last executing test programs: 34.793956202s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b4000000020000006600000000000000730135000000000095000000000000004bb5eea0a6ec9fcd4b0a008a8443f22702000000e63bde9e4a0587536a966992ae7011d6e6c03175717e9912e0dd1a59541f7cbb1548ee5bd627f5b0b8ec77bd6d5f7b543f9aafaabe53339b12fbbe7decc4aa61b8aad0359083bdd61543fbeee8d560bb4b5925fae801f4c91e31674b124a1b38000000bc4da4a9b3d5cc9e0000f6a7a729009973ff07000000000000ac79e5d84abbec7d96629490727375b853f6308a980fba61fbe0131f3c7a026d8f000008000000000000000b20d7ac2df89d7989bf53bec908213d396edf24e9fc3cc004a1097fddc65c1b1b328277ff85ed56b9261eb7bcee28ec2d3616689ab3f31f849eebce6f21e6302003c0467844e000000000db0700bd694a09b253a1c6c7c138b3ec6ee9b83edcc55d3403acd5c50e27401aa306a7ab7069790da79b7ab4512fa4b64a00009bab066bf7a4ab148d44c7e2e4d219cdd7ebeb51511d9df85a648b1b85f93cb6cd21f93d5ea3da2b31657c065d052d9b9ee00320def97ebac25b929b3c15e33be6e7d54e622b427ee8d181f5f18d772fb5c58a93b5afed6ce430a50f398d2ec77b1d7a6620ba1f5fbb48703ab220f442697edc165b449db2e3c221fbf270a6db414516949b97c200000096a1cbe81a38a23f03bd741a3e60c2e294f828e06f1b2cb70328f151f949e369efed52a28b87aae9d7d2800c8efe7f93c05adc9086d3f143a7b87d06838c6525cafdc01820a8912a131ff1f6acb9439f2d95a746291641b38333ce1c33edc9da00c8a2b42e8adfeff69fce7a35f79748e3e5b235269310988a05bf7c4e4cef3d1aa550c83d6328eb000000044a6458c31431d58973c93f5e9452258a7098bc3d014afe638a45526e054d6b3ba5ca8f357df67c41acc28edacb31d38994544c3511ea1e8a448e66039425cfb03efb5d5eb81a306746adb8809ef9691863c00085e2dc401325327e54cbfceb400c2663466cd4a79c94b62c9882626499a8a29c564464f2a7aee6a929f831c93d23005787d272b5eaf0c6e11a7f0f1f39f68df44f6bf2ebe448cbe850efd24bf7b96ad33abbd3a8b5814b5e7f85d1a47ee604ccef20bda53c9ce06910568fc200eee12fc6ef2734a6e9af5132f0c507e277fd97f9b48c840697289d38e454467f4d2f94b2f76d06edd083dafefd76deb251b5818de9c27d0df6e7b8862fe42f6c453f551f35b6d76395a1d205f276ae628fbdb8081905a1d7c2805532d3387b88f2997e8ce41c5dca83659cfb7f3a1c7b2bec8a7575dc4241dde6c680ee9a27b197739f4ad86f3bad3e42d4954bef864586ad02c27858d63efc495bcfb6e30f30fedf536d63769a196fc3b472195d0a1a13ecf803136d751cefb0edb5794cab8681214b39f86d88f3aebea4d465ef05f975b09f264d6c8d8e3bb6ea7d21c6602bcc8f76f2546cccc074f55c22aa8b502968040000000000000047c8a50036dd268a1aeff951f5090492b5e941feb1d3785aafe1655876e5a36c40fb5afcfd1eb28952662782097836a4d1aa3de0c06bb7dc27cf1a546b6aa6ce9932f3c6a013bc3791da4d8a33680ba8f1334d75a43e991ebd4582d786ec05cdd3152d52ab15fc7595cbd339f730d2ec8e37e6c500c4c30280a6af986f62a22d9c5c275e7798c165545abfcd304243274db15924a136a0896d56576ed5de90b1bda90f4024b9a0b3b33f688db8e38f784ae3942aba874f95d10c47e2405ceb0438cc272133fac718a6553710e4ca97df646b21d03652c54eade2e99344e11a2671cf274d397650fba8fcfb7e51a926e37b3980a1732111175dd99b9d979042b3ea411a7b4f9081ae9b82974d5eb6fd4e4bcd95e4f897dfba4e44777e6d02a896b650a66d9139696b9c6c36a33eb3adc092bf4586bfab34002f802bbfe6a7679cec20cc25e01f129bbe92a65961fac7bffa3d8feda2ac927743d2bce57ee39b671948576337535180aa754e035421cf1709bc1b5e46c35515fb1fcda637a6405e9b216d2ca09795c5d2f27665da5b17bcf0f387e6dd58202a3a1148e46e55ac7ea027eb3022eee4a000ca543ab566921e5db4f741a71dc202c851d99851bc7a62ea705f942855a9fa30b912045f78ab1e3fdeada84bc8ac36cc1223901e56f6ecbabbc3263098c9c47a1f505a8299b5715a455e834ddddc430f387cafa07bf915522f6a70c031929a42e34eea5169b796320e892d27924045bcf56135684ca96ada82749371d5766c0d0cae8772f140eef001ca39dc28743f77b8724487a9b37ca66d20aef8a5236393fce29b0531cbd3265c209761ed41a2e473fbd84ca9b67e3ceb58a4b774ee127628faba8702c0a73f8311d269429aaadf74c439404fc9f864e69807dfe2bae2bd4c498a10d4e17dceb1f7539bfeb392e22e7b93d0ecf66cd253a4062bbc8a4307f0e4360651dc7f89247a89ab73dd7c11be13707482c369f02d7b6f242599f95dbfcb55bea158665231f8fe04ed2a8c407fed1a8702e2486386f2ae6347231128be789186ff5651208c8b781f85d3fb51bd28b939a8bc88a471c36fa17fd04c3fbdbd3f7bf144b1466014a77c582aa0380e612cd101d557dd1e5b7bae3da3ea2659f66a3641eaa3b008b978e0a5f69671f52401892dba8a63c8f7eb280880dbdcee5d8e8aae9de9d28cbe0de2f4642c4fe69db3b7432b2eb7ca282fbfe030ad6c33a73feef1cd517cedc2c0059e5636ae0fb3969ce7f64c6f6cffcc40ac1331f6b50d4f95c490edd75e8cdba278a602c8a200000000000000000000000091b39ecd9b22cc68dde3760f3bd7377b35f4d41a46959070cddc4a9c340455f97ff0ea8c6adbff47a39269b2e90dffa1ec22d41f9da01ec44847a88334e106ff455f9ca2a0b2900591ceac1f0e823eaa7ed5b359eed1a39a6f75e7556ab52ac0c2c46b28f3791edf8f25cc2e6cab30841d3fac1e1644f35ed7899a903df3901f89e13cee8589df43652fbe05a789881dcae97ffdc52363bc61c334480afac09e04f9e5ce0bcd12c997545053b64bb2ba920a1071d2ca692c72965bdc0022f7f147943001a55ed8c7b3181fbfabd2069ac7bd4f9b459463edb8a05d1fde9a000000000085b6f76cf1667ca9c4c09bc185348df7972ed45ef93479986d28a6e72ea9becd8d83434c009f089f07da335da3711b0e2b6e813f79aafdbd5858463ae47a5495dc0a7e6548774ad6f9dc3356481c4472a6455324731fe1635fd7d35bba6c7475cad7702815070f8b38c0ca"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup, r0, 0x1}, 0x14) 34.634250082s ago: executing program 4: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="3a4be99f9f727e8d0262285f8311dc64a122b0328932c72b2382283dcb1539cb6d4840c2d90f6bb77b5e93c4b5", @ANYRES8], 0x1, 0x5524, &(0x7f0000007200)="$eJzs3M1rI2UcB/Anfdnum2sRD946sAgtbELTl0VvVXfxBbuUVQ+eNE2mIbtJpjRpWnvy4FE8+J+IgieP/g0ePHsTD4o3oZJ5prtbtSA2bdzu5wOT78yTyW+eJywLv5mSADyzZpPffy2FG+FKCGEyhHA9hHy/VGy5tRgvhRDmQggTT2ylYvzRwKUQwtUQwo1h8VizVLz15a3BzdVf3vntux9mpq599e2P41s1MG4vhxA623F/rxMza8Z8UIzXBq08OyuDIuMbnYfFcRZzL93MK+zVjs6r5bncjOdn27u9YW61a/VhNltb+fh2N16wN2ge1ck/8KC2kx830s08W70sz+ZBnNf+Qfzf8aDXj3UaRb1P8vKh3z/KOJ7up3E92w/zrHcPJ+N4rJs10v1hDoosLhfqWbuRz2PzFF/0/9y7re7ufjJId3qtrJusVqqvVKq3y9WdrJH205VyrdO4vZLMN9vD08r9tNZZa2ZZs51W6llnIZlv1uvlajWZv5NutmrdpFqtLFcWy6sLxd6t5M17HyTtRjI/zNdb3d1+q91LtrKdJH5iIVmqLL+6kNysJu+tbyQb9+/eXd94P9z58N5r62+/UZz0t2kl80uLS0vl6mJ5qbpwYdY/92j9H52w/s+KSY9w/XAqpXFPAODpo/8HxuHs+v+d++HwMB8fXf8/k+fj/j/mf+//+8W4/n9U/e/hKPv/k/rfi93/j2X9cCr6fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZ9ZP01+/le/MxuNrxfhzxdALxXEphDARQjj8B5Ph0rGak0Wd6RPOn/7LHL4vhbzC8BozxXY1hLBWbH88f9bfAgAAAFxc33w690Xs1uPL7LgnxHmKN20mrn88onqlEML07M8jqjYxfHlxRMXyf99TYX9E1fIbWJdHVCzecpsaVbV/ZfJYXH4iSjEmznU6AADAuTjeCZxvFwIAAMB5+nzcE2A8SuHoUebRs+D8L+8fPxC8cuwIAAAAeAqVxj0BAAAA4Mzl/b/f/wMAAICLLf7+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Cc793OjNhDFAfjZxoH8U1CUe1rhBmWkhBxzjCggTVACaSENUAO5pYQIVni8aFmxq5U8tndX3yfBMBb8mEH4MG+kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD79rber3z+//uqaczh2k2c2AAAAwDX7ertqXsxT/317/WN76XPbLyKijIhra/cq3lxkVm1O/cD763tj+BPRJJy+Y9o+3kXEoopYRMT/T33/CgAAAPB67dabZVqtp6f52ANiSKloU374limviIh6/i9TWnnK+5IprPl/T+JHprSmgDXLFJZKbpNcaU/S3O7nqt3sTlOkpnz889nmDgAADKi6aIZdhQAAADCk72MPgHEUcbuVed4KnKam3d57e9EDAAAAXqBi7AEAAAAAvWvW/8/6/L9w/h8AAAB0lc7/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoE/7ervarTfLrjmHYzd5ZgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcMP+vKNACIRBGOxd35nM/Q8rDZqamlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw5nd/+T8xNc4kc6+NpeeRZO3U2Do19s6Noz+Mr18DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzR7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv38xpHFQcA/M3MzsZWxTXKHiKi4EEvNt3W1t7EgxI8+CcIId3W2FWx5mBLEXLxJjn3InoUEZR46//Qcwu91FsPe6jgwdPKzM4kr23E9UdnNtnPB9687w7DvO+bhZDvvJcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALXx2/txVhx60zitzt26f22j6G8/1Bdu7NxZKVoRJ00mfTi8GH9I+u0lAgAAwOLI6vo+hHA3310r+rRX1v95fU1R83/79DSu6/mH6/66r2v/ov3y873n9wbqTccpbnphczQ8+Wgqncc3y/n2zN9e0SmffPnuJSu/kPS97efGefk8k69v3nynW4ZLTWQLAPwbJ+q+Curfh4p+0GZiACyMTlR41/V/1ms3JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAmjLfDk3WchBBWOvtx4fb9axsH9Td27qzU7ez16zvxPYtb5CGEC5uj4ckG5zLvPr9y9dL6aDS83HzwUgihrdHfqqZ/6YMZLg6hlecj+J+CtPqy5yWfwxG0+EMJAIAjKa9aUdffzXfXinPJcgiT7x6s/1+N4jBj/X/vw7O34rHi+n/Q2AxbtBTF6V9ftrr1x2QyuXL19c2P1y8OLw4/eePU4M3B6XNnzpxbLd+VrHpjAgAAwH/TrVpc/6fLj67/H4/iMGP9/9k3gy/jsbJFq/9ntL/o13YmAAAAi+3Zl3//LTngfNLthi/Wt7YuD6bHvc+npscWUv3HlqoW1//ZcttZAQAAAE0YbycPrP+fj+Iw4/r/U9+/8GN8zyyEcKxa/z+x8enofHPTmWtN/Dlx23MEAACgXceqFq//5+X+/3Rvy0MaQnjtlWlc/RvAmer/7N2vfojHivf/n25uinMp7U+fR9n3Q+j0284IAACAo+yJqhXF/q/57tpHPx1/v2v/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDT/gwAAP//vE9Crw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000406) truncate(&(0x7f0000000240)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 34.479271089s ago: executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 34.291129479s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x20}}, 0x0) r2 = dup3(r0, r1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x20}}, 0x0) r7 = dup3(r5, r6, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r8, @ANYBLOB="7fffffff0000000008000a"], 0x28}}, 0x0) 34.090079568s ago: executing program 2: r0 = memfd_create(&(0x7f00000003c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeLR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd9h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x7f.o\x9d\xa8r[\x0f\xa5\xd4r\xb9\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{N\x91K\xf1\xe9\xa96|\xad\xaa35\xd3\x1b\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90\xee\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x865\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a\xdeP/\xd6j\xdb\xa1\xc1\xf0\x8aB\xcf{fjR\xee\xe8\xcf&\'\xca\xed\xbb\xf9\x95D\x9f\xee\xe6\xa1C%\xc4\xe1\x18\xfc\x1c\x86\xdb\xfb\x16\xf4%a\xe7\x13RmI3\x0fS\xa2\xa6\xa7\xc6\x97\x8b\xf2T\x00\xfc\xd1/\xf5?v\xa0\xe6\x85\xcd\x19\xf6\xe73(;\xf10\xd3\x9etH}\xeeY\xe0m\xa4\x15\xe8\xd4\x99\x02\xbe\xf3\xa5\xc1m!\xdaIFj\ve\xd7\xbdm1h\xdb\xff]\x01A\xe98\xa5\x8e\xde\x11\xd0\xb9\xab\xd6,\xa7\x175X\xc5\xb4\x13!\x8e\x05o\xc0\x04\xe5\xe5i\xea\x98\x8e\xee\x8a\xda\x1f\xce\xf0\x19mB\a\x1dqB\xcf\x12:\x1b@\x02\xe6\x84*\xe2\xd6/\xfb\xb9\x1a\xd0\xa7', 0x2) fallocate(r0, 0x0, 0x0, 0x800000b) fcntl$F_SET_FILE_RW_HINT(r0, 0x409, 0x0) 33.162790695s ago: executing program 1: rt_sigreturn() semctl$GETPID(0x0, 0x3, 0xb, &(0x7f0000000000)=""/4096) semget(0x0, 0x4, 0x614) semget$private(0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) 32.940741284s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) write$binfmt_script(r1, 0x0, 0xfffffe5d) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x14) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 32.874507089s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 32.700123402s ago: executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) shutdown(r2, 0x0) 32.662203203s ago: executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 32.63574216s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414"], 0x2c}}, 0x0) 32.616306822s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000015c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 32.510927608s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x20}}, 0x0) r2 = dup3(r0, r1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x20}}, 0x0) r7 = dup3(r5, r6, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r8, @ANYBLOB="7fffffff0000000008000a"], 0x28}}, 0x0) 32.428510584s ago: executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 32.406933715s ago: executing program 3: syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff02000000000000000000000000000100040014"], 0x0) 32.334012302s ago: executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x10000) connect$inet(r0, &(0x7f0000001fc0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x21, 0x0, 0x0) 32.306331631s ago: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002680)="cdf508", 0x3}}, 0x0) 32.236763384s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b4000000020000006600000000000000730135000000000095000000000000004bb5eea0a6ec9fcd4b0a008a8443f22702000000e63bde9e4a0587536a966992ae7011d6e6c03175717e9912e0dd1a59541f7cbb1548ee5bd627f5b0b8ec77bd6d5f7b543f9aafaabe53339b12fbbe7decc4aa61b8aad0359083bdd61543fbeee8d560bb4b5925fae801f4c91e31674b124a1b38000000bc4da4a9b3d5cc9e0000f6a7a729009973ff07000000000000ac79e5d84abbec7d96629490727375b853f6308a980fba61fbe0131f3c7a026d8f000008000000000000000b20d7ac2df89d7989bf53bec908213d396edf24e9fc3cc004a1097fddc65c1b1b328277ff85ed56b9261eb7bcee28ec2d3616689ab3f31f849eebce6f21e6302003c0467844e000000000db0700bd694a09b253a1c6c7c138b3ec6ee9b83edcc55d3403acd5c50e27401aa306a7ab7069790da79b7ab4512fa4b64a00009bab066bf7a4ab148d44c7e2e4d219cdd7ebeb51511d9df85a648b1b85f93cb6cd21f93d5ea3da2b31657c065d052d9b9ee00320def97ebac25b929b3c15e33be6e7d54e622b427ee8d181f5f18d772fb5c58a93b5afed6ce430a50f398d2ec77b1d7a6620ba1f5fbb48703ab220f442697edc165b449db2e3c221fbf270a6db414516949b97c200000096a1cbe81a38a23f03bd741a3e60c2e294f828e06f1b2cb70328f151f949e369efed52a28b87aae9d7d2800c8efe7f93c05adc9086d3f143a7b87d06838c6525cafdc01820a8912a131ff1f6acb9439f2d95a746291641b38333ce1c33edc9da00c8a2b42e8adfeff69fce7a35f79748e3e5b235269310988a05bf7c4e4cef3d1aa550c83d6328eb000000044a6458c31431d58973c93f5e9452258a7098bc3d014afe638a45526e054d6b3ba5ca8f357df67c41acc28edacb31d38994544c3511ea1e8a448e66039425cfb03efb5d5eb81a306746adb8809ef9691863c00085e2dc401325327e54cbfceb400c2663466cd4a79c94b62c9882626499a8a29c564464f2a7aee6a929f831c93d23005787d272b5eaf0c6e11a7f0f1f39f68df44f6bf2ebe448cbe850efd24bf7b96ad33abbd3a8b5814b5e7f85d1a47ee604ccef20bda53c9ce06910568fc200eee12fc6ef2734a6e9af5132f0c507e277fd97f9b48c840697289d38e454467f4d2f94b2f76d06edd083dafefd76deb251b5818de9c27d0df6e7b8862fe42f6c453f551f35b6d76395a1d205f276ae628fbdb8081905a1d7c2805532d3387b88f2997e8ce41c5dca83659cfb7f3a1c7b2bec8a7575dc4241dde6c680ee9a27b197739f4ad86f3bad3e42d4954bef864586ad02c27858d63efc495bcfb6e30f30fedf536d63769a196fc3b472195d0a1a13ecf803136d751cefb0edb5794cab8681214b39f86d88f3aebea4d465ef05f975b09f264d6c8d8e3bb6ea7d21c6602bcc8f76f2546cccc074f55c22aa8b502968040000000000000047c8a50036dd268a1aeff951f5090492b5e941feb1d3785aafe1655876e5a36c40fb5afcfd1eb28952662782097836a4d1aa3de0c06bb7dc27cf1a546b6aa6ce9932f3c6a013bc3791da4d8a33680ba8f1334d75a43e991ebd4582d786ec05cdd3152d52ab15fc7595cbd339f730d2ec8e37e6c500c4c30280a6af986f62a22d9c5c275e7798c165545abfcd304243274db15924a136a0896d56576ed5de90b1bda90f4024b9a0b3b33f688db8e38f784ae3942aba874f95d10c47e2405ceb0438cc272133fac718a6553710e4ca97df646b21d03652c54eade2e99344e11a2671cf274d397650fba8fcfb7e51a926e37b3980a1732111175dd99b9d979042b3ea411a7b4f9081ae9b82974d5eb6fd4e4bcd95e4f897dfba4e44777e6d02a896b650a66d9139696b9c6c36a33eb3adc092bf4586bfab34002f802bbfe6a7679cec20cc25e01f129bbe92a65961fac7bffa3d8feda2ac927743d2bce57ee39b671948576337535180aa754e035421cf1709bc1b5e46c35515fb1fcda637a6405e9b216d2ca09795c5d2f27665da5b17bcf0f387e6dd58202a3a1148e46e55ac7ea027eb3022eee4a000ca543ab566921e5db4f741a71dc202c851d99851bc7a62ea705f942855a9fa30b912045f78ab1e3fdeada84bc8ac36cc1223901e56f6ecbabbc3263098c9c47a1f505a8299b5715a455e834ddddc430f387cafa07bf915522f6a70c031929a42e34eea5169b796320e892d27924045bcf56135684ca96ada82749371d5766c0d0cae8772f140eef001ca39dc28743f77b8724487a9b37ca66d20aef8a5236393fce29b0531cbd3265c209761ed41a2e473fbd84ca9b67e3ceb58a4b774ee127628faba8702c0a73f8311d269429aaadf74c439404fc9f864e69807dfe2bae2bd4c498a10d4e17dceb1f7539bfeb392e22e7b93d0ecf66cd253a4062bbc8a4307f0e4360651dc7f89247a89ab73dd7c11be13707482c369f02d7b6f242599f95dbfcb55bea158665231f8fe04ed2a8c407fed1a8702e2486386f2ae6347231128be789186ff5651208c8b781f85d3fb51bd28b939a8bc88a471c36fa17fd04c3fbdbd3f7bf144b1466014a77c582aa0380e612cd101d557dd1e5b7bae3da3ea2659f66a3641eaa3b008b978e0a5f69671f52401892dba8a63c8f7eb280880dbdcee5d8e8aae9de9d28cbe0de2f4642c4fe69db3b7432b2eb7ca282fbfe030ad6c33a73feef1cd517cedc2c0059e5636ae0fb3969ce7f64c6f6cffcc40ac1331f6b50d4f95c490edd75e8cdba278a602c8a200000000000000000000000091b39ecd9b22cc68dde3760f3bd7377b35f4d41a46959070cddc4a9c340455f97ff0ea8c6adbff47a39269b2e90dffa1ec22d41f9da01ec44847a88334e106ff455f9ca2a0b2900591ceac1f0e823eaa7ed5b359eed1a39a6f75e7556ab52ac0c2c46b28f3791edf8f25cc2e6cab30841d3fac1e1644f35ed7899a903df3901f89e13cee8589df43652fbe05a789881dcae97ffdc52363bc61c334480afac09e04f9e5ce0bcd12c997545053b64bb2ba920a1071d2ca692c72965bdc0022f7f147943001a55ed8c7b3181fbfabd2069ac7bd4f9b459463edb8a05d1fde9a000000000085b6f76cf1667ca9c4c09bc185348df7972ed45ef93479986d28a6e72ea9becd8d83434c009f089f07da335da3711b0e2b6e813f79aafdbd5858463ae47a5495dc0a7e6548774ad6f9dc3356481c4472a6455324731fe1635fd7d35bba6c7475cad7702815070f8b38c0ca2222"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup, r0, 0x1}, 0x14) 32.156399813s ago: executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) 32.068609859s ago: executing program 1: r0 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) unshare(0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000500)={@map=0x1, 0xffffffffffffffff, 0x9, 0x0, 0xffffffffffffffff, @link_id, r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x1, 0x4) write(r0, &(0x7f0000000100)="240000001e005f0214fffffffffffff80700000000000000000000000300080016000000", 0x24) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040), 0x4) 32.02694648s ago: executing program 3: r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}}}) close(r1) close(r0) 31.977118962s ago: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000005cc0)={&(0x7f00000009c0), 0x18, &(0x7f0000000d40)={&(0x7f0000004cc0)="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", 0x6fffff9}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000340)=0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000200), 0x4) 31.732558519s ago: executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r0, 0x0, r4, 0x0, 0x5, 0x0) write$binfmt_misc(r4, 0x0, 0x99) write(r2, 0x0, 0x0) 30.087861963s ago: executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x140d, 0x1}, 0x10}}, 0x0) 30.040150823s ago: executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 2.38885962s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac14140008"], 0x2c}}, 0x0) 2.032137162s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x20}}, 0x0) r2 = dup3(r0, r1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x20}}, 0x0) r7 = dup3(r5, r6, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r8, @ANYBLOB="7fffffff0000000008000a"], 0x28}}, 0x0) 2.001932419s ago: executing program 3: syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd602e5cea00403c0020010000000000000000000000000000ff02000000000000000000000000000100040014"], 0x0) 1.952558634s ago: executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @dev}, "02186371ae9b1c03"}}}}}, 0x0) 0s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r4, 0x301}, 0x14}, 0x1, 0x3000000}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000140)={0x0, 0x3, 0xf9}) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): led_t tclass=file permissive=1 [ 163.373119][ T5111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.634089][ T147] hsr_slave_0: left promiscuous mode [ 163.678256][ T147] hsr_slave_1: left promiscuous mode [ 163.756515][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.792582][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.838637][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.861422][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.909318][ T6668] loop2: detected capacity change from 0 to 2048 [ 163.951143][ T147] veth1_macvtap: left promiscuous mode [ 163.976582][ T147] veth0_macvtap: left promiscuous mode [ 163.983875][ T147] veth1_vlan: left promiscuous mode [ 163.999619][ T147] veth0_vlan: left promiscuous mode [ 164.036468][ T6668] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.128230][ T5118] Bluetooth: hci4: command tx timeout [ 164.143873][ T6672] loop3: detected capacity change from 0 to 256 [ 164.205581][ T6672] MINIX-fs: mounting file system with errors, running fsck is recommended [ 165.562337][ T147] team0 (unregistering): Port device team_slave_1 removed [ 165.668182][ T147] team0 (unregistering): Port device team_slave_0 removed [ 166.223218][ T5118] Bluetooth: hci4: command tx timeout [ 166.502460][ T6683] loop3: detected capacity change from 0 to 40427 [ 166.549727][ T6683] F2FS-fs (loop3): Found nat_bits in checkpoint [ 166.685248][ T6683] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 166.904923][ T5111] syz-executor.3: attempt to access beyond end of device [ 166.904923][ T5111] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 166.964038][ T5111] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 167.005340][ T5111] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 167.090588][ T6698] loop1: detected capacity change from 0 to 1024 [ 167.150444][ T6698] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 167.171708][ T6605] chnl_net:caif_netlink_parms(): no params data found [ 167.286879][ T6698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.501391][ T29] audit: type=1400 audit(1717265847.085:309): avc: denied { write } for pid=6710 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.933944][ T5105] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.948755][ T6605] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.976402][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.997024][ T6605] bridge_slave_0: entered allmulticast mode [ 168.017336][ T6605] bridge_slave_0: entered promiscuous mode [ 168.066741][ T6605] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.094082][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.132732][ T6605] bridge_slave_1: entered allmulticast mode [ 168.147401][ T29] audit: type=1400 audit(1717265847.725:310): avc: denied { mount } for pid=6724 comm="syz-executor.0" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 168.175680][ T6605] bridge_slave_1: entered promiscuous mode [ 168.288332][ T5118] Bluetooth: hci4: command tx timeout [ 168.381913][ T6605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.412697][ T29] audit: type=1400 audit(1717265847.985:311): avc: denied { unlink } for pid=6724 comm="syz-executor.0" name="#1" dev="sda1" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 168.443222][ T6605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.467146][ T5118] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 168.474241][ T5118] Bluetooth: Wrong link type (-22) [ 168.675077][ T6701] loop2: detected capacity change from 0 to 32768 [ 168.779165][ T29] audit: type=1400 audit(1717265848.345:312): avc: denied { unmount } for pid=5114 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 168.892693][ T6605] team0: Port device team_slave_0 added [ 169.015401][ T6605] team0: Port device team_slave_1 added [ 169.130200][ T6701] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 169.183893][ T6701] bcachefs (loop2): recovering from clean shutdown, journal seq 8 [ 169.305409][ T6701] bcachefs (loop2): alloc_read... done [ 169.312381][ T6701] bcachefs (loop2): stripes_read... done [ 169.316583][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.319740][ T6701] bcachefs (loop2): snapshots_read... done [ 169.336664][ T6701] bcachefs (loop2): journal_replay... done [ 169.342869][ T6701] bcachefs (loop2): resume_logged_ops... done [ 169.350905][ T6701] bcachefs (loop2): going read-write [ 169.355315][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.012513][ T6605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.034440][ T6701] bcachefs (loop2): done starting filesystem [ 170.122936][ T6605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.161430][ T6605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.250398][ T5104] bcachefs (loop2): shutting down [ 170.256380][ T5104] bcachefs (loop2): going read-only [ 170.270371][ T6605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.310994][ T5104] bcachefs (loop2): finished waiting for writes to stop [ 170.343081][ T5104] bcachefs (loop2): flushing journal and stopping allocators, journal seq 8 [ 170.363603][ T5104] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 8 [ 170.455970][ T5104] bcachefs (loop2): shutdown complete, journal seq 9 [ 170.511276][ T5104] bcachefs (loop2): marking filesystem clean [ 170.545302][ T6605] hsr_slave_0: entered promiscuous mode [ 170.598514][ T6605] hsr_slave_1: entered promiscuous mode [ 170.621176][ T6605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.637389][ T6605] Cannot create hsr debugfs directory [ 170.794453][ T5104] bcachefs (loop2): shutdown complete [ 172.786621][ T6759] loop0: detected capacity change from 0 to 40427 [ 172.838800][ T6763] loop3: detected capacity change from 0 to 32768 [ 172.879811][ T6759] F2FS-fs (loop0): Found nat_bits in checkpoint [ 173.395113][ T6763] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 173.437171][ T6763] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 173.468298][ T29] audit: type=1400 audit(1717265853.035:313): avc: denied { create } for pid=6811 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.504357][ T6763] bcachefs (loop3): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 173.538337][ T6763] bcachefs (loop3): bch2_fs_recovery(): error EINTR [ 173.547680][ T29] audit: type=1400 audit(1717265853.065:314): avc: denied { bind } for pid=6811 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.595578][ T6763] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINTR [ 173.639332][ T6763] bcachefs (loop3): shutting down [ 173.661917][ T29] audit: type=1400 audit(1717265853.195:315): avc: denied { connect } for pid=6811 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.758765][ T29] audit: type=1400 audit(1717265853.245:316): avc: denied { shutdown } for pid=6811 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.781530][ T6763] bcachefs (loop3): shutdown complete [ 173.918802][ T6605] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.948634][ T6605] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.001795][ T6605] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.069288][ T6605] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.470093][ T29] audit: type=1400 audit(1717265854.055:317): avc: denied { search } for pid=4516 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.616311][ T6605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.727526][ T6605] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.873555][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.881890][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.006563][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.013894][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.047994][ T29] audit: type=1400 audit(1717265856.615:318): avc: denied { sys_module } for pid=6605 comm="syz-executor.4" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 177.784419][ T6605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.987964][ T29] audit: type=1400 audit(1717265857.555:319): avc: denied { listen } for pid=6865 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 178.855678][ T6605] veth0_vlan: entered promiscuous mode [ 178.939339][ T5115] Bluetooth: hci3: Malformed Event: 0x13 [ 178.963831][ T6605] veth1_vlan: entered promiscuous mode [ 178.988090][ T29] audit: type=1400 audit(1717265858.545:320): avc: denied { create } for pid=6891 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 179.009887][ T6605] veth0_macvtap: entered promiscuous mode [ 179.022420][ T6605] veth1_macvtap: entered promiscuous mode [ 179.081415][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.122242][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.151503][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.213853][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.256823][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.301232][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.337877][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.381592][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.412859][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.503009][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.543950][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.561416][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.628056][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.649742][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.673616][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.704248][ T6605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.739993][ T6605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.781706][ T6863] loop1: detected capacity change from 0 to 40427 [ 179.792832][ T6605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.860121][ T6605] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.903203][ T6863] F2FS-fs (loop1): Found nat_bits in checkpoint [ 179.914361][ T6605] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.949118][ T6605] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.984150][ T6605] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.253078][ T6863] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 180.388490][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.396365][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.511357][ T5105] syz-executor.1: attempt to access beyond end of device [ 180.511357][ T5105] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 180.566472][ T5105] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 180.593256][ T5105] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 180.624218][ T4463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.657992][ T4463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.755384][ T6888] loop2: detected capacity change from 0 to 32768 [ 180.757607][ T6892] loop3: detected capacity change from 0 to 32768 [ 180.800365][ T6888] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6888) [ 180.879504][ T6892] BTRFS: device /dev/loop3 (7:3) using temp-fsid a9a53122-cf0e-49dc-a34f-2cdf21524a9f [ 180.902745][ T6896] loop0: detected capacity change from 0 to 32768 [ 180.965700][ T6892] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6892) [ 180.980062][ T6888] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 180.994653][ T6888] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 181.003622][ T6888] BTRFS info (device loop2): using free-space-tree [ 181.021540][ T6915] loop4: detected capacity change from 0 to 64 [ 181.117166][ T6892] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 181.132286][ T6896] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 181.186065][ T6892] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 181.230843][ T6892] BTRFS info (device loop3): using free-space-tree [ 181.420933][ T6896] XFS (loop0): Ending clean mount [ 181.789925][ T5114] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 181.889669][ T29] audit: type=1400 audit(1717265861.475:321): avc: denied { remount } for pid=6891 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 181.889731][ T6962] btrfs: Unknown parameter 'ÿÿÿÿ017777777777777777777770177777777777777777777701777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 182.074513][ T6888] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 183.220377][ T5104] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.275701][ T5111] BTRFS info (device loop3): last unmount of filesystem a9a53122-cf0e-49dc-a34f-2cdf21524a9f [ 183.293289][ T51] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 183.339796][ T29] audit: type=1400 audit(1717265862.915:322): avc: denied { write } for pid=4516 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.373455][ T29] audit: type=1400 audit(1717265862.915:323): avc: denied { remove_name } for pid=4516 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.409598][ T29] audit: type=1400 audit(1717265862.915:324): avc: denied { rename } for pid=4516 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.435464][ T29] audit: type=1400 audit(1717265862.915:325): avc: denied { add_name } for pid=4516 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.458163][ T29] audit: type=1400 audit(1717265862.915:326): avc: denied { unlink } for pid=4516 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 183.486781][ T29] audit: type=1400 audit(1717265862.915:327): avc: denied { create } for pid=4516 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 186.111536][ T7013] loop0: detected capacity change from 0 to 256 [ 186.174882][ T7013] MINIX-fs: mounting file system with errors, running fsck is recommended [ 187.321818][ T6992] loop1: detected capacity change from 0 to 32768 [ 187.519277][ T6992] workqueue: Failed to create a rescuer kthread for wq "bcachefs": -EINTR [ 187.519723][ T6992] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 188.868348][ T7044] dummy0: entered promiscuous mode [ 188.888757][ T7044] dummy0: entered allmulticast mode [ 189.144374][ T7021] loop3: detected capacity change from 0 to 32768 [ 189.265191][ T7021] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 189.391289][ T7021] XFS (loop3): Ending clean mount [ 189.489136][ T29] audit: type=1400 audit(1717265869.075:328): avc: denied { ioctl } for pid=7019 comm="syz-executor.3" path="/root/syzkaller-testdir778238123/syzkaller.56wYas/135/file0/.pending_reads" dev="loop3" ino=4425 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 189.599147][ T7066] loop1: detected capacity change from 0 to 128 [ 189.611976][ T5111] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 189.677618][ T7066] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.790529][ T7066] ext4 filesystem being mounted at /root/syzkaller-testdir3644748347/syzkaller.YRAGTL/119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.262724][ T5105] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.374978][ T7076] loop3: detected capacity change from 0 to 256 [ 190.413579][ T7076] MINIX-fs: mounting file system with errors, running fsck is recommended [ 190.697518][ T7048] loop4: detected capacity change from 0 to 40427 [ 190.808022][ T7048] F2FS-fs (loop4): invalid crc value [ 190.855991][ T7048] F2FS-fs (loop4): Found nat_bits in checkpoint [ 191.058864][ T7064] loop2: detected capacity change from 0 to 32768 [ 191.100217][ T7064] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7064) [ 191.152064][ T7048] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 191.174429][ T7064] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.222527][ T7064] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 191.258019][ T7064] BTRFS info (device loop2): using free-space-tree [ 191.415158][ T6605] syz-executor.4: attempt to access beyond end of device [ 191.415158][ T6605] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.429767][ T6605] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 191.630108][ T7064] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 191.721520][ T7074] loop0: detected capacity change from 0 to 32768 [ 191.957556][ T7078] loop1: detected capacity change from 0 to 32768 [ 192.002904][ T7078] BTRFS: device /dev/loop1 (7:1) using temp-fsid 24a5b72b-8205-48a1-aefc-542e9d13fba0 [ 192.022831][ T7074] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,compression=gzip,str_hash=crc64,nojournal_transaction_names [ 192.055600][ T7074] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 192.057953][ T7078] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7078) [ 192.130755][ T7074] bcachefs (loop0): alloc_read... done [ 192.136617][ T7074] bcachefs (loop0): stripes_read... done [ 192.146830][ T7074] bcachefs (loop0): snapshots_read... done [ 192.170995][ T7078] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.206023][ T7074] bcachefs (loop0): journal_replay... done [ 192.212944][ T7074] bcachefs (loop0): resume_logged_ops... done [ 192.224070][ T7078] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 192.245360][ T5104] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.278028][ T7078] BTRFS info (device loop1): using free-space-tree [ 192.290979][ T7074] bcachefs (loop0): going read-write [ 192.366766][ T7074] bcachefs (loop0): done starting filesystem [ 192.599737][ T29] audit: type=1400 audit(1717265872.165:329): avc: denied { setattr } for pid=7073 comm="syz-executor.0" name="file0" dev="loop0" ino=536870912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.633247][ T7130] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 192.679348][ T7130] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 192.872574][ T5114] bcachefs (loop0): shutting down [ 192.877676][ T5114] bcachefs (loop0): going read-only [ 192.953693][ T5114] bcachefs (loop0): finished waiting for writes to stop [ 193.051314][ T5114] bcachefs (loop0): flushing journal and stopping allocators, journal seq 8 [ 193.088218][ T5114] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 8 [ 193.112376][ T5115] Bluetooth: hci1: Malformed Event: 0x13 [ 193.142291][ T5114] bcachefs (loop0): shutdown complete, journal seq 9 [ 193.152000][ T5114] bcachefs (loop0): marking filesystem clean [ 193.235644][ T12] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 193.247282][ T5114] bcachefs (loop0): shutdown complete [ 193.364974][ T7139] vxcan0: entered promiscuous mode [ 193.383677][ T7139] vxcan0: entered allmulticast mode [ 193.473109][ T5105] BTRFS info (device loop1): last unmount of filesystem 24a5b72b-8205-48a1-aefc-542e9d13fba0 [ 193.729642][ T7147] loop2: detected capacity change from 0 to 256 [ 193.826614][ T7147] MINIX-fs: mounting file system with errors, running fsck is recommended [ 194.935885][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.942421][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.185774][ T7137] loop3: detected capacity change from 0 to 40427 [ 195.223959][ T7137] F2FS-fs (loop3): heap/no_heap options were deprecated [ 195.234718][ T7137] F2FS-fs (loop3): quotafile must be on filesystem root [ 195.304101][ T7145] loop4: detected capacity change from 0 to 32768 [ 195.343368][ T7145] XFS: ikeep mount option is deprecated. [ 195.458637][ T7145] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 195.546423][ T7168] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.558726][ T7168] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.592146][ T7145] XFS (loop4): Ending clean mount [ 195.650683][ T7145] XFS (loop4): Quotacheck needed: Please wait. [ 195.834315][ T7145] XFS (loop4): Quotacheck: Done. [ 196.013935][ T29] audit: type=1400 audit(1717265875.595:330): avc: denied { link } for pid=7144 comm="syz-executor.4" name="file0" dev="loop4" ino=1060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 196.069458][ T5118] Bluetooth: hci3: Malformed Event: 0x13 [ 196.133688][ T29] audit: type=1800 audit(1717265875.705:331): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1060 res=0 errno=0 [ 196.503487][ T6605] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 196.552344][ T7189] loop3: detected capacity change from 0 to 1024 [ 196.575345][ T29] audit: type=1400 audit(1717265876.155:332): avc: denied { remount } for pid=7187 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 196.577414][ T7189] binder: Binderfs stats mode cannot be changed during a remount [ 196.810118][ T7155] loop1: detected capacity change from 0 to 40427 [ 196.912658][ T7155] F2FS-fs (loop1): invalid crc value [ 197.014795][ T7155] F2FS-fs (loop1): Found nat_bits in checkpoint [ 197.268054][ T7155] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 197.394492][ T7203] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 197.468717][ T29] audit: type=1400 audit(1717265877.055:333): avc: denied { write } for pid=7206 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 197.482231][ T7203] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 197.707595][ T5118] Bluetooth: hci2: Malformed Event: 0x13 [ 197.979996][ T7194] loop2: detected capacity change from 0 to 32768 [ 198.033281][ T7194] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7194) [ 198.089498][ T7194] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.151524][ T7194] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 198.215963][ T7194] BTRFS info (device loop2): using free-space-tree [ 198.288266][ T4534] udevd[4534]: worker [5213] terminated by signal 33 (Unknown signal 33) [ 198.324130][ T4534] udevd[4534]: worker [5213] failed while handling '/devices/virtual/block/loop2' [ 198.399545][ T7237] loop0: detected capacity change from 0 to 64 [ 198.542059][ T7237] hfs: bad catalog entry type 0 [ 198.581860][ T7194] BTRFS warning (device loop2): can't clear the free_space_tree feature bit while mounted [ 198.796740][ T5104] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 199.748681][ T7254] loop2: detected capacity change from 0 to 1024 [ 199.828337][ T7254] binder: Binderfs stats mode cannot be changed during a remount [ 199.924462][ T5226] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 200.091255][ T7220] loop3: detected capacity change from 0 to 32768 [ 200.150241][ T7220] XFS: ikeep mount option is deprecated. [ 200.260942][ T7220] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 200.357711][ T7272] loop0: detected capacity change from 0 to 64 [ 200.439677][ T7220] XFS (loop3): Ending clean mount [ 200.462067][ T7220] XFS (loop3): Quotacheck needed: Please wait. [ 200.485497][ T7272] hfs: bad catalog entry type 0 [ 200.581387][ T7220] XFS (loop3): Quotacheck: Done. [ 200.712426][ T29] audit: type=1800 audit(1717265880.295:334): pid=7220 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1060 res=0 errno=0 [ 200.738831][ T7245] loop1: detected capacity change from 0 to 40427 [ 200.790474][ T7245] F2FS-fs (loop1): invalid crc value [ 200.860864][ T7245] F2FS-fs (loop1): Found nat_bits in checkpoint [ 200.953563][ T5111] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 201.270525][ T7245] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 202.209418][ T4478] Bluetooth: hci3: command 0x0406 tx timeout [ 202.222063][ T4478] Bluetooth: hci2: command 0x0406 tx timeout [ 202.229369][ T4478] Bluetooth: hci0: command 0x0406 tx timeout [ 202.238604][ T4478] Bluetooth: hci1: command 0x0406 tx timeout [ 202.343583][ T7209] syz-executor.4: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 202.363686][ T7209] CPU: 0 PID: 7209 Comm: syz-executor.4 Not tainted 6.10.0-rc1-syzkaller-00267-gcc8ed4d0a848 #0 [ 202.374259][ T7209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 202.384370][ T7209] Call Trace: [ 202.387674][ T7209] [ 202.390631][ T7209] dump_stack_lvl+0x16c/0x1f0 [ 202.395372][ T7209] warn_alloc+0x24d/0x3a0 [ 202.399744][ T7209] ? __pfx_warn_alloc+0x10/0x10 [ 202.404636][ T7209] ? hash_netiface_create+0x3ea/0x1250 [ 202.410143][ T7209] ? __get_vm_area_node+0x190/0x2d0 [ 202.415378][ T7209] ? __get_vm_area_node+0x1bc/0x2d0 [ 202.420617][ T7209] __vmalloc_node_range_noprof+0xff7/0x1520 [ 202.426571][ T7209] ? hash_netiface_create+0x3ea/0x1250 [ 202.432178][ T7209] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 202.438654][ T7209] ? __get_vm_area_node+0x190/0x2d0 [ 202.443894][ T7209] ? __get_vm_area_node+0x1bc/0x2d0 [ 202.449130][ T7209] __vmalloc_node_range_noprof+0xc8d/0x1520 [ 202.455069][ T7209] ? hash_netiface_create+0x3ea/0x1250 [ 202.460677][ T7209] ? hash_netiface_create+0x3ea/0x1250 [ 202.466188][ T7209] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 202.472578][ T7209] ? trace_kmalloc+0x2d/0xe0 [ 202.477231][ T7209] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 202.483019][ T7209] ? hash_netiface_create+0x3ea/0x1250 [ 202.488548][ T7209] kvmalloc_node_noprof+0x14f/0x1a0 [ 202.493836][ T7209] ? hash_netiface_create+0x3ea/0x1250 [ 202.499354][ T7209] hash_netiface_create+0x3ea/0x1250 [ 202.504707][ T7209] ? __nla_validate+0xb/0x50 [ 202.509348][ T7209] ? __pfx_hash_netiface_create+0x10/0x10 [ 202.515124][ T7209] ip_set_create+0x7cb/0x13d0 [ 202.519858][ T7209] ? __pfx_ip_set_create+0x10/0x10 [ 202.525109][ T7209] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 202.530188][ T7209] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 202.535697][ T7209] ? kasan_quarantine_put+0x10a/0x240 [ 202.541128][ T7209] ? __dev_queue_xmit+0x85d/0x4130 [ 202.546290][ T7209] ? avc_has_perm_noaudit+0x143/0x3a0 [ 202.551713][ T7209] netlink_rcv_skb+0x16b/0x440 [ 202.556527][ T7209] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 202.562032][ T7209] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 202.567358][ T7209] ? security_capable+0x98/0xd0 [ 202.572247][ T7209] ? ns_capable+0xd7/0x110 [ 202.576699][ T7209] nfnetlink_rcv+0x1b4/0x430 [ 202.581353][ T7209] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 202.586519][ T7209] ? netlink_deliver_tap+0x1ae/0xd90 [ 202.591868][ T7209] netlink_unicast+0x542/0x820 [ 202.596656][ T7209] ? __pfx_netlink_unicast+0x10/0x10 [ 202.601960][ T7209] netlink_sendmsg+0x8b8/0xd70 [ 202.606748][ T7209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.612087][ T7209] ? __import_iovec+0x1fd/0x6e0 [ 202.616962][ T7209] ____sys_sendmsg+0xab5/0xc90 [ 202.621764][ T7209] ? copy_msghdr_from_user+0x10b/0x160 [ 202.627248][ T7209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.632566][ T7209] ? __pfx___lock_acquire+0x10/0x10 [ 202.637793][ T7209] ? __lock_acquire+0x14f4/0x3b30 [ 202.642843][ T7209] ___sys_sendmsg+0x135/0x1e0 [ 202.647555][ T7209] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.652777][ T7209] ? find_held_lock+0x2d/0x110 [ 202.657595][ T7209] ? __fget_light+0x173/0x210 [ 202.662303][ T7209] __sys_sendmsg+0x117/0x1f0 [ 202.666906][ T7209] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.672040][ T7209] do_syscall_64+0xcd/0x250 [ 202.676560][ T7209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.682470][ T7209] RIP: 0033:0x7f762147cee9 [ 202.686906][ T7209] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 202.706613][ T7209] RSP: 002b:00007f762211d0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.715041][ T7209] RAX: ffffffffffffffda RBX: 00007f76215b3fa0 RCX: 00007f762147cee9 [ 202.723028][ T7209] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 202.731012][ T7209] RBP: 00007f76214c947f R08: 0000000000000000 R09: 0000000000000000 [ 202.739001][ T7209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.746985][ T7209] R13: 000000000000000b R14: 00007f76215b3fa0 R15: 00007ffc3723b838 [ 202.754973][ T7209] [ 202.791801][ T7209] Mem-Info: [ 202.795643][ T7209] active_anon:31402 inactive_anon:0 isolated_anon:0 [ 202.795643][ T7209] active_file:0 inactive_file:46835 isolated_file:0 [ 202.795643][ T7209] unevictable:768 dirty:13 writeback:0 [ 202.795643][ T7209] slab_reclaimable:11076 slab_unreclaimable:96879 [ 202.795643][ T7209] mapped:19605 shmem:14575 pagetables:690 [ 202.795643][ T7209] sec_pagetables:0 bounce:0 [ 202.795643][ T7209] kernel_misc_reclaimable:0 [ 202.795643][ T7209] free:1337109 free_pcp:1435 free_cma:0 [ 202.888128][ T7209] Node 0 active_anon:125608kB inactive_anon:0kB active_file:0kB inactive_file:187268kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:76520kB dirty:52kB writeback:0kB shmem:56764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10160kB pagetables:2760kB sec_pagetables:0kB all_unreclaimable? no [ 202.920644][ T7209] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 202.954080][ T7209] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 203.091651][ T7209] lowmem_reserve[]: 0 2565 2567 0 0 [ 203.107954][ T7209] Node 0 DMA32 free:1390032kB boost:0kB min:35052kB low:43812kB high:52572kB reserved_highatomic:0KB active_anon:117164kB inactive_anon:0kB active_file:0kB inactive_file:185460kB unevictable:1536kB writepending:52kB present:3129332kB managed:2654748kB mlocked:0kB bounce:0kB free_pcp:7008kB local_pcp:6944kB free_cma:0kB [ 203.167115][ T7209] lowmem_reserve[]: 0 0 1 0 0 [ 203.172574][ T7209] Node 0 Normal free:12kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:0kB present:1048576kB managed:1896kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:24kB free_cma:0kB [ 203.204982][ T7209] lowmem_reserve[]: 0 0 0 0 0 [ 203.212088][ T7209] Node 1 Normal free:3950336kB boost:0kB min:54828kB low:68532kB high:82236kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:232kB local_pcp:0kB free_cma:0kB [ 203.243169][ T7209] lowmem_reserve[]: 0 0 0 0 0 [ 203.250007][ T7209] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 203.263683][ T7209] Node 0 DMA32: 449*4kB (UME) 599*8kB (UME) 466*16kB (UME) 216*32kB (UME) 150*64kB (UME) 106*128kB (UME) 43*256kB (ME) 11*512kB (UME) 7*1024kB (UME) 8*2048kB (ME) 321*4096kB (UM) = 1399132kB [ 203.283557][ T7209] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 203.296142][ T7209] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 5*32kB (UM) 5*64kB (U) 4*128kB (U) 5*256kB (UM) 5*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 962*4096kB (UM) = 3950336kB [ 203.313091][ T7209] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.323048][ T7209] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.332791][ T7209] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 203.358198][ T7209] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 203.367756][ T7209] 57443 total pagecache pages [ 203.372951][ T7209] 0 pages in swap cache [ 203.377122][ T7209] Free swap = 124984kB [ 203.414582][ T7209] Total swap = 124996kB [ 203.419859][ T7209] 2097051 pages RAM [ 203.423704][ T7209] 0 pages HighMem/MovableOnly [ 203.429023][ T7209] 401770 pages reserved [ 203.433199][ T7209] 0 pages cma reserved [ 203.711852][ T7302] loop0: detected capacity change from 0 to 1024 [ 203.748866][ T7302] binder: Binderfs stats mode cannot be changed during a remount [ 204.460421][ T29] audit: type=1400 audit(1717265884.045:335): avc: denied { write } for pid=7313 comm="syz-executor.3" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 205.109936][ T7297] loop2: detected capacity change from 0 to 40427 [ 205.260504][ T7297] F2FS-fs (loop2): invalid crc value [ 205.353456][ T7297] F2FS-fs (loop2): Found nat_bits in checkpoint [ 205.793898][ T7297] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 209.572160][ T7345] loop3: detected capacity change from 0 to 1024 [ 209.631332][ T7345] binder: Binderfs stats mode cannot be changed during a remount [ 209.882174][ T7353] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 209.964763][ T7353] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 211.914538][ T7366] loop1: detected capacity change from 0 to 40427 [ 211.981978][ T7366] F2FS-fs (loop1): Found nat_bits in checkpoint [ 212.238683][ T7368] loop3: detected capacity change from 0 to 40427 [ 212.296289][ T7374] loop2: detected capacity change from 0 to 32768 [ 212.300603][ T7368] F2FS-fs (loop3): invalid crc value [ 212.314688][ T7374] XFS: ikeep mount option is deprecated. [ 212.318232][ T7366] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 212.365281][ T7368] F2FS-fs (loop3): Found nat_bits in checkpoint [ 212.386228][ T7374] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 212.606487][ T7374] XFS (loop2): Ending clean mount [ 212.647201][ T7374] XFS (loop2): Quotacheck needed: Please wait. [ 212.715095][ T7380] loop0: detected capacity change from 0 to 32768 [ 212.788044][ T7368] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 212.808528][ T7380] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (7380) [ 212.816250][ T7374] XFS (loop2): Quotacheck: Done. [ 212.905131][ T29] audit: type=1800 audit(1717265892.485:336): pid=7400 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1060 res=0 errno=0 [ 212.910712][ T7380] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 212.957690][ T5111] syz-executor.3: attempt to access beyond end of device [ 212.957690][ T5111] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 212.994119][ T5111] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 213.039004][ T7380] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 213.073915][ T7380] BTRFS info (device loop0): using free-space-tree [ 213.140020][ T5104] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 213.660196][ T7380] BTRFS info (device loop0): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 214.089177][ T5114] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 214.322685][ T29] audit: type=1804 audit(1717265893.905:337): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3644748347/syzkaller.YRAGTL/133/file0" dev="sda1" ino=1957 res=1 errno=0 [ 214.438009][ T29] audit: type=1804 audit(1717265893.905:338): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3644748347/syzkaller.YRAGTL/133/file0" dev="sda1" ino=1957 res=1 errno=0 [ 214.574345][ T29] audit: type=1804 audit(1717265893.905:339): pid=7421 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3644748347/syzkaller.YRAGTL/133/file0" dev="sda1" ino=1957 res=1 errno=0 [ 214.662936][ T7435] loop3: detected capacity change from 0 to 1024 [ 214.696241][ T29] audit: type=1804 audit(1717265893.905:340): pid=7422 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3644748347/syzkaller.YRAGTL/133/file0" dev="sda1" ino=1957 res=1 errno=0 [ 215.203360][ T29] audit: type=1400 audit(1717265894.785:341): avc: denied { mount } for pid=7449 comm="syz-executor.4" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 215.286495][ T29] audit: type=1400 audit(1717265894.815:342): avc: denied { unmount } for pid=7449 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 215.479962][ T7456] loop0: detected capacity change from 0 to 128 [ 215.501370][ T7456] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 215.502481][ T29] audit: type=1400 audit(1717265895.085:343): avc: denied { mounton } for pid=7455 comm="syz-executor.0" path="/root/syzkaller-testdir1432074718/syzkaller.mPH2Mv/165/file0" dev="sda1" ino=1958 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 216.055043][ T7463] loop0: detected capacity change from 0 to 2048 [ 216.064043][ T7463] udf: Unknown parameter '00000000000000000000000' [ 216.544356][ T7442] loop2: detected capacity change from 0 to 32768 [ 216.561381][ T7468] veth0_to_hsr: entered promiscuous mode [ 216.576041][ T7469] ALSA: mixer_oss: invalid OSS volume '0xffffffffffffffff' [ 216.586099][ T7468] veth0_to_hsr: entered allmulticast mode [ 216.864826][ T7448] loop3: detected capacity change from 0 to 40427 [ 216.914116][ T7448] F2FS-fs (loop3): invalid crc value [ 216.963804][ T7477] loop4: detected capacity change from 0 to 1024 [ 216.983568][ T7448] F2FS-fs (loop3): Found nat_bits in checkpoint [ 216.989801][ T7444] loop1: detected capacity change from 0 to 40427 [ 217.003528][ T7442] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=gzip,nojournal_transaction_names [ 217.035385][ T7442] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 217.071024][ T7444] F2FS-fs (loop1): Found nat_bits in checkpoint [ 217.115869][ T7442] bcachefs (loop2): alloc_read... done [ 217.145959][ T7442] bcachefs (loop2): stripes_read... done [ 217.181995][ T7442] bcachefs (loop2): snapshots_read... done [ 217.235941][ T7442] bcachefs (loop2): journal_replay... done [ 217.286827][ T7442] bcachefs (loop2): resume_logged_ops... done [ 217.319935][ T7442] bcachefs (loop2): going read-write [ 217.339203][ T7448] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 217.368311][ T7442] bcachefs (loop2): done starting filesystem [ 217.382569][ T7444] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 217.442487][ T5111] syz-executor.3: attempt to access beyond end of device [ 217.442487][ T5111] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 217.484246][ T5111] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 217.560228][ T7442] syz-executor.2 (7442) used greatest stack depth: 18304 bytes left [ 217.637122][ T5104] bcachefs (loop2): shutting down [ 217.660403][ T5104] bcachefs (loop2): going read-only [ 217.665844][ T5104] bcachefs (loop2): finished waiting for writes to stop [ 217.692229][ T5104] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13 [ 217.722452][ T5104] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 15 [ 217.739285][ T5104] bcachefs (loop2): shutdown complete, journal seq 16 [ 217.747103][ T5104] bcachefs (loop2): marking filesystem clean [ 217.872970][ T5104] bcachefs (loop2): shutdown complete [ 218.180470][ T7496] loop4: detected capacity change from 0 to 128 [ 218.256782][ T7496] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 219.130899][ T7509] loop1: detected capacity change from 0 to 1024 [ 219.600144][ T29] audit: type=1400 audit(1717265899.185:344): avc: denied { create } for pid=7526 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 219.978999][ T29] audit: type=1400 audit(1717265899.555:345): avc: denied { bind } for pid=7530 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.070440][ T29] audit: type=1400 audit(1717265899.555:346): avc: denied { name_bind } for pid=7530 comm="syz-executor.1" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 220.162602][ T29] audit: type=1400 audit(1717265899.555:347): avc: denied { node_bind } for pid=7530 comm="syz-executor.1" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 220.250155][ T7535] loop1: detected capacity change from 0 to 128 [ 220.259831][ T7535] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 220.378879][ T5226] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 220.873561][ T7519] loop4: detected capacity change from 0 to 32768 [ 220.922962][ T7519] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7519) [ 221.005530][ T7519] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 221.025825][ T7517] loop0: detected capacity change from 0 to 40427 [ 221.066729][ T7519] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 221.095201][ T7517] F2FS-fs (loop0): Found nat_bits in checkpoint [ 221.127971][ T7519] BTRFS info (device loop4): using free-space-tree [ 221.136585][ T7548] loop1: detected capacity change from 0 to 1024 [ 221.167633][ T7548] binder: Binderfs stats mode cannot be changed during a remount [ 221.475688][ T7527] loop2: detected capacity change from 0 to 32768 [ 221.538163][ T7527] xfs: Bad value for 'allocsize' [ 221.555847][ T7517] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 221.619148][ T5156] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 221.635312][ T29] audit: type=1800 audit(1717265901.205:348): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 221.804641][ T29] audit: type=1400 audit(1717265901.385:349): avc: denied { read } for pid=7578 comm="syz-executor.1" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 221.902415][ T29] audit: type=1400 audit(1717265901.385:350): avc: denied { open } for pid=7578 comm="syz-executor.1" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 222.125998][ T6605] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 222.276012][ T7581] loop3: detected capacity change from 0 to 128 [ 222.285061][ T7581] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 223.744948][ T7599] loop1: detected capacity change from 0 to 1024 [ 224.971749][ T7643] loop1: detected capacity change from 0 to 1024 [ 225.071502][ T7645] loop4: detected capacity change from 0 to 256 [ 225.151603][ T7645] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 225.194923][ T7647] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 225.248579][ T7647] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.290401][ T7645] overlay: filesystem on ./file0 not supported [ 225.805603][ T7606] loop2: detected capacity change from 0 to 40427 [ 225.882780][ T7606] F2FS-fs (loop2): Found nat_bits in checkpoint [ 226.130491][ T7606] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 226.286134][ T7675] loop4: detected capacity change from 0 to 1024 [ 226.419544][ T7630] loop3: detected capacity change from 0 to 40427 [ 226.489102][ T7630] F2FS-fs (loop3): invalid crc value [ 226.507600][ T7630] F2FS-fs (loop3): Found nat_bits in checkpoint [ 227.002062][ T7630] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 227.644378][ T7711] loop2: detected capacity change from 0 to 1024 [ 228.170150][ T29] audit: type=1400 audit(1717265907.745:351): avc: denied { connect } for pid=7717 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 228.244685][ T29] audit: type=1400 audit(1717265907.755:352): avc: denied { getopt } for pid=7717 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.315477][ T29] audit: type=1400 audit(1717265907.755:353): avc: denied { ioctl } for pid=7717 comm="syz-executor.1" path="socket:[17311]" dev="sockfs" ino=17311 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.428270][ T29] audit: type=1400 audit(1717265907.755:354): avc: denied { setopt } for pid=7717 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 228.762555][ T7690] loop0: detected capacity change from 0 to 40427 [ 228.808489][ T7690] F2FS-fs (loop0): heap/no_heap options were deprecated [ 228.827657][ T7690] F2FS-fs (loop0): quotafile must be on filesystem root [ 229.295008][ T7703] loop4: detected capacity change from 0 to 40427 [ 229.387347][ T7703] F2FS-fs (loop4): Found nat_bits in checkpoint [ 229.615663][ T7747] loop1: detected capacity change from 0 to 1024 [ 229.695300][ T7703] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 229.890928][ T7754] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.621544][ T7729] loop2: detected capacity change from 0 to 40427 [ 230.740628][ T7729] F2FS-fs (loop2): invalid crc value [ 230.815310][ T7729] F2FS-fs (loop2): Found nat_bits in checkpoint [ 231.120315][ T7786] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 231.139594][ T7729] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 231.140939][ T7786] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.155312][ T7785] loop4: detected capacity change from 0 to 1024 [ 231.250063][ T7623] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 231.512786][ T29] audit: type=1400 audit(1717265911.095:355): avc: denied { ioctl } for pid=7788 comm="syz-executor.0" path="socket:[18349]" dev="sockfs" ino=18349 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 231.551034][ T7793] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 231.659203][ T7793] team0: Port device netdevsim0 added [ 231.770118][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.158646][ T7762] loop1: detected capacity change from 0 to 40427 [ 232.176471][ T7762] F2FS-fs (loop1): heap/no_heap options were deprecated [ 232.206442][ T7762] F2FS-fs (loop1): quotafile must be on filesystem root [ 233.185021][ T7817] loop0: detected capacity change from 0 to 40427 [ 233.202929][ T7817] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 233.210834][ T7817] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 233.264384][ T7817] F2FS-fs (loop0): Found nat_bits in checkpoint [ 233.327230][ T7817] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 233.381577][ T7817] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 233.389514][ T7817] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 233.661790][ T7823] loop1: detected capacity change from 0 to 1024 [ 234.115743][ T29] audit: type=1400 audit(1717265913.695:356): avc: denied { mounton } for pid=7816 comm="syz-executor.0" path="/root/syzkaller-testdir1432074718/syzkaller.mPH2Mv/196/bus/bus" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 234.174923][ T7828] overlayfs: failed to resolve './file0': -2 [ 234.711988][ T7807] loop2: detected capacity change from 0 to 40427 [ 234.715308][ T7809] loop3: detected capacity change from 0 to 40427 [ 234.743830][ T7815] loop4: detected capacity change from 0 to 40427 [ 234.763535][ T7809] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 234.800452][ T7815] F2FS-fs (loop4): invalid crc value [ 234.800493][ T7809] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 234.847051][ T7807] F2FS-fs (loop2): Found nat_bits in checkpoint [ 234.859962][ T7815] F2FS-fs (loop4): Found nat_bits in checkpoint [ 234.968052][ T7809] F2FS-fs (loop3): Found nat_bits in checkpoint [ 235.182199][ T7807] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 235.206952][ T7815] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 235.223897][ T7809] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 236.443850][ T7867] loop3: detected capacity change from 0 to 1024 [ 236.479285][ T29] audit: type=1800 audit(1717265916.055:357): pid=7871 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 236.542167][ T7874] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 236.582047][ T7874] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.876347][ T29] audit: type=1400 audit(1717265917.455:358): avc: denied { ioctl } for pid=7897 comm="syz-executor.1" path="/dev/raw-gadget" dev="devtmpfs" ino=733 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 238.187915][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 238.285376][ T7902] loop2: detected capacity change from 0 to 1024 [ 238.295757][ T7865] loop4: detected capacity change from 0 to 40427 [ 238.317300][ T7865] F2FS-fs (loop4): heap/no_heap options were deprecated [ 238.326401][ T7865] F2FS-fs (loop4): quotafile must be on filesystem root [ 238.407920][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 238.426933][ T45] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.478948][ T45] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.516759][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 238.548018][ T45] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 238.567055][ T45] usb 2-1: Product: syz [ 238.582886][ T45] usb 2-1: Manufacturer: syz [ 238.618835][ T45] hub 2-1:4.0: USB hub found [ 238.832772][ T7885] loop3: detected capacity change from 0 to 40427 [ 238.840090][ T7884] loop0: detected capacity change from 0 to 40427 [ 238.891420][ T45] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 238.899012][ T7884] F2FS-fs (loop0): Found nat_bits in checkpoint [ 238.982183][ T7885] F2FS-fs (loop3): invalid crc value [ 239.011464][ T45] usb 2-1: USB disconnect, device number 2 [ 239.059651][ T7885] F2FS-fs (loop3): Found nat_bits in checkpoint [ 239.196427][ T7884] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 239.354139][ T5114] syz-executor.0: attempt to access beyond end of device [ 239.354139][ T5114] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 239.383318][ T5114] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 239.395389][ T7885] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 240.009245][ T5154] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 240.215875][ T5154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.253952][ T5154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.291407][ T5154] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 240.332430][ T5154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.384443][ T5154] usb 5-1: config 0 descriptor?? [ 240.574325][ T7939] loop2: detected capacity change from 0 to 1024 [ 240.864144][ T5154] logitech-hidpp-device 0003:046D:C086.0002: unknown main item tag 0x0 [ 240.914216][ T5154] logitech-hidpp-device 0003:046D:C086.0002: unknown main item tag 0x0 [ 240.978083][ T5154] logitech-hidpp-device 0003:046D:C086.0002: unknown main item tag 0x0 [ 240.986424][ T5154] logitech-hidpp-device 0003:046D:C086.0002: unknown main item tag 0x0 [ 241.057080][ T5154] logitech-hidpp-device 0003:046D:C086.0002: unknown main item tag 0x0 [ 241.124312][ T5154] logitech-hidpp-device 0003:046D:C086.0002: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0 [ 241.232593][ T5154] usb 5-1: USB disconnect, device number 3 [ 242.097929][ T5157] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 242.303343][ T5157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 242.343322][ T5157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.378003][ T5157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 242.402604][ T5157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 242.424421][ T7944] loop2: detected capacity change from 0 to 40427 [ 242.435682][ T5157] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 242.481401][ T5157] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 242.511539][ T5157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.527230][ T7944] F2FS-fs (loop2): invalid crc value [ 242.557276][ T7944] F2FS-fs (loop2): Found nat_bits in checkpoint [ 242.570237][ T7938] loop3: detected capacity change from 0 to 40427 [ 242.589392][ T5157] usb 1-1: config 0 descriptor?? [ 242.663235][ T7938] F2FS-fs (loop3): heap/no_heap options were deprecated [ 242.700500][ T7941] loop1: detected capacity change from 0 to 40427 [ 242.704878][ T7938] F2FS-fs (loop3): quotafile must be on filesystem root [ 242.797001][ T7941] F2FS-fs (loop1): Found nat_bits in checkpoint [ 242.888574][ T7944] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 243.022003][ T5157] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 243.063090][ T5157] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 243.093261][ T5157] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 243.128842][ T5157] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 243.144471][ T5157] ntrig 0003:1B96:000A.0003: unknown main item tag 0x0 [ 243.160956][ T7941] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 243.202741][ T5157] ntrig 0003:1B96:000A.0003: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 243.323390][ T7985] loop4: detected capacity change from 0 to 1024 [ 243.350449][ T5157] usb 1-1: USB disconnect, device number 3 [ 243.363899][ T5105] syz-executor.1: attempt to access beyond end of device [ 243.363899][ T5105] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 243.414585][ T5105] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 244.052049][ T5157] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.788582][ T8017] loop0: detected capacity change from 0 to 1024 [ 245.351837][ T29] audit: type=1400 audit(1717265924.935:359): avc: denied { name_connect } for pid=8026 comm="syz-executor.3" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 245.408561][ T5155] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 245.618049][ T5155] usb 2-1: Using ep0 maxpacket: 8 [ 245.642545][ T5155] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.693409][ T5155] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 245.716979][ T5155] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 245.753272][ T5155] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 245.787338][ T5155] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 245.833454][ T5155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 245.864017][ T5155] usb 2-1: SerialNumber: syz [ 245.897766][ T8025] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 245.934929][ T5155] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 245.959094][ T5155] usb-storage 2-1:1.0: USB Mass Storage device detected [ 246.037068][ T5155] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 246.119671][ T5155] scsi host1: usb-storage 2-1:1.0 [ 246.166604][ T8006] loop4: detected capacity change from 0 to 40427 [ 246.225120][ T8013] loop2: detected capacity change from 0 to 40427 [ 246.238918][ T8006] F2FS-fs (loop4): heap/no_heap options were deprecated [ 246.254696][ T8006] F2FS-fs (loop4): quotafile must be on filesystem root [ 246.292238][ T8013] F2FS-fs (loop2): Found nat_bits in checkpoint [ 246.471089][ T5155] usb 2-1: USB disconnect, device number 3 [ 246.794138][ T8013] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 246.838775][ T8055] loop0: detected capacity change from 0 to 1024 [ 247.008381][ T5104] syz-executor.2: attempt to access beyond end of device [ 247.008381][ T5104] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 247.070650][ T5104] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 247.429661][ T29] audit: type=1400 audit(1717265927.005:360): avc: denied { connect } for pid=8072 comm="syz-executor.4" lport=250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 247.460907][ T5158] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.557940][ T29] audit: type=1400 audit(1717265927.095:361): avc: denied { getopt } for pid=8072 comm="syz-executor.4" laddr=172.20.20.10 lport=250 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 248.382061][ T8090] loop1: detected capacity change from 0 to 512 [ 248.428960][ T8090] EXT4-fs: Ignoring removed bh option [ 248.483313][ T8090] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 248.564624][ T8092] loop3: detected capacity change from 0 to 1024 [ 248.594811][ T8090] EXT4-fs (loop1): 1 truncate cleaned up [ 248.650664][ T8090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.719207][ T8096] loop4: detected capacity change from 0 to 1024 [ 248.740897][ T29] audit: type=1400 audit(1717265928.325:362): avc: denied { mounton } for pid=8089 comm="syz-executor.1" path="/root/syzkaller-testdir3644748347/syzkaller.YRAGTL/195/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 248.871853][ T8090] loop1: detected capacity change from 512 to 64 [ 249.005304][ T8100] syz-executor.1: attempt to access beyond end of device [ 249.005304][ T8100] loop1: rw=524288, sector=54, nr_sectors = 18 limit=64 [ 249.084012][ T8100] syz-executor.1: attempt to access beyond end of device [ 249.084012][ T8100] loop1: rw=0, sector=62, nr_sectors = 8 limit=64 [ 249.146112][ T29] audit: type=1800 audit(1717265928.715:363): pid=8100 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.1" name="file3" dev="loop1" ino=16 res=0 errno=0 [ 249.245103][ T29] audit: type=1400 audit(1717265928.825:364): avc: denied { unlink } for pid=5105 comm="syz-executor.1" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 249.345487][ T29] audit: type=1400 audit(1717265928.895:365): avc: denied { unlink } for pid=5105 comm="syz-executor.1" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 249.461539][ T5105] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.478852][ T29] audit: type=1400 audit(1717265928.915:366): avc: denied { unlink } for pid=5105 comm="syz-executor.1" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 249.779232][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.876506][ T8077] loop0: detected capacity change from 0 to 40427 [ 249.919345][ T8077] F2FS-fs (loop0): heap/no_heap options were deprecated [ 249.950051][ T8077] F2FS-fs (loop0): quotafile must be on filesystem root [ 250.377302][ T29] audit: type=1400 audit(1717265929.955:367): avc: denied { ioctl } for pid=8126 comm="syz-executor.1" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=20837 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 250.461941][ T8136] loop4: detected capacity change from 0 to 1024 [ 250.933952][ T29] audit: type=1400 audit(1717265930.515:368): avc: denied { getopt } for pid=8150 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 251.066914][ T5155] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.442767][ T8171] loop1: detected capacity change from 0 to 1024 [ 253.254998][ T8207] loop0: detected capacity change from 0 to 1024 [ 253.596732][ T8183] loop4: detected capacity change from 0 to 40427 [ 253.649821][ T8183] F2FS-fs (loop4): heap/no_heap options were deprecated [ 253.656884][ T8183] F2FS-fs (loop4): quotafile must be on filesystem root [ 253.680060][ T8189] loop1: detected capacity change from 0 to 40427 [ 253.768408][ T8189] F2FS-fs (loop1): Found nat_bits in checkpoint [ 254.179962][ T8189] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 254.384303][ T5105] syz-executor.1: attempt to access beyond end of device [ 254.384303][ T5105] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 254.435677][ T5105] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 254.707024][ T8241] loop0: detected capacity change from 0 to 1024 [ 256.303995][ T8284] loop2: detected capacity change from 0 to 1024 [ 256.336881][ T8284] binder: Binderfs stats mode cannot be changed during a remount [ 256.372186][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.379078][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.435260][ T5226] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 256.826431][ T8252] loop3: detected capacity change from 0 to 40427 [ 256.873488][ T8252] F2FS-fs (loop3): heap/no_heap options were deprecated [ 256.895066][ T8252] F2FS-fs (loop3): quotafile must be on filesystem root [ 256.986617][ T5226] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 257.764261][ T8328] loop1: detected capacity change from 0 to 512 [ 257.870138][ T8328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.922838][ T8328] ext4 filesystem being mounted at /root/syzkaller-testdir3644748347/syzkaller.YRAGTL/209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.975652][ T8328] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.996383][ T29] audit: type=1326 audit(1717265937.565:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5207cee9 code=0x7ffc0000 [ 258.101494][ T29] audit: type=1326 audit(1717265937.565:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5207cee9 code=0x7ffc0000 [ 258.222103][ T29] audit: type=1326 audit(1717265937.575:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c5207cee9 code=0x7ffc0000 [ 258.328004][ T29] audit: type=1326 audit(1717265937.575:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5207cee9 code=0x7ffc0000 [ 258.411825][ T29] audit: type=1400 audit(1717265937.925:373): avc: denied { create } for pid=8352 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 258.927760][ T8380] loop1: detected capacity change from 0 to 128 [ 258.968757][ T8380] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 259.065559][ T8380] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 259.230077][ T29] audit: type=1400 audit(1717265938.815:374): avc: denied { setopt } for pid=8386 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 259.462098][ T8394] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.474584][ T8392] hsr0: VLAN not yet supported [ 259.536105][ T147] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 260.456984][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 260.903437][ T8367] loop3: detected capacity change from 0 to 40427 [ 260.965560][ T8367] F2FS-fs (loop3): heap/no_heap options were deprecated [ 261.015846][ T8367] F2FS-fs (loop3): quotafile must be on filesystem root [ 261.103241][ T7623] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 261.192898][ T29] audit: type=1400 audit(1717265940.765:375): avc: denied { watch } for pid=8437 comm="syz-executor.1" path="/proc/8437/task" dev="proc" ino=22237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 261.406763][ T8445] loop1: detected capacity change from 0 to 512 [ 261.432096][ T8445] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 261.553697][ T29] audit: type=1400 audit(1717265941.135:376): avc: denied { mount } for pid=8447 comm="syz-executor.0" name="/" dev="configfs" ino=1218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 261.665299][ T29] audit: type=1400 audit(1717265941.245:377): avc: denied { unmount } for pid=5114 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 261.668408][ T8445] block device autoloading is deprecated and will be removed. [ 261.779039][ T8445] syz-executor.1: attempt to access beyond end of device [ 261.779039][ T8445] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 261.842413][ T8445] EXT4-fs (loop1): couldn't read superblock of external journal [ 261.853039][ T8456] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.650873][ T8483] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 263.115940][ T8499] loop0: detected capacity change from 0 to 512 [ 263.192829][ T8499] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 263.231749][ T8499] syz-executor.0: attempt to access beyond end of device [ 263.231749][ T8499] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 263.284673][ T8499] EXT4-fs (loop0): couldn't read superblock of external journal [ 264.233330][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 264.284810][ T8530] loop3: detected capacity change from 0 to 512 [ 264.310937][ T8530] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 264.352163][ T8530] syz-executor.3: attempt to access beyond end of device [ 264.352163][ T8530] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 264.416043][ T8530] EXT4-fs (loop3): couldn't read superblock of external journal [ 264.603747][ T8485] loop2: detected capacity change from 0 to 40427 [ 264.622319][ T8485] F2FS-fs (loop2): heap/no_heap options were deprecated [ 264.643580][ T8485] F2FS-fs (loop2): quotafile must be on filesystem root [ 265.379796][ T8557] loop1: detected capacity change from 0 to 512 [ 265.423474][ T8557] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 265.466677][ T8557] syz-executor.1: attempt to access beyond end of device [ 265.466677][ T8557] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 265.510364][ T8557] EXT4-fs (loop1): couldn't read superblock of external journal [ 265.660359][ T8566] loop2: detected capacity change from 0 to 512 [ 265.666519][ T8561] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 265.799028][ T8566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.843301][ T8566] ext4 filesystem being mounted at /root/syzkaller-testdir2309460352/syzkaller.91swE2/187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.901545][ T8566] Quota error (device loop2): do_check_range: Getting block 1541 out of range 1-5 [ 265.973013][ T8566] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 266.002864][ T8566] EXT4-fs error (device loop2): ext4_acquire_dquot:6858: comm syz-executor.2: Failed to acquire dquot type 1 [ 266.084329][ T29] audit: type=1800 audit(1717265945.665:378): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 266.167556][ T29] audit: type=1804 audit(1717265945.715:379): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir778238123/syzkaller.56wYas/227/bus" dev="sda1" ino=1952 res=1 errno=0 [ 266.251966][ T29] audit: type=1804 audit(1717265945.735:380): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir778238123/syzkaller.56wYas/227/bus" dev="sda1" ino=1952 res=1 errno=0 [ 266.298886][ T5104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.345236][ T29] audit: type=1400 audit(1717265945.745:381): avc: denied { getopt } for pid=8576 comm="syz-executor.1" laddr=127.0.0.1 lport=57830 faddr=127.0.0.2 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 266.372097][ T29] audit: type=1804 audit(1717265945.775:382): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir778238123/syzkaller.56wYas/227/bus" dev="sda1" ino=1952 res=1 errno=0 [ 266.826023][ T8591] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 266.877245][ T8591] geneve0: entered promiscuous mode [ 266.940344][ T8591] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 267.440690][ T8606] loop4: detected capacity change from 0 to 512 [ 267.466249][ T8606] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 267.488457][ T8606] syz-executor.4: attempt to access beyond end of device [ 267.488457][ T8606] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 267.493541][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.518027][ T8608] loop1: detected capacity change from 0 to 512 [ 267.543479][ T8606] EXT4-fs (loop4): couldn't read superblock of external journal [ 267.582628][ T8608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.627075][ T8558] loop0: detected capacity change from 0 to 40427 [ 267.629004][ T8608] ext4 filesystem being mounted at /root/syzkaller-testdir3644748347/syzkaller.YRAGTL/232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.650721][ T8613] loop2: detected capacity change from 0 to 512 [ 267.675841][ T8558] F2FS-fs (loop0): heap/no_heap options were deprecated [ 267.694780][ T8558] F2FS-fs (loop0): quotafile must be on filesystem root [ 267.750355][ T8613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.807156][ T8613] ext4 filesystem being mounted at /root/syzkaller-testdir2309460352/syzkaller.91swE2/192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.838665][ T8051] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 267.841814][ T8608] Quota error (device loop1): do_check_range: Getting block 1541 out of range 1-5 [ 267.903260][ T8608] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 267.930620][ T8608] EXT4-fs error (device loop1): ext4_acquire_dquot:6858: comm syz-executor.1: Failed to acquire dquot type 1 [ 268.013031][ T8613] Quota error (device loop2): do_check_range: Getting block 1541 out of range 1-5 [ 268.053434][ T8613] EXT4-fs error (device loop2): ext4_acquire_dquot:6858: comm syz-executor.2: Failed to acquire dquot type 1 [ 268.098318][ T5105] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.253856][ T5104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.920139][ T8639] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 268.963523][ T8637] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 268.988866][ T8639] vhci_hcd: invalid port number 246 [ 269.011374][ T8639] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 269.027075][ T8648] loop0: detected capacity change from 0 to 512 [ 269.107012][ T8648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.126922][ T8648] ext4 filesystem being mounted at /root/syzkaller-testdir1432074718/syzkaller.mPH2Mv/264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.222721][ T8658] loop1: detected capacity change from 0 to 764 [ 269.224700][ T8648] EXT4-fs error (device loop0): ext4_acquire_dquot:6858: comm syz-executor.0: Failed to acquire dquot type 1 [ 269.336308][ T5114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.853576][ T8681] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 269.998157][ T8687] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 270.014371][ T8687] vhci_hcd: invalid port number 246 [ 270.039469][ T8687] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 270.125489][ T8692] loop4: detected capacity change from 0 to 512 [ 270.264861][ T8692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.336573][ T8692] ext4 filesystem being mounted at /root/syzkaller-testdir177864786/syzkaller.7qQhgE/114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.388685][ T8706] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 270.536783][ T8692] EXT4-fs error (device loop4): ext4_acquire_dquot:6858: comm syz-executor.4: Failed to acquire dquot type 1 [ 270.606838][ T8712] loop0: detected capacity change from 0 to 128 [ 270.693836][ T6605] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.974125][ T8675] loop3: detected capacity change from 0 to 40427 [ 271.046466][ T8675] F2FS-fs (loop3): heap/no_heap options were deprecated [ 271.065101][ T8675] F2FS-fs (loop3): quotafile must be on filesystem root [ 271.360753][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 271.360774][ T29] audit: type=1800 audit(1717265950.945:390): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1940 res=0 errno=0 [ 271.443767][ T29] audit: type=1804 audit(1717265950.955:391): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3644748347/syzkaller.YRAGTL/240/bus" dev="sda1" ino=1940 res=1 errno=0 [ 271.502773][ T29] audit: type=1804 audit(1717265950.975:392): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3644748347/syzkaller.YRAGTL/240/bus" dev="sda1" ino=1940 res=1 errno=0 [ 271.628108][ T29] audit: type=1804 audit(1717265950.985:393): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3644748347/syzkaller.YRAGTL/240/bus" dev="sda1" ino=1940 res=1 errno=0 [ 271.712638][ T29] audit: type=1400 audit(1717265951.275:394): avc: denied { read write } for pid=8743 comm="syz-executor.0" name="uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 271.802586][ T29] audit: type=1400 audit(1717265951.275:395): avc: denied { open } for pid=8743 comm="syz-executor.0" path="/dev/uhid" dev="devtmpfs" ino=1083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 273.164283][ T8804] loop2: detected capacity change from 0 to 512 [ 273.221117][ T8804] EXT4-fs: Ignoring removed oldalloc option [ 273.227117][ T8804] EXT4-fs: Ignoring removed i_version option [ 273.276872][ T8804] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 273.356090][ T8804] EXT4-fs (loop2): too many log groups per flexible block group [ 273.374013][ T8804] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 273.406642][ T8804] EXT4-fs (loop2): mount failed [ 273.986058][ T8822] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 274.200625][ T8781] loop0: detected capacity change from 0 to 40427 [ 274.234345][ T8781] F2FS-fs (loop0): heap/no_heap options were deprecated [ 274.261895][ T8781] F2FS-fs (loop0): quotafile must be on filesystem root [ 274.871096][ T5155] IPVS: starting estimator thread 0... [ 274.961541][ T8855] loop3: detected capacity change from 0 to 512 [ 274.968306][ T8853] IPVS: using max 18 ests per chain, 43200 per kthread [ 275.071552][ T8855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.081932][ T8867] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 275.095118][ T8855] ext4 filesystem being mounted at /root/syzkaller-testdir778238123/syzkaller.56wYas/250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.195970][ T8855] Quota error (device loop3): do_check_range: Getting block 1541 out of range 1-5 [ 275.235645][ T8855] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 275.266736][ T8855] EXT4-fs error (device loop3): ext4_acquire_dquot:6858: comm syz-executor.3: Failed to acquire dquot type 1 [ 275.302065][ T29] audit: type=1400 audit(1717265954.885:396): avc: denied { ioctl } for pid=8872 comm="syz-executor.0" path="/dev/rtc0" dev="devtmpfs" ino=837 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 275.362661][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 275.442755][ T5111] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.620836][ T8888] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 275.649621][ T8888] vhci_hcd: invalid port number 246 [ 275.668025][ T8888] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 275.957745][ T8910] loop1: detected capacity change from 0 to 512 [ 276.026310][ T8910] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.077416][ T8910] ext4 filesystem being mounted at /root/syzkaller-testdir3644748347/syzkaller.YRAGTL/253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.201609][ T5105] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.889095][ T29] audit: type=1800 audit(1717265956.465:397): pid=8939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1951 res=0 errno=0 [ 277.080120][ T29] audit: type=1400 audit(1717265956.665:398): avc: denied { unmount } for pid=5104 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 277.140561][ T8894] loop3: detected capacity change from 0 to 40427 [ 277.164266][ T8894] F2FS-fs (loop3): heap/no_heap options were deprecated [ 277.183093][ T8894] F2FS-fs (loop3): quotafile must be on filesystem root [ 277.284932][ T5110] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.310222][ T5110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.321236][ T5110] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.330371][ T5110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.339505][ T5110] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.347267][ T5110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.385651][ T4463] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.676409][ T29] audit: type=1400 audit(1717265957.255:399): avc: denied { write } for pid=8958 comm="syz-executor.4" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 277.720681][ T4463] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.912325][ T4463] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.064916][ T4463] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.345538][ T8946] chnl_net:caif_netlink_parms(): no params data found [ 278.734636][ T8946] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.749268][ T8946] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.769169][ T8946] bridge_slave_0: entered allmulticast mode [ 278.780043][ T8946] bridge_slave_0: entered promiscuous mode [ 278.828860][ T8946] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.836110][ T8946] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.848803][ T8946] bridge_slave_1: entered allmulticast mode [ 278.887504][ T8946] bridge_slave_1: entered promiscuous mode [ 278.917418][ T4463] gretap3: left allmulticast mode [ 278.938068][ T4463] gretap3: left promiscuous mode [ 278.943516][ T4463] bridge0: port 5(gretap3) entered disabled state [ 278.969004][ T4463] gretap2: left allmulticast mode [ 278.997910][ T4463] gretap2: left promiscuous mode [ 279.003179][ T4463] bridge0: port 4(gretap2) entered disabled state [ 279.045391][ T4463] gretap1: left allmulticast mode [ 279.060274][ T4463] gretap1: left promiscuous mode [ 279.067250][ T4463] bridge0: port 3(gretap1) entered disabled state [ 279.106698][ T4463] bridge_slave_1: left allmulticast mode [ 279.114891][ T4463] bridge_slave_1: left promiscuous mode [ 279.131240][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.142208][ T9011] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 279.154618][ T4463] bridge_slave_0: left allmulticast mode [ 279.165458][ T4463] bridge_slave_0: left promiscuous mode [ 279.167920][ T9011] vhci_hcd: invalid port number 246 [ 279.171838][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.199205][ T9011] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 279.418791][ T5110] Bluetooth: hci0: command tx timeout [ 279.545735][ T29] audit: type=1400 audit(1717265959.125:400): avc: denied { map } for pid=9021 comm="syz-executor.4" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 279.687913][ T5155] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 279.900795][ T5155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.913583][ T9002] loop0: detected capacity change from 0 to 40427 [ 279.922598][ T5155] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 279.940477][ T5155] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.956570][ T9002] F2FS-fs (loop0): heap/no_heap options were deprecated [ 279.966203][ T5155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.975393][ T9002] F2FS-fs (loop0): quotafile must be on filesystem root [ 279.995634][ T5155] usb 3-1: config 0 descriptor?? [ 280.337902][ T4463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.357975][ T4463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.381943][ T4463] bond0 (unregistering): Released all slaves [ 280.476621][ T5155] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 280.487649][ T5155] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 280.524789][ T8946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.575509][ T8946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.621364][ T5155] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 280.661785][ T9020] loop2: detected capacity change from 0 to 128 [ 280.730916][ T9020] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 280.810587][ T9020] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 280.943836][ T8946] team0: Port device team_slave_0 added [ 280.957387][ T9046] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 280.972748][ T9046] vhci_hcd: invalid port number 246 [ 280.972921][ T8946] team0: Port device team_slave_1 added [ 280.979844][ T9046] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 281.225703][ T8946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.255491][ T8946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.343021][ T8946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.498838][ T5110] Bluetooth: hci0: command tx timeout [ 281.516147][ T8946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.523365][ T8946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.563004][ T45] usb 3-1: USB disconnect, device number 2 [ 281.601120][ T5104] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 281.615979][ T8946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.846382][ T4463] hsr_slave_0: left promiscuous mode [ 281.863064][ T4463] hsr_slave_1: left promiscuous mode [ 281.891013][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.901279][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.924043][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.945575][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.030226][ T4463] veth1_macvtap: left promiscuous mode [ 282.056352][ T4463] veth0_macvtap: left promiscuous mode [ 282.066745][ T4463] veth1_vlan: left promiscuous mode [ 282.091149][ T4463] veth0_vlan: left promiscuous mode [ 282.761169][ T9056] loop4: detected capacity change from 0 to 40427 [ 282.790428][ T9056] F2FS-fs (loop4): heap/no_heap options were deprecated [ 282.807689][ T9056] F2FS-fs (loop4): quotafile must be on filesystem root [ 283.173238][ T4463] team0 (unregistering): Port device team_slave_1 removed [ 283.281452][ T9069] loop4: detected capacity change from 0 to 512 [ 283.289128][ T4463] team0 (unregistering): Port device team_slave_0 removed [ 283.367362][ T9069] EXT4-fs warning (device loop4): dx_probe:874: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 283.385296][ T9069] EXT4-fs warning (device loop4): dx_probe:879: Enable large directory feature to access it [ 283.396398][ T9069] EXT4-fs warning (device loop4): dx_probe:964: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 283.411648][ T9069] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 283.438152][ T9069] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 283.456481][ T9069] EXT4-fs (loop4): Remounting filesystem read-only [ 283.472311][ T9069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.484899][ T9069] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 283.509305][ T9069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.578189][ T5113] Bluetooth: hci0: command tx timeout [ 284.053708][ T5113] Bluetooth: hci4: command 0x0406 tx timeout [ 284.288694][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 284.320300][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 284.338160][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 284.349103][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 284.370107][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 284.379180][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 284.701972][ T9076] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 284.721149][ T9076] vhci_hcd: invalid port number 246 [ 284.752358][ T9076] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 284.789675][ T8946] hsr_slave_0: entered promiscuous mode [ 284.808750][ T8946] hsr_slave_1: entered promiscuous mode [ 284.829311][ T8946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.841810][ T8946] Cannot create hsr debugfs directory [ 285.208159][ T5155] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 285.419992][ T5155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.438050][ T5155] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 285.465296][ T5155] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.482184][ T5155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.494718][ T5155] usb 4-1: config 0 descriptor?? [ 285.658676][ T5110] Bluetooth: hci0: command tx timeout [ 285.713895][ T4463] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.866637][ T4463] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.879610][ T9108] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 285.887180][ T9108] vhci_hcd: invalid port number 246 [ 285.896271][ T9108] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 285.972495][ T5155] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 286.009820][ T5155] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 286.061013][ T5155] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 286.105205][ T4463] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.149204][ T9073] chnl_net:caif_netlink_parms(): no params data found [ 286.228038][ T9085] loop3: detected capacity change from 0 to 128 [ 286.255857][ T9085] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 286.267033][ T4463] team0: Port device netdevsim0 removed [ 286.282788][ T9085] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 286.291712][ T4463] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.448409][ T5110] Bluetooth: hci4: command tx timeout [ 286.638241][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 286.695109][ T8946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 286.715526][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.723780][ T9073] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.732374][ T9073] bridge_slave_0: entered allmulticast mode [ 286.742606][ T9073] bridge_slave_0: entered promiscuous mode [ 286.765584][ T8946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 286.787447][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.808714][ T9073] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.820582][ T9073] bridge_slave_1: entered allmulticast mode [ 286.838904][ T9073] bridge_slave_1: entered promiscuous mode [ 286.855562][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.878170][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 286.891954][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.910822][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.928881][ T8946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 286.953610][ T45] usb 1-1: config 0 descriptor?? [ 287.012590][ T25] usb 4-1: USB disconnect, device number 4 [ 287.020530][ T8946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 287.051888][ T9073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.062550][ T4463] bridge_slave_1: left allmulticast mode [ 287.071458][ T4463] bridge_slave_1: left promiscuous mode [ 287.072583][ T5111] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.077501][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.120873][ T4463] bridge_slave_0: left allmulticast mode [ 287.127271][ T4463] bridge_slave_0: left promiscuous mode [ 287.136557][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.438565][ T45] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 287.447473][ T45] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 287.463150][ T45] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 287.674276][ T9119] loop0: detected capacity change from 0 to 128 [ 287.693982][ T9119] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 287.748770][ T9119] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 287.853168][ T4463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.865818][ T4463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.882837][ T4463] bond0 (unregistering): Released all slaves [ 287.910395][ T9073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.056062][ T9139] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 288.071257][ T9139] vhci_hcd: invalid port number 246 [ 288.076756][ T9139] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 288.115485][ T9073] team0: Port device team_slave_0 added [ 288.242471][ T9073] team0: Port device team_slave_1 added [ 288.399217][ T45] usb 1-1: USB disconnect, device number 4 [ 288.502423][ T5114] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.529732][ T5110] Bluetooth: hci4: command tx timeout [ 288.657855][ T9073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.664965][ T9073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.737334][ T9073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.753346][ T9073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.778227][ T9073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.824211][ T9073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.044791][ T9073] hsr_slave_0: entered promiscuous mode [ 289.092495][ T9073] hsr_slave_1: entered promiscuous mode [ 289.110687][ T9073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.130521][ T9073] Cannot create hsr debugfs directory [ 289.162719][ T4463] hsr_slave_0: left promiscuous mode [ 289.199157][ T4463] hsr_slave_1: left promiscuous mode [ 289.232750][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.243558][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.278380][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.285868][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.334400][ T4463] veth1_macvtap: left promiscuous mode [ 289.340229][ T4463] veth0_macvtap: left promiscuous mode [ 289.345977][ T4463] veth1_vlan: left promiscuous mode [ 289.360282][ T4463] veth0_vlan: left promiscuous mode [ 290.174001][ T4463] team0 (unregistering): Port device team_slave_1 removed [ 290.245291][ T4463] team0 (unregistering): Port device team_slave_0 removed [ 290.619548][ T5110] Bluetooth: hci4: command tx timeout [ 291.744882][ T4463] IPVS: stop unused estimator thread 0... [ 291.874293][ T8946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.992053][ T8946] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.082244][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.089499][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.142824][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.150141][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.612056][ T9073] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 292.647396][ T9073] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 292.681985][ T9073] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 292.698466][ T5110] Bluetooth: hci4: command tx timeout [ 292.756475][ T9073] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 292.812950][ T8946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.028431][ T5158] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 293.038362][ T8946] veth0_vlan: entered promiscuous mode [ 293.055491][ T9073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.108105][ T9073] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.116432][ T8946] veth1_vlan: entered promiscuous mode [ 293.162877][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.170171][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.178382][ T29] audit: type=1400 audit(1717265972.745:401): avc: denied { setattr } for pid=9225 comm="syz-executor.2" name="" dev="pipefs" ino=27205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 293.200355][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.208105][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.230038][ T5158] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.253692][ T5158] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.292933][ T5158] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.333877][ T5158] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.371367][ T5158] usb 1-1: config 0 descriptor?? [ 293.383223][ T8946] veth0_macvtap: entered promiscuous mode [ 293.402021][ T8946] veth1_macvtap: entered promiscuous mode [ 293.484877][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.497759][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.508705][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.524785][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.535616][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.549429][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.565476][ T8946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.657621][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.696058][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.724730][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.735846][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.754364][ T8946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.767869][ T8946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.785316][ T8946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.802005][ T8946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.812134][ T8946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.821868][ T8946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.831016][ T8946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.859532][ T5158] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 293.877143][ T5158] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 293.922315][ T5158] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 293.975669][ T9073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.103891][ T9216] loop0: detected capacity change from 0 to 128 [ 294.117670][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.140255][ T9216] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 294.150313][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.192310][ T9216] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 294.293466][ T5154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.336387][ T5154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.711898][ T9073] veth0_vlan: entered promiscuous mode [ 294.728262][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 294.735597][ T9073] veth1_vlan: entered promiscuous mode [ 294.836626][ T9073] veth0_macvtap: entered promiscuous mode [ 294.854872][ T9073] veth1_macvtap: entered promiscuous mode [ 294.924525][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.953485][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.974619][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.992908][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.005772][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.037929][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.068077][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.089893][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.097191][ T5155] usb 1-1: USB disconnect, device number 5 [ 295.112601][ T9073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.147449][ T5114] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 295.232003][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.269763][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.293825][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.314118][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.339515][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.355049][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.365165][ T9073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.380452][ T9073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.404239][ T9073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.418691][ T9280] ip6tnl0: entered promiscuous mode [ 295.424449][ T9280] ip6tnl0: entered allmulticast mode [ 295.457481][ T9073] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.491089][ T9073] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.515889][ T9073] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.524932][ T29] audit: type=1400 audit(1717265975.095:402): avc: denied { setattr } for pid=9283 comm="syz-executor.0" name="tun" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 295.554279][ T9073] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.861705][ T2865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.881156][ T2865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.895816][ T29] audit: type=1400 audit(1717265975.475:403): avc: denied { open } for pid=9297 comm="syz-executor.3" path="/dev/ttyqb" dev="devtmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 296.010831][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.039425][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.794071][ T9351] ip6gre0: entered promiscuous mode [ 296.820078][ T9351] ip6gre0: entered allmulticast mode [ 297.635441][ T9383] veth0_to_bond: entered promiscuous mode [ 297.654813][ T9383] veth0_to_bond: entered allmulticast mode [ 297.737514][ T29] audit: type=1400 audit(1717265977.315:404): avc: denied { ioctl } for pid=9386 comm="syz-executor.4" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 297.842903][ T29] audit: type=1400 audit(1717265977.325:405): avc: denied { set_context_mgr } for pid=9386 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 297.846529][ T9395] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 297.918339][ T29] audit: type=1400 audit(1717265977.505:406): avc: denied { create } for pid=9396 comm="syz-executor.4" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 298.008509][ T29] audit: type=1400 audit(1717265977.525:407): avc: denied { write } for pid=9396 comm="syz-executor.4" name="file0" dev="sda1" ino=1959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 298.045228][ T29] audit: type=1400 audit(1717265977.525:408): avc: denied { open } for pid=9396 comm="syz-executor.4" path="/root/syzkaller-testdir215858173/syzkaller.eGQbji/9/file0" dev="sda1" ino=1959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 298.110529][ T29] audit: type=1400 audit(1717265977.535:409): avc: denied { ioctl } for pid=9396 comm="syz-executor.4" path="/root/syzkaller-testdir215858173/syzkaller.eGQbji/9/file0" dev="sda1" ino=1959 ioctlcmd=0x1277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 298.174787][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 298.224159][ T29] audit: type=1400 audit(1717265977.615:410): avc: denied { unlink } for pid=9073 comm="syz-executor.4" name="file0" dev="sda1" ino=1959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=blk_file permissive=1 [ 298.406592][ T9417] wg2: entered promiscuous mode [ 298.428068][ T9417] wg2: entered allmulticast mode [ 299.016936][ T9452] bond_slave_1: entered promiscuous mode [ 299.030816][ T9452] bond_slave_1: entered allmulticast mode [ 299.060490][ T9452] bond0: (slave bond_slave_1): Releasing backup interface [ 299.727368][ T9488] veth0_to_hsr: entered promiscuous mode [ 299.744576][ T9488] veth0_to_hsr: entered allmulticast mode [ 299.945944][ T9499] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 300.581723][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 301.414203][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 301.439308][ T9544] macsec0: entered promiscuous mode [ 301.447217][ T9544] macsec0: entered allmulticast mode [ 301.474880][ T9544] veth1_macvtap: entered allmulticast mode [ 301.837975][ T9509] loop4: detected capacity change from 0 to 40427 [ 301.878738][ T9509] F2FS-fs (loop4): invalid crc value [ 301.885728][ T9559] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 301.901076][ T9509] F2FS-fs (loop4): Found nat_bits in checkpoint [ 302.098859][ T9509] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 302.219742][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 302.511677][ T29] audit: type=1400 audit(1717265982.095:411): avc: denied { connect } for pid=9582 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 302.577856][ T29] audit: type=1400 audit(1717265982.145:412): avc: denied { setopt } for pid=9582 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 302.803188][ T9575] syz-executor.4: attempt to access beyond end of device [ 302.803188][ T9575] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 302.836734][ T9575] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 302.836804][ T29] audit: type=1400 audit(1717265982.415:413): avc: denied { ioctl } for pid=9592 comm="syz-executor.3" path="socket:[29259]" dev="sockfs" ino=29259 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 302.860742][ T9575] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 317.816170][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.822824][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.842648][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.861646][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.871313][ T5113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.883291][ T5113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.891622][ T5113] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 332.906494][ T5113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.578625][ T5113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.600901][ T5113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.623230][ T5113] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.636808][ T5113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.658096][ T5113] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 333.665616][ T5113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 333.700743][ T5118] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 333.737014][ T5110] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 333.738408][ T5115] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 333.756138][ T5115] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 333.766208][ T5115] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 333.774724][ T5115] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 333.782589][ T5115] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 333.817177][ T5113] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 333.835456][ T5110] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 333.845742][ T5110] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 333.854816][ T5110] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 333.864230][ T5110] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 335.008364][ T5110] Bluetooth: hci5: command tx timeout [ 335.109180][ T5118] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 335.124914][ T5118] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 335.140835][ T5118] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 335.156016][ T5118] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 335.166962][ T5118] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 335.178806][ T5118] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 335.728098][ T5110] Bluetooth: hci6: command tx timeout [ 335.900370][ T5110] Bluetooth: hci7: command tx timeout [ 335.968106][ T5110] Bluetooth: hci8: command tx timeout [ 337.088157][ T5110] Bluetooth: hci5: command tx timeout [ 337.252109][ T5110] Bluetooth: hci9: command tx timeout [ 337.808205][ T5110] Bluetooth: hci6: command tx timeout [ 337.968103][ T5110] Bluetooth: hci7: command tx timeout [ 338.048185][ T5110] Bluetooth: hci8: command tx timeout [ 339.168022][ T5110] Bluetooth: hci5: command tx timeout [ 339.328049][ T5110] Bluetooth: hci9: command tx timeout [ 339.888349][ T5110] Bluetooth: hci6: command tx timeout [ 340.051247][ T5110] Bluetooth: hci7: command tx timeout [ 340.127937][ T5110] Bluetooth: hci8: command tx timeout [ 341.248125][ T5110] Bluetooth: hci5: command tx timeout [ 341.413021][ T5110] Bluetooth: hci9: command tx timeout [ 341.968473][ T5110] Bluetooth: hci6: command tx timeout [ 342.127934][ T5110] Bluetooth: hci7: command tx timeout [ 342.208132][ T5110] Bluetooth: hci8: command tx timeout [ 343.498037][ T5110] Bluetooth: hci9: command tx timeout [ 379.253736][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.263750][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 397.828059][ T5118] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 397.839161][ T5118] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 397.847381][ T5118] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 397.857571][ T5118] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 397.866590][ T5118] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 397.874184][ T5118] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 398.513179][ T5118] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 398.528784][ T5118] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 398.541295][ T5118] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 398.541918][ T5113] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 398.568976][ T5113] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 398.577653][ T5113] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 398.588006][ T5113] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 398.588622][ T5118] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 398.606755][ T5118] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 398.617640][ T5118] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 398.628525][ T5118] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 398.636095][ T5118] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 398.671292][ T5118] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 398.683326][ T5118] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 398.692652][ T5118] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 398.704434][ T5118] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 398.713408][ T5118] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 398.723471][ T5118] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 399.967983][ T5118] Bluetooth: hci10: command tx timeout [ 400.067575][ T5113] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 400.087336][ T5113] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 400.096173][ T5113] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 400.110650][ T5113] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 400.119301][ T5113] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 400.126807][ T5113] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 400.607957][ T5113] Bluetooth: hci11: command tx timeout [ 400.688058][ T5113] Bluetooth: hci12: command tx timeout [ 400.783866][ T5113] Bluetooth: hci13: command tx timeout [ 401.809253][ T5113] Bluetooth: hci0: command 0x0406 tx timeout [ 402.047838][ T5115] Bluetooth: hci10: command tx timeout [ 402.208125][ T5115] Bluetooth: hci14: command tx timeout [ 402.688099][ T5115] Bluetooth: hci11: command tx timeout [ 402.768028][ T5115] Bluetooth: hci12: command tx timeout [ 402.855600][ T5115] Bluetooth: hci13: command tx timeout [ 404.127937][ T5115] Bluetooth: hci10: command tx timeout [ 404.295276][ T5115] Bluetooth: hci14: command tx timeout [ 404.768145][ T5115] Bluetooth: hci11: command tx timeout [ 404.853362][ T5115] Bluetooth: hci12: command tx timeout [ 404.927935][ T5113] Bluetooth: hci13: command tx timeout [ 406.217856][ T5113] Bluetooth: hci10: command tx timeout [ 406.367851][ T5113] Bluetooth: hci14: command tx timeout [ 406.850349][ T5113] Bluetooth: hci11: command tx timeout [ 406.927997][ T5113] Bluetooth: hci12: command tx timeout [ 406.933522][ T5113] Bluetooth: hci4: command 0x0406 tx timeout [ 407.024974][ T5115] Bluetooth: hci13: command tx timeout [ 408.447892][ T5115] Bluetooth: hci14: command tx timeout [ 440.693703][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.706284][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.141164][ T9651] Bluetooth: hci8: command 0x0406 tx timeout [ 458.141186][ T5106] Bluetooth: hci9: command 0x0406 tx timeout [ 458.147208][ T9651] Bluetooth: hci7: command 0x0406 tx timeout [ 458.153222][ T5106] Bluetooth: hci6: command 0x0406 tx timeout [ 458.159906][ T9651] Bluetooth: hci5: command 0x0406 tx timeout [ 462.857004][ T5115] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 462.878772][ T5115] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 462.888077][ T5115] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 462.900083][ T5115] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 462.918241][ T5115] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 462.928036][ T5115] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 463.304977][ T5115] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 463.318218][ T5115] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 463.326565][ T5115] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 463.337261][ T5115] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 463.345685][ T5115] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 463.358246][ T5115] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 463.565646][ T4478] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 463.576890][ T4478] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 463.585623][ T4478] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 463.623516][ T4478] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 463.632412][ T4478] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 463.640359][ T4478] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 463.691053][ T4478] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 463.704121][ T4478] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 463.718045][ T4478] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 463.727199][ T4478] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 463.738376][ T4478] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 463.750778][ T4478] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 464.374328][ T30] INFO: task syz-executor.1:9591 blocked for more than 143 seconds. [ 464.383182][ T30] Not tainted 6.10.0-rc1-syzkaller-00267-gcc8ed4d0a848 #0 [ 464.403289][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.413946][ T30] task:syz-executor.1 state:D stack:27760 pid:9591 tgid:9590 ppid:8946 flags:0x00000006 2024/06/01 18:22:24 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 464.428422][ T30] Call Trace: [ 464.457826][ T30] [ 464.460793][ T30] __schedule+0xf15/0x5d00 [ 464.478210][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 464.483462][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 464.494809][ T30] ? __pfx___schedule+0x10/0x10 [ 464.505527][ T30] ? schedule+0x298/0x350 [ 464.510431][ T30] ? __pfx_lock_release+0x10/0x10 [ 464.515490][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 464.531172][ T30] ? __mutex_trylock_common+0x78/0x250 [ 464.536681][ T30] schedule+0xe7/0x350 [ 464.547823][ T30] schedule_preempt_disabled+0x13/0x30 [ 464.553324][ T30] __mutex_lock+0x5b8/0x9c0 [ 464.558342][ T30] ? cred_has_capability.isra.0+0x192/0x2f0 [ 464.566156][ T30] ? tcx_prog_query+0xb2/0x150 [ 464.579341][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 464.584408][ T30] ? cap_capable+0x1cf/0x240 [ 464.593215][ T30] ? tcx_prog_query+0xb2/0x150 [ 464.600731][ T30] tcx_prog_query+0xb2/0x150 [ 464.605352][ T30] __sys_bpf+0x23b1/0x49a0 [ 464.618175][ T30] ? find_held_lock+0x2d/0x110 [ 464.622975][ T30] ? __pfx___sys_bpf+0x10/0x10 [ 464.634688][ T30] ? __might_fault+0x13b/0x190 [ 464.641126][ T30] ? __pfx_lock_release+0x10/0x10 [ 464.646191][ T30] ? __pfx___might_resched+0x10/0x10 [ 464.658792][ T30] ? xfd_validate_state+0x5d/0x180 [ 464.663947][ T30] __x64_sys_bpf+0x78/0xc0 [ 464.677458][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 464.684230][ T30] do_syscall_64+0xcd/0x250 [ 464.697505][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.703784][ T30] RIP: 0033:0x7fbedcc7cee9 [ 464.708455][ T30] RSP: 002b:00007fbedda330c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 464.716893][ T30] RAX: ffffffffffffffda RBX: 00007fbedcdb3fa0 RCX: 00007fbedcc7cee9 [ 464.737074][ T30] RDX: 0000000000000040 RSI: 0000000020000500 RDI: 0000000000000010 [ 464.754419][ T30] RBP: 00007fbedccc947f R08: 0000000000000000 R09: 0000000000000000 [ 464.763928][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.774519][ T30] R13: 000000000000000b R14: 00007fbedcdb3fa0 R15: 00007fffa386a848 [ 464.782912][ T30] [ 464.786025][ T30] INFO: task syz-executor.1:9597 blocked for more than 143 seconds. [ 464.795735][ T30] Not tainted 6.10.0-rc1-syzkaller-00267-gcc8ed4d0a848 #0 [ 464.803770][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.814113][ T30] task:syz-executor.1 state:D stack:28176 pid:9597 tgid:9590 ppid:8946 flags:0x00000006 [ 464.845247][ T30] Call Trace: [ 464.848698][ T30] [ 464.851644][ T30] __schedule+0xf15/0x5d00 [ 464.856089][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 464.877801][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 464.883046][ T30] ? __pfx___schedule+0x10/0x10 [ 464.897735][ T30] ? schedule+0x298/0x350 [ 464.902104][ T30] ? __pfx_lock_release+0x10/0x10 [ 464.907157][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 464.927797][ T30] ? __mutex_trylock_common+0x78/0x250 [ 464.933303][ T30] schedule+0xe7/0x350 [ 464.937398][ T30] schedule_preempt_disabled+0x13/0x30 [ 464.958259][ T30] __mutex_lock+0x5b8/0x9c0 [ 464.962811][ T30] ? netlink_dump+0x58c/0xe00 [ 464.967506][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 464.997734][ T30] ? __alloc_skb+0x1fe/0x380 [ 465.002371][ T30] ? __mutex_trylock_common+0xea/0x250 [ 465.008173][ T4478] Bluetooth: hci15: command tx timeout [ 465.027850][ T30] ? netlink_dump+0x58c/0xe00 [ 465.032562][ T30] netlink_dump+0x58c/0xe00 [ 465.037086][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 465.042177][ T30] ? __pfx_lock_release+0x10/0x10 [ 465.047292][ T30] ? __rhashtable_lookup.constprop.0+0x397/0x710 [ 465.053755][ T30] ? netlink_lookup+0x259/0x520 [ 465.058678][ T30] ? __pfx_netlink_lookup+0x10/0x10 [ 465.063899][ T30] __netlink_dump_start+0x6d7/0x9b0 [ 465.069266][ T30] rtnetlink_rcv_msg+0xb06/0xe60 [ 465.074237][ T30] ? __pfx_rtnl_fdb_dump+0x10/0x10 [ 465.083648][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 465.092289][ T30] ? __pfx_rtnl_fdb_dump+0x10/0x10 [ 465.097440][ T30] netlink_rcv_skb+0x16b/0x440 [ 465.103757][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 465.109375][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 465.114693][ T30] ? netlink_deliver_tap+0x1ae/0xd90 [ 465.120078][ T30] netlink_unicast+0x542/0x820 [ 465.124868][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 465.130287][ T30] netlink_sendmsg+0x8b8/0xd70 [ 465.135075][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.140446][ T30] sock_write_iter+0x50a/0x5c0 [ 465.145238][ T30] ? __pfx_sock_write_iter+0x10/0x10 [ 465.156535][ T30] ? security_file_permission+0x98/0xc0 [ 465.162172][ T30] vfs_write+0x6b6/0x1140 [ 465.166534][ T30] ? __pfx_sock_write_iter+0x10/0x10 [ 465.172267][ T30] ? __pfx___might_resched+0x10/0x10 [ 465.177582][ T30] ? __pfx_vfs_write+0x10/0x10 [ 465.195526][ T30] ? __fget_files+0x256/0x400 [ 465.203049][ T30] ? __fget_light+0x173/0x210 [ 465.209357][ T30] ksys_write+0x1f8/0x260 [ 465.213727][ T30] ? __pfx_ksys_write+0x10/0x10 [ 465.219120][ T30] do_syscall_64+0xcd/0x250 [ 465.223652][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.234716][ T30] RIP: 0033:0x7fbedcc7cee9 [ 465.239487][ T30] RSP: 002b:00007fbedda120c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 465.249013][ T30] RAX: ffffffffffffffda RBX: 00007fbedcdb4070 RCX: 00007fbedcc7cee9 [ 465.257021][ T30] RDX: 0000000000000024 RSI: 0000000020000100 RDI: 0000000000000003 [ 465.265523][ T30] RBP: 00007fbedccc947f R08: 0000000000000000 R09: 0000000000000000 [ 465.279554][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.291610][ T30] R13: 000000000000006e R14: 00007fbedcdb4070 R15: 00007fffa386a848 [ 465.310788][ T30] [ 465.314624][ T30] INFO: task syz-executor.3:9594 blocked for more than 144 seconds. [ 465.331719][ T30] Not tainted 6.10.0-rc1-syzkaller-00267-gcc8ed4d0a848 #0 [ 465.339817][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 465.355244][ T30] task:syz-executor.3 state:D stack:29056 pid:9594 tgid:9592 ppid:5111 flags:0x00004006 [ 465.365801][ T30] Call Trace: [ 465.375394][ T30] [ 465.378687][ T30] __schedule+0xf15/0x5d00 [ 465.383151][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 465.397810][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 465.403055][ T30] ? __pfx___schedule+0x10/0x10 [ 465.408357][ T4478] Bluetooth: hci16: command tx timeout [ 465.427777][ T30] ? schedule+0x298/0x350 [ 465.432151][ T30] ? __pfx_lock_release+0x10/0x10 [ 465.437205][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 465.457743][ T30] ? __mutex_trylock_common+0x78/0x250 [ 465.463250][ T30] schedule+0xe7/0x350 [ 465.467346][ T30] schedule_preempt_disabled+0x13/0x30 [ 465.488548][ T30] __mutex_lock+0x5b8/0x9c0 [ 465.493098][ T30] ? dev_ioctl+0x1a1/0x10a0 [ 465.497644][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 465.533692][ T30] ? __pfx_lock_release+0x10/0x10 [ 465.539128][ T30] ? dev_ioctl+0x1a1/0x10a0 [ 465.543670][ T30] ? rtnl_lock+0x9/0x20 [ 465.558118][ T30] dev_ioctl+0x1a1/0x10a0 [ 465.562485][ T30] sock_ioctl+0x5bf/0x6c0 [ 465.566848][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 465.587741][ T30] ? selinux_file_ioctl+0x180/0x270 [ 465.594829][ T30] ? selinux_file_ioctl+0xb4/0x270 [ 465.617741][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 465.622632][ T30] __x64_sys_ioctl+0x193/0x220 [ 465.627419][ T30] do_syscall_64+0xcd/0x250 [ 465.632773][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.639039][ T30] RIP: 0033:0x7f1e88e7cee9 [ 465.643478][ T30] RSP: 002b:00007f1e89ccf0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.653509][ T30] RAX: ffffffffffffffda RBX: 00007f1e88fb3fa0 RCX: 00007f1e88e7cee9 [ 465.668200][ T30] RDX: 0000000020000140 RSI: 00000000000089f1 RDI: 0000000000000004 [ 465.676198][ T30] RBP: 00007f1e88ec947f R08: 0000000000000000 R09: 0000000000000000 [