capacity change from 0 to 131072 [ 30.199104][ T479] F2FS-fs (loop4): Test dummy encryption mode enabled [ 30.214077][ T479] F2FS-fs (loop4): invalid crc value [ 30.241450][ T479] F2FS-fs (loop4): Found nat_bits in checkpoint [ 30.289215][ T479] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 30.303872][ T294] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.342159][ T479] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 30.495061][ T294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.526295][ T294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.543770][ T294] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 30.576256][ T294] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 30.603797][ T294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.614716][ T294] usb 1-1: config 0 descriptor?? [ 30.705766][ T569] netlink: 'syz.3.100': attribute type 5 has an invalid length. [ 30.728715][ T571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.93'. [ 30.807572][ T578] xt_hashlimit: size too large, truncated to 1048576 [ 30.863056][ T581] loop2: detected capacity change from 0 to 1054 [ 30.936957][ T581] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 64 [ 30.989756][ T588] xt_hashlimit: size too large, truncated to 1048576 [ 31.024556][ T294] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 31.032268][ T294] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 31.056045][ T294] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 31.079830][ T591] loop4: detected capacity change from 0 to 1024 [ 31.091603][ T593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.109'. [ 31.094358][ T591] EXT4-fs: Ignoring removed orlov option [ 31.149579][ T591] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 31.216470][ T599] capability: warning: `syz.2.110' uses deprecated v2 capabilities in a way that may be insecure [ 31.232821][ T294] usb 1-1: USB disconnect, device number 2 [ 31.287630][ T290] EXT4-fs (loop4): unmounting filesystem. [ 31.308379][ T591] syz.4.108 (591) used greatest stack depth: 21184 bytes left [ 31.409770][ T612] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 31.429496][ T612] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 31.542099][ T622] overlayfs: failed to get inode (-116) [ 31.556779][ T622] overlayfs: failed to get inode (-116) [ 31.607398][ T626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.122'. [ 31.659581][ T628] loop4: detected capacity change from 0 to 4096 [ 31.704412][ T628] EXT4-fs (loop4): Test dummy encryption mode enabled [ 31.728651][ T628] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 31.749606][ T628] System zones: 0-5 [ 31.786749][ T628] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 31.799335][ T637] loop1: detected capacity change from 0 to 128 [ 31.849265][ T628] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 16: comm syz.4.123: lblock 0 mapped to illegal pblock 16 (length 1) [ 31.884849][ T290] EXT4-fs (loop4): unmounting filesystem. [ 31.953376][ T655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.136'. [ 32.070315][ T677] loop3: detected capacity change from 0 to 256 [ 32.085703][ T677] FAT-fs (loop3): Directory bread(block 64) failed [ 32.092392][ T677] FAT-fs (loop3): Directory bread(block 65) failed [ 32.099309][ T677] FAT-fs (loop3): Directory bread(block 66) failed [ 32.107596][ T677] FAT-fs (loop3): Directory bread(block 67) failed [ 32.126335][ T677] FAT-fs (loop3): Directory bread(block 68) failed [ 32.133157][ T677] FAT-fs (loop3): Directory bread(block 69) failed [ 32.140056][ T677] FAT-fs (loop3): Directory bread(block 70) failed [ 32.166626][ T684] loop2: detected capacity change from 0 to 512 [ 32.172698][ T677] FAT-fs (loop3): Directory bread(block 71) failed [ 32.195661][ T677] FAT-fs (loop3): Directory bread(block 72) failed [ 32.204076][ T677] FAT-fs (loop3): Directory bread(block 73) failed [ 32.240123][ T684] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.147: iget: bad i_size value: 38620345925642 [ 32.271582][ T684] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.147: couldn't read orphan inode 15 (err -117) [ 32.316299][ T684] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 32.386582][ T696] syz.3.144: attempt to access beyond end of device [ 32.386582][ T696] loop3: rw=2049, sector=1224, nr_sectors = 160 limit=256 [ 32.426944][ T692] loop0: detected capacity change from 0 to 40427 [ 32.443037][ T697] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.147: bg 0: block 5: invalid block bitmap [ 32.463778][ T692] F2FS-fs (loop0): invalid crc value [ 32.470906][ T696] syz.3.144: attempt to access beyond end of device [ 32.470906][ T696] loop3: rw=2049, sector=1416, nr_sectors = 8 limit=256 [ 32.472840][ T697] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1020 with error 28 [ 32.497911][ T697] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.497911][ T697] [ 32.508142][ T697] EXT4-fs (loop2): Total free blocks count 0 [ 32.514425][ T697] EXT4-fs (loop2): Free/Dirty block details [ 32.520685][ T697] EXT4-fs (loop2): free_blocks=0 [ 32.525707][ T692] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 32.537234][ T697] EXT4-fs (loop2): dirty_blocks=1020 [ 32.542550][ T697] EXT4-fs (loop2): Block reservation details [ 32.550844][ T697] EXT4-fs (loop2): i_reserved_data_blocks=1020 [ 32.580790][ T692] F2FS-fs (loop0): Start checkpoint disabled! [ 32.590964][ T701] EXT4-fs (loop2): shut down requested (0) [ 32.607778][ T10] kworker/u4:1: attempt to access beyond end of device [ 32.607778][ T10] loop3: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 32.622837][ T692] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 32.643762][ T10] Buffer I/O error on dev loop3, logical block 306, lost async page write [ 32.655329][ T692] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 32.819207][ T713] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 32.866520][ T717] ======================================================= [ 32.866520][ T717] WARNING: The mand mount option has been deprecated and [ 32.866520][ T717] and is ignored by this kernel. Remove the mand [ 32.866520][ T717] option from the mount to silence this warning. [ 32.866520][ T717] ======================================================= [ 32.902742][ T717] erofs: (device loop0): mounted with root inode @ nid 36. [ 33.310554][ T762] set_capacity_and_notify: 1 callbacks suppressed [ 33.310570][ T762] loop0: detected capacity change from 0 to 1024 [ 33.326684][ T762] EXT4-fs: Ignoring removed orlov option [ 33.345338][ T762] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 33.381058][ T289] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 33.789274][ T770] syz.2.175 (770) used greatest stack depth: 20640 bytes left [ 33.797270][ T289] EXT4-fs (loop0): unmounting filesystem. [ 33.976477][ T779] loop3: detected capacity change from 0 to 8192 [ 34.104651][ T10] device bridge_slave_1 left promiscuous mode [ 34.110940][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.139165][ T785] loop4: detected capacity change from 0 to 2048 [ 34.147728][ T10] device bridge_slave_0 left promiscuous mode [ 34.155578][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.166455][ T785] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.184196][ T10] device veth1_macvtap left promiscuous mode [ 34.190280][ T10] device veth0_vlan left promiscuous mode [ 34.212720][ T785] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 34.275052][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 34.275068][ T28] audit: type=1400 audit(1778084498.190:228): avc: denied { mounton } for pid=798 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 34.309526][ T785] EXT4-fs error (device loop4): __ext4_get_inode_loc:4511: comm syz.4.184: Invalid inode table block 0 in block_group 0 [ 34.322402][ T785] EXT4-fs (loop4): Remounting filesystem read-only [ 34.339790][ T290] EXT4-fs error (device loop4): __ext4_get_inode_loc:4511: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 34.353577][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 34.360724][ T290] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5931: Corrupt filesystem [ 34.374176][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 34.380811][ T290] EXT4-fs error (device loop4): ext4_dirty_inode:6135: inode #12: comm syz-executor: mark_inode_dirty error [ 34.392754][ T290] EXT4-fs (loop4): Remounting filesystem read-only [ 34.399973][ T8] EXT4-fs error (device loop4): __ext4_get_inode_loc:4511: comm kworker/u4:0: Invalid inode table block 0 in block_group 0 [ 34.413248][ T8] EXT4-fs (loop4): Remounting filesystem read-only [ 34.420806][ T290] EXT4-fs (loop4): unmounting filesystem. [ 34.526408][ T804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.187'. [ 34.639070][ T798] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.646234][ T798] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.654426][ T798] device bridge_slave_0 entered promiscuous mode [ 34.661480][ T821] device lo entered promiscuous mode [ 34.684515][ T821] device tunl0 entered promiscuous mode [ 34.697711][ T821] device gre0 entered promiscuous mode [ 34.719468][ T821] device gretap0 entered promiscuous mode [ 34.747584][ T821] device erspan0 entered promiscuous mode [ 34.770645][ T821] device ip_vti0 entered promiscuous mode [ 34.788524][ T821] device ip6_vti0 entered promiscuous mode [ 34.828093][ T821] device sit0 entered promiscuous mode [ 34.869292][ T821] device ip6tnl0 entered promiscuous mode [ 34.900316][ T821] device ip6gre0 entered promiscuous mode [ 34.919549][ T821] device syz_tun entered promiscuous mode [ 34.926586][ T821] device ip6gretap0 entered promiscuous mode [ 34.936082][ T821] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.943333][ T821] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.956113][ T821] device bridge0 entered promiscuous mode [ 34.972307][ T821] device vcan0 entered promiscuous mode [ 34.980203][ T821] device dummy0 entered promiscuous mode [ 34.995649][ T821] device veth0 entered promiscuous mode [ 35.002413][ T821] device veth1 entered promiscuous mode [ 35.056086][ T821] device wg0 entered promiscuous mode [ 35.066617][ T821] device wg1 entered promiscuous mode [ 35.073275][ T821] device wg2 entered promiscuous mode [ 35.116909][ T847] process 'syz.2.199' launched './file0' with NULL argv: empty string added [ 35.123975][ T28] audit: type=1400 audit(1778084499.040:229): avc: denied { watch watch_reads } for pid=846 comm="syz.2.199" path="/48" dev="tmpfs" ino=284 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.148422][ T821] device veth0_to_bridge entered promiscuous mode [ 35.173881][ T28] audit: type=1400 audit(1778084499.050:230): avc: denied { execute_no_trans } for pid=846 comm="syz.2.199" path="/48/file0" dev="tmpfs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.198058][ T821] device veth1_to_bridge entered promiscuous mode [ 35.219219][ T821] device veth0_to_bond entered promiscuous mode [ 35.237266][ T821] device bond_slave_0 entered promiscuous mode [ 35.243649][ T821] device veth1_to_bond entered promiscuous mode [ 35.251508][ T821] device bond_slave_1 entered promiscuous mode [ 35.258852][ T821] device veth0_to_team entered promiscuous mode [ 35.266722][ T821] device team_slave_0 entered promiscuous mode [ 35.273095][ T821] device veth1_to_team entered promiscuous mode [ 35.283127][ T821] device team_slave_1 entered promiscuous mode [ 35.297287][ T821] device veth0_to_batadv entered promiscuous mode [ 35.308360][ T821] device batadv_slave_0 entered promiscuous mode [ 35.315842][ T28] audit: type=1400 audit(1778084499.240:231): avc: denied { getopt } for pid=858 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.339208][ T821] device veth1_to_batadv entered promiscuous mode [ 35.361476][ T821] device batadv_slave_1 entered promiscuous mode [ 35.369236][ T821] device xfrm0 entered promiscuous mode [ 35.379616][ T821] device veth0_to_hsr entered promiscuous mode [ 35.386939][ T821] device hsr_slave_0 entered promiscuous mode [ 35.394788][ T821] device veth1_to_hsr entered promiscuous mode [ 35.401922][ T821] device hsr_slave_1 entered promiscuous mode [ 35.408893][ T821] device veth1_virt_wifi entered promiscuous mode [ 35.416600][ T821] device veth0_virt_wifi entered promiscuous mode [ 35.424381][ T821] device veth1_vlan entered promiscuous mode [ 35.434374][ T821] device vlan0 entered promiscuous mode [ 35.440181][ T821] device vlan1 entered promiscuous mode [ 35.447381][ T821] device veth0_macvtap entered promiscuous mode [ 35.454845][ T821] device macsec0 entered promiscuous mode [ 35.463355][ T798] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.472784][ T798] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.480554][ T798] device bridge_slave_1 entered promiscuous mode [ 35.534984][ T28] audit: type=1400 audit(1778084499.460:232): avc: denied { write } for pid=864 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.572399][ T28] audit: type=1400 audit(1778084499.460:233): avc: denied { read } for pid=864 comm="syz.1.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.623412][ T867] overlayfs: failed to clone upperpath [ 35.662873][ T28] audit: type=1400 audit(1778084499.580:234): avc: denied { ioctl } for pid=870 comm="syz.3.204" path="socket:[17352]" dev="sockfs" ino=17352 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.724579][ T829] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.731717][ T829] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.739578][ T829] device bridge_slave_0 entered promiscuous mode [ 35.747044][ T829] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.754749][ T829] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.762426][ T829] device bridge_slave_1 entered promiscuous mode [ 35.776538][ T28] audit: type=1400 audit(1778084499.700:235): avc: denied { write } for pid=880 comm="syz.3.208" name="udp6" dev="proc" ino=4026532337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 35.824092][ T883] loop3: detected capacity change from 0 to 512 [ 35.845073][ T883] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.209: inode #1: comm syz.3.209: iget: illegal inode # [ 35.858965][ T883] EXT4-fs (loop3): Remounting filesystem read-only [ 35.865856][ T883] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.209: error while reading EA inode 1 err=-117 [ 35.878371][ T883] EXT4-fs (loop3): Remounting filesystem read-only [ 35.885152][ T883] EXT4-fs (loop3): 1 orphan inode deleted [ 35.891008][ T883] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 35.911607][ T28] audit: type=1400 audit(1778084499.830:236): avc: denied { create } for pid=882 comm="syz.3.209" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 35.933308][ T286] EXT4-fs (loop3): unmounting filesystem. [ 35.973625][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.981446][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.993069][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.001606][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.009929][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.016993][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.025484][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.033396][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.041819][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.049996][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.057105][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.082024][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.092551][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.102011][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.110667][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.117762][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.128358][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.138332][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.146549][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.154821][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.161931][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.187313][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.192118][ T28] audit: type=1400 audit(1778084500.110:237): avc: denied { append } for pid=888 comm="syz.2.211" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.224826][ T798] device veth0_vlan entered promiscuous mode [ 36.233975][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.242588][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.253792][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.268342][ T891] loop2: detected capacity change from 0 to 512 [ 36.276777][ T10] device bridge_slave_1 left promiscuous mode [ 36.283102][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.290971][ T10] device bridge_slave_0 left promiscuous mode [ 36.297507][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.301580][ T891] EXT4-fs (loop2): 1 orphan inode deleted [ 36.311348][ T891] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 36.320091][ T10] device veth1_macvtap left promiscuous mode [ 36.326233][ T10] device veth0_vlan left promiscuous mode [ 36.427152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.435298][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.450829][ T798] device veth1_macvtap entered promiscuous mode [ 36.459354][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.468612][ T287] EXT4-fs (loop2): unmounting filesystem. [ 36.476263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.491996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.503253][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.511228][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.526510][ T829] device veth0_vlan entered promiscuous mode [ 36.540841][ T829] device veth1_macvtap entered promiscuous mode [ 36.547920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.557090][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.566738][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.604304][ T898] netlink: 136 bytes leftover after parsing attributes in process `syz.1.215'. [ 36.613319][ T898] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 36.630266][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.648084][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.670839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.679827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.848457][ T919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.222'. [ 36.947476][ T931] netlink: 7 bytes leftover after parsing attributes in process `syz.4.228'. [ 37.040896][ T939] loop4: detected capacity change from 0 to 512 [ 37.055124][ T939] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 37.446179][ T951] Zero length message leads to an empty skb [ 37.797284][ T972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.245'. [ 37.903797][ T838] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 38.084950][ T838] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 38.093220][ T838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.104293][ T838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.114168][ T838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.127187][ T838] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.136263][ T838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.145254][ T838] usb 3-1: config 0 descriptor?? [ 38.364645][ T984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 38.553908][ T838] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 38.567047][ T838] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 38.591364][ T838] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 38.807117][ T1018] netlink: 24 bytes leftover after parsing attributes in process `syz.1.264'. [ 38.838940][ T963] loop2: detected capacity change from 0 to 2048 [ 38.887615][ T838] usb 3-1: USB disconnect, device number 2 [ 39.211547][ T1028] loop4: detected capacity change from 0 to 1024 [ 39.220062][ T1028] EXT4-fs: Ignoring removed orlov option [ 39.245643][ T1028] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 39.310645][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 39.310661][ T28] audit: type=1400 audit(1778084503.230:255): avc: denied { rename } for pid=1027 comm="syz.4.268" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.401605][ T829] EXT4-fs (loop4): unmounting filesystem. [ 39.435598][ T1034] loop4: detected capacity change from 0 to 2048 [ 39.480935][ T1034] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 39.634386][ T829] EXT4-fs (loop4): unmounting filesystem. [ 39.709492][ T1046] xt_hashlimit: size too large, truncated to 1048576 [ 40.188454][ T1059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 40.214145][ T1059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.278'. [ 40.244150][ T1059] netlink: 48 bytes leftover after parsing attributes in process `syz.1.278'. [ 40.349683][ T1065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.281'. [ 40.431729][ T1071] loop5: detected capacity change from 0 to 256 [ 40.443897][ T1070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.283'. [ 40.524083][ T1080] 9pnet_fd: Insufficient options for proto=fd [ 40.541272][ T1082] loop2: detected capacity change from 0 to 7 [ 40.591330][ T28] audit: type=1400 audit(1778084504.510:256): avc: denied { getopt } for pid=1087 comm="syz.5.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.708434][ T1096] netlink: 40 bytes leftover after parsing attributes in process `syz.5.295'. [ 40.737858][ T1096] netlink: 40 bytes leftover after parsing attributes in process `syz.5.295'. [ 40.767062][ T1096] netlink: 40 bytes leftover after parsing attributes in process `syz.5.295'. [ 40.792307][ T1096] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 40.817034][ T1098] loop3: detected capacity change from 0 to 1024 [ 40.829728][ T1098] EXT4-fs: Ignoring removed bh option [ 40.870519][ T1098] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 40.920919][ T28] audit: type=1400 audit(1778084504.840:257): avc: denied { mounton } for pid=1097 comm="syz.3.296" path="/55/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.957307][ T28] audit: type=1400 audit(1778084504.870:258): avc: denied { write } for pid=1097 comm="syz.3.296" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.979000][ T28] audit: type=1400 audit(1778084504.870:259): avc: denied { add_name } for pid=1097 comm="syz.3.296" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.999665][ T28] audit: type=1400 audit(1778084504.870:260): avc: denied { setattr } for pid=1097 comm="syz.3.296" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.021829][ T28] audit: type=1400 audit(1778084504.870:261): avc: denied { remove_name } for pid=1097 comm="syz.3.296" name="#11" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.044798][ T28] audit: type=1400 audit(1778084504.870:262): avc: denied { rename } for pid=1097 comm="syz.3.296" name="#11" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.073925][ T28] audit: type=1400 audit(1778084504.870:263): avc: denied { unlink } for pid=1097 comm="syz.3.296" name="#11" dev="loop3" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 41.097962][ T286] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /55/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 41.134109][ T28] audit: type=1400 audit(1778084504.870:264): avc: denied { unlink } for pid=1097 comm="syz.3.296" name="#12" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.163957][ T286] EXT4-fs (loop3): Remounting filesystem read-only [ 41.189356][ T286] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /55/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 41.221169][ T286] EXT4-fs (loop3): Remounting filesystem read-only [ 41.234155][ T286] EXT4-fs error (device loop3): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 41.284069][ T286] EXT4-fs (loop3): Remounting filesystem read-only [ 41.303490][ T286] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 41.337955][ T1122] Invalid ELF header magic: != ELF [ 41.345418][ T1121] loop2: detected capacity change from 0 to 4096 [ 41.352005][ T286] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /55/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 41.382692][ T1121] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.403773][ T1121] EXT4-fs (loop2): Test dummy encryption mode enabled [ 41.420856][ T286] EXT4-fs (loop3): Remounting filesystem read-only [ 41.427786][ T286] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /55/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 41.449852][ T1121] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 41.474733][ T286] EXT4-fs (loop3): Remounting filesystem read-only [ 41.484219][ T286] EXT4-fs error (device loop3): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 41.504291][ T1121] System zones: 0-5 [ 41.510987][ T1121] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 41.520046][ T286] EXT4-fs (loop3): Remounting filesystem read-only [ 41.526708][ T286] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 41.541048][ T286] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /55/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 41.563689][ T1121] fscrypt: AES-256-XTS using blk-crypto-fallback [ 41.595290][ T286] EXT4-fs (loop3): Remounting filesystem read-only [ 41.626340][ T286] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /55/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 41.685606][ T286] EXT4-fs (loop3): Remounting filesystem read-only [ 41.692261][ T286] EXT4-fs error (device loop3): empty_inline_dir:1895: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 41.728976][ T286] EXT4-fs (loop3): Remounting filesystem read-only [ 41.741978][ T286] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 41.761692][ T286] EXT4-fs error (device loop3): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /55/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 41.766605][ T287] EXT4-fs (loop2): unmounting filesystem. [ 41.795456][ T286] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 41.824224][ T286] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 41.854764][ T286] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 41.889946][ T286] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 41.906529][ T286] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 41.931423][ T286] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 41.962010][ T286] EXT4-fs warning (device loop3): empty_inline_dir:1902: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 42.017684][ T1168] loop5: detected capacity change from 0 to 512 [ 42.018930][ T1171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1171 comm=syz.2.327 [ 42.057021][ T1168] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.326: inode has both inline data and extents flags [ 42.087683][ T1168] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.326: couldn't read orphan inode 15 (err -117) [ 42.102450][ T1168] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 42.245208][ T798] EXT4-fs (loop5): unmounting filesystem. [ 42.377564][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.384839][ T1187] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.392417][ T1187] device bridge_slave_0 entered promiscuous mode [ 42.399869][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.407057][ T1187] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.414656][ T1187] device bridge_slave_1 entered promiscuous mode [ 42.484414][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.491523][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.498856][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.506100][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.533554][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.541572][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.549403][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.588269][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.600191][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.607437][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.615660][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.624631][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.631741][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.648446][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.662763][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.679125][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.690743][ T1187] device veth0_vlan entered promiscuous mode [ 42.705137][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.732619][ T1187] device veth1_macvtap entered promiscuous mode [ 42.740728][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.749469][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.757068][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.774340][ T1202] netlink: 'syz.5.340': attribute type 1 has an invalid length. [ 42.784088][ T1202] netlink: 'syz.5.340': attribute type 22 has an invalid length. [ 42.798102][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.807575][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.840909][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.858661][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.861426][ T1210] netlink: 32 bytes leftover after parsing attributes in process `syz.5.344'. [ 42.939465][ T1178] loop2: detected capacity change from 0 to 131072 [ 42.957285][ T1178] F2FS-fs (loop2): invalid crc value [ 42.993840][ T1178] F2FS-fs (loop2): Found nat_bits in checkpoint [ 43.082619][ T1233] loop6: detected capacity change from 0 to 1024 [ 43.094255][ T1233] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.113236][ T1178] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 43.158780][ T1233] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 43.242832][ T1187] EXT4-fs (loop6): unmounting filesystem. [ 43.557316][ T1265] xt_hashlimit: max too large, truncated to 1048576 [ 43.606887][ T1271] xt_hashlimit: size too large, truncated to 1048576 [ 43.637943][ T1275] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.656711][ T1274] incfs_lookup_dentry err:-13 [ 43.691070][ T1275] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 43.726322][ T1275] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 44.089237][ T1297] set_capacity_and_notify: 1 callbacks suppressed [ 44.089254][ T1297] loop2: detected capacity change from 0 to 128 [ 44.153843][ T830] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 44.273349][ T1303] kvm [1302]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 44.344771][ T830] usb 6-1: Using ep0 maxpacket: 32 [ 44.351722][ T830] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 44.374276][ T830] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 44.393521][ T830] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 44.410656][ T830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 44.427012][ T830] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 44.439522][ T830] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 44.452741][ T830] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 44.469338][ T830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.478643][ T830] usb 6-1: config 0 descriptor?? [ 44.618051][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 44.618067][ T28] audit: type=1400 audit(1778084508.540:296): avc: denied { load_policy } for pid=1312 comm="syz.4.385" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.619449][ T1313] SELinux: failed to load policy [ 44.672699][ T1316] loop4: detected capacity change from 0 to 512 [ 44.687235][ T1316] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.700069][ T830] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 44.722320][ T830] usb 6-1: USB disconnect, device number 2 [ 44.734638][ T1316] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 44.748204][ T830] usblp0: removed [ 44.753262][ T1320] sock: sock_set_timeout: `syz.2.388' (pid 1320) tries to set negative timeout [ 44.768209][ T1316] EXT4-fs (loop4): orphan cleanup on readonly fs [ 44.777326][ T1316] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 44.808228][ T1316] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 44.819695][ T1316] EXT4-fs error (device loop4): ext4_acquire_dquot:6822: comm syz.4.387: Failed to acquire dquot type 1 [ 44.831441][ T1316] EXT4-fs (loop4): Remounting filesystem read-only [ 44.846896][ T1316] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.387: bg 0: block 40: padding at end of block bitmap is not set [ 44.862431][ T1316] EXT4-fs (loop4): Remounting filesystem read-only [ 44.869212][ T1316] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 44.878568][ T1316] EXT4-fs (loop4): Remounting filesystem read-only [ 44.885418][ T1316] EXT4-fs (loop4): 1 truncate cleaned up [ 44.891295][ T1316] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 44.946443][ T1295] loop6: detected capacity change from 0 to 131072 [ 44.961203][ T1295] F2FS-fs (loop6): Test dummy encryption mode enabled [ 44.978455][ T1295] F2FS-fs (loop6): invalid crc value [ 44.999992][ T1295] F2FS-fs (loop6): Found nat_bits in checkpoint [ 45.048554][ T1295] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 45.188316][ T28] audit: type=1400 audit(1778084509.110:297): avc: denied { search } for pid=1332 comm="syz.2.392" name="/" dev="configfs" ino=12228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.243809][ T28] audit: type=1400 audit(1778084509.130:298): avc: denied { read } for pid=1332 comm="syz.2.392" name="/" dev="configfs" ino=12228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.297176][ T28] audit: type=1400 audit(1778084509.130:299): avc: denied { open } for pid=1332 comm="syz.2.392" path="/" dev="configfs" ino=12228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.319305][ T830] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 45.409228][ T1342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 45.429950][ T1346] 9pnet_virtio: no channels available for device syz [ 45.513810][ T830] usb 6-1: Using ep0 maxpacket: 32 [ 45.534045][ T830] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 45.552482][ T830] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 45.571402][ T830] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 45.580462][ T830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 45.600079][ T830] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 45.619975][ T830] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 45.635240][ T830] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 45.648741][ T830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.662619][ T829] EXT4-fs (loop4): unmounting filesystem. [ 45.670241][ T830] usb 6-1: config 0 descriptor?? [ 45.719309][ T1367] loop4: detected capacity change from 0 to 1024 [ 45.731724][ T1367] EXT4-fs: quotafile must be on filesystem root [ 45.846644][ T1375] xt_hashlimit: max too large, truncated to 1048576 [ 45.856098][ T28] audit: type=1400 audit(1778084509.780:300): avc: denied { watch watch_reads } for pid=1376 comm="syz.4.409" path="/54/file0" dev="tmpfs" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.886112][ T830] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 45.940909][ T1383] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 45.955865][ T28] audit: type=1400 audit(1778084509.880:301): avc: denied { sqpoll } for pid=1384 comm="syz.2.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 45.993105][ T28] audit: type=1400 audit(1778084509.910:302): avc: denied { mount } for pid=1387 comm="syz.4.414" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 46.025528][ T28] audit: type=1400 audit(1778084509.910:303): avc: denied { search } for pid=1387 comm="syz.4.414" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 46.095250][ T860] usb 6-1: USB disconnect, device number 3 [ 46.105349][ T860] usblp0: removed [ 46.441276][ T1442] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.459624][ T1442] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.475334][ T1442] device bridge_slave_0 entered promiscuous mode [ 46.484885][ T1442] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.491966][ T1442] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.499500][ T1442] device bridge_slave_1 entered promiscuous mode [ 46.507069][ T1405] device bridge_slave_1 left promiscuous mode [ 46.513351][ T1405] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.521087][ T1405] device bridge_slave_0 left promiscuous mode [ 46.527388][ T1405] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.535679][ T1405] device veth1_macvtap left promiscuous mode [ 46.541789][ T1405] device veth0_vlan left promiscuous mode [ 46.634216][ T860] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 46.755652][ T1442] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.762846][ T1442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.770203][ T1442] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.777302][ T1442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.824326][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.833987][ T860] usb 7-1: Using ep0 maxpacket: 32 [ 46.840163][ T1438] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.851563][ T860] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 46.867056][ T1438] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.875328][ T860] usb 7-1: config 0 has no interface number 0 [ 46.887985][ T860] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 46.903540][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.919510][ T1438] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.926714][ T1438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.934327][ T860] usb 7-1: config 0 interface 196 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 46.945772][ T860] usb 7-1: config 0 interface 196 has no altsetting 0 [ 46.956766][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.971594][ T860] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 46.982159][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.989250][ T1389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.005253][ T860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.023011][ T860] usb 7-1: Product: syz [ 47.032531][ T860] usb 7-1: Manufacturer: syz [ 47.042633][ T860] usb 7-1: SerialNumber: syz [ 47.050949][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.059361][ T860] usb 7-1: config 0 descriptor?? [ 47.071096][ T1450] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 47.076241][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.106514][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.125219][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.149412][ T1442] device veth0_vlan entered promiscuous mode [ 47.166273][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.184160][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.194681][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.212371][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.229785][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.244129][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.256252][ T1442] device veth1_macvtap entered promiscuous mode [ 47.275202][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.285213][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.291645][ T860] ipheth 7-1:0.196: Unable to find endpoints [ 47.301075][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.330935][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.346965][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.508087][ T1450] loop6: detected capacity change from 0 to 128 [ 47.519062][ T1532] cgroup: Setting release_agent not allowed [ 47.529779][ T1450] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4548: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 47.568448][ T1450] EXT4-fs (loop6): Test dummy encryption mode enabled [ 47.590467][ T1450] EXT4-fs (loop6): Encoding requested by superblock is unknown [ 47.632176][ T1540] netlink: 88 bytes leftover after parsing attributes in process `syz.7.439'. [ 47.668042][ T1540] netlink: 48 bytes leftover after parsing attributes in process `syz.7.439'. [ 47.680849][ T1538] loop2: detected capacity change from 0 to 8192 [ 47.709218][ T1544] netlink: 24 bytes leftover after parsing attributes in process `syz.5.441'. [ 47.728002][ T1538] loop2: p1 < > p3 p4 [ 47.737350][ T1538] loop2: p3 start 201326592 is beyond EOD, truncated [ 47.760213][ T1538] loop2: p4 size 33554432 extends beyond EOD, truncated [ 47.848191][ T1557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.448'. [ 47.860798][ T548] udevd[548]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 47.862276][ T600] udevd[600]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 48.036135][ T1577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'. [ 48.081705][ T1577] HTB: quantum of class 80040007 is big. Consider r2q change. [ 48.163439][ T1581] loop2: detected capacity change from 0 to 4096 [ 48.189115][ T1581] EXT4-fs: Ignoring removed orlov option [ 48.211278][ T1581] EXT4-fs (loop2): Test dummy encryption mode enabled [ 48.241960][ T1581] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 48.270416][ T1581] raw_sendmsg: syz.2.458 forgot to set AF_INET. Fix it! [ 48.287959][ T1581] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 48.333282][ T287] EXT4-fs (loop2): unmounting filesystem. [ 49.360079][ T830] usb 7-1: USB disconnect, device number 2 [ 49.481089][ T1618] loop5: detected capacity change from 0 to 256 [ 49.517571][ T1618] bridge0: port 3(vlan2) entered blocking state [ 49.524126][ T1618] bridge0: port 3(vlan2) entered disabled state [ 49.531183][ T1618] device vlan2 entered promiscuous mode [ 49.540159][ T1618] bridge0: mtu less than device minimum [ 49.626004][ T1629] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 49.653839][ T1631] loop5: detected capacity change from 0 to 1024 [ 49.678453][ T1631] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 49.704979][ T1631] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.477: deleted inode referenced: 12 [ 49.716848][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 49.716862][ T28] audit: type=1400 audit(1778084513.640:320): avc: denied { load_policy } for pid=1635 comm="syz.2.478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.732784][ T1639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'. [ 49.745032][ T1631] EXT4-fs (loop5): Remounting filesystem read-only [ 49.753285][ T1636] ------------[ cut here ]------------ [ 49.764010][ T1636] WARNING: CPU: 1 PID: 1636 at mm/page_alloc.c:5897 __alloc_pages+0x2cc/0x610 [ 49.772979][ T1636] Modules linked in: [ 49.776960][ T1636] CPU: 1 PID: 1636 Comm: syz.2.478 Not tainted syzkaller #0 [ 49.784301][ T1636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 49.794442][ T1636] RIP: 0010:__alloc_pages+0x2cc/0x610 [ 49.795419][ T1639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'. [ 49.799888][ T1636] Code: 0c 25 28 00 00 00 48 3b 8c 24 e0 00 00 00 0f 85 a3 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 5a 74 dd 05 01 <0f> 0b eb 8f a9 00 00 08 00 48 8b 54 24 10 75 17 44 89 f6 81 e6 7f [ 49.828472][ T1636] RSP: 0018:ffffc9000cebf6c0 EFLAGS: 00010246 [ 49.834610][ T1636] RAX: ffffc9000cebf700 RBX: 000000000000000e RCX: 0000000000000000 [ 49.842666][ T1636] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffc9000cebf748 [ 49.850688][ T1636] RBP: ffffc9000cebf7f8 R08: ffffc9000cebf747 R09: ffffc9000cebf730 [ 49.858715][ T1636] R10: dffffc0000000000 R11: fffff520019d7ee9 R12: dffffc0000000000 [ 49.866734][ T1636] R13: 0000000000000000 R14: 0000000000040dc0 R15: 1ffff920019d7edc [ 49.874750][ T1636] FS: 00007fab8c9a76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 49.883700][ T1636] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.890383][ T1636] CR2: 0000200000019000 CR3: 00000001261d7000 CR4: 00000000003506a0 [ 49.898456][ T1636] Call Trace: [ 49.901758][ T1636] [ 49.904728][ T1636] ? __cfi___alloc_pages+0x10/0x10 [ 49.909877][ T1636] ? kasan_save_alloc_info+0x25/0x30 [ 49.915227][ T1636] ? __kasan_slab_alloc+0x72/0x80 [ 49.920292][ T1636] ? slab_post_alloc_hook+0x6d/0x2d0 [ 49.925665][ T1636] ? ebitmap_read+0x398/0x920 [ 49.930386][ T1636] __kmalloc_large_node+0xa1/0x1c0 [ 49.935561][ T1636] ? hashtab_init+0xcd/0x160 [ 49.940172][ T1636] __kmalloc+0xe0/0x1e0 [ 49.944369][ T1636] hashtab_init+0xcd/0x160 [ 49.948824][ T1636] symtab_init+0x40/0x60 [ 49.953104][ T1636] policydb_read+0x971/0x25f0 [ 49.958052][ T1636] ? __cfi_policydb_read+0x10/0x10 [ 49.963197][ T1636] ? __kasan_kmalloc+0x95/0xb0 [ 49.968015][ T1636] ? security_load_policy+0x120/0xeb0 [ 49.973436][ T1636] ? kmalloc_trace+0x40/0xb0 [ 49.978117][ T1636] security_load_policy+0x15b/0xeb0 [ 49.983360][ T1636] ? irqentry_exit+0x37/0x40 [ 49.988037][ T1636] ? exc_page_fault+0x5e/0xb0 [ 49.992758][ T1636] ? asm_exc_page_fault+0x27/0x30 [ 49.998237][ T1636] ? __cfi_security_load_policy+0x10/0x10 [ 50.004204][ T1636] ? copy_user_enhanced_fast_string+0xa/0x40 [ 50.010211][ T1636] sel_write_load+0x386/0x600 [ 50.014969][ T1636] ? __cfi_sel_write_load+0x10/0x10 [ 50.020233][ T1636] ? security_file_permission+0x94/0xb0 [ 50.025824][ T1636] ? __cfi_sel_write_load+0x10/0x10 [ 50.031062][ T1636] vfs_write+0x40e/0xce0 [ 50.035353][ T1636] ? __cfi_vfs_write+0x10/0x10 [ 50.040151][ T1636] ? __kasan_check_write+0x14/0x20 [ 50.045307][ T1636] ? mutex_lock+0x93/0x1b0 [ 50.049757][ T1636] ? __cfi_mutex_lock+0x10/0x10 [ 50.054666][ T1636] ? __fdget_pos+0x2cd/0x380 [ 50.059279][ T1636] ? ksys_write+0x71/0x250 [ 50.063691][ T1636] ksys_write+0x149/0x250 [ 50.068095][ T1636] ? __cfi_ksys_write+0x10/0x10 [ 50.072951][ T1636] ? fpregs_restore_userregs+0x128/0x260 [ 50.078699][ T1636] __x64_sys_write+0x7b/0x90 [ 50.083357][ T1636] x64_sys_call+0x27b/0x9a0 [ 50.087911][ T1636] do_syscall_64+0x4c/0xa0 [ 50.092371][ T1636] ? clear_bhb_loop+0x30/0x80 [ 50.097118][ T1636] ? clear_bhb_loop+0x30/0x80 [ 50.101844][ T1636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 50.107828][ T1636] RIP: 0033:0x7fab8bb9cdd9 [ 50.112277][ T1636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.131949][ T1636] RSP: 002b:00007fab8c9a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.140412][ T1636] RAX: ffffffffffffffda RBX: 00007fab8be15fa0 RCX: 00007fab8bb9cdd9 [ 50.148460][ T1636] RDX: 00000000000190ec RSI: 0000200000000000 RDI: 0000000000000003 [ 50.156559][ T1636] RBP: 00007fab8bc32d69 R08: 0000000000000000 R09: 0000000000000000 [ 50.164720][ T1636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.172737][ T1636] R13: 00007fab8be16038 R14: 00007fab8be15fa0 R15: 00007ffeeaccb268 [ 50.180770][ T1636] [ 50.183837][ T1636] ---[ end trace 0000000000000000 ]--- [ 50.190088][ T798] EXT4-fs (loop5): unmounting filesystem. [ 50.190114][ T1636] SELinux: failed to load policy [ 50.233770][ T580] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.250881][ T1642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 50.277239][ T1649] loop2: detected capacity change from 0 to 1024 [ 50.285940][ T1644] loop5: detected capacity change from 0 to 4096 [ 50.292768][ T1644] EXT4-fs: Ignoring removed orlov option [ 50.299915][ T1644] EXT4-fs (loop5): Test dummy encryption mode enabled [ 50.317718][ T1642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.482'. [ 50.319462][ T1644] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 50.335713][ T830] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 50.344627][ T1649] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.353154][ T1649] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.384609][ T28] audit: type=1400 audit(1778084514.310:321): avc: denied { name_bind } for pid=1643 comm="syz.5.481" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 50.421776][ T1649] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: comm syz.2.483: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.434863][ T798] EXT4-fs (loop5): unmounting filesystem. [ 50.435949][ T1649] EXT4-fs (loop2): Remounting filesystem read-only [ 50.475543][ T1657] tipc: Started in network mode [ 50.479700][ T1649] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: comm syz.2.483: lblock 0 mapped to illegal pblock 0 (length 1) [ 50.481207][ T1657] tipc: Node identity 7a10250359bc, cluster identity 4711 [ 50.498531][ T1649] EXT4-fs (loop2): Remounting filesystem read-only [ 50.505790][ T1657] tipc: Enabled bearer , priority 0 [ 50.508194][ T1649] EXT4-fs error (device loop2): ext4_ext_remove_space:2941: inode #15: comm syz.2.483: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 50.532322][ T28] audit: type=1400 audit(1778084514.440:322): avc: denied { ioctl } for pid=1656 comm="syz.5.486" path="socket:[21336]" dev="sockfs" ino=21336 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 50.558471][ T1649] EXT4-fs (loop2): Remounting filesystem read-only [ 50.565268][ T1649] EXT4-fs error (device loop2) in ext4_setattr:5674: Corrupt filesystem [ 50.574062][ T1649] EXT4-fs (loop2): Remounting filesystem read-only [ 50.583281][ T1657] device syzkaller0 entered promiscuous mode [ 50.585734][ T830] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.594701][ T1657] tipc: Resetting bearer [ 50.607939][ T830] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.617729][ T1438] tipc: Resetting bearer [ 50.631567][ T830] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.640101][ T830] usb 7-1: Product: syz [ 50.644483][ T830] usb 7-1: Manufacturer: syz [ 50.646260][ T287] EXT4-fs (loop2): unmounting filesystem. [ 50.649169][ T830] usb 7-1: SerialNumber: syz [ 50.667686][ T1656] tipc: Resetting bearer [ 50.698135][ T1656] tipc: Disabling bearer [ 50.725247][ T1668] loop7: detected capacity change from 0 to 16 [ 50.735378][ T1668] erofs: (device loop7): mounted with root inode @ nid 36. [ 50.749417][ T28] audit: type=1400 audit(1778084514.670:323): avc: denied { setattr } for pid=1667 comm="syz.7.491" name="#98" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.782675][ T28] audit: type=1400 audit(1778084514.700:324): avc: denied { link } for pid=1667 comm="syz.7.491" name="#98" dev="tmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.805131][ T28] audit: type=1400 audit(1778084514.700:325): avc: denied { create } for pid=1667 comm="syz.7.491" name="#1c" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.826179][ T28] audit: type=1400 audit(1778084514.700:326): avc: denied { associate } for pid=1667 comm="syz.7.491" name="#1c" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.848250][ T28] audit: type=1400 audit(1778084514.700:327): avc: denied { setattr } for pid=1667 comm="syz.7.491" name="#1c" dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.870482][ T28] audit: type=1400 audit(1778084514.700:328): avc: denied { reparent } for pid=1667 comm="syz.7.491" name="#1c" dev="tmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.940776][ T28] audit: type=1400 audit(1778084514.860:329): avc: denied { ioctl } for pid=1676 comm="syz.7.495" path="socket:[22085]" dev="sockfs" ino=22085 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.145080][ T1687] loop5: detected capacity change from 0 to 4096 [ 51.154621][ T1687] EXT4-fs: Ignoring removed nobh option [ 51.174290][ T1687] EXT4-fs: Mount option(s) incompatible with ext3 [ 51.263100][ T1694] netlink: 27 bytes leftover after parsing attributes in process `syz.1.502'. [ 51.356566][ T1706] mmap: syz.1.505 (1706) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.443113][ T1710] kvm: emulating exchange as write [ 51.478485][ T1715] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.485776][ T1715] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.608471][ T1725] loop7: detected capacity change from 0 to 256 [ 51.629362][ T1725] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.640223][ T1725] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 51.651024][ T1725] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 51.705852][ T830] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 51.714302][ T830] cdc_ncm 7-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 51.721808][ T830] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 51.769296][ T1725] exFAT-fs (loop7): error, invalid access to FAT (entry 0x00000005) bogus content (0x7262205d) [ 51.780937][ T1725] exFAT-fs (loop7): Filesystem has been set read-only [ 51.789253][ T1733] loop2: detected capacity change from 0 to 128 [ 51.789285][ T1725] exFAT-fs (loop7): error, invalid access to FAT (entry 0x00000005) bogus content (0x7262205d) [ 51.811940][ T1733] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.820695][ T1733] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.851130][ T1733] EXT4-fs warning (device loop2): ext4_dirblock_csum_set:427: inode #2: comm syz.2.517: No space for directory leaf checksum. Please run e2fsck -D. [ 51.891488][ T287] EXT4-fs (loop2): unmounting filesystem. [ 52.114910][ T830] cdc_ncm 7-1:1.0: setting tx_max = 88 [ 52.121339][ T1747] No source specified [ 52.124494][ T830] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 52.144401][ T830] usb 7-1: USB disconnect, device number 3 [ 52.153862][ T830] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 52.505395][ T1785] loop5: detected capacity change from 0 to 256 [ 52.524437][ T1785] exfat: Deprecated parameter 'namecase' [ 52.526812][ T1783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'. [ 52.538744][ T1785] exfat: Deprecated parameter 'namecase' [ 52.547139][ T1785] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 52.649571][ T1792] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 52.672282][ T1797] netlink: 'syz.1.533': attribute type 4 has an invalid length. [ 52.687169][ T1797] netlink: 'syz.1.533': attribute type 4 has an invalid length. [ 52.726675][ T1801] loop5: detected capacity change from 0 to 256 [ 52.740598][ T1801] FAT-fs (loop5): Unrecognized mount option ";òJíUU)ÞƒLË×yó" or missing value [ 52.751626][ T1804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'. [ 52.779557][ T1807] netlink: 104 bytes leftover after parsing attributes in process `syz.7.537'. [ 53.083880][ T860] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.157849][ T1827] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 53.175666][ T1827] ------------[ cut here ]------------ [ 53.181198][ T1827] EA inode 11 i_nlink=0 [ 53.201548][ T1827] WARNING: CPU: 1 PID: 1827 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4e2/0x540 [ 53.216141][ T1827] Modules linked in: [ 53.220068][ T1827] CPU: 1 PID: 1827 Comm: syz.2.545 Tainted: G W syzkaller #0 [ 53.229022][ T1827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 53.239282][ T1827] RIP: 0010:ext4_xattr_inode_update_ref+0x4e2/0x540 [ 53.246052][ T1827] Code: 7c 24 40 4c 89 f8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ff e8 ef 25 ba ff 49 8b 37 48 c7 c7 00 49 b5 85 89 da e8 4e 1b 45 ff <0f> 0b 4c 8b 64 24 08 4c 8b 7c 24 10 e9 a9 fe ff ff e8 d8 63 fe 02 [ 53.265870][ T1827] RSP: 0018:ffffc900102b7120 EFLAGS: 00010246 [ 53.271997][ T1827] RAX: 814f91a2f6686500 RBX: 0000000000000000 RCX: 0000000000080000 [ 53.280132][ T1827] RDX: ffffc90001e8c000 RSI: 00000000000067f0 RDI: 00000000000067f1 [ 53.288322][ T1827] RBP: ffffc900102b7210 R08: ffff8881f6f2759b R09: 1ffff1103ede4eb3 [ 53.296457][ T1827] R10: dffffc0000000000 R11: ffffed103ede4eb4 R12: ffff88813d02d178 [ 53.297357][ T860] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.304885][ T1827] R13: 1ffff11027a05a5b R14: dffffc0000000000 R15: ffff88813d02d1b8 [ 53.316092][ T860] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 53.323553][ T1827] FS: 00007fab8c9a76c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 53.342604][ T1827] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.345932][ T860] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.349258][ T1827] CR2: 000020000007f030 CR3: 0000000141764000 CR4: 00000000003506a0 [ 53.366316][ T1827] Call Trace: [ 53.369642][ T1827] [ 53.372609][ T1827] ? ext4_xattr_block_csum+0x560/0x560 [ 53.372887][ T860] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.378164][ T1827] ? kasan_save_alloc_info+0x25/0x30 [ 53.391483][ T1827] ? __kasan_kmalloc+0x95/0xb0 [ 53.396323][ T1827] ? ext4_xattr_inode_dec_ref_all+0x495/0x1060 [ 53.400035][ T860] usb 8-1: Product: syz [ 53.402527][ T1827] ? kmalloc_trace+0x40/0xb0 [ 53.402552][ T1827] ext4_xattr_inode_dec_ref_all+0xb03/0x1060 [ 53.414648][ T860] usb 8-1: Manufacturer: syz [ 53.417336][ T1827] ? errseq_check+0x41/0x80 [ 53.426514][ T1827] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 53.432226][ T1827] ? __cfi___ext4_journal_get_write_access+0x10/0x10 [ 53.438961][ T860] usb 8-1: SerialNumber: syz [ 53.443824][ T1827] ? __kasan_check_write+0x14/0x20 [ 53.448980][ T1827] ext4_xattr_delete_inode+0xad1/0xca0 [ 53.454516][ T1827] ? __cfi_ext4_xattr_delete_inode+0x10/0x10 [ 53.460547][ T1827] ext4_evict_inode+0xe64/0x1470 [ 53.465550][ T1827] ? _raw_spin_unlock+0x4c/0x70 [ 53.470445][ T1827] ? __cfi_ext4_evict_inode+0x10/0x10 [ 53.475901][ T1827] ? unlock_new_inode+0x97/0xc0 [ 53.480792][ T1827] ? __cfi_ext4_evict_inode+0x10/0x10 [ 53.486261][ T1827] evict+0x4d7/0x8f0 [ 53.490232][ T1827] ? proc_nr_inodes+0x2f0/0x2f0 [ 53.490263][ T860] cdc_mbim 8-1:1.0: skipping garbage [ 53.495166][ T1827] ? __kasan_check_write+0x14/0x20 [ 53.495211][ T1827] iput+0x620/0x670 [ 53.509484][ T1827] ext4_process_orphan+0x2b1/0x320 [ 53.514690][ T1827] ext4_orphan_cleanup+0xb1a/0x1220 [ 53.519929][ T1827] ? proc_register+0x546/0x720 [ 53.524761][ T1827] ? __cfi_ext4_orphan_cleanup+0x10/0x10 [ 53.530432][ T1827] ? ext4_register_sysfs+0x285/0x2c0 [ 53.535810][ T1827] ? errseq_check_and_advance+0x66/0x130 [ 53.541483][ T1827] ext4_fill_super+0x7050/0x7590 [ 53.546485][ T1827] ? __cfi_ext4_fill_super+0x10/0x10 [ 53.551807][ T1827] ? set_blocksize+0x1d0/0x470 [ 53.556630][ T1827] ? sb_set_blocksize+0xaa/0xf0 [ 53.561538][ T1827] get_tree_bdev+0x447/0x690 [ 53.566206][ T1827] ? __cfi_ext4_fill_super+0x10/0x10 [ 53.571524][ T1827] ext4_get_tree+0x1c/0x20 [ 53.576042][ T1827] vfs_get_tree+0x9a/0x270 [ 53.580513][ T1827] do_new_mount+0x251/0xb30 [ 53.585114][ T1827] path_mount+0x659/0xfc0 [ 53.589502][ T1827] ? user_path_at_empty+0x161/0x1c0 [ 53.594789][ T1827] __se_sys_mount+0x320/0x390 [ 53.599507][ T1827] ? __x64_sys_mount+0xd0/0xd0 [ 53.604371][ T1827] ? do_user_addr_fault+0x9ac/0x1050 [ 53.609718][ T1827] __x64_sys_mount+0xbf/0xd0 [ 53.614378][ T1827] x64_sys_call+0x65d/0x9a0 [ 53.618914][ T1827] do_syscall_64+0x4c/0xa0 [ 53.623365][ T1827] ? clear_bhb_loop+0x30/0x80 [ 53.628125][ T1827] ? clear_bhb_loop+0x30/0x80 [ 53.632872][ T1827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.638840][ T1827] RIP: 0033:0x7fab8bb9e04a [ 53.643284][ T1827] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.662955][ T1827] RSP: 002b:00007fab8c9a6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 53.671479][ T1827] RAX: ffffffffffffffda RBX: 00007fab8c9a6ee0 RCX: 00007fab8bb9e04a [ 53.679541][ T1827] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fab8c9a6ea0 [ 53.680085][ T1405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 53.687564][ T1827] RBP: 0000200000000180 R08: 00007fab8c9a6ee0 R09: 0000000000000000 [ 53.687583][ T1827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 53.687598][ T1827] R13: 00007fab8c9a6ea0 R14: 000000000000047a R15: 0000200000000200 [ 53.702429][ T1809] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 53.702839][ T1827] [ 53.729025][ T1827] ---[ end trace 0000000000000000 ]--- [ 54.103855][ T1827] EXT4-fs (loop2): 1 orphan inode deleted [ 54.109647][ T1827] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 54.194475][ T1827] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.545: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 54.271613][ T287] EXT4-fs (loop2): unmounting filesystem. [ 54.332903][ T1809] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 54.343595][ T860] cdc_mbim 8-1:1.0: setting tx_max = 16384 [ 54.352140][ T860] cdc_mbim 8-1:1.0: cdc-wdm0: USB WDM device [ 54.368721][ T860] cdc_mbim 8-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.7-1, CDC MBIM, 7a:15:db:02:ba:61 [ 54.588440][ T860] usb 8-1: USB disconnect, device number 2 [ 54.594760][ T860] cdc_mbim 8-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.7-1, CDC MBIM [ 54.686544][ T1865] set_capacity_and_notify: 1 callbacks suppressed [ 54.686563][ T1865] loop2: detected capacity change from 0 to 256 [ 54.740578][ T1865] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 55.973728][ C0] sched: RT throttling activated [ 57.975287][ T1874] loop7: detected capacity change from 0 to 256 [ 58.165433][ T1891] netlink: 16 bytes leftover after parsing attributes in process `syz.6.563'. [ 58.220276][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 58.220291][ T28] audit: type=1400 audit(1778084522.140:353): avc: denied { shutdown } for pid=1896 comm="syz.6.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.353930][ T1909] device lo entered promiscuous mode [ 58.374024][ T1909] device tunl0 entered promiscuous mode [ 58.400881][ T1909] device gre0 entered promiscuous mode [ 58.457275][ T1909] device gretap0 entered promiscuous mode [ 58.474721][ T1913] capability: warning: `syz.7.569' uses 32-bit capabilities (legacy support in use) [ 58.485346][ T1909] device erspan0 entered promiscuous mode [ 58.534556][ T1909] device ip_vti0 entered promiscuous mode [ 58.585020][ T1909] device ip6_vti0 entered promiscuous mode [ 58.615429][ T1909] device sit0 entered promiscuous mode [ 58.643548][ T1909] device ip6tnl0 entered promiscuous mode [ 58.653988][ T1909] device ip6gre0 entered promiscuous mode [ 58.676421][ T1909] device ip6gretap0 entered promiscuous mode [ 58.684594][ T1909] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.691832][ T1909] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.699426][ T1909] device bridge0 entered promiscuous mode [ 58.711143][ T1909] device vcan0 entered promiscuous mode [ 58.730028][ T1909] device dummy0 entered promiscuous mode [ 58.745005][ T1909] device veth0 entered promiscuous mode [ 58.762998][ T1909] device veth1 entered promiscuous mode [ 58.781924][ T1909] device wg0 entered promiscuous mode [ 58.803433][ T1909] device wg1 entered promiscuous mode [ 58.816664][ T1909] device wg2 entered promiscuous mode [ 58.826519][ T1909] device veth0_to_bridge entered promiscuous mode [ 58.846474][ T1909] device veth1_to_bridge entered promiscuous mode [ 58.862993][ T1909] device veth0_to_bond entered promiscuous mode [ 58.878065][ T1909] device bond_slave_0 entered promiscuous mode [ 58.891127][ T1909] device veth1_to_bond entered promiscuous mode [ 58.904599][ T1909] device bond_slave_1 entered promiscuous mode [ 58.914264][ T1909] device veth0_to_team entered promiscuous mode [ 58.930619][ T1909] device team_slave_0 entered promiscuous mode [ 58.942522][ T1909] device veth1_to_team entered promiscuous mode [ 58.951716][ T1909] device team_slave_1 entered promiscuous mode [ 58.962121][ T1909] device veth0_to_batadv entered promiscuous mode [ 58.973101][ T1909] device batadv_slave_0 entered promiscuous mode [ 58.984524][ T1909] device veth1_to_batadv entered promiscuous mode [ 58.994816][ T1909] device batadv_slave_1 entered promiscuous mode [ 59.006551][ T1909] device xfrm0 entered promiscuous mode [ 59.015775][ T1909] device veth0_to_hsr entered promiscuous mode [ 59.027803][ T1909] device hsr_slave_0 entered promiscuous mode [ 59.037271][ T1909] device veth1_to_hsr entered promiscuous mode [ 59.048209][ T1909] device hsr_slave_1 entered promiscuous mode [ 59.064465][ T1909] device veth1_virt_wifi entered promiscuous mode [ 59.076581][ T1909] device veth0_virt_wifi entered promiscuous mode [ 59.092125][ T1909] device veth1_vlan entered promiscuous mode [ 59.112821][ T1909] device vlan0 entered promiscuous mode [ 59.125251][ T1909] device vlan1 entered promiscuous mode [ 59.140641][ T1909] device veth0_macvtap entered promiscuous mode [ 59.159272][ T1909] device macsec0 entered promiscuous mode [ 59.177381][ T1909] device veth2 entered promiscuous mode [ 59.191918][ T1909] device veth3 entered promiscuous mode [ 59.205442][ T1909] device bridge1 entered promiscuous mode [ 59.220748][ T1909] device veth4 entered promiscuous mode [ 59.226479][ T1909] device veth5 entered promiscuous mode [ 59.232289][ T1909] device bridge2 entered promiscuous mode [ 59.559528][ T28] audit: type=1400 audit(1778084523.480:354): avc: denied { write } for pid=1966 comm="syz.6.586" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 59.597764][ T28] audit: type=1400 audit(1778084523.500:355): avc: denied { map } for pid=1966 comm="syz.6.586" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 59.648779][ T1976] netlink: 'syz.1.590': attribute type 4 has an invalid length. [ 59.684386][ T1976] netlink: 'syz.1.590': attribute type 4 has an invalid length. [ 59.767898][ T1985] device lo entered promiscuous mode [ 59.783899][ T1985] device tunl0 entered promiscuous mode [ 59.799901][ T1985] device gre0 entered promiscuous mode [ 59.815756][ T1985] device gretap0 entered promiscuous mode [ 59.852439][ T1985] device erspan0 entered promiscuous mode [ 59.861794][ T28] audit: type=1400 audit(1778084523.780:356): avc: denied { remount } for pid=1988 comm="syz.5.594" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.882923][ T1985] device ip_vti0 entered promiscuous mode [ 59.973611][ T1985] device ip6_vti0 entered promiscuous mode [ 59.996827][ T1985] device sit0 entered promiscuous mode [ 60.053935][ T1985] device ip6tnl0 entered promiscuous mode [ 60.082537][ T1985] device ip6gre0 entered promiscuous mode [ 60.138314][ T1985] device ip6gretap0 entered promiscuous mode [ 60.151490][ T28] audit: type=1400 audit(1778084524.070:357): avc: denied { watch watch_reads } for pid=1999 comm="syz.5.597" path="/bus" dev="proc" ino=4026531855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 60.169951][ T2002] loop6: detected capacity change from 0 to 256 [ 60.181727][ T1985] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.188961][ T1985] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.229892][ T1985] device bridge0 entered promiscuous mode [ 60.239174][ T2002] FAT-fs (loop6): Directory bread(block 64) failed [ 60.250954][ T2002] FAT-fs (loop6): Directory bread(block 65) failed [ 60.258527][ T1985] device dummy0 entered promiscuous mode [ 60.264565][ T2002] FAT-fs (loop6): Directory bread(block 66) failed [ 60.273399][ T1985] device veth0 entered promiscuous mode [ 60.281814][ T2002] FAT-fs (loop6): Directory bread(block 67) failed [ 60.308655][ T1985] device veth1 entered promiscuous mode [ 60.363892][ T2002] FAT-fs (loop6): Directory bread(block 68) failed [ 60.385147][ T1985] device wg0 entered promiscuous mode [ 60.400319][ T2002] FAT-fs (loop6): Directory bread(block 69) failed [ 60.429139][ T2002] FAT-fs (loop6): Directory bread(block 70) failed [ 60.436449][ T1985] device wg1 entered promiscuous mode [ 60.472257][ T2002] FAT-fs (loop6): Directory bread(block 71) failed [ 60.480150][ T1985] device wg2 entered promiscuous mode [ 60.497388][ T2002] FAT-fs (loop6): Directory bread(block 72) failed [ 60.507466][ T1985] device veth0_to_bridge entered promiscuous mode [ 60.555181][ T2002] FAT-fs (loop6): Directory bread(block 73) failed [ 60.573069][ T1985] device veth1_to_bridge entered promiscuous mode [ 60.592348][ T1985] device veth0_to_bond entered promiscuous mode [ 60.637750][ T1985] device bond_slave_0 entered promiscuous mode [ 63.013860][ T1985] device veth1_to_bond entered promiscuous mode [ 63.030835][ T1985] device bond_slave_1 entered promiscuous mode [ 63.062868][ T1985] device veth0_to_team entered promiscuous mode [ 63.092269][ T1985] device team_slave_0 entered promiscuous mode [ 63.133408][ T1985] device veth1_to_team entered promiscuous mode [ 63.148093][ T1985] device team_slave_1 entered promiscuous mode [ 63.161935][ T1985] device veth0_to_batadv entered promiscuous mode [ 63.183821][ T1985] device batadv_slave_0 entered promiscuous mode [ 63.210455][ T1985] device veth1_to_batadv entered promiscuous mode [ 63.232142][ T1985] device batadv_slave_1 entered promiscuous mode [ 63.254411][ T1985] device xfrm0 entered promiscuous mode [ 63.294144][ T1985] device veth0_to_hsr entered promiscuous mode [ 63.306968][ T1985] device hsr_slave_0 entered promiscuous mode [ 63.319806][ T1985] device veth1_to_hsr entered promiscuous mode [ 63.335024][ T1985] device hsr_slave_1 entered promiscuous mode [ 63.348823][ T1985] device veth1_virt_wifi entered promiscuous mode [ 63.365106][ T1985] device veth0_virt_wifi entered promiscuous mode [ 63.380485][ T1985] device veth1_vlan entered promiscuous mode [ 63.400360][ T1985] device vlan0 entered promiscuous mode [ 63.418475][ T1985] device vlan1 entered promiscuous mode [ 63.432857][ T1985] device veth0_macvtap entered promiscuous mode [ 63.451299][ T1985] device macsec0 entered promiscuous mode [ 63.467970][ T1985] device veth2 entered promiscuous mode [ 63.482397][ T1985] device veth3 entered promiscuous mode [ 63.504228][ T1985] device bridge1 entered promiscuous mode [ 63.510708][ T1985] device veth4 entered promiscuous mode [ 63.533845][ T1985] device veth5 entered promiscuous mode [ 63.553863][ T1985] device bridge2 entered promiscuous mode [ 63.563824][ T1985] device bridge3 entered promiscuous mode [ 63.583792][ T1985] device vlan2 entered promiscuous mode [ 63.590569][ T2040] bridge0: port 4(syz_tun) entered blocking state [ 63.619097][ T2040] bridge0: port 4(syz_tun) entered disabled state [ 63.659904][ T2040] device syz_tun entered promiscuous mode [ 63.666057][ T2040] bridge0: mtu less than device minimum [ 63.891735][ T2058] loop7: detected capacity change from 0 to 4096 [ 63.909754][ T2058] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.924981][ T2058] EXT4-fs (loop7): Test dummy encryption mode enabled [ 63.932614][ T2058] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 63.950769][ T2058] System zones: 0-5 [ 63.970387][ T28] audit: type=1400 audit(1778084527.890:358): avc: denied { create } for pid=2061 comm="syz.2.619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 63.991942][ T2058] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 64.021736][ T2058] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 64.035900][ T28] audit: type=1400 audit(1778084527.960:359): avc: denied { write open } for pid=2057 comm="syz.7.618" path=2F202864656C6574656429 dev="loop7" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.060801][ T28] audit: type=1400 audit(1778084527.960:360): avc: denied { create } for pid=2057 comm="syz.7.618" name="#1d" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.082037][ T28] audit: type=1400 audit(1778084527.960:361): avc: denied { rename } for pid=2057 comm="syz.7.618" name="#1d" dev="loop7" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.103827][ T28] audit: type=1400 audit(1778084527.960:362): avc: denied { unlink } for pid=2057 comm="syz.7.618" name="#1e" dev="loop7" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.125542][ T28] audit: type=1400 audit(1778084527.970:363): avc: denied { mounton } for pid=2057 comm="syz.7.618" path="/39/file2/file0" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.155930][ T1442] ------------[ cut here ]------------ [ 64.156215][ T28] audit: type=1400 audit(1778084528.080:364): avc: denied { remove_name } for pid=1442 comm="syz-executor" name=".index" dev="overlay" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.161460][ T1442] WARNING: CPU: 1 PID: 1442 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0 [ 64.185353][ T28] audit: type=1400 audit(1778084528.080:365): avc: denied { rmdir } for pid=1442 comm="syz-executor" name=".index" dev="overlay" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 64.194133][ T1442] Modules linked in: [ 64.219951][ T1442] CPU: 1 PID: 1442 Comm: syz-executor Tainted: G W syzkaller #0 [ 64.229052][ T1442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 64.239181][ T1442] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 64.244876][ T1442] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4e 85 a3 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 27 ea 5d ff <0f> 0b e9 17 ff ff ff e8 1b ea 5d ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 64.264542][ T1442] RSP: 0018:ffffc90001cd7b20 EFLAGS: 00010293 [ 64.270641][ T1442] RAX: ffffffff82138c29 RBX: 1ffff11022cffed2 RCX: ffff888119aa1440 [ 64.278692][ T1442] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.286737][ T1442] RBP: ffffc90001cd7b50 R08: ffff8881336bf79f R09: 1ffff110266d7ef3 [ 64.294789][ T1442] R10: dffffc0000000000 R11: ffffed10266d7ef4 R12: ffff8881167ff660 [ 64.302831][ T1442] R13: 0000000000000000 R14: ffff8881336bf6f8 R15: ffff8881167ff690 [ 64.310921][ T1442] FS: 0000555593131500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 64.319917][ T1442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.326594][ T1442] CR2: 000055559315c988 CR3: 00000001292e4000 CR4: 00000000003506a0 [ 64.334628][ T1442] Call Trace: [ 64.337937][ T1442] [ 64.340890][ T1442] ovl_do_remove+0x717/0xac0 [ 64.345565][ T1442] ? ovl_set_redirect+0x6c0/0x6c0 [ 64.350631][ T1442] ? selinux_inode_rmdir+0x22/0x30 [ 64.355815][ T1442] ovl_rmdir+0x1a/0x20 [ 64.359905][ T1442] vfs_rmdir+0x393/0x500 [ 64.364202][ T1442] incfs_kill_sb+0x105/0x220 [ 64.368823][ T1442] deactivate_locked_super+0xb5/0x120 [ 64.374277][ T1442] deactivate_super+0xaf/0xe0 [ 64.378989][ T1442] cleanup_mnt+0x474/0x500 [ 64.383420][ T1442] __cleanup_mnt+0x19/0x20 [ 64.387888][ T1442] task_work_run+0x1e1/0x250 [ 64.392511][ T1442] ? __cfi_task_work_run+0x10/0x10 [ 64.397704][ T1442] ? __x64_sys_umount+0x12d/0x170 [ 64.402771][ T1442] ? __cfi___x64_sys_umount+0x10/0x10 [ 64.408230][ T1442] exit_to_user_mode_loop+0x9b/0xb0 [ 64.413478][ T1442] exit_to_user_mode_prepare+0x87/0xd0 [ 64.418996][ T1442] syscall_exit_to_user_mode+0x1a/0x30 [ 64.424544][ T1442] do_syscall_64+0x58/0xa0 [ 64.428984][ T1442] ? clear_bhb_loop+0x30/0x80 [ 64.433684][ T1442] ? clear_bhb_loop+0x30/0x80 [ 64.438452][ T1442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.444422][ T1442] RIP: 0033:0x7f96b1b9e017 [ 64.448856][ T1442] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 64.468526][ T1442] RSP: 002b:00007ffc2fbf4228 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 64.476998][ T1442] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f96b1b9e017 [ 64.485099][ T1442] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2fbf42e0 [ 64.493119][ T1442] RBP: 00007ffc2fbf42e0 R08: 00007ffc2fbf52e0 R09: 00000000ffffffff [ 64.501185][ T1442] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc2fbf53d0 [ 64.509247][ T1442] R13: 00007f96b1c32120 R14: 000000000000fa5a R15: 00007ffc2fbf64a0 [ 64.517312][ T1442] [ 64.520362][ T1442] ---[ end trace 0000000000000000 ]--- [ 64.526502][ T1442] ------------[ cut here ]------------ [ 64.532039][ T1442] WARNING: CPU: 0 PID: 1442 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0 [ 64.541512][ T1442] Modules linked in: [ 64.545466][ T1442] CPU: 0 PID: 1442 Comm: syz-executor Tainted: G W syzkaller #0 [ 64.554545][ T1442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 64.564675][ T1442] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 64.570361][ T1442] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4e 85 a3 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 27 ea 5d ff <0f> 0b e9 17 ff ff ff e8 1b ea 5d ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 64.590367][ T1442] RSP: 0018:ffffc90001cd7b20 EFLAGS: 00010293 [ 64.593979][ T294] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 64.596542][ T1442] RAX: ffffffff82138c29 RBX: 1ffff11022cffed2 RCX: ffff888119aa1440 [ 64.612021][ T1442] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 64.620060][ T1442] RBP: ffffc90001cd7b50 R08: ffff8881336bf79f R09: 1ffff110266d7ef3 [ 64.624091][ T28] audit: type=1400 audit(1778084528.540:366): avc: denied { ioctl } for pid=2070 comm="syz.1.623" path="socket:[23741]" dev="sockfs" ino=23741 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.628158][ T1442] R10: dffffc0000000000 R11: ffffed10266d7ef4 R12: ffff8881167ff660 [ 64.661061][ T1442] R13: 0000000000000000 R14: ffff8881336bf6f8 R15: ffff8881167ff690 [ 64.670090][ T1442] FS: 0000555593131500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 64.683060][ T1442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.692699][ T1442] CR2: 0000001b2ed18ff8 CR3: 00000001292e4000 CR4: 00000000003506b0 [ 64.701006][ T1442] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.709026][ T1442] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.717052][ T1442] Call Trace: [ 64.720330][ T1442] [ 64.723270][ T1442] ovl_do_remove+0x717/0xac0 [ 64.727903][ T1442] ? ovl_set_redirect+0x6c0/0x6c0 [ 64.732960][ T1442] ? selinux_inode_rmdir+0x22/0x30 [ 64.738115][ T1442] ovl_rmdir+0x1a/0x20 [ 64.742215][ T1442] vfs_rmdir+0x393/0x500 [ 64.746504][ T1442] incfs_kill_sb+0x198/0x220 [ 64.751126][ T1442] deactivate_locked_super+0xb5/0x120 [ 64.756575][ T1442] deactivate_super+0xaf/0xe0 [ 64.761288][ T1442] cleanup_mnt+0x474/0x500 [ 64.765750][ T1442] __cleanup_mnt+0x19/0x20 [ 64.770210][ T1442] task_work_run+0x1e1/0x250 [ 64.774855][ T1442] ? __cfi_task_work_run+0x10/0x10 [ 64.780020][ T1442] ? __x64_sys_umount+0x12d/0x170 [ 64.785101][ T1442] ? __cfi___x64_sys_umount+0x10/0x10 [ 64.790501][ T1442] exit_to_user_mode_loop+0x9b/0xb0 [ 64.795393][ T294] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.795765][ T1442] exit_to_user_mode_prepare+0x87/0xd0 [ 64.806779][ T294] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.811272][ T1442] syscall_exit_to_user_mode+0x1a/0x30 [ 64.822135][ T294] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 64.825686][ T1442] do_syscall_64+0x58/0xa0 [ 64.835509][ T294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 64.839157][ T1442] ? clear_bhb_loop+0x30/0x80 [ 64.847838][ T294] usb 3-1: SerialNumber: syz [ 64.851866][ T1442] ? clear_bhb_loop+0x30/0x80 [ 64.861196][ T1442] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.867160][ T1442] RIP: 0033:0x7f96b1b9e017 [ 64.871600][ T1442] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 64.891291][ T1442] RSP: 002b:00007ffc2fbf4228 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 64.899751][ T1442] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f96b1b9e017 [ 64.907804][ T1442] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2fbf42e0 [ 64.915835][ T1442] RBP: 00007ffc2fbf42e0 R08: 00007ffc2fbf52e0 R09: 00000000ffffffff [ 64.923866][ T1442] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc2fbf53d0 [ 64.931867][ T1442] R13: 00007f96b1c32120 R14: 000000000000fa5a R15: 00007ffc2fbf64a0 [ 64.939932][ T1442] [ 64.942979][ T1442] ---[ end trace 0000000000000000 ]--- [ 64.958971][ T28] audit: type=1400 audit(1778084528.880:367): avc: denied { unlink } for pid=1442 comm="syz-executor" name=66696C6507 dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 64.986246][ T1442] EXT4-fs (loop7): unmounting filesystem. [ 65.077864][ T294] usb 3-1: 0:2 : does not exist [ 65.096702][ T294] usb 3-1: USB disconnect, device number 3 [ 65.141369][ T2092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.631'. [ 65.257687][ T2102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.634'. [ 65.282344][ T319] kernel write not supported for file [eventfd] (pid: 319 comm: kworker/1:3) [ 65.368953][ T2104] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 65.559351][ T2125] loop5: detected capacity change from 0 to 512 [ 65.611796][ T2125] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 65.637765][ T2125] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.792511][ T798] EXT4-fs (loop5): unmounting filesystem. [ 65.854456][ T2143] netlink: 24 bytes leftover after parsing attributes in process `syz.5.651'. [ 65.981458][ T2149] netlink: 200 bytes leftover after parsing attributes in process `syz.5.654'. [ 66.427993][ T2169] device vlan1 entered promiscuous mode [ 66.525767][ T2168] device vlan1 left promiscuous mode [ 67.092575][ T2203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.675'. [ 67.129654][ T2205] loop2: detected capacity change from 0 to 128 [ 67.151938][ T2205] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 67.165041][ T2205] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.184640][ T2205] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-generic)" [ 67.217046][ T287] EXT4-fs (loop2): unmounting filesystem. [ 67.275965][ T2221] netlink: 24 bytes leftover after parsing attributes in process `syz.2.682'. [ 67.641832][ T2244] loop7: detected capacity change from 0 to 128 [ 67.688293][ T2244] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 67.734052][ T2244] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.825843][ T1442] EXT4-fs (loop7): unmounting filesystem. [ 68.283526][ T2275] loop5: detected capacity change from 0 to 512 [ 68.319886][ T2275] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 68.330529][ T2282] netlink: 'syz.2.703': attribute type 4 has an invalid length. [ 68.332508][ T2275] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.344566][ T2282] netlink: 'syz.2.703': attribute type 4 has an invalid length. [ 68.390332][ T2282] device lo left promiscuous mode [ 68.448347][ T798] EXT4-fs (loop5): unmounting filesystem. [ 68.579408][ T2295] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 68.736356][ T2311] loop2: detected capacity change from 0 to 512 [ 68.769942][ T2311] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.715: missing EA_INODE flag [ 68.781664][ T2311] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.715: error while reading EA inode 12 err=-117 [ 68.794122][ T2311] EXT4-fs (loop2): 1 orphan inode deleted [ 68.799883][ T2311] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 68.843911][ T287] EXT4-fs (loop2): unmounting filesystem. [ 68.859611][ T2308] loop7: detected capacity change from 0 to 40427 [ 68.880355][ T2308] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 68.886900][ T2308] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 68.896234][ T2308] F2FS-fs (loop7): invalid crc value [ 68.902897][ T2308] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 68.931965][ T2308] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 68.939235][ T2308] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 68.972377][ T1442] syz-executor: attempt to access beyond end of device [ 68.972377][ T1442] loop7: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 69.189650][ T2333] netlink: 4 bytes leftover after parsing attributes in process `syz.7.722'. [ 69.199885][ T2333] netlink: 12 bytes leftover after parsing attributes in process `syz.7.722'. [ 69.240656][ T2335] loop7: detected capacity change from 0 to 4096 [ 69.251882][ T2335] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 69.271688][ T1442] EXT4-fs (loop7): unmounting filesystem. [ 69.289730][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 69.289757][ T28] audit: type=1400 audit(1778084533.210:385): avc: denied { mounton } for pid=2337 comm="syz.7.724" path="/proc/156/task" dev="proc" ino=24254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 69.787205][ T2360] loop6: detected capacity change from 0 to 1024 [ 69.806151][ T2360] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 69.828831][ T28] audit: type=1400 audit(1778084533.750:386): avc: denied { mounton } for pid=2359 comm="syz.6.732" path="/47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.876430][ T2360] syz.6.732: attempt to access beyond end of device [ 69.876430][ T2360] loop6: rw=2051, sector=232, nr_sectors = 794 limit=1024 [ 69.915735][ T28] audit: type=1400 audit(1778084533.840:387): avc: denied { unmount } for pid=1187 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 69.937051][ T1187] EXT4-fs (loop6): unmounting filesystem. [ 69.961068][ T2374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.738'. [ 69.970431][ T2375] netlink: 'syz.6.736': attribute type 4 has an invalid length. [ 69.982678][ T2375] netlink: 'syz.6.736': attribute type 4 has an invalid length. [ 69.993302][ T2377] loop2: detected capacity change from 0 to 16 [ 70.000736][ T2377] erofs: (device loop2): mounted with root inode @ nid 36. [ 70.009747][ T2377] syz.2.739: attempt to access beyond end of device [ 70.009747][ T2377] loop2: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 70.026477][ T2377] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 70.040670][ T2377] erofs: (device loop2): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 70.049795][ T2377] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 3 @ nid 89 [ 70.059537][ T2377] syz.2.739: attempt to access beyond end of device [ 70.059537][ T2377] loop2: rw=524288, sector=88, nr_sectors = 48 limit=16 [ 70.073217][ T2377] syz.2.739: attempt to access beyond end of device [ 70.073217][ T2377] loop2: rw=524288, sector=16, nr_sectors = 72 limit=16 [ 70.182286][ T28] audit: type=1400 audit(1778084534.100:388): avc: denied { write } for pid=2391 comm="syz.6.745" name="event2" dev="devtmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.383285][ T28] audit: type=1400 audit(1778084534.300:389): avc: denied { create } for pid=2405 comm="syz.6.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 70.444541][ T2412] netlink: 4 bytes leftover after parsing attributes in process `syz.7.754'. [ 70.553179][ T2422] loop7: detected capacity change from 0 to 1024 [ 70.584998][ T2422] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 70.673654][ T2425] loop6: detected capacity change from 0 to 512 [ 70.695882][ T2425] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.716649][ T2425] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 70.726841][ T2425] EXT4-fs warning (device loop6): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 70.809746][ T2432] loop6: detected capacity change from 0 to 128 [ 70.818966][ T2434] syz.1.763[2434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.819056][ T2434] syz.1.763[2434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.844593][ T2432] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 70.865623][ T2432] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 70.913770][ T319] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 70.963421][ T2439] loop2: detected capacity change from 0 to 512 [ 70.982161][ T1187] EXT4-fs (loop6): unmounting filesystem. [ 71.010690][ T2439] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 71.032659][ T2439] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.104868][ T319] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.124156][ T319] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.151468][ T319] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 71.169613][ T287] EXT4-fs (loop2): unmounting filesystem. [ 71.179959][ T319] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 71.188867][ T319] usb 8-1: SerialNumber: syz [ 71.318783][ T28] audit: type=1400 audit(1778084535.240:390): avc: denied { read } for pid=2452 comm="syz.2.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.408598][ T319] usb 8-1: 0:2 : does not exist [ 71.418889][ T319] usb 8-1: USB disconnect, device number 3 [ 71.522736][ T2459] loop6: detected capacity change from 0 to 1024 [ 71.550916][ T2464] netlink: 7 bytes leftover after parsing attributes in process `syz.5.774'. [ 71.583466][ T2459] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 71.623416][ T28] audit: type=1400 audit(1778084535.540:391): avc: denied { getattr } for pid=2469 comm="syz.2.776" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.669569][ T1187] EXT4-fs (loop6): unmounting filesystem. [ 71.904723][ T28] audit: type=1400 audit(1778084535.820:392): avc: denied { bind } for pid=2504 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.946062][ T28] audit: type=1400 audit(1778084535.860:393): avc: denied { setopt } for pid=2504 comm="syz.1.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.016176][ T28] audit: type=1400 audit(1778084535.940:394): avc: denied { execute } for pid=2514 comm="syz.2.794" name="file1" dev="ramfs" ino=25251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 72.262752][ T2543] kvm: pic: single mode not supported [ 72.262852][ T2543] kvm: pic: level sensitive irq not supported [ 72.363794][ T319] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 72.563772][ T319] usb 8-1: Using ep0 maxpacket: 32 [ 72.572450][ T319] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 72.582082][ T319] usb 8-1: config 0 has no interface number 0 [ 72.588529][ T319] usb 8-1: config 0 interface 184 has no altsetting 0 [ 72.598522][ T2558] loop5: detected capacity change from 0 to 1024 [ 72.606237][ T319] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 72.615526][ T319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.623593][ T319] usb 8-1: Product: syz [ 72.628233][ T319] usb 8-1: Manufacturer: syz [ 72.632993][ T319] usb 8-1: SerialNumber: syz [ 72.638673][ T319] usb 8-1: config 0 descriptor?? [ 72.652321][ T2558] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 72.661244][ T319] smsc75xx v1.0.0 [ 72.722907][ T798] EXT4-fs (loop5): unmounting filesystem. [ 72.742978][ T2565] loop5: detected capacity change from 0 to 512 [ 72.774171][ T2565] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 72.788936][ T2565] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.821592][ T798] EXT4-fs (loop5): unmounting filesystem. [ 73.057209][ T2583] loop5: detected capacity change from 0 to 512 [ 73.073280][ T2583] EXT4-fs: Ignoring removed nobh option [ 73.084447][ T2583] EXT4-fs: Ignoring removed oldalloc option [ 73.107982][ T2583] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 73.130296][ T2583] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.821: invalid indirect mapped block 256 (level 1) [ 73.163076][ T2583] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.821: invalid indirect mapped block 2683928664 (level 1) [ 73.180332][ T2583] EXT4-fs (loop5): 1 truncate cleaned up [ 73.193815][ T2583] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 73.249464][ T319] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 73.261882][ T319] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 73.288999][ T798] EXT4-fs (loop5): unmounting filesystem. [ 73.394935][ T2606] netlink: 12 bytes leftover after parsing attributes in process `syz.5.830'. [ 73.743755][ T828] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 73.935311][ T828] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 73.943825][ T828] usb 6-1: config 0 has no interface number 0 [ 73.950788][ T828] usb 6-1: config 0 interface 41 has no altsetting 0 [ 73.967275][ T828] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 73.984087][ T828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.999688][ T828] usb 6-1: Product: syz [ 74.008310][ T828] usb 6-1: Manufacturer: syz [ 74.018355][ T828] usb 6-1: SerialNumber: syz [ 74.030807][ T828] usb 6-1: config 0 descriptor?? [ 74.080942][ T319] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 74.108779][ T319] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 74.128760][ T319] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 74.144098][ T319] smsc75xx: probe of 8-1:0.184 failed with error -71 [ 74.160003][ T319] usb 8-1: USB disconnect, device number 4 [ 74.311752][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 74.311768][ T28] audit: type=1400 audit(1778084538.230:401): avc: denied { remount } for pid=2618 comm="syz.2.835" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 74.344792][ T28] audit: type=1400 audit(1778084538.260:402): avc: denied { mounton } for pid=2618 comm="syz.2.835" path="/184/file0" dev="ramfs" ino=25448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 74.367222][ T28] audit: type=1400 audit(1778084538.270:403): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 74.603054][ T2622] device lo entered promiscuous mode [ 74.609685][ T2622] device tunl0 entered promiscuous mode [ 74.616312][ T2622] device gre0 entered promiscuous mode [ 74.623798][ T2622] device gretap0 entered promiscuous mode [ 74.631771][ T2622] device erspan0 entered promiscuous mode [ 74.638864][ T2622] device ip_vti0 entered promiscuous mode [ 74.645884][ T2622] device ip6_vti0 entered promiscuous mode [ 74.652984][ T2622] device sit0 entered promiscuous mode [ 74.663909][ T2622] device ip6tnl0 entered promiscuous mode [ 74.678509][ T2622] device ip6gre0 entered promiscuous mode [ 74.694239][ T2622] device syz_tun entered promiscuous mode [ 74.709156][ T2622] device ip6gretap0 entered promiscuous mode [ 74.727501][ T2622] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.734818][ T2622] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.760099][ T2622] device bridge0 entered promiscuous mode [ 74.768535][ T2622] device vcan0 entered promiscuous mode [ 74.778930][ T2622] device dummy0 entered promiscuous mode [ 74.795544][ T2622] device veth0 entered promiscuous mode [ 74.810193][ T2622] device veth1 entered promiscuous mode [ 74.824445][ T2622] device wg0 entered promiscuous mode [ 74.831214][ T2622] device wg1 entered promiscuous mode [ 74.837930][ T2622] device wg2 entered promiscuous mode [ 74.844221][ T2622] device veth0_to_bridge entered promiscuous mode [ 74.850895][ T828] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 74.865138][ T2622] device veth1_to_bridge entered promiscuous mode [ 74.873648][ T2622] device veth0_to_bond entered promiscuous mode [ 74.880437][ T2622] device bond_slave_0 entered promiscuous mode [ 74.886792][ T2622] device veth1_to_bond entered promiscuous mode [ 74.893578][ T2622] device bond_slave_1 entered promiscuous mode [ 74.899930][ T2622] device veth0_to_team entered promiscuous mode [ 74.907525][ T2622] device team_slave_0 entered promiscuous mode [ 74.914051][ T2622] device veth1_to_team entered promiscuous mode [ 74.920927][ T2622] device team_slave_1 entered promiscuous mode [ 74.927479][ T2622] device veth0_to_batadv entered promiscuous mode [ 74.935235][ T2622] device batadv_slave_0 entered promiscuous mode [ 74.943002][ T2622] device veth1_to_batadv entered promiscuous mode [ 74.965255][ T2622] device batadv_slave_1 entered promiscuous mode [ 74.990401][ T2622] device xfrm0 entered promiscuous mode [ 74.999682][ T2622] device veth0_to_hsr entered promiscuous mode [ 75.007343][ T2622] device hsr_slave_0 entered promiscuous mode [ 75.012559][ T28] audit: type=1400 audit(1778084538.930:404): avc: denied { connect } for pid=2633 comm="syz.2.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.033062][ T2622] device veth1_to_hsr entered promiscuous mode [ 75.034298][ T28] audit: type=1400 audit(1778084538.950:405): avc: denied { setopt } for pid=2633 comm="syz.2.839" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.059275][ T2622] device hsr_slave_1 entered promiscuous mode [ 75.072552][ T2622] device veth1_virt_wifi entered promiscuous mode [ 75.080115][ T2622] device veth0_virt_wifi entered promiscuous mode [ 75.087683][ T2622] device veth1_vlan entered promiscuous mode [ 75.111732][ T2622] device vlan0 entered promiscuous mode [ 75.123849][ T2622] device vlan1 entered promiscuous mode [ 75.139564][ T2622] device veth0_macvtap entered promiscuous mode [ 75.163756][ T2622] device macsec0 entered promiscuous mode [ 75.176128][ T2622] device sit1 entered promiscuous mode [ 75.183416][ T2622] device bridge1 entered promiscuous mode [ 75.186478][ T2643] loop6: detected capacity change from 0 to 128 [ 75.246044][ T2643] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 75.288503][ T2643] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.398884][ T1187] EXT4-fs (loop6): unmounting filesystem. [ 75.434866][ T28] audit: type=1400 audit(1778084539.360:406): avc: denied { create } for pid=2660 comm="syz.1.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.686933][ T2686] overlayfs: failed to clone upperpath [ 75.700792][ T2689] loop2: detected capacity change from 0 to 512 [ 75.723956][ T2691] netlink: 'syz.1.866': attribute type 4 has an invalid length. [ 75.739450][ T2689] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 75.752845][ T2689] ext4 filesystem being mounted at /190/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.765767][ T2689] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 75.772826][ T2689] overlayfs: failed to set xattr on upper [ 75.789365][ T287] EXT4-fs (loop2): unmounting filesystem. [ 75.884117][ T828] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 75.903592][ T828] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 75.923647][ T828] CoreChips: probe of 6-1:0.41 failed with error -71 [ 75.938763][ T828] usb 6-1: USB disconnect, device number 4 [ 76.113753][ T863] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 76.167817][ T2706] loop5: detected capacity change from 0 to 8192 [ 76.194805][ T2706] FAT-fs (loop5): bogus number of reserved sectors [ 76.212165][ T2706] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 76.222321][ T2706] FAT-fs (loop5): Can't find a valid FAT filesystem [ 76.303790][ T863] usb 3-1: Using ep0 maxpacket: 8 [ 76.316601][ T863] usb 3-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.350609][ T28] audit: type=1400 audit(1778084540.270:407): avc: denied { mount } for pid=2715 comm="syz.1.877" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 76.372957][ T863] usb 3-1: config 1 interface 0 has no altsetting 0 [ 76.383865][ T863] usb 3-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.40 [ 76.403071][ T863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.416548][ T863] usb 3-1: Product: syz [ 76.420837][ T863] usb 3-1: Manufacturer: syz [ 76.425502][ T863] usb 3-1: SerialNumber: syz [ 76.489314][ T28] audit: type=1400 audit(1778084540.410:408): avc: denied { link } for pid=2723 comm="syz.5.881" name="#2b" dev="tmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.544040][ T28] audit: type=1400 audit(1778084540.470:409): avc: denied { unmount } for pid=798 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.644398][ T2740] device lo entered promiscuous mode [ 76.649943][ T2740] device tunl0 entered promiscuous mode [ 76.657417][ T2740] device gre0 entered promiscuous mode [ 76.665679][ T2740] device gretap0 entered promiscuous mode [ 76.679796][ T2740] device erspan0 entered promiscuous mode [ 76.688024][ T2740] device ip_vti0 entered promiscuous mode [ 76.695191][ T2740] device ip6_vti0 entered promiscuous mode [ 76.726366][ T2740] device sit0 entered promiscuous mode [ 76.749584][ T2740] device ip6tnl0 entered promiscuous mode [ 76.762178][ T2740] device ip6gre0 entered promiscuous mode [ 76.772059][ T2751] xt_hashlimit: size too large, truncated to 1048576 [ 76.782782][ T28] audit: type=1400 audit(1778084540.700:410): avc: denied { bind } for pid=2752 comm="syz.7.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.804386][ T2740] device syz_tun entered promiscuous mode [ 76.832476][ T2740] device ip6gretap0 entered promiscuous mode [ 76.852047][ T2756] loop7: detected capacity change from 0 to 512 [ 76.854121][ T828] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 76.869840][ T2740] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.877252][ T2740] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.886860][ T2740] device bridge0 entered promiscuous mode [ 76.900247][ T2740] device vcan0 entered promiscuous mode [ 76.907041][ T2756] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.894: inode has both inline data and extents flags [ 76.922217][ T2740] device dummy0 entered promiscuous mode [ 76.931445][ T2756] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.894: couldn't read orphan inode 15 (err -117) [ 76.938229][ T2740] device veth0 entered promiscuous mode [ 76.954750][ T2756] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 76.963950][ T2740] device veth1 entered promiscuous mode [ 76.979518][ T2740] device wg0 entered promiscuous mode [ 76.995538][ T2740] device wg1 entered promiscuous mode [ 77.019373][ T2740] device wg2 entered promiscuous mode [ 77.033079][ T2740] device veth0_to_bridge entered promiscuous mode [ 77.041500][ T2740] device veth1_to_bridge entered promiscuous mode [ 77.049841][ T2740] device veth0_to_bond entered promiscuous mode [ 77.056182][ T828] usb 6-1: Using ep0 maxpacket: 16 [ 77.062249][ T2740] device bond_slave_0 entered promiscuous mode [ 77.068817][ T2756] loop7: detected capacity change from 512 to 64 [ 77.075412][ T828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.086876][ T2740] device veth1_to_bond entered promiscuous mode [ 77.098514][ T828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.114619][ T2740] device bond_slave_1 entered promiscuous mode [ 77.121982][ T1442] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 77.136262][ T2740] device veth0_to_team entered promiscuous mode [ 77.142576][ T828] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.156146][ T2740] device team_slave_0 entered promiscuous mode [ 77.162522][ T2740] device veth1_to_team entered promiscuous mode [ 77.169235][ T828] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 77.179070][ T2740] device team_slave_1 entered promiscuous mode [ 77.185423][ T828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.193775][ T2740] device veth0_to_batadv entered promiscuous mode [ 77.202516][ T828] usb 6-1: config 0 descriptor?? [ 77.207990][ T1442] EXT4-fs (loop7): unmounting filesystem. [ 77.214518][ T2740] device batadv_slave_0 entered promiscuous mode [ 77.230870][ T2740] device veth1_to_batadv entered promiscuous mode [ 77.239030][ T2740] device batadv_slave_1 entered promiscuous mode [ 77.247183][ T2740] device xfrm0 entered promiscuous mode [ 77.253882][ T863] usbhid 3-1:1.0: can't add hid device: -71 [ 77.259942][ T863] usbhid: probe of 3-1:1.0 failed with error -71 [ 77.270528][ T863] usb 3-1: USB disconnect, device number 4 [ 77.272363][ T2740] device veth0_to_hsr entered promiscuous mode [ 77.284191][ T2740] device hsr_slave_0 entered promiscuous mode [ 77.291845][ T2740] device veth1_to_hsr entered promiscuous mode [ 77.299141][ T2740] device hsr_slave_1 entered promiscuous mode [ 77.306982][ T2740] device veth1_virt_wifi entered promiscuous mode [ 77.315017][ T2740] device veth0_virt_wifi entered promiscuous mode [ 77.323320][ T2740] device veth0_macvtap entered promiscuous mode [ 77.330619][ T2740] device macsec0 entered promiscuous mode [ 77.337447][ T2740] device ip6gre1 entered promiscuous mode [ 77.444012][ T2765] loop6: detected capacity change from 0 to 4096 [ 77.460376][ T2765] EXT4-fs (loop6): Test dummy encryption mode enabled [ 77.479283][ T2765] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 77.561606][ T2765] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.899: Invalid block bitmap block 17807164701067444224 in block_group 0 [ 77.624572][ T2735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.633157][ T2735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.660029][ T828] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 77.671340][ T828] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 77.678857][ T828] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 77.686334][ T828] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 77.693570][ T828] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 77.755967][ T2768] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.770805][ T2768] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.788594][ T2768] device bridge_slave_0 entered promiscuous mode [ 77.799351][ T2773] loop2: detected capacity change from 0 to 512 [ 77.808448][ T2768] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.827560][ T2773] EXT4-fs: Ignoring removed orlov option [ 77.837288][ T2768] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.851093][ T2768] device bridge_slave_1 entered promiscuous mode [ 77.853999][ T2773] EXT4-fs (loop2): Test dummy encryption mode enabled [ 77.864362][ T2773] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.876919][ T828] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0003/input/input6 [ 77.886375][ T2773] EXT4-fs (loop2): 1 truncate cleaned up [ 77.906156][ T828] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 77.913847][ T2773] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 77.935055][ T828] usb 6-1: USB disconnect, device number 5 [ 77.950233][ T1453] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.964425][ T287] EXT4-fs (loop2): unmounting filesystem. [ 77.968561][ T1453] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.991437][ T2775] fido_id[2775]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 78.020836][ T2777] loop2: detected capacity change from 0 to 512 [ 78.053896][ T2777] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.903: iget: bad i_size value: 38620345925642 [ 78.074000][ T2777] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.903: couldn't read orphan inode 15 (err -117) [ 78.086193][ T2777] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 78.124533][ T1187] EXT4-fs (loop6): unmounting filesystem. [ 78.144684][ T287] EXT4-fs (loop2): unmounting filesystem. [ 78.284404][ T2768] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.291489][ T2768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.298858][ T2768] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.305941][ T2768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.375089][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.382800][ T1389] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.391721][ T1389] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.429476][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.444718][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.457810][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.464894][ T1389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.483965][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.499854][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.514223][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.521294][ T1389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.564132][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.603921][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.633007][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.655673][ T2787] kvm: pic: non byte write [ 78.674554][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.693573][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.716722][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.742441][ T2768] device veth0_vlan entered promiscuous mode [ 78.754357][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.772398][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.796418][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.824024][ T1389] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.842603][ T2793] device lo entered promiscuous mode [ 78.848618][ T2793] device tunl0 entered promiscuous mode [ 78.863822][ T2793] device gre0 entered promiscuous mode [ 78.869732][ T2793] device gretap0 entered promiscuous mode [ 78.898772][ T2793] device erspan0 entered promiscuous mode [ 78.904722][ T2793] device ip_vti0 entered promiscuous mode [ 78.925600][ T2793] device ip6_vti0 entered promiscuous mode [ 78.931486][ T2793] device sit0 entered promiscuous mode [ 78.956592][ T2793] device ip6tnl0 entered promiscuous mode [ 78.969094][ T2793] device ip6gre0 entered promiscuous mode [ 78.981727][ T2793] device ip6gretap0 entered promiscuous mode [ 78.990012][ T2793] device bridge0 entered promiscuous mode [ 79.006406][ T2793] device vcan0 entered promiscuous mode [ 79.018908][ T2793] device dummy0 entered promiscuous mode [ 79.031278][ T2793] device veth0 entered promiscuous mode [ 79.042482][ T2793] device veth1 entered promiscuous mode [ 79.050341][ T2793] device wg0 entered promiscuous mode [ 79.055987][ T2793] device wg1 entered promiscuous mode [ 79.061534][ T2793] device wg2 entered promiscuous mode [ 79.066124][ T2791] loop6: detected capacity change from 0 to 40427 [ 79.067833][ T2793] device veth0_to_bridge entered promiscuous mode [ 79.075141][ T2791] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 79.086882][ T2793] device veth1_to_bridge entered promiscuous mode [ 79.093669][ T2793] device veth0_to_bond entered promiscuous mode [ 79.100103][ T2793] device bond_slave_0 entered promiscuous mode [ 79.103566][ T2791] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 79.106744][ T2793] device veth1_to_bond entered promiscuous mode [ 79.120863][ T2793] device bond_slave_1 entered promiscuous mode [ 79.127255][ T2793] device veth0_to_team entered promiscuous mode [ 79.127257][ T2791] F2FS-fs (loop6): invalid crc value [ 79.127280][ T2791] F2FS-fs (loop6): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node [ 79.133916][ T2793] device team_slave_0 entered promiscuous mode [ 79.155101][ T2793] device veth1_to_team entered promiscuous mode [ 79.161647][ T2793] device team_slave_1 entered promiscuous mode [ 79.168129][ T2793] device veth0_to_batadv entered promiscuous mode [ 79.174978][ T2793] device batadv_slave_0 entered promiscuous mode [ 79.181788][ T2791] F2FS-fs (loop6): Found nat_bits in checkpoint [ 79.189040][ T2793] device veth1_to_batadv entered promiscuous mode [ 79.195867][ T2793] device batadv_slave_1 entered promiscuous mode [ 79.202313][ T2793] device xfrm0 entered promiscuous mode [ 79.208784][ T2793] device veth0_to_hsr entered promiscuous mode [ 79.215222][ T2793] device hsr_slave_0 entered promiscuous mode [ 79.221444][ T2793] device veth1_to_hsr entered promiscuous mode [ 79.227975][ T2793] device hsr_slave_1 entered promiscuous mode [ 79.234345][ T2793] device veth1_virt_wifi entered promiscuous mode [ 79.240877][ T2793] device veth0_virt_wifi entered promiscuous mode [ 79.247606][ T2793] device veth1_vlan entered promiscuous mode [ 79.253902][ T2793] device vlan0 entered promiscuous mode [ 79.259652][ T2793] device vlan1 entered promiscuous mode [ 79.265619][ T2793] device veth0_macvtap entered promiscuous mode [ 79.268263][ T2791] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 79.272258][ T2793] device macsec0 entered promiscuous mode [ 79.279419][ T2791] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 79.286094][ T2793] device veth2 entered promiscuous mode [ 79.300327][ T2793] device veth3 entered promiscuous mode [ 79.306390][ T2793] device gre1 entered promiscuous mode [ 79.312567][ T2793] device veth4 entered promiscuous mode [ 79.318287][ T2793] device veth5 entered promiscuous mode [ 79.324023][ T2793] device ip6tnl1 entered promiscuous mode [ 79.329871][ T2793] device ip6tnl2 entered promiscuous mode [ 79.342321][ T2768] device veth1_macvtap entered promiscuous mode [ 79.358899][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.367513][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.376881][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.399666][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.408143][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.417103][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.425602][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.434829][ T1187] syz-executor: attempt to access beyond end of device [ 79.434829][ T1187] loop6: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 79.459118][ T1187] syz-executor: attempt to access beyond end of device [ 79.459118][ T1187] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 79.480583][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 79.480604][ T28] audit: type=1400 audit(1778084543.400:418): avc: denied { mount } for pid=2768 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 79.534622][ T1468] kworker/u4:70: attempt to access beyond end of device [ 79.534622][ T1468] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 79.550273][ T1468] kworker/u4:70: attempt to access beyond end of device [ 79.550273][ T1468] loop6: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 79.583460][ T2799] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.590646][ T2799] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.598360][ T2799] device bridge_slave_0 entered promiscuous mode [ 79.605721][ T2799] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.612835][ T2799] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.620484][ T2799] device bridge_slave_1 entered promiscuous mode [ 79.694172][ T2817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=2817 comm=syz.5.917 [ 79.742381][ T2799] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.749506][ T2799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.756866][ T2799] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.763933][ T2799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.808080][ T2820] loop8: detected capacity change from 0 to 256 [ 79.826338][ T2820] exfat: Deprecated parameter 'utf8' [ 79.831760][ T2820] exfat: Deprecated parameter 'namecase' [ 79.845850][ T2820] exfat: Deprecated parameter 'namecase' [ 79.865104][ T2820] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 79.879080][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.886925][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.903637][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.934710][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.950059][ T1468] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.975595][ T1453] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.990941][ T1453] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.188915][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.211658][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.220016][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.227600][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.242660][ T2799] device veth0_vlan entered promiscuous mode [ 80.266206][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.287583][ T2799] device veth1_macvtap entered promiscuous mode [ 80.303174][ T28] audit: type=1400 audit(1778084544.220:419): avc: denied { bind } for pid=2833 comm="syz.8.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.308732][ T2828] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.326295][ T28] audit: type=1400 audit(1778084544.250:420): avc: denied { name_bind } for pid=2833 comm="syz.8.924" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 80.331100][ T2828] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.357224][ T28] audit: type=1400 audit(1778084544.250:421): avc: denied { node_bind } for pid=2833 comm="syz.8.924" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 80.358368][ T2828] device bridge_slave_0 entered promiscuous mode [ 80.379705][ T28] audit: type=1400 audit(1778084544.250:422): avc: denied { read } for pid=2833 comm="syz.8.924" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.407251][ T2828] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.414559][ T2828] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.422064][ T2828] device bridge_slave_1 entered promiscuous mode [ 80.435444][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.444024][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.484779][ T2837] device lo entered promiscuous mode [ 80.492477][ T2837] device tunl0 entered promiscuous mode [ 80.498859][ T2837] device gre0 entered promiscuous mode [ 80.506470][ T2837] device gretap0 entered promiscuous mode [ 80.513549][ T2837] device erspan0 entered promiscuous mode [ 80.520881][ T2837] device ip_vti0 entered promiscuous mode [ 80.528784][ T2837] device ip6_vti0 entered promiscuous mode [ 80.531100][ T2839] loop9: detected capacity change from 0 to 1024 [ 80.541118][ T2837] device sit0 entered promiscuous mode [ 80.547308][ T2839] ext4: Bad value for 'barrier' [ 80.554894][ T2837] device ip6tnl0 entered promiscuous mode [ 80.561628][ T2837] device ip6gre0 entered promiscuous mode [ 80.570570][ T2837] device syz_tun entered promiscuous mode [ 80.579814][ T2837] device ip6gretap0 entered promiscuous mode [ 80.597713][ T548] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 80.607621][ T2837] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.614851][ T2837] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.657828][ T2837] device bridge0 entered promiscuous mode [ 80.680949][ T2837] device vcan0 entered promiscuous mode [ 80.695072][ T2837] device dummy0 entered promiscuous mode [ 80.734372][ T2837] device veth0 entered promiscuous mode [ 80.741203][ T2837] device veth1 entered promiscuous mode [ 80.777899][ T2837] device wg0 entered promiscuous mode [ 80.790394][ T2837] device wg1 entered promiscuous mode [ 80.796850][ T2837] device wg2 entered promiscuous mode [ 80.804234][ T1438] kworker/u4:48: attempt to access beyond end of device [ 80.804234][ T1438] loop5: rw=1, sector=145, nr_sectors = 896 limit=128 [ 80.817892][ T2837] device veth0_to_bridge entered promiscuous mode [ 80.835807][ T2837] device veth1_to_bridge entered promiscuous mode [ 80.845398][ T2837] device veth0_to_bond entered promiscuous mode [ 80.854827][ T2837] device bond_slave_0 entered promiscuous mode [ 80.861202][ T2837] device veth1_to_bond entered promiscuous mode [ 80.868495][ T2837] device bond_slave_1 entered promiscuous mode [ 80.875288][ T2837] device veth0_to_team entered promiscuous mode [ 80.885016][ T2837] device team_slave_0 entered promiscuous mode [ 80.898119][ T2837] device veth1_to_team entered promiscuous mode [ 80.905220][ T2837] device team_slave_1 entered promiscuous mode [ 80.911592][ T2837] device veth0_to_batadv entered promiscuous mode [ 80.924743][ T2837] device batadv_slave_0 entered promiscuous mode [ 80.931983][ T2837] device veth1_to_batadv entered promiscuous mode [ 80.941704][ T2837] device batadv_slave_1 entered promiscuous mode [ 80.955932][ T2837] device xfrm0 entered promiscuous mode [ 80.962403][ T2837] device veth0_to_hsr entered promiscuous mode [ 80.969872][ T2837] device hsr_slave_0 entered promiscuous mode [ 80.988574][ T2837] device veth1_to_hsr entered promiscuous mode [ 81.002515][ T2837] device hsr_slave_1 entered promiscuous mode [ 81.015444][ T2837] device veth1_virt_wifi entered promiscuous mode [ 81.027741][ T2837] device veth0_virt_wifi entered promiscuous mode [ 81.034391][ T28] audit: type=1400 audit(1778084544.950:423): avc: denied { write } for pid=2861 comm="syz.5.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.063339][ T28] audit: type=1400 audit(1778084544.950:424): avc: denied { nlmsg_write } for pid=2861 comm="syz.5.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.089407][ T2837] device veth1_vlan entered promiscuous mode [ 81.099598][ T2837] device vlan0 entered promiscuous mode [ 81.105839][ T2837] device vlan1 entered promiscuous mode [ 81.112573][ T2837] device veth0_macvtap entered promiscuous mode [ 81.119911][ T2837] device macsec0 entered promiscuous mode [ 81.133028][ T2864] netlink: 4 bytes leftover after parsing attributes in process `syz.5.935'. [ 81.294488][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.309637][ T2879] xt_hashlimit: size too large, truncated to 1048576 [ 81.309723][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.348502][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.357676][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.366151][ T1438] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.373232][ T1438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.381546][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.409774][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.418611][ T1438] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.425753][ T1438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.433666][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.479736][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.488322][ T863] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 81.497387][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.576823][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.596664][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.616453][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.637588][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.653370][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.671177][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.679819][ T863] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.699799][ T863] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 81.711558][ T2828] device veth0_vlan entered promiscuous mode [ 81.716264][ T863] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.732226][ T863] usb 9-1: config 0 descriptor?? [ 81.749901][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.774570][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.796443][ T2828] device veth1_macvtap entered promiscuous mode [ 81.830472][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.841108][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.861883][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.883146][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.911988][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.011303][ T1453] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.021741][ T1453] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.141547][ T863] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 82.156660][ T863] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0004/input/input7 [ 82.192103][ T28] audit: type=1400 audit(1778084546.110:425): avc: denied { create } for pid=2908 comm="syz.0.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.251930][ T863] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 82.264519][ T28] audit: type=1400 audit(1778084546.110:426): avc: denied { read } for pid=2908 comm="syz.0.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 82.406770][ T28] audit: type=1400 audit(1778084546.330:427): avc: denied { create } for pid=2908 comm="syz.0.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 82.507479][ T2928] set_capacity_and_notify: 1 callbacks suppressed [ 82.507497][ T2928] loop5: detected capacity change from 0 to 512 [ 82.558923][ T2868] loop8: detected capacity change from 0 to 512 [ 82.576063][ T2868] EXT4-fs (loop8): 1 truncate cleaned up [ 82.581812][ T2868] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 82.611955][ T2868] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.937: bg 0: block 465: padding at end of block bitmap is not set [ 82.630822][ T862] usb 9-1: USB disconnect, device number 2 [ 82.809191][ T2938] loop0: detected capacity change from 0 to 40427 [ 82.820092][ T2938] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 82.826908][ T2938] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 82.838705][ T2938] F2FS-fs (loop0): invalid crc value [ 82.848978][ T2938] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 82.892645][ T2938] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 82.900408][ T2938] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 83.044446][ T2931] loop5: detected capacity change from 0 to 131072 [ 83.077481][ T2931] F2FS-fs (loop5): Found nat_bits in checkpoint [ 83.117184][ T2931] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 83.158335][ T2768] EXT4-fs (loop8): unmounting filesystem. [ 83.196868][ T2955] loop8: detected capacity change from 0 to 128 [ 83.213201][ T2955] EXT4-fs (loop8): Test dummy encryption mode enabled [ 83.239815][ T2955] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 83.266812][ T2962] overlayfs: failed to clone upperpath [ 83.283980][ T2955] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.350641][ T2955] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3861: comm syz.8.965: Allocating blocks 19-20 which overlap fs metadata [ 83.381664][ T2970] syz.1.973[2970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.382192][ T2970] syz.1.973[2970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.425629][ T2768] EXT4-fs (loop8): unmounting filesystem. [ 84.641061][ T3023] loop5: detected capacity change from 0 to 512 [ 84.702785][ T3023] EXT4-fs: Ignoring removed i_version option [ 84.769766][ T3023] EXT4-fs (loop5): 1 orphan inode deleted [ 84.783217][ T3023] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 84.793026][ T3017] loop9: detected capacity change from 0 to 40427 [ 84.812146][ T3017] F2FS-fs (loop9): Invalid SB checksum offset: 0 [ 84.849967][ T3017] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 84.891594][ T3023] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.994: Directory hole found for htree leaf block 0 [ 84.927282][ T3017] F2FS-fs (loop9): invalid crc value [ 84.961183][ T798] EXT4-fs (loop5): unmounting filesystem. [ 84.975360][ T3017] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 85.066235][ T3017] F2FS-fs (loop9): Try to recover 2th superblock, ret: 0 [ 85.085814][ T3017] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 85.412877][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 85.412891][ T28] audit: type=1400 audit(1778084549.330:435): avc: denied { watch watch_reads } for pid=3045 comm="syz.1.1001" path="/236/file0" dev="tmpfs" ino=1281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 85.995510][ T3073] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 86.007078][ T3076] loop0: detected capacity change from 0 to 256 [ 86.043611][ T3076] exfat: Deprecated parameter 'utf8' [ 86.082700][ T3076] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 86.686464][ T3102] overlayfs: failed to clone upperpath [ 86.713860][ T3104] loop5: detected capacity change from 0 to 512 [ 86.755076][ T548] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 86.885487][ T28] audit: type=1326 audit(1778084550.810:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3121 comm="syz.5.1028" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2d299cdd9 code=0x0 [ 87.014123][ T28] audit: type=1400 audit(1778084550.940:437): avc: denied { getopt } for pid=3126 comm="syz.0.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 87.335418][ T28] audit: type=1400 audit(1778084551.260:438): avc: denied { read write } for pid=3144 comm="syz.0.1036" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.381336][ T28] audit: type=1400 audit(1778084551.280:439): avc: denied { open } for pid=3144 comm="syz.0.1036" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.602155][ T3176] loop0: detected capacity change from 0 to 512 [ 87.643888][ T3176] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1049: inode has both inline data and extents flags [ 87.679046][ T3184] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1051'. [ 87.690828][ T3176] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1049: couldn't read orphan inode 15 (err -117) [ 87.718406][ T3176] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 87.754834][ T28] audit: type=1400 audit(1778084551.680:440): avc: denied { associate } for pid=3171 comm="syz.1.1047" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 87.784587][ T3176] EXT4-fs error (device loop0): xattr_find_entry:297: inode #18: comm syz.0.1049: corrupted xattr entries [ 87.832909][ T3176] EXT4-fs error (device loop0): get_max_inline_xattr_value_size:69: inode #18: comm syz.0.1049: corrupt xattr in inline inode [ 87.865619][ T3188] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 87.872700][ T3188] overlayfs: failed to set xattr on upper [ 87.888892][ T3190] device lo left promiscuous mode [ 87.897526][ T2828] EXT4-fs (loop0): unmounting filesystem. [ 87.935796][ T3190] device tunl0 left promiscuous mode [ 87.938527][ T3192] loop0: detected capacity change from 0 to 512 [ 87.952676][ T3190] device gre0 left promiscuous mode [ 87.973439][ T3192] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 87.987215][ T3190] device gretap0 left promiscuous mode [ 87.992103][ T3192] EXT4-fs error (device loop0): ext4_get_journal_inode:5743: comm syz.0.1054: inode #1792: comm syz.0.1054: iget: illegal inode # [ 88.029143][ T3192] EXT4-fs (loop0): Remounting filesystem read-only [ 88.036287][ T3190] device erspan0 left promiscuous mode [ 88.042654][ T3192] EXT4-fs (loop0): no journal found [ 88.053445][ T3192] EXT4-fs (loop0): can't get journal size [ 88.062577][ T3190] device ip_vti0 left promiscuous mode [ 88.073585][ T3192] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 88.083213][ T3190] device ip6_vti0 left promiscuous mode [ 88.091838][ T3192] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 88.112095][ T3192] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 88.121386][ T3190] device sit0 left promiscuous mode [ 88.136288][ T3190] device ip6tnl0 left promiscuous mode [ 88.172810][ T3190] device ip6gre0 left promiscuous mode [ 88.178913][ T28] audit: type=1400 audit(1778084552.100:441): avc: denied { create } for pid=3191 comm="syz.0.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 88.200755][ T3190] device ip6gretap0 left promiscuous mode [ 88.219464][ T3190] bridge0: port 4(syz_tun) entered blocking state [ 88.225951][ T3190] bridge0: port 4(syz_tun) entered forwarding state [ 88.235647][ T3198] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.1054: Logical block already allocated [ 88.253908][ T3198] EXT4-fs (loop0): Remounting filesystem read-only [ 88.257656][ T3190] device bridge0 left promiscuous mode [ 88.280457][ T3190] device vcan0 left promiscuous mode [ 88.296423][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.313864][ T3190] device dummy0 left promiscuous mode [ 88.321490][ T3190] device veth0 left promiscuous mode [ 88.338584][ T3190] device veth1 left promiscuous mode [ 88.354624][ T3190] device wg0 left promiscuous mode [ 88.374095][ T3190] device wg1 left promiscuous mode [ 88.394554][ T3190] device wg2 left promiscuous mode [ 88.409969][ T3190] device veth0_to_bridge left promiscuous mode [ 88.430868][ T3190] bridge0: port 3(vlan2) entered blocking state [ 88.437182][ T3190] bridge0: port 3(vlan2) entered forwarding state [ 88.454618][ T3190] device veth1_to_bridge left promiscuous mode [ 88.473469][ T3190] device veth1_to_bond left promiscuous mode [ 88.484285][ T3190] device bond_slave_1 left promiscuous mode [ 88.499921][ T3190] device veth0_to_team left promiscuous mode [ 88.514369][ T3190] device team_slave_0 left promiscuous mode [ 88.523232][ T3190] device veth1_to_team left promiscuous mode [ 88.534034][ T3190] device team_slave_1 left promiscuous mode [ 88.546425][ T3190] device veth0_to_batadv left promiscuous mode [ 88.556777][ T3190] device batadv_slave_0 left promiscuous mode [ 88.567839][ T3190] device veth1_to_batadv left promiscuous mode [ 88.574796][ T3190] device batadv_slave_1 left promiscuous mode [ 88.581451][ T3190] device xfrm0 left promiscuous mode [ 88.592505][ T3190] device veth0_to_hsr left promiscuous mode [ 88.604244][ T3190] device hsr_slave_0 left promiscuous mode [ 88.620330][ T3190] device veth1_to_hsr left promiscuous mode [ 88.630868][ T3190] device hsr_slave_1 left promiscuous mode [ 88.643875][ T3190] device veth1_virt_wifi left promiscuous mode [ 88.651734][ T3190] device veth0_virt_wifi left promiscuous mode [ 88.670359][ T3190] device veth1_vlan left promiscuous mode [ 88.693898][ T3190] device vlan0 left promiscuous mode [ 88.702672][ T3190] device vlan1 left promiscuous mode [ 88.710812][ T3190] device veth1_macvtap left promiscuous mode [ 88.721470][ T3190] device veth0_macvtap left promiscuous mode [ 88.730929][ T3190] device veth1_macvtap entered promiscuous mode [ 88.739591][ T3190] device macsec0 left promiscuous mode [ 88.757863][ T28] audit: type=1400 audit(1778084552.680:442): avc: denied { read } for pid=3205 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 88.780501][ T3190] device veth2 left promiscuous mode [ 88.789386][ T3190] device veth3 left promiscuous mode [ 88.799560][ T3190] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 88.810026][ T3190] device gre1 left promiscuous mode [ 88.819157][ T3190] device veth4 left promiscuous mode [ 88.828043][ T3190] device veth5 left promiscuous mode [ 88.853926][ T3190] device ip6tnl1 left promiscuous mode [ 88.859982][ T3190] device ip6tnl2 left promiscuous mode [ 88.879541][ T3196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'. [ 88.953782][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.961520][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.974208][ T2828] EXT4-fs (loop0): unmounting filesystem. [ 89.001286][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.008774][ T3212] loop9: detected capacity change from 0 to 2048 [ 89.026542][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.048348][ T28] audit: type=1400 audit(1778084552.970:443): avc: denied { sys_ptrace } for pid=3205 comm="poweroff" capability=19 scontext=system_u:system_r:acpid_t tcontext=system_u:system_r:acpid_t tclass=cap_userns permissive=1 [ 89.069546][ T1453] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.076787][ T1453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.112643][ T3212] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 89.153994][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.176246][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.185363][ T28] audit: type=1400 audit(1778084553.110:444): avc: denied { write } for pid=3211 comm="syz.9.1060" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.196479][ T1453] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.214647][ T1453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.225906][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.235974][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 89.260351][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.300751][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready Stopping sshd: [ 89.321387][ T2799] EXT4-fs (loop9): unmounting filesystem. [ 89.366750][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready stopped /usr/sbin/sshd (pid 193) [ 89.400772][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready OK Stopping crond: [ 89.454091][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.462349][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.490997][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.511179][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready stopped /usr/sbin/crond (pid 186) OK [ 89.546335][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.570715][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.593999][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.614559][ T3248] loop8: detected capacity change from 0 to 4096 [ 89.623463][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.658189][ T3248] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. Stopping dhcpcd... [ 89.674035][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.706780][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.756376][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready stopped /sbin/dhcpcd (pid 140) [ 89.776340][ T3248] EXT4-fs error (device loop8): ext4_find_dest_de:2115: inode #2: block 16: comm syz.8.1070: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=4, size=4096 fake=0 Stopping network: [ 89.825159][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.843483][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.851723][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.868801][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.884899][ T2768] EXT4-fs (loop8): unmounting filesystem. [ 89.894260][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.925263][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.939509][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.954761][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 89.963639][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 89.972529][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 89.981182][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 89.990226][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 90.000344][ T1453] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready OK Stopping iptables: OK Stopping system message bus: [ 90.450437][ T3310] loop0: detected capacity change from 0 to 512 [ 90.463305][ T3310] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 90.501128][ T3310] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 90.514194][ T3310] System zones: 1-12 [ 90.529119][ T3310] EXT4-fs error (device loop0): ext4_iget_extra_inode:4754: inode #15: comm syz.0.1086: corrupted in-inode xattr [ 90.565347][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 90.565363][ T28] audit: type=1400 audit(1778084554.490:466): avc: denied { create } for pid=3314 comm="syz.9.1087" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 done [ 90.598375][ T3310] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1086: couldn't read orphan inode 15 (err -117) [ 90.610910][ T3310] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 90.753855][ T319] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 90.834587][ T28] audit: type=1400 audit(1778084554.760:467): avc: denied { write } for pid=3335 comm="syz.9.1095" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 90.874674][ T28] audit: type=1400 audit(1778084554.780:468): avc: denied { mount } for pid=3334 comm="syz.1.1094" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 90.943774][ T319] usb 6-1: Using ep0 maxpacket: 16 [ 90.950128][ T319] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 90.973757][ T319] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.992554][ T319] usb 6-1: config 0 has no interface number 0 [ 91.009851][ T319] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b killall: can't kill pid 600: No such process [ 91.042235][ T319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.061045][ T319] usb 6-1: config 0 descriptor?? [ 91.105748][ T28] audit: type=1400 audit(1778084555.030:469): avc: denied { ioctl } for pid=3338 comm="syz.8.1096" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30698 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 Stopping klogd: OK Stopping acpid: [ 91.223821][ T294] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 91.247809][ T28] audit: type=1400 audit(1778084555.170:470): avc: denied { write } for pid=87 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.294907][ T28] audit: type=1400 audit(1778084555.170:471): avc: denied { remove_name } for pid=87 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.325325][ T28] audit: type=1400 audit(1778084555.170:472): avc: denied { unlink } for pid=87 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 91.364323][ T28] audit: type=1400 audit(1778084555.200:473): avc: denied { create } for pid=3308 comm="syz.5.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.413750][ T294] usb 10-1: Using ep0 maxpacket: 8 [ 91.425193][ T294] usb 10-1: unable to get BOS descriptor or descriptor too short [ 91.451463][ T2828] EXT4-fs (loop0): unmounting filesystem. [ 91.464511][ T294] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 91.494013][ T294] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 91.519785][ T294] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 91.551315][ T294] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 91.552586][ T28] audit: type=1400 audit(1778084555.470:474): avc: denied { read write } for pid=3364 comm="syz.8.1103" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 91.581868][ T294] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 91.614019][ T28] audit: type=1400 audit(1778084555.510:475): avc: denied { open } for pid=3364 comm="syz.8.1103" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 91.615177][ T294] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 38400, setting to 1024 [ 91.693514][ T3309] loop5: detected capacity change from 0 to 40427 [ 91.700144][ T294] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 91.713337][ T3309] F2FS-fs (loop5): Unrecognized mount option "0x00000000000000000xffffffffffffffffÿ" or missing value [ 91.728022][ T294] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 91.737922][ T294] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.746446][ T294] usb 10-1: Product: syz [ 91.750844][ T294] usb 10-1: Manufacturer: syz [ 91.755685][ T294] usb 10-1: SerialNumber: syz [ 91.771235][ T294] usb 10-1: config 0 descriptor?? [ 91.792100][ T3336] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 91.799545][ T3336] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 92.035788][ T831] usb 10-1: USB disconnect, device number 2 [ 92.097378][ T3382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 92.256544][ T3387] loop0: detected capacity change from 0 to 1024 [ 92.268684][ T3387] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. OK Stopping syslogd: stopped /sbin/syslogd (pid 84) OK [ 92.342654][ T2828] EXT4-fs (loop0): unmounting filesystem. [ 92.384175][ T862] usb 6-1: USB disconnect, device number 6 umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only Connection to 10.128.1.9 closed by remote host. umount: can't remount /dev/root read-only[ 92.774609][ T798] bridge0: port 4(syz_tun) entered disabled state [ 92.814330][ T798] device syz_tun left promiscuous mode [ 92.819825][ T798] bridge0: port 4(syz_tun) entered disabled state [ 92.876340][ T798] bridge0: mtu less than device minimum [ 93.465833][ T1389] tipc: Left network mode Sent SIGKILL to all processes Requesting system poweroff [ 93.995058][ T1389] device bridge_slave_1 left promiscuous mode [ 94.001198][ T1389] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.008930][ T1389] device bridge_slave_0 left promiscuous mode [ 94.015204][ T1389] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.023321][ T1389] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.030816][ T1389] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.038735][ T1389] device bridge_slave_1 left promiscuous mode [ 94.044919][ T1389] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.052398][ T1389] device bridge_slave_0 left promiscuous mode [ 94.058661][ T1389] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.067227][ T1389] device vlan2 left promiscuous mode [ 94.072654][ T1389] bridge0: port 3(vlan2) entered disabled state [ 94.079389][ T1389] device bridge_slave_1 left promiscuous mode [ 94.085674][ T1389] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.093175][ T1389] device bridge_slave_0 left promiscuous mode [ 94.099406][ T1389] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.107907][ T1389] device veth1_macvtap left promiscuous mode [ 94.114021][ T1389] device veth0_vlan left promiscuous mode [ 94.120133][ T1389] device veth1_macvtap left promiscuous mode [ 94.126225][ T1389] device veth0_vlan left promiscuous mode [ 94.132755][ T1389] device veth1_macvtap left promiscuous mode [ 94.138821][ T1389] device veth0_vlan left promiscuous mode [ 94.968563][ T3424] kvm: exiting hardware virtualization [ 94.974854][ T3424] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 94.981661][ T3424] ACPI: PM: Preparing to enter system sleep state S5 [ 94.988937][ T3424] reboot: Power down serialport: VM disconnected.