last executing test programs: 14.584834861s ago: executing program 1 (id=6480): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}]}]}, 0x28}], 0x1}, 0x0) 14.452604562s ago: executing program 1 (id=6481): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 14.380058699s ago: executing program 1 (id=6482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.301792835s ago: executing program 1 (id=6483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a2ad3c249c95b7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a0000000000000000000000020010000000000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0) 12.825519079s ago: executing program 1 (id=6492): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="75be36c8ca0952b8a684c375eda4630f401c37e956d2dc94cc6806bee68e998f1c0568f6c4bd6ef66d8dea5390bc862e4966e461f0ffb5b4f3eb62e74e", @ANYBLOB="91f4087eda8900000000000000000000000000000000000000000000000000000000c1637dcd3cf4893846fa"], 0x48) socket$inet_udplite(0x2, 0x2, 0x88) timerfd_create(0x8, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f00000003c0)) 5.072594356s ago: executing program 2 (id=6529): ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000080)=0x3c) io_setup(0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) 4.391704463s ago: executing program 0 (id=6533): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x780, 0x12) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socket$vsock_stream(0x28, 0x1, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000000)=0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001540)=@deltfilter={0x2ed8, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2ea8, 0x2, [@TCA_CGROUP_ACT={0x1f8, 0x1, [@m_ife={0x134, 0x18, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x3, 0x68c, 0x446}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x100, 0x4, 0x101, 0x5}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_TYPE={0x6}]}, {0xc0, 0x6, "d4883ed49ce5a6016a99e10c892c20346fee60cd95b53e3996e3a4411fbcf23abfac06a465dba63fd0f63ea47c0d93070e2cb53e69f4dfe25a8f75d83f1b11a8f30eb634bfd6cd8fb97f6e4332b66bd3261c87d76441da5ed01578898e49ab68ee7c1f3b6ea0375dab38b0169f63f54c539839c0d41fd606d39d2abdb0dfa62637ffcd2073160e3f56303788938ae68bcedf2941d4c46a8a1451cd0c25aaba7c7f1d530ca55f7ba3bd5d4bc0f3e39951cf79f7dd6fef2090b04d9de4"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0xc0, 0x6, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc60}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x4, 0x8, 0x9, 0x47}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7b1}]}, {0x4d, 0x6, "a5b0371f0f784fc2c82f6be4c070c3c8557da02175b0acd1129ba7eb3e112953cbb7391a2be408b810788dcffeaa9486df9331f8c82c8591278323495bd654aa0f4d29a5d54d88e287"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x11f4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x11e8, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x1}, {0x1ff, 0x3, 0x3, 0x6, 0x8, 0x1, 0x1}}}, @TCF_EM_IPT={0x11cc, 0x3, 0x0, 0x0, {{0x4, 0x9, 0x401}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x71}, @TCA_EM_IPT_MATCH_DATA={0xa1, 0x5, "fcba270a8ea08b3b11e3ae4b138c0e9f7e462785f7046f3e5ccb87cd0f8cfc8fac23cdd5f2b120b66a11c0ca30337caad2447f5ce813b1bc31719ac7932f8095bc28870ac795e8b76bd471227a9af5309a96e4362090b9e2633de5c2c37216766a2d29884f93b572526478660aee3a1835bd3d3e6aa8decbe88673d7bb831cab73811520c7d093fd6789ae292929c5ab5c4b4ba65c40db8adf4404b923"}, @TCA_EM_IPT_MATCH_DATA={0x1004, 0x5, "134e59786f2963db4eb50700ee486149be4855d4c4773fa31aa3dfecd1e2954126f4724af219b3815959d0e1dabdfc5f1c4f883367a75c96649c88d7ee52dc41995c601056f81cf8dbbfbc0295956f2864cc95b5118f373b8c29ad08b3a48374bb1fcf00ab77b5ab78b7bf7ea8a66b882cccd2b49c13cbb9190b2632f8d5779791bc4303db2531f010a52b8de4938f9d83a10ba31ae37b58d0d0ebfd73b10bf7e5a8b10749da24d1b034207e6689af48e012c2cb44a8e25fbe5c7c339555b4f40899d6c06435c05e11f1bd6afa0aa83c3666e741d4f85ce8a53e4fe5d858c0b0124caaccbc5ea1eded19e84b655024b835303f2056c696f593ea9aed8e00daeb6d1c0cecac9c7aebf0f735412f62120c1b3f32623180a2f1ab4c5f9c86cedb92418674db65ebfb62ed767a3496e130bee6fc41fa2c7a0bddddfe91161de70d28676f47dd90e192a085ff601e3f6551dace05a7dfb9b5c6b3adce08a5e83b965a33779d295b63da62249a8ca17c641a2a4a21d9c2c3861383a2622701869cb2fff1cfd1a463bbac075783d3b07d3798c65f77c1ad9212639be83bceb2748117f17e24390dfcec68932400e08098c89b64f89080ec4f6df8ba9fc6e7bd7b21b1b9d7809efddc27562e734b6a1cb2dc7d3aec0c09141d2fbc8e6e9dee4d161ed77e2fe8879dace5b82718d9bafab81cd71d9825fe66fe2df868811c997e088ed72f80ca18f68b2a37b86f2ddfca8724e5110bfdd5ef4fea823daf620dabab5d8c9a5caef5a5b495f909fb998678d1440b1afce9653fc4eb5fd21e709225a817f65186b78f3f61b529350606c43c736832b385a74ad1bcd5e64bc49ddbf77812656528277d17091d911468b4cff6ed498455a2894b62a09a07f40504875d8411a5411ebc6ccbdb76076ddc734301bf82fbce4f7a02384bc05111a4df5ac2025a783123c08817a6ae0b3e5aa43e6347e4aa7cbe14da4a9d3428f5bdd10993241b3d5684c8912b63041971725e448f64e6a9dd86a9343a11a8e17039997d63f229730ef62f10e43a4e1fcc339a2ad2e0a6bb5a203a8ca281273d89f803d72eabc314bdc54a2c484023ffa99da19a0008b7d7b74142955d9e6d89f615ec6175203c18edabe1be3a241049932f6dcc08b55499c30143f0c99e117d9e474a7f5fd092f41d66a6b6229d65d94cec07bcf875ccd02b81c5d7e505f8aabc20a1f3533c4d54a0cf9193f76e37c0d642f9de0a5a8a1f81a45b89ae97ac0e3c61c85155c5c9dbc5db1664b14e9bfdf46a7f381e3fb4d08b3d60b79945e654e46c6d8960e8cdab633d96579319dd60d61004fd9a2754344636caa042cd6d62b80d6249269edd3fdef35b3d35ae77964c90497386f73f4687785d8a55b27687bbd39a60cb2b16e69bac574d98f6bdaf38f30d49fa9a8aefd385b7dda2f79ee90708014c9f54f897397f5948888eeabb618ad8836ff747270c4e46367cb538de9f6f845e1521b971ae37df407185f59cfc41800813519d7605f9b4f6db69e19eb7311dbae3268cd2c9ab88e19dae573895780245377ba8af8d43650db55096ce5a688585c4864cfb50f69abc620f3cb01aeaff6b7b77215f609ea580e3e2f17570384fa48a67e6247b2f99013d4390b50ad6e840229ad0e3d8af4156289dad6e1c64fca4e03635055742cd9f184f6e1c5bea30a9fdc91b81300a88671468ff292473ebfb75ac8db95c6eb4e1aa5f5f82ca6ddc59376f2232e1673fbeddcfb56c9b5017a7f7989d806444e52865ccb9e4642f169b204d27e43515ae90995847ce53174ed04c5413bb13930ecf845003dc44ac46659383fe74554e59a4e5bdb7df7833936ca88b349dacd5e0729980ceaa50feb414c3fccb96f7576c1a51196665d696bee3fa3dc5ab6d340999312989aed2515bf09b89e1e6f303372a62c4ece030984f30f0fb906675d770ad4ed84f3f6cfc03858e7b5d043d938bf85bd09933c6074c758cb7900e0a415cdfa5f32b85a4de05585adf01aa25bf20629f4fc12ffd54554811b58fee4a7e6664f38e76fa5a2320f41aac0661871d1ab2a411fa2b3cfcde83e64b1dbc51c29e80d64c29d66c1e52f65600cc0e5db7f86279566e9be493be321e004be80ef8ccf10c79cdaad61b8936e6ac6929bec4fb7e6e4c209d50d2b97784eef88a22cb6c41aa77b91dde5815e9f7a0895af2de34509df1b3bbeaa7f66c0471c2dd68b18b8f525d53046fc2a71a64e7d1bc16095f352410088a7dea5f7f3fd9e266434fa505100ec99e59e3e0b97d852d99312512ac90cf1391b6d39efa4493211b664c4bc0b94c804e6a091cbf2737229cb5bb0dec6386b7efaff15b19a647ec0b3b1dd3fd7d516c967446105fc72a2e9508bf3838498791e3b6c298e87ee6b2ca56aea1bd11f68756a8009a8dc4b9651c32af8c1bb48a5dd163e0a9e57a66a8575721d97cc2e1c115153b685afb08aa7d5af6438162c7c1990ebbc3dc5d3d25483ef7b936a6090c7872cdd3e1cdefe42397504ef58ebae7e90fd3bf696c1cb1c06c8b6414cedd687b88817cb641a06f2994aa3381aaaaa0de91ca538a968559e6c9a7bfdeaffd747e29c7002ddc27a4a444a76f695f08c9ef54876a9eb201683600fb32c401ddf56db9948680cd67be187bf1e03e5d58dd1db6a8b32c0e9141402c3ff496fc94ab573dfd39327e43077769bff0317d702cf881fe75c54a5cd5ce71952da76d323107ed63051e1571dee463a8382517e3b6422d33290b9d8cd69bca12586962d235643511b234725fcda5ce8ed80382fed7b8eff7308a885420daf3a25ddaf404cacacd66663760d86be6eae21a354d5c14881c61b1f4128c16b5bfb7d6e8758e4c667814141dbb5fe74b075e5a588568390acdc815e5965cde2ea1feb5428404b5420d2fc7d916737d39dd863e0825c808a477670562015f5cc0eb332b0acdd3800cfce3c0aa8b6293b79dc10a39351e995911e7fa1f2e270fb39c11997ce22cb29f0adebd514b1b2a26fbfb79a011227b453f730c0b6ec6f1e0e4e7338ab51676bb75cb91abcd97eb331e60909288b04f96ff33693da341206f28f44e438ed1749bbb2918d9ad1c18ebd8d1cb51b876bcaef24ce345f7f8d8213408ad4933e08210260deda790ca2507c0dcbee9387563ec37d30cf7c7937a33f1194e9250024c42c20cb758c2abf0d596018fc061abf379bb287f0d7e4de3a703bee09786b9f389ce2dc1781e40221f74f8ef1f700771032810fd92046d2a3df9a81c6c4f0dbee10a6755d99efb7811de2d1969cce1d61822b6144240bfcad55ab60201e9e7dd1ee0dfc1016aacddb7b72eb58dd28f6d8fc8bfc01ee7b0aad2af57f7b04241960b26e5c8c70f124aa704eb062737ca16c173ca47296dfcdb96b25f10477e799d03c6bb294dabdeef868a1869dd3455f40786c9562830277db4dade3f408ffd2e795eff61456448e56517985dad4b57c0c92326c8cbdb155219e70a96cd2fade3764278ccb0acb510531314470ba111fd39b9d93afb38d10a5247b573bb7de4cda0e970058a3bcf0ae3f3e24acc027cfbce4037d201b4977a626bc4a8fcf292b3e1ddc047957f5d32464f3ce3f77b3cfc20bcf8385e05f4dcec31cd6251f1a56ba715db4570f1d213f8cbd2ac9e6a26c6aed93bf1de2dbfd66cb33c070e6e97aca37f89ed751baba5b5b774ec4f5dfe6ffa7f91d4d38d81619c6e8d172a1b1ff5e5a3dcdd7c7dcffbb23109af7d187c4b63d33cca5f24ee41eca5b92e8b2bed0c23f13aa45e9ceb35b81cf0683510861e156bcc1d2aac089fdab9b52237b1b462f1eb4673e28ac4de1b76e417745e28563f60581f906d73fb8277b01540dafef7cba8e07713e6053c4e1560aba7efaaf322e94e843b779d95f43a479efc2217cd73054b850793240529b3d848fc6bcd7bccd452ada9cc5c3e33d84225d99d7718b6f759117f1ecd83523436166173af40a62dc1063e8e577e664ffd8517d8fd4d222eaaa0c9282afc9dc9f0b69ac75491a27a21d20c046c0504121a64fda1b66888bb9093b4891e946c6d43fc69ba621067ccfe966cc3fe52a974980c720951873e274109f314afa1d6955ead87318d221df6a16ee1eaa70cf45b4d75fe8ad75d55ca2915695a9cff1f1abf23fa6d02052fd9067de41d67c0906f1ff1511ceda5fff52ccd88d689bf56086e43f5c61e442ab0ac645a9235968e726d955ab5f4347c2429202fa3b71bff6e7dd84d0af0c06a95ef0ae510c29ceead25a829218daebade129c2f196624200da424d352161f533c5b73b62e11d9e007f218d7f99946d9cc369812f2b2c256cc36ef71315d413cddbf25ec9570e66a5dca04450f5626831ffa72b3f49eaa917a96082628d63707fc68a6d89a337d44533dab337f94f57b1380ac0edb0e4ff9e65ce666799c84a9bf8d92484c0381ff301640effb6d43ee28139415c9f545a2e5579087af067144365fa00ee7f09cd2a3f7af9e2c9c3437f83b1160b4fda0d8c607ece02550863790bc0743283009b35c22cd919219a584b8c77c9990c31d78055b6f4f508ce82490c9005a0a38262ee41f995f14bc03e8078e28e22a8de7c89722ebaed6015807b9ee89441de4a4c0b99c08043a1713b1a5394ea7d1457bb8df155bb9b03fa31986fb3d4938b941ddd62fdbd688b4080b99af3efd7a0d2d4fc41f6776004fd9a731ebc70685ee343907e176ca702928e91c54d20bf1d1befccb0871f3f002790fd2a336e9518a93e5d819932a3ef5493c52817039fda05c311c9b391600fb61cacec12a786a1a42283b0c3683de92537c03d00cb016cf56b5364677b39f3b1371af2e52226c485b959f6b6f6885fc28a0eed629c939e48e65c2599276f3be3faf58cb4715ccb901b2f32b048d968ed841c724709162bc9d76f6588b88f4a28072834f343f97e36d911112ce79a1d7ca0f669abd140aab0ebc8c91a7caed36d9f989756f1389378243150d21758634572231ce57e3e11d04be7fdc9775063f47edb8231e6c0e91d6ebd8d16777a7553e9846538414d2f80f4a4c1a24a2f4ccdfb8b7fe0ad033119ba0bd5a791d6b34ccfdd1511a6abda0eea3b7df2f80ba3093bed9273ae2ce8dc06c21743293819fbc57226ed34f4f75aba089fdece6415e498698c5379f4bd6806424357333b047d42d0166d31d2a2c710e5e2b7d67e11fce303b28bda121fd3ab37f3a8c860ac5be326c21e146c116dad62ca792983fbc03250994afc3fcb729e1a36e8d120be939523005d923241cb3e80ed9917e291b3898ce5a6dbd95e3bcce8c364886f63891a8861864fe34dd8552e9a1997d7f121b016f06a9a505a67eb2b33c30d366216ed2359bd62310290f494b02ed46c50c6be8df38127f14ead060e04d6e298eacc400b534bcaf2f2c0adc474821b7048f7acf6246ae8e4cf926f46ae579395ef7b4e646e0e0345e1bd933c2a809501ec33c85ec5a96384e6161a73fbfe36997cde239f827ce0b284946a0827c2de3d224b8435360b70b08915281d064d3759b4969e235d6c3b2ad792545838bac738389ee0619c86c590b5f6678f0d4f5ee900a09eb850e34af73e0f906bbf12d7d8883d590d6a20a32d155fbb2efbfd1d08d89f856a779cead6359e9467cdc858e0d6db307145b7e443d6744eef5455d70117d983b69da0b838deb99f21404eae7c20aaa40d7d83ad0468f7324bd590a1e7aa8b30ad798cfe389930c400c46b32492a5d1c79e7cb1a2dd12dc0274508f84d49e4d330d50ca743cb260c7b96cd562cc0f1e474fe97454929cbe1bef"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xf5, 0x5, "3e5cb6f36a6be15eef41e41d8f8476e66e54443e77555320e084d635eaa9debb9b5d1693dd9dff341f71eaf4d43911bdff96d8758a0318db9f9bf507c8417a0221e140a6f6c44819e29ffca917a84f87bf5834322af9fa021d581f54af1e24c8e212c0f1023c344d1b7bee84af1c45dbf7ffa9f25aa87cf684b0dca5132ed60f901bdf191a83e4bd0d7bf01035d5e19ab56ee778a971ae76a31a72ac3e90e0add364267c2c81c79e192ca18af4ad803d1762b91ffce620669fcc4ff149db7dcebc9e875ccc9bb274afaf9958be0dccf801cc779fd5be91fbebdc06cfb9a00c361b8e7a0d5f58f880edfe02f2cb9b5db8a5"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xbc8}}]}, @TCA_CGROUP_POLICE={0x83c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0xffff0000, 0x4, 0x3, 0x4a81bea6, 0xcda1, 0x54, 0x4, 0x7, 0x4a60, 0x7, 0x1000, 0xac, 0x6, 0xffffd366, 0x5, 0x7f, 0x4, 0x2, 0x2, 0x10, 0x4, 0x400, 0x8, 0x0, 0x1, 0x25, 0x40, 0x91, 0x7, 0x80000000, 0x5, 0x8, 0xd, 0x1, 0x800, 0xc6e0, 0x8cd, 0x1, 0xb, 0x0, 0x7, 0xc, 0x7, 0x9, 0x3, 0x8001, 0x10000, 0xe, 0x3, 0x2, 0x4, 0x6, 0x7, 0x2cc, 0x3ff, 0x6, 0x28bd, 0x3, 0xe309, 0x8, 0x10001, 0x3708, 0x1ff, 0x40, 0x200, 0xe926, 0x2, 0x3, 0x1, 0x3, 0x7, 0x1, 0x101, 0x7, 0x8, 0x3, 0x5, 0x80000001, 0x6, 0x0, 0x0, 0x9, 0x200, 0x751, 0x2, 0x6, 0x3, 0x7ff, 0x4, 0x1f1, 0xfffffc01, 0x4ec0, 0x7, 0x200, 0x81, 0x6, 0xfffff801, 0x1, 0x7, 0x8001, 0x7fff, 0x4, 0x9, 0x6, 0x10001, 0x0, 0xd, 0x1, 0x10, 0x3, 0x4, 0x5, 0x2, 0x6, 0x75d5, 0x9, 0x976, 0x7fff, 0x2, 0x0, 0x10001, 0x4, 0xb, 0xc, 0x7, 0x2, 0x8, 0x7, 0x10000, 0x4000000, 0x92a, 0x5, 0x5, 0x3, 0x4ae343c1, 0x9, 0x19164000, 0xc, 0x5, 0x4, 0x9, 0x6, 0x2, 0x401, 0x7, 0x3adc76cc, 0x800, 0x6, 0x374, 0x81, 0x8, 0x1000, 0x0, 0x2, 0x800, 0xa, 0xd604, 0xe9, 0x4, 0xfff, 0x10001, 0xfffffffc, 0x3fc2, 0x1, 0x7fff, 0x0, 0x8, 0x7, 0x80000001, 0x5, 0xc2c, 0x8, 0xfffffe00, 0x40003, 0x3ff8000, 0x7, 0xa, 0x6, 0x1, 0x9, 0xd49, 0x4, 0x1, 0xd9, 0x10, 0x1, 0x8, 0x2, 0x9, 0x0, 0x499, 0x4, 0xfffffffd, 0x10000, 0x8, 0x7f4, 0x4c, 0x0, 0x9, 0x1, 0x400, 0x401, 0x401, 0x7, 0x9, 0x1, 0x1b0, 0x1, 0x4, 0x5, 0x7837, 0x44e, 0x63, 0x17, 0x759fe710, 0x4, 0x0, 0x0, 0x7, 0x5, 0xfffffbff, 0x9, 0x5, 0x7f, 0x8, 0x8a, 0x5, 0x0, 0x9, 0x6, 0x1a9, 0x22d, 0xa0, 0x49d, 0xd3, 0x2, 0x2, 0x8, 0x6e, 0xb, 0x1, 0x0, 0x1000, 0x80000000, 0x1, 0x1000, 0xf032, 0x2, 0x4, 0x1000, 0x9, 0x5, 0xb76d, 0x7ff, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7, 0x3, 0x4, 0xe, 0x8000, 0x4, 0x4, 0x0, 0x9, 0x5e1, 0x3d, 0xfffffffb, 0x3, 0x0, 0x47, 0xff, 0x9, 0xbf59, 0x3b7, 0x101, 0x7, 0x40, 0x6, 0xc, 0x3, 0x6, 0x31ce, 0x3ff, 0x8, 0xffffff00, 0x8, 0x5, 0x4, 0x100, 0x1200, 0x9, 0x8, 0x3, 0x0, 0x6, 0x9, 0xa, 0xd627, 0xfffffffb, 0xc58f, 0x9, 0x4, 0x0, 0xfaade0c, 0x7, 0x6, 0xfffffff9, 0x2, 0x6, 0xb, 0x0, 0x0, 0x1, 0x9, 0x5, 0x8c, 0x4, 0x0, 0x1, 0x40, 0x8, 0x96dc, 0x0, 0x7, 0xc, 0x9, 0x6, 0x1000, 0x8, 0xffffa97d, 0x9, 0x1, 0xc, 0x800, 0x4, 0x2, 0x8893, 0x10001, 0x2, 0x1a2, 0x3, 0xf9, 0x3, 0x3, 0x9, 0x8, 0x6, 0x2, 0x8, 0x6, 0xca8f, 0xff, 0x80000000, 0x7fffffff, 0x0, 0x6, 0x80, 0xa3, 0x80000000, 0xaa02, 0x6, 0x4, 0x80, 0x2, 0x7, 0x1000, 0x1, 0x2, 0xad9, 0x181, 0x3ca, 0x22de, 0x200, 0x1, 0x6af, 0xffffffff, 0x1, 0xf41, 0x6, 0x7, 0x0, 0x4, 0x8000, 0x2, 0x3ed, 0x2, 0x2, 0x4, 0xff, 0x5, 0x1000, 0x7fffffff, 0x7fff, 0x8ce1, 0x7, 0x76a, 0x5, 0xd5d, 0x8000, 0x9, 0x785, 0x2, 0x1e, 0x59, 0x7, 0x5, 0x1, 0x1d0e40c1, 0x1, 0x4d9, 0xa563, 0xa, 0xef, 0x3d, 0x1, 0x1, 0xf, 0x8, 0x3, 0xa6db, 0x9, 0xffff, 0x2, 0x2, 0xe, 0x8, 0x8, 0x7, 0xfba, 0xa3ee, 0x1, 0x7ff, 0xd, 0x800, 0x8, 0xfffffff7, 0xe292, 0x4, 0x0, 0x3, 0x2, 0x101, 0x0, 0x7, 0x6, 0xffffffff, 0x2, 0x9, 0x5f, 0x9, 0x2, 0x7, 0x6, 0xfffffab1, 0xfe, 0x1, 0x3, 0x0, 0x6, 0xfff, 0x284, 0x8, 0x7, 0xfff, 0x0, 0x1, 0x3, 0xfa, 0x101, 0x8000, 0x50, 0x9, 0x9, 0x3, 0xffffffff, 0x1, 0xef, 0x3, 0x4, 0x9, 0x8, 0x125, 0x6, 0x1, 0x9, 0x10000, 0x9, 0x8, 0x6, 0xfffffc01, 0x80000000, 0x4, 0x0, 0x9, 0xf, 0x8001, 0x1000, 0x3ff, 0x6ae, 0x7690, 0x6, 0xaac, 0xb, 0x327, 0x1, 0x66cd, 0xfcee, 0x8001, 0x4, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffa}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}]}, @TCA_CGROUP_POLICE={0x430, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x8, 0x6, 0x10001, 0xa, 0x1, 0x6, 0x4, 0x7fffffff, 0x0, 0x10000, 0x2, 0x6, 0x7, 0x5, 0x0, 0x80000001, 0x2, 0x28000, 0x6, 0x4, 0x7, 0x80000000, 0x4, 0x800, 0xd, 0x8, 0x35c00a1d, 0x0, 0xfffffff7, 0x8, 0x2, 0x6, 0x0, 0x1, 0x2, 0x26, 0x10, 0x9, 0x5, 0x8, 0x3, 0xb, 0x4, 0x2, 0x6, 0x1, 0x4, 0x200000, 0x3, 0x2, 0x0, 0xfffffffe, 0x7, 0x7, 0x2, 0x8, 0x523b161c, 0x3f9b, 0x1, 0x100, 0x4, 0x6, 0x56, 0x3, 0x2, 0x9, 0x4, 0x76c739df, 0xe50, 0x6, 0x9, 0x4, 0x4, 0x0, 0x2, 0x7, 0x9, 0x3, 0x1, 0x4, 0x4, 0x1, 0x0, 0x5, 0x65, 0xffff, 0x76af, 0x1, 0xfffffeff, 0x9, 0x7fffffff, 0x1fd, 0xf7, 0x3, 0x6, 0xa90, 0xcd, 0x1, 0x1, 0xfffffffa, 0xd6da, 0x2, 0x3, 0x5, 0x4, 0x6c3, 0x54d3, 0x3, 0x0, 0x3, 0x7, 0x1, 0x2, 0x9, 0x3, 0x17, 0x10001, 0x4, 0x9, 0xfffff800, 0x1, 0x4, 0x2, 0x4, 0x8, 0x1, 0xd, 0x3, 0x1, 0x3, 0x8a30, 0x800, 0x1000, 0x480000, 0x8001, 0x401, 0x5, 0xc9000000, 0x8, 0x1000, 0x7, 0x76c5, 0x8, 0xaf, 0x6, 0x80000000, 0x7, 0x7fffffff, 0x8001, 0x0, 0xa, 0x5, 0x7fffffff, 0x9, 0x7ea, 0x0, 0x0, 0x8, 0x7ff, 0x3, 0x81, 0x8, 0x101, 0x5, 0x3, 0xee00, 0x401, 0x1, 0x1b, 0x0, 0x0, 0x40000000, 0xff, 0xb4, 0x4, 0x9, 0xf99, 0x8, 0xdfe, 0xd, 0x8001, 0x9, 0x2, 0x3, 0x2, 0x1, 0x5, 0x3, 0x9, 0x10, 0xfffff85f, 0x6, 0x8550, 0x9, 0x40, 0x9, 0x0, 0x5, 0x8000, 0xa5, 0x3, 0x3, 0xfffffffe, 0x3, 0x101, 0x9, 0x8001, 0x10, 0xfffffff7, 0x7fffffff, 0xb94, 0x5, 0x4065, 0x9, 0x0, 0x10000, 0x3ff, 0x4, 0x7fffffff, 0xffffffff, 0x2, 0x1, 0x40, 0xa, 0xc, 0xfff, 0xfaef, 0x6, 0x2, 0x5, 0x0, 0x2, 0x5, 0x5, 0x2, 0x5, 0x8001, 0x4, 0xe4, 0x8, 0xdaba, 0x9, 0xacbc, 0x5, 0x7, 0x0, 0x8, 0xb, 0xfffffff5, 0xffffe6d9, 0x80000000, 0x0, 0x2, 0x101, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}, @TCA_CGROUP_ACT={0xdb4, 0x1, [@m_gact={0x54, 0x1b, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x9ca, 0x5}}]}, {0x1c, 0x6, "b3690410754c0c16e0ef114e5e2b277284bdbe43d8954777"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xc0, 0xe, 0x0, 0x0, {{0xf}, {0x90, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x8001, 0x2, 0x9, 0x7f}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x1f56bbe1, 0x5, 0x1, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0xffff8001, 0x1, 0x6e61, 0x78f}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x9c, 0x1a, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6ec}]}, {0x5e, 0x6, "a7cd1a9c4c6c2f5b67160ce31519b175201a5a557814d84f831902c78208cb8c6ce8c14598f263fcaf10de44d014a4f7e8305a5b9edf2f09af6906d1eed2e7c50d47377f983cba36734f3237adfc2acbc3128ccf8133c26a55b5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0xcc, 0x1c, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x4d, 0x1, 0x7, 0xa}, 0x4a3e}}]}, {0x7f, 0x6, "be491853944bc27b7f5bab7f55e78c5e21f40fca870a52da2fd0a7d425bbf9bc75bd24dee7d899e1d3bf66947d0c60e22a8c4de708a97509532408e91b70634228880c0c726e48b789b1d944a2cb884cfbebc51a208bd10d7a7e719aff4932c0714c9e4bf07b32322a9a19d3ba45f588f31828c9d79f1906e78693"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_mirred={0xe8, 0xc, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0x8, 0xfffffffd, 0x4}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x89e5, 0x10, 0x10000000, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xffffffff, 0x4, 0x84d, 0x5}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x4, 0x10, 0x679b}, 0x3, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x1, 0x8, 0x3, 0x3}, 0x2, r8}}]}, {0x1b, 0x6, "72f2109511f299c834a6b1dc273e8a14a06d67c8315c03"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x104, 0x12, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x80000001, 0x8, 0x6, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x9, 0x400, 0x200001}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xcf5c, 0x20000000, 0xffffffff, 0xfffffffa}, 0x800}}]}, {0x7e, 0x6, "7d6a2f35e75ae16bfe29307e5994625fa725b2b46ad7f03b304ca4a8a5a0dc699ed3bfd39ed262ff661e9181794d304ff6fb199e8bdb14a57cb113ade4c9841c11938fbdf35b0453aa10e446359c4e68911817a3eb0634879d648a4ef0ab90601ac279410ddab5e19710f9a8acdf9c9845b4c90795e605348ca4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_police={0x948, 0xd, 0x0, 0x0, {{0xb}, {0x838, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb72a}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x482a18f2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8001}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffa, 0x9, 0x0, 0x3, 0x7f, 0x7, 0x8, 0xffffff87, 0x12f, 0x56, 0x0, 0x9, 0xc, 0xfffffffd, 0x10001, 0x5, 0x2, 0x10001, 0x1, 0x0, 0xb5f, 0x800, 0x10, 0xf42, 0x4, 0x2, 0x29, 0x7, 0x7, 0x8001, 0x1, 0x5, 0x40, 0x40, 0x6, 0xe, 0x5, 0x101, 0x9, 0x1, 0x2, 0xc, 0x7, 0xffffffff, 0x268, 0x412, 0x0, 0xe339, 0xf6, 0x7f, 0x261, 0x401, 0xb, 0x7f, 0x8, 0x3, 0x5, 0x6, 0x4, 0x512f21ac, 0x6, 0x3, 0x465a, 0x5, 0x3, 0x3, 0x3, 0x4f24, 0x2, 0x4, 0x26, 0x4, 0x9, 0x4, 0x3, 0x80000000, 0x1, 0xa8, 0x6, 0xc, 0xf, 0x4, 0x5, 0x3fbc0045, 0x9, 0x6, 0x7f, 0x707, 0x3, 0xfff, 0x9, 0xffff, 0x7ff, 0x2, 0x0, 0x6, 0xc27, 0x7, 0x759, 0x411, 0x8, 0xdd, 0x0, 0x9, 0x7fff, 0x8, 0x4, 0x50000000, 0x6, 0xa02, 0xbffb, 0x2, 0x3ff, 0x5, 0xffffffff, 0xac2e, 0x1, 0x3, 0x9, 0x40000000, 0x200, 0xd, 0x2, 0x81, 0x1, 0x25, 0x3ff, 0x0, 0x6, 0x8, 0x7, 0x1, 0x87, 0x81, 0x5, 0x762, 0x1, 0x4, 0x5e, 0x48f, 0x9, 0x0, 0x2, 0x81, 0x8000, 0x7, 0x1, 0x0, 0xffff, 0x3, 0x7, 0x80000001, 0x2, 0x800, 0x1, 0xa, 0xfffff149, 0x7, 0x800, 0xfffffff8, 0xe66, 0x3, 0x0, 0x8, 0x8, 0x200, 0x39db, 0x46c, 0x7, 0x4, 0x3, 0x4, 0xffff, 0x9, 0x0, 0xfe, 0x4, 0x41ae376f, 0x5, 0xffffffff, 0x6, 0x6, 0x31f, 0x6, 0x1, 0x6, 0x2, 0x10001, 0x3, 0x8, 0x0, 0xc80, 0xd91, 0x6, 0x0, 0x800, 0xff800000, 0x3, 0x2, 0x9710f2f, 0x1be, 0x4, 0x6, 0x80, 0x5a03, 0xd, 0x0, 0x80000000, 0x2, 0x1, 0x9, 0x4, 0x31, 0x5, 0x3f, 0x0, 0x5, 0x0, 0x9, 0x9, 0x3, 0xdc1, 0xc3, 0x61, 0x8, 0x1, 0xffffff77, 0x7, 0x7e, 0x200, 0x8000, 0x7, 0x1000, 0x2, 0x2, 0xffffffff, 0x7, 0xe42, 0x2, 0xc, 0x1, 0x1, 0x4aa2, 0xcf, 0x3, 0x7faa, 0x3, 0x2c43, 0x7e9, 0x7, 0x800000, 0x1, 0x5, 0x2, 0x3, 0xfe92]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x78bb7507, 0xca16, 0xaa, 0x5, 0xff, 0x42d, 0xdb, 0x56d, 0x7fffffff, 0x7ff, 0x6, 0x38, 0x9, 0x8000, 0x4, 0x6, 0xc35c, 0x7f, 0x1, 0xfff, 0x1000, 0x40, 0x5, 0xe, 0xfffffeff, 0x4e76, 0x4, 0x10000, 0x8, 0x80000001, 0x7fffffff, 0x200, 0x2c60, 0x2, 0x5, 0x7, 0x8, 0xa, 0x401, 0x7c, 0x4f7, 0xf, 0x7, 0x4, 0x8a37, 0x4, 0x7, 0x4, 0x6, 0x2, 0x100, 0x8000, 0x5000, 0x60000000, 0x6, 0x8d, 0x5, 0x80000001, 0x7fffffff, 0x7, 0x7, 0x2, 0x0, 0x400, 0xc7, 0x2, 0x4, 0x7, 0x5, 0x1, 0x9, 0x8, 0x4, 0xffff, 0x3, 0x3, 0x9, 0x9, 0x6, 0x5, 0x8, 0x5, 0x0, 0x81, 0x7, 0x3, 0x3, 0x10001, 0x40, 0x1, 0xe9, 0xbc, 0xfffff000, 0x4, 0x9, 0x3ab3, 0x8, 0x9, 0x6, 0x2, 0x7, 0x1000, 0xdf2, 0x1, 0x5, 0x39ea, 0xa19, 0x0, 0xe, 0x6239, 0x9, 0x73, 0xf, 0x0, 0x5, 0x4, 0x0, 0x9, 0x7, 0xbb9, 0x800, 0xffffff01, 0x1, 0x5, 0x3, 0x2, 0x4, 0x7fffffff, 0x8000, 0x4, 0x8, 0x0, 0x7fffffff, 0x1, 0xd6e, 0x7fffffff, 0xcc, 0x3, 0x100, 0x0, 0x5, 0x6, 0x3, 0x6, 0x7, 0x7, 0xa, 0x8, 0x7, 0x6, 0x4, 0xfffffffa, 0x1, 0x93, 0x800, 0xffff, 0x10, 0x7f, 0x9, 0x1, 0x3, 0xa, 0xf902, 0xd, 0x63, 0x87df, 0x6, 0x1000, 0x8, 0x7ff, 0x4, 0x4, 0x7f, 0x3, 0x850, 0x6, 0xfffffffa, 0xc, 0xfffff801, 0x6, 0x3, 0x8, 0x6, 0xfffffffd, 0x7, 0x3, 0xb, 0x3ff, 0x6, 0x9, 0x9, 0x2, 0x5, 0x1, 0xf, 0x1, 0x4ba, 0x6, 0x10000, 0x0, 0x8, 0x4c, 0xfff, 0xffff0c13, 0xb, 0xfffffff9, 0x3, 0x864e, 0x0, 0xff, 0x2, 0x3, 0x7, 0x7, 0x7, 0xffffffff, 0x8, 0x6, 0xcc7, 0x8, 0x4, 0x4, 0x4, 0x7f, 0x2, 0x10000, 0x6, 0x0, 0x84f9, 0x1000, 0x4, 0x5, 0x1, 0x7ea4, 0x45, 0x0, 0x1, 0x6, 0x6, 0x4, 0x2, 0xa497, 0x5d, 0x800, 0x10000, 0x7375a6a3, 0x3ff, 0xf, 0x9, 0x0, 0x8000, 0x2, 0x8, 0x9, 0x4]}]]}, {0xe6, 0x6, "592ebfe1decde4fe0b62ba3293f3e5f01f10066a59c80a7bdd47f14d42b4dc80244d0acecb1a3446f56a670c97101203ab00e7dee2e9829d1a0bbaa4a4061a2abb1ff5210c5a280eb774fe9105917ea6b5f582d9063911a221516173cfbefab5af0efddc77cd9bb064b6ed27ce0c53d221db0b706a5b5067f16a3adfc02e2e0669593f9e54a50f9b52147566f9342fb9c1e764b0a7b305e90dcf746dbeed169797338ab2e1f9f4fa629909db25214dfa3e849c0f7ccf1ccecb78c56c0db8173e27ede70702c5a978aa9e3e4a236999a49492ad5b35abe6bb2b24613533be76c32c38"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_CGROUP_POLICE={0x50, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0x6be, 0xffff, 0x0, {0x7, 0x2, 0x7, 0x0, 0x100}, {0x6, 0x2, 0x1, 0x2, 0x6, 0x6}, 0x101, 0x400, 0xf}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x43}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}]}, @TCA_CGROUP_POLICE={0x48, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfe00000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7f}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}]}}]}, 0x2ed8}}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=r3, @ANYRESHEX, @ANYBLOB=',\a\x00\x00\x00o=', @ANYRESDEC=r5, @ANYBLOB='\x00']) 3.724516858s ago: executing program 2 (id=6535): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="120100006b36a2207b06a1279bb00102030109024c0001000010000904e7000229"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.58090776s ago: executing program 3 (id=6539): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x2, 0xfe37) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r0) 3.477521659s ago: executing program 0 (id=6540): unshare(0x20010f00) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 3.172717154s ago: executing program 3 (id=6541): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x16) 3.172374244s ago: executing program 3 (id=6542): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000800)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0xf, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 3.172061915s ago: executing program 3 (id=6543): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122000000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = dup(r4) connect$inet(r5, &(0x7f0000000040)={0x27, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x60) 2.432635046s ago: executing program 0 (id=6546): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.27226188s ago: executing program 4 (id=6547): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x564, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x500, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3f5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x4d8, 0x7, [@m_mpls={0xa0, 0x16, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6005}, @TCA_MPLS_LABEL={0x8, 0x5, 0x38993}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbc27b}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf80e6}]}, {0x39, 0x6, "612d3699db034f8f08430151bfb3f0819c1d44301a821ce1a7e2fcd26a93322f414a08eb783ba01be15256ed15fc2fa03568c8552b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x160, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x8, 0x8, 0x401}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x0, 0x2eca, 0x5}, 0x3}}]}, {0xd1, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82fffc866125185fd50c16a59b8228811ffa42a3fc06ae6c491841f2d3b022b410d20071f23972ad211e8d088570180a0b72ec30b207b439e9499530f5ed3add294c6979c4716758179993cb396d1a9e8371981dc62a436962aa697442d2123e008f091efa1ef638699b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0xb4, 0xb, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}]}, {0x79, 0x6, "41aded84741ae0ad62644bf1bcd133afd532ca829ac6bda1bb5ef9fa93873a30f5d3e7c176e9df8b4cd9294006f3b071f6f02d14812ffa5cddbb03a1310a0ea81c2fcf52aedcdea451b78b010e5bcb69df46195784d5f23b7684f1f9cb0d1990615f2a605f5835cc5c16bc790a705509f995372878"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0xb4, 0x15, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x7}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x29, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5a3c78451fb35e595b70d04ef5495ca4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x70, 0xb, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x400}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_LABELS_MASK={0x14, 0x8, "097b3d39beb12e12ca7970f0c2b46dae"}]}, {0x19, 0x6, "3b8dd99ff628f0e136ea03ee3bb7e4eb97a588c1fa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x90, 0x1f, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x7}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_ACTION={0x6, 0x3, 0x21}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0600be9e48e760ba6779831df0129d79"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e7011bcc7a6b8ee870edb3e1d4364f94"}, @TCA_CT_ACTION={0x6, 0x3, 0x34}, @TCA_CT_LABELS={0x14, 0x7, "d84f053b22a32e873e2676b45f4a0ad9"}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x6c, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x2d, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f18d158dfeeec5a54f2e4d1b78"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x60}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x564}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.115146173s ago: executing program 3 (id=6548): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="240000002d000100000000000000", @ANYRES32, @ANYBLOB="0b08a2ad346fb147e9e13002"], 0x24}], 0x1}, 0x0) getgroups(0x0, 0x0) setregid(0x0, 0x0) socket(0x2a, 0x3, 0x410001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$inet6(0xa, 0x2, 0x0) 2.114660313s ago: executing program 4 (id=6549): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r0) 2.114171713s ago: executing program 0 (id=6550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000d40), 0x9, 0x61d, &(0x7f0000000700)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) 1.986768124s ago: executing program 4 (id=6551): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000180)=0x5, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x100) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$hiddev(r6, &(0x7f0000002080)=""/4096, 0x1000) 1.842223186s ago: executing program 3 (id=6552): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) 1.044578232s ago: executing program 4 (id=6553): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000080)={0xa, 0x4e03, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000004140)={0xa, 0x4ea3, 0x8000, @mcast2, 0x2db}, 0x1c, 0x0}}], 0x2, 0x4004880) 1.044113692s ago: executing program 4 (id=6554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a2ad3c249c95b7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = epoll_create1(0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x6000001f}) read$char_usb(r4, &(0x7f00000004c0)=""/185, 0xb9) epoll_pwait(r3, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 1.038525563s ago: executing program 0 (id=6555): unshare(0x20010f00) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 938.299951ms ago: executing program 2 (id=6556): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x20000865}, 0xc000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 540.587394ms ago: executing program 2 (id=6557): socket$inet(0x2, 0x3, 0x3ff) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0xee01, 0xee00) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) 539.832864ms ago: executing program 4 (id=6558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600001785000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='rpc_request\x00', r5}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x10, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x90}, [@ldst={0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xcab5, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 445.108892ms ago: executing program 2 (id=6559): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x8004587d, &(0x7f0000001ec0)={@id={0x2, 0x0, @auto="de60e4b8e8c640437d02438081fc0e47"}}) 81.828883ms ago: executing program 0 (id=6560): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4140aecd, 0x0) r4 = dup(r1) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r5, 0xae80, 0x0) 24.340178ms ago: executing program 2 (id=6561): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000100)={0x1f, 0x15, 0x15, 0x12, 0x8, 0x7, 0x2, 0x64}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) unshare(0x22020600) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0x3}, 0x4}, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8512}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xcb9}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd1cb}, {}, {}, {}, {}, {}, {}, {0x0, 0x200}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x9, 0x4}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x3c}}, 0x0) 0s ago: executing program 1 (id=6545): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x550d, &(0x7f0000005dc0)="$eJzs3M2LG2UYAPAn+9HaD+sigt46UIRdaEKz3Ra9VW3xA1uKHwdPmk2mIW2SWTZpuvbkwaP04H8iCp48+jd48OyteFC8CUrmnagrCkLTjdv9/WDyzPvmzTPPm8PCM7MkgCNrLfvlp1qciRMRsRwRpyPK81p1lK6k8EJEnI2Ipb8ctWr+j4ljEXEyIs5Mk6ecteqtz89Pzl368a2fv/nu+MqpL77+fnG7BhbtxYgY7KTze4MUi26Kt6v51qRXxsHWpIrpjcGdalykeC/fLjPca83Wtcp4sZvWFzt3R9N4q99qT2O3d6uc3xmmC44m3Vme8gO3W7vluJNvl7E3KsrYvZ/q2ruf/rbdH41Tnk6V7+MyfYzHs5jm87087WfnThnbw3E1n/IWnXxvGidVrC4X7aLfKevYfpRv+v/t7d7w7l42yXdHvWKYXWo0X2o0L9ebu0UnH+db9dagc3krW+/2p8vq47w1uNItim4/b7SLwUa23m23681mtn413+61hlmz2bjYuFC/tFGdnc9ev/F+1u9k69P4am94d9zrj7JbxW6WPrGRbTYuvryRnWtm716/md1859q16zff+/DqBzdeuf7ma9Wi/WU9zLey9c0Lm5v15oX6ZnPjCO3/06roOe4fHklt0QUAHD76f2ARDnv/H/r/uThU/e+srKPa/z+G/cMj0f8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxZP6x++UZ5spbGp6r5p6upZ6txLSKWIuK3f7Acx/blXK7yrP7L+tW/1fBtLcoM02scr46TEXGlOn595nF/CwAAAPDk+uqTsw9St55e1hZdEAcp3bRZOv3RnPLVImJ17eGcsi1NX56bU7J4PiJWYm9O2cobWE/NKVm65bYyr2z/yfK+MN3Jg5W0oVoKSwdaDgAAcCD2dwIH24UAAABwkD5bdAEsRi1mjzJnz4LL/7z/89HmiX0jAAAA4BCqLboAAAAA4LEr+3+//wcAAABPtvT7fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/M7O3eSkDkVxAD8t9D3eh5EY527FGSzDJTh0pmEBboIl4BbcAGvAmUswYGhLtAYSTL8i+f2SttyW/DklTM69pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABteskW06eHq8e6OevNUbJDF5q5GwAAAGCfVbaY5i/Gxfhfef6sPHVRjpOISCNiX+8+iF+VzEGZkx14f/alhueIPGH7Gb/L7W9EXJfb23nb3wIAAACcruVsPim69WI37rsgulRM2qT/bxrKSyIiG782lJZud5cNheW/72Hc7bt0//20fAJrVL+qQj7lNmwq7SiDymH06ZAUh7TTcgAAgE5UO4FuuxAAAAC6dNt3AfQjid1S5m4tOP/n/ceC4J/KCAAAAPiBkr4LAAAAAFqX9/+e/wcAAACnrXj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG1aZYvpcjaf1M1Zb+pp5m4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADe2Z93FAiBMAiDves7k7n/YaVBU1OTKhA+/sZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3vzuL/8npsaZZO61sfQ8kqydGlunxt65cfSH8fVrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBif15SIASCIArmjP+d9P0PKwl6BhEioOFRRS0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAv+t0v/yemxplk7rSxdDySrF01tq4aew8aRw/G278BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBi5+554yjCAADP7t5ePgBxGHSFEQKJAhpyuYSEtBQgi4KfgGQ5l2C48JG4IFGE5IYOuU6DoEQICTBd/gBV6kRKE7oUVwQJUQbtl725GPmQ5d2z/TzS7Lw3Ou+8s7YsvzvrAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACqTd7fjJDv0ijgux+4+urmS9fem+sztjfuLWcviqMmkD4ZX6i+ifnuJAAAAcHQkVX0fQniQbi5lfdzL6/+0ek9W83//XBFX9fx03V/1Ve2ftd9/ffjS1kS9Yp7spJdWx6PTT6fS2b9Vzol/Hhemhp/f9Qs7+ZXP770k+Tck/mD9xUmaX8/o2zt33uvm4bH9ShwA2KtTZf/Hb0Vf/T2U9cM2EwPgyOjUCu+q/k967eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ITJenimiqMQwmJnO87ce3RzZaf+9sb9xaqdv3Vro37O7BRpCOHS6nh0usG1zLtr1298ujwej642H7waQmhv9jL4aIb3hNBmhoK9BnH5sz4v+eweHA/tp9HyLyYAAA6dtGxZXf8g3VzKxqKFEB7/8GT9/0YtDjPW/w8/Pn+3Plet/o8bW+ABMFi78sXg2vUbb61eWb48ujz67O0zw3eGZy+cO3dhkN8rGbhjAgAAwGyS/xjvlq1e/8cLT+//n6zFYcb6/8vvhl9P51Dt/w/3ZZUH0/amX9uZAAAAHG0vvPb3X9EO41G3G75aXlu7OiyOW6/PFMcWUv3fjpWtXv8nC21nBQAAADRhsh49sf9/sRaHGff/n/3x5Z/r50xCCCfK/f9TK5+PLza3nLnWxL8Tt71GAAAA2nWibPX9/zR//j/eeuQhDiG8+XoRlx8DOFP9n7z/zU/1uerP/59tbolzKe4X1yPv+yF0+m1nBAAAwGF2vGxZsf9nurn0yS8nP+x6/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgaf8GAAD//0oESaI=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1e3340, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4004f506, &(0x7f0000000240)) kernel console output (not intermixed with test programs): has invalid maxpacket 0 [ 1738.097432][T25471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1738.104680][T25471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.112611][T25471] device bridge_slave_0 entered promiscuous mode [ 1738.119736][T25471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.127023][T25471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.134539][T25471] device bridge_slave_1 entered promiscuous mode [ 1738.170585][ T60] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1738.179587][ T60] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1738.187809][ T60] usb 4-1: Product: syz [ 1738.191968][ T60] usb 4-1: SerialNumber: syz [ 1738.197479][ T60] usb 4-1: config 0 descriptor?? [ 1738.228839][T25471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.235735][T25471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1738.242849][T25471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1738.249701][T25471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1738.314017][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1738.321583][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1738.328707][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1738.339010][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1738.347015][T20737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1738.353873][T20737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1738.477557][T25456] UDC core: couldn't find an available UDC or it's busy: -16 [ 1738.485372][T25456] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1738.496830][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1738.505691][T20737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1738.512565][T20737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1738.519846][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1738.528615][ T310] savu 0003:1E7D:2D5A.0222: item fetching failed at offset 2/5 [ 1738.531726][T25464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6140'. [ 1738.536358][ T310] savu 0003:1E7D:2D5A.0222: parse failed [ 1738.550339][ T310] savu: probe of 0003:1E7D:2D5A.0222 failed with error -22 [ 1738.566240][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1738.584057][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1738.598215][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1738.606260][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1738.606681][ T60] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 1738.614328][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1738.627717][ T60] usb 4-1: USB disconnect, device number 34 [ 1738.629063][T25471] device veth0_vlan entered promiscuous mode [ 1738.647489][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1738.656807][T25471] device veth1_macvtap entered promiscuous mode [ 1738.667733][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1738.681319][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1738.731446][ T310] usb 5-1: USB disconnect, device number 4 [ 1738.937863][T25489] loop1: detected capacity change from 0 to 1024 [ 1739.001100][ T312] device bridge_slave_1 left promiscuous mode [ 1739.007101][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.014505][ T312] device bridge_slave_0 left promiscuous mode [ 1739.020976][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.023830][T25489] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1739.034647][T25489] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1739.042028][ T312] device veth1_macvtap left promiscuous mode [ 1739.047906][ T312] device veth0_vlan left promiscuous mode [ 1739.058267][T25489] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 1739.108393][T25489] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6000c01c, mo2=0002] [ 1739.117103][T25489] System zones: 0-1, 3-36 [ 1739.126541][T25489] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,nomblk_io_submit,debug,commit=0x0000000000000005,noinit_itable,usrjquota=./file0,max_batch_time=0x0000000000000000,min_batch_time=0x000000000000000f,,errors=continue. Quota mode: writeback. [ 1739.256290][T25496] loop4: detected capacity change from 0 to 256 [ 1739.699628][T25497] futex_wake_op: syz.3.6158 tries to shift op by -1; fix this program [ 1739.749831][T25506] loop3: detected capacity change from 0 to 512 [ 1739.816476][T25506] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1739.850077][T25506] EXT4-fs (loop3): 1 truncate cleaned up [ 1739.855849][T25506] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 1739.970524][T15836] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1739.993918][T25513] loop1: detected capacity change from 0 to 1024 [ 1740.200170][T25513] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1740.448342][T25513] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 1740.461797][T25513] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 1740.506491][T25513] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6000c01c, mo2=0002] [ 1740.530915][T25513] System zones: 0-1, 3-36 [ 1740.547995][T25513] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,nomblk_io_submit,debug,commit=0x0000000000000005,noinit_itable,usrjquota=./file0,max_batch_time=0x0000000000000000,min_batch_time=0x000000000000000f,,errors=continue. Quota mode: writeback. [ 1740.573954][T15836] usb 3-1: Using ep0 maxpacket: 16 [ 1740.750835][T15836] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 1740.763220][T15836] usb 3-1: config 0 has no interface number 0 [ 1740.946363][T15836] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1740.951385][T25523] loop3: detected capacity change from 0 to 1024 [ 1741.692123][T25523] EXT4-fs (loop3): Ignoring removed oldalloc option [ 1741.750610][T15836] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 1741.775362][T15836] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1741.783915][T15836] usb 3-1: Product: syz [ 1741.787892][T15836] usb 3-1: SerialNumber: syz [ 1741.804972][T15836] usb 3-1: config 0 descriptor?? [ 1741.841735][T25523] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 1744.756161][T15836] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 1744.772232][T15836] usb 3-1: USB disconnect, device number 112 [ 1746.441742][T25596] loop3: detected capacity change from 0 to 256 [ 1746.551457][T25601] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6176'. [ 1746.723204][T25541] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1746.980643][T25541] usb 5-1: Using ep0 maxpacket: 8 [ 1747.100734][T25541] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.170152][T25596] FAT-fs (loop3): Directory bread(block 64) failed [ 1747.179459][T25541] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xED, skipping [ 1747.640918][T25541] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1747.654652][T25596] FAT-fs (loop3): Directory bread(block 65) failed [ 1747.678067][T25596] FAT-fs (loop3): Directory bread(block 66) failed [ 1747.684493][T25596] FAT-fs (loop3): Directory bread(block 67) failed [ 1747.690926][T25596] FAT-fs (loop3): Directory bread(block 68) failed [ 1747.697250][T25596] FAT-fs (loop3): Directory bread(block 69) failed [ 1747.712669][T25596] FAT-fs (loop3): Directory bread(block 70) failed [ 1747.719093][T25596] FAT-fs (loop3): Directory bread(block 71) failed [ 1747.739308][T25596] FAT-fs (loop3): Directory bread(block 72) failed [ 1747.751993][T25596] FAT-fs (loop3): Directory bread(block 73) failed [ 1748.705626][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 1748.705711][ T30] audit: type=1400 audit(2000000372.800:8513): avc: denied { listen } for pid=25593 comm="syz.3.6174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1748.751271][T25541] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1748.766686][T25541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1748.774809][T25541] usb 5-1: Product: syz [ 1748.778959][T25541] usb 5-1: Manufacturer: syz [ 1748.783869][T25541] usb 5-1: SerialNumber: syz [ 1748.791157][T25541] usb 5-1: config 0 descriptor?? [ 1748.823112][T25628] loop1: detected capacity change from 0 to 1024 [ 1748.831820][T25595] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1748.839368][T25628] EXT4-fs (loop1): INFO: recovery required on readonly filesystem [ 1748.847219][T25628] EXT4-fs (loop1): write access will be enabled during recovery [ 1748.855439][T25541] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1748.863201][T25628] JBD2: no valid journal superblock found [ 1748.869663][T25628] EXT4-fs (loop1): error loading journal [ 1749.845994][T20693] Bluetooth: hci0: command 0x1003 tx timeout [ 1749.854064][ T431] Bluetooth: hci0: sending frame failed (-49) [ 1750.072063][T20693] usb 5-1: USB disconnect, device number 5 [ 1750.110343][T25659] loop4: detected capacity change from 0 to 512 [ 1750.190943][T25659] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 1750.190943][T25659] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1750.190943][T25659] [ 1750.213280][T25659] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #3: comm syz.4.6196: corrupted inode contents [ 1750.225186][T25659] EXT4-fs (loop4): Remounting filesystem read-only [ 1750.232277][T25659] EXT4-fs error (device loop4): ext4_dirty_inode:6038: inode #3: comm syz.4.6196: mark_inode_dirty error [ 1750.270952][T25659] EXT4-fs error (device loop4): ext4_do_update_inode:5205: inode #3: comm syz.4.6196: corrupted inode contents [ 1750.283514][T25659] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.6196: mark_inode_dirty error [ 1750.295156][T25659] Quota error (device loop4): write_blk: dquota write failed [ 1750.302982][T25659] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1750.313179][T25659] EXT4-fs error (device loop4): ext4_acquire_dquot:6187: comm syz.4.6196: Failed to acquire dquot type 0 [ 1750.329011][T25659] EXT4-fs (loop4): 1 truncate cleaned up [ 1750.335875][T25666] loop1: detected capacity change from 0 to 256 [ 1750.341177][T25659] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,. Quota mode: writeback. [ 1750.354283][T25659] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038 (0x7fffffff) [ 1750.947511][ T30] audit: type=1400 audit(2000000375.040:8514): avc: denied { shutdown } for pid=25665 comm="syz.1.6198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1751.120511][ T9087] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1751.269932][T25683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6203'. [ 1751.279985][T25683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6203'. [ 1751.480523][ T9087] usb 4-1: Using ep0 maxpacket: 16 [ 1752.478947][ T1009] Bluetooth: hci0: command 0x1001 tx timeout [ 1752.486444][ T431] Bluetooth: hci0: sending frame failed (-49) [ 1752.629831][ T9087] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1752.639491][ T9087] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1752.648299][ T9087] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.687353][T25695] loop4: detected capacity change from 0 to 1024 [ 1752.705690][ T9087] usb 4-1: config 0 descriptor?? [ 1752.744119][T25695] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1752.754268][T25700] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6209'. [ 1752.764116][T25695] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1752.773677][T25695] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 1752.786770][T25695] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6000c01c, mo2=0002] [ 1752.795231][T25695] System zones: 0-1, 3-36 [ 1752.800564][T25695] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,nomblk_io_submit,debug,commit=0x0000000000000005,noinit_itable,usrjquota=./file0,max_batch_time=0x0000000000000000,min_batch_time=0x000000000000000f,,errors=continue. Quota mode: writeback. [ 1753.073052][T25708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6210'. [ 1753.263222][ T30] audit: type=1326 audit(2000000377.360:8515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25667 comm="syz.3.6199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8b77ff9 code=0x7ffc0000 [ 1753.288758][T25668] UDC core: couldn't find an available UDC or it's busy: -16 [ 1753.296027][T25668] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1753.310708][ T30] audit: type=1326 audit(2000000377.380:8516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25667 comm="syz.3.6199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f79f8b77ff9 code=0x7ffc0000 [ 1753.311773][ T9087] savu 0003:1E7D:2D5A.0223: item fetching failed at offset 2/5 [ 1753.334445][ T30] audit: type=1326 audit(2000000377.380:8517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25667 comm="syz.3.6199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8b77ff9 code=0x7ffc0000 [ 1753.360695][ T9087] savu 0003:1E7D:2D5A.0223: parse failed [ 1753.366745][ T30] audit: type=1326 audit(2000000377.380:8518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25667 comm="syz.3.6199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f79f8b77ff9 code=0x7ffc0000 [ 1753.380495][ T9087] savu: probe of 0003:1E7D:2D5A.0223 failed with error -22 [ 1753.393520][ T30] audit: type=1326 audit(2000000377.380:8519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25667 comm="syz.3.6199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8b77ff9 code=0x7ffc0000 [ 1753.417418][T25709] loop1: detected capacity change from 0 to 40427 [ 1753.425095][ T30] audit: type=1326 audit(2000000377.380:8520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25667 comm="syz.3.6199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f79f8b77ff9 code=0x7ffc0000 [ 1753.482562][T25709] F2FS-fs (loop1): invalid crc value [ 1753.489013][T25709] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1753.545147][ T9087] usb 4-1: USB disconnect, device number 35 [ 1753.558383][T25709] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1754.960587][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1754.960607][ T30] audit: type=1400 audit(2000000378.710:8543): avc: denied { create } for pid=25707 comm="syz.1.6220" name="#176" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1755.041355][ T1009] Bluetooth: hci0: command 0x1009 tx timeout [ 1755.043277][T23900] attempt to access beyond end of device [ 1755.043277][T23900] loop1: rw=524288, want=45072, limit=40427 [ 1755.049340][ T30] audit: type=1400 audit(2000000378.710:8544): avc: denied { link } for pid=25707 comm="syz.1.6220" name="#176" dev="loop1" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1755.063745][T23900] attempt to access beyond end of device [ 1755.063745][T23900] loop1: rw=0, want=45072, limit=40427 [ 1755.099419][ T30] audit: type=1400 audit(2000000378.710:8545): avc: denied { rename } for pid=25707 comm="syz.1.6220" name="#177" dev="loop1" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1755.122082][ T30] audit: type=1400 audit(2000000379.190:8546): avc: denied { ioctl } for pid=25726 comm="syz.4.6214" path="/dev/usbmon0" dev="devtmpfs" ino=135 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1755.141977][ T312] attempt to access beyond end of device [ 1755.141977][ T312] loop1: rw=2049, want=45128, limit=40427 [ 1756.666644][T25754] loop4: detected capacity change from 0 to 128 [ 1756.795172][T25754] EXT4-fs (loop4): error: could not find journal device path: error -2 [ 1756.858822][T25760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.866382][T25760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1756.875150][T25760] device bridge_slave_0 entered promiscuous mode [ 1756.887102][T25760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.894047][T25760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1756.905102][T25760] device bridge_slave_1 entered promiscuous mode [ 1757.288983][T25760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1757.295875][T25760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1757.303084][T25760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.309921][T25760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1757.344548][T25772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1757.351545][T25772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1757.358805][T25772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.365767][T25772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1757.452395][T20737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.472730][T20737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.482535][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1757.493166][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1757.501851][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1757.509883][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1757.518429][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1757.526677][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1757.535168][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1757.543581][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1757.551850][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1757.636565][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1757.666946][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1757.675568][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1757.693497][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1757.693685][T25769] loop3: detected capacity change from 0 to 40427 [ 1757.702080][T20737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.714456][T20737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1757.723586][T25778] loop4: detected capacity change from 0 to 256 [ 1757.724886][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1757.738113][T20737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1757.744977][T20737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1757.762140][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1757.770110][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1757.784120][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1757.787183][T25769] F2FS-fs (loop3): invalid crc value [ 1757.799139][T25769] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1757.817547][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1757.829073][T25778] loop4: detected capacity change from 0 to 1024 [ 1757.835913][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1757.843567][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1757.845584][T25769] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1757.851210][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1757.866898][T25760] device veth0_vlan entered promiscuous mode [ 1757.881600][T25760] device veth1_macvtap entered promiscuous mode [ 1757.949994][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1757.959251][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1757.970592][T25778] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1757.990348][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1758.033465][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1758.380023][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1758.390054][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1758.444140][T20737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1758.919212][T25800] loop3: detected capacity change from 0 to 512 [ 1758.931675][T25800] EXT4-fs (loop3): Invalid want_extra_isize 3 [ 1758.954238][T25796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1758.961154][T25796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1758.968553][T25796] device bridge_slave_0 entered promiscuous mode [ 1758.976413][T25796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1758.983493][T25796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1758.991732][T25796] device bridge_slave_1 entered promiscuous mode [ 1759.101575][T25796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.108553][T25796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1759.115696][T25796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.122556][T25796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1759.150615][T25806] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6238'. [ 1759.175567][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1759.183599][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1759.193559][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.225602][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1759.234793][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.241671][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1759.254305][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1759.262286][T19594] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1759.366507][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.373435][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1759.640959][T19594] usb 2-1: Using ep0 maxpacket: 16 [ 1759.710524][T15836] Bluetooth: hci1: command 0x1003 tx timeout [ 1759.716499][ T382] Bluetooth: hci1: sending frame failed (-49) [ 1759.770598][T19594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1759.781460][T19594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1759.791341][T19594] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 1759.800322][T19594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.809809][T19594] usb 2-1: config 0 descriptor?? [ 1759.895163][ T30] audit: type=1400 audit(2000000383.990:8547): avc: denied { create } for pid=25816 comm="syz.4.6242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1759.922070][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1759.940114][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1759.955357][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1759.963642][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1759.974069][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1759.982530][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1759.997028][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1760.005052][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1760.013021][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1760.020341][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1760.029307][T25796] device veth0_vlan entered promiscuous mode [ 1760.044162][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1760.052322][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1760.064178][T25796] device veth1_macvtap entered promiscuous mode [ 1760.073980][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1760.081829][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1760.089846][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1760.099722][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1760.107978][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1760.116867][T20737] device bridge_slave_1 left promiscuous mode [ 1760.123198][T20737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.130562][T20737] device bridge_slave_0 left promiscuous mode [ 1760.136538][T20737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.144605][T20737] device veth1_macvtap left promiscuous mode [ 1760.150493][T20737] device veth0_vlan left promiscuous mode [ 1760.230725][ T482] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1760.285941][T19594] waltop 0003:172F:0032.0224: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.1-1/input0 [ 1760.388418][ T30] audit: type=1400 audit(2000000384.480:8548): avc: denied { connect } for pid=25826 comm="syz.2.6244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1760.482067][T20693] usb 2-1: USB disconnect, device number 123 [ 1760.500614][ T482] usb 5-1: Using ep0 maxpacket: 32 [ 1760.514790][T25831] loop3: detected capacity change from 0 to 1024 [ 1760.529657][T25831] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1760.536849][T25831] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1760.546923][T25831] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 1760.558239][T25831] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6000c01c, mo2=0002] [ 1760.566403][T25831] System zones: 0-1, 3-36 [ 1760.575083][T25831] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,nomblk_io_submit,debug,commit=0x0000000000000005,noinit_itable,usrjquota=./file0,max_batch_time=0x0000000000000000,min_batch_time=0x000000000000000f,,errors=continue. Quota mode: writeback. [ 1760.660575][ T482] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 1760.671325][ T482] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1760.702854][ T482] usb 5-1: config 0 has no interface number 0 [ 1760.708841][ T482] usb 5-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 255 [ 1760.719019][ T482] usb 5-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1760.990855][ T482] usb 5-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1760.999935][ T482] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.007824][ T482] usb 5-1: Product: syz [ 1761.011795][ T482] usb 5-1: Manufacturer: syz [ 1761.016493][ T482] usb 5-1: SerialNumber: syz [ 1761.021447][T20737] device bridge_slave_1 left promiscuous mode [ 1761.024549][ T482] usb 5-1: config 0 descriptor?? [ 1761.031455][T20737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1761.039431][T20737] device bridge_slave_0 left promiscuous mode [ 1761.045442][T20737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.053491][T20737] device veth1_macvtap left promiscuous mode [ 1761.059315][T20737] device veth0_vlan left promiscuous mode [ 1761.065039][T25822] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1761.081935][ T482] plusb: probe of 5-1:0.231 failed with error -22 [ 1761.153912][T25841] loop2: detected capacity change from 0 to 512 [ 1761.176054][T25841] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1761.182910][T25841] EXT4-fs warning (device loop2): ext4_enable_quotas:6422: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1761.198081][T25841] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1761.204911][T25841] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.6248: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1761.222950][T25841] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.6248: couldn't read orphan inode 13 (err -117) [ 1761.235500][T25841] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1761.285921][ T1009] usb 5-1: USB disconnect, device number 6 [ 1761.760516][ T482] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1761.801231][ T310] Bluetooth: hci1: command 0x1001 tx timeout [ 1761.807474][ T382] Bluetooth: hci1: sending frame failed (-49) [ 1761.920521][T11314] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1762.120525][ T482] usb 3-1: Using ep0 maxpacket: 8 [ 1762.197904][ T30] audit: type=1400 audit(2000000386.290:8549): avc: denied { mount } for pid=25857 comm="syz.4.6254" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1762.280699][ T482] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1762.288950][ T482] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1762.290488][T11314] usb 4-1: Using ep0 maxpacket: 16 [ 1762.304781][ T482] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1762.314891][ T482] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1762.324720][ T482] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1762.337768][ T482] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1762.346752][ T482] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.420745][T11314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1762.430486][T11314] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1762.439384][T11314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.453714][T11314] usb 4-1: config 0 descriptor?? [ 1762.882150][T25872] loop1: detected capacity change from 0 to 128 [ 1762.914821][ T30] audit: type=1326 audit(2000000387.010:8550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25853 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8b77ff9 code=0x7ffc0000 [ 1762.944100][T25854] UDC core: couldn't find an available UDC or it's busy: -16 [ 1762.951690][T25872] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1762.962067][T25854] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1762.969836][T25872] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 1762.980085][ T30] audit: type=1326 audit(2000000387.010:8551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25853 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8b77ff9 code=0x7ffc0000 [ 1763.003996][ T30] audit: type=1326 audit(2000000387.010:8552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25853 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f79f8b77ff9 code=0x7ffc0000 [ 1763.005434][T11314] savu 0003:1E7D:2D5A.0225: item fetching failed at offset 2/5 [ 1763.030499][ T30] audit: type=1326 audit(2000000387.010:8553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25853 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8b77ff9 code=0x7ffc0000 [ 1763.058351][ T30] audit: type=1326 audit(2000000387.010:8554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25853 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8b77ff9 code=0x7ffc0000 [ 1763.084185][ T30] audit: type=1326 audit(2000000387.010:8555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25853 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f79f8b77ff9 code=0x7ffc0000 [ 1763.105593][T11314] savu 0003:1E7D:2D5A.0225: parse failed [ 1763.108419][ T30] audit: type=1326 audit(2000000387.030:8556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25853 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f8b77ff9 code=0x7ffc0000 [ 1763.113395][T11314] savu: probe of 0003:1E7D:2D5A.0225 failed with error -22 [ 1763.140288][ T30] audit: type=1326 audit(2000000387.040:8557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25853 comm="syz.3.6252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f79f8b77ff9 code=0x7ffc0000 [ 1763.384058][T11314] usb 4-1: USB disconnect, device number 36 [ 1763.899742][T19594] Bluetooth: hci1: command 0x1009 tx timeout [ 1764.557998][T20693] usb 3-1: USB disconnect, device number 113 [ 1764.812194][T25910] loop2: detected capacity change from 0 to 2048 [ 1765.045026][T25910] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1765.120656][T25910] loop_set_status: loop2 () has still dirty pages (nrpages=2) [ 1765.322347][T25932] loop2: detected capacity change from 0 to 16 [ 1766.268121][T25935] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1766.314341][T25932] erofs: (device loop2): mounted with root inode @ nid 36. [ 1766.338385][T25941] device syzkaller0 entered promiscuous mode [ 1767.291374][T25958] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1767.759537][T15836] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1768.221288][T15836] usb 4-1: Using ep0 maxpacket: 8 [ 1768.600663][T25982] loop2: detected capacity change from 0 to 128 [ 1768.615653][T25984] loop4: detected capacity change from 0 to 256 [ 1768.648955][T25975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.655996][T25975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.664911][T25984] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1768.676524][T25975] device bridge_slave_0 entered promiscuous mode [ 1768.683855][T25975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1768.690425][T15836] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1768.691109][T25975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.715655][T15836] usb 4-1: config 179 has no interface number 0 [ 1768.721821][T15836] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1768.732665][T15836] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1768.744150][T15836] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1768.779475][T15836] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1768.780944][T25975] device bridge_slave_1 entered promiscuous mode [ 1768.797256][T15836] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1768.824214][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1768.824302][ T30] audit: type=1326 audit(2000000392.910:8581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25981 comm="syz.2.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cf55aff9 code=0x7ffc0000 [ 1768.824603][T15836] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1770.307242][ T30] audit: type=1326 audit(2000000392.910:8582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25981 comm="syz.2.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cf55aff9 code=0x7ffc0000 [ 1770.327556][T15836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.368451][ T30] audit: type=1326 audit(2000000392.910:8583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25981 comm="syz.2.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f37cf559897 code=0x7ffc0000 [ 1770.496579][ T30] audit: type=1326 audit(2000000392.910:8584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25981 comm="syz.2.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cf55aff9 code=0x7ffc0000 [ 1770.550689][T15836] usb 4-1: can't set config #179, error -71 [ 1770.564173][ T30] audit: type=1326 audit(2000000392.910:8585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25981 comm="syz.2.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cf55aff9 code=0x7ffc0000 [ 1770.593491][ T30] audit: type=1326 audit(2000000392.910:8586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25981 comm="syz.2.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f37cf55aff9 code=0x7ffc0000 [ 1770.602367][T15836] usb 4-1: USB disconnect, device number 37 [ 1770.639974][ T30] audit: type=1326 audit(2000000392.910:8587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25981 comm="syz.2.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cf55aff9 code=0x7ffc0000 [ 1770.663763][ T30] audit: type=1326 audit(2000000392.910:8588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25981 comm="syz.2.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cf55aff9 code=0x7ffc0000 [ 1770.687692][ T30] audit: type=1326 audit(2000000392.910:8589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25981 comm="syz.2.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f37cf55aff9 code=0x7ffc0000 [ 1770.715341][T26007] input: syz0 as /devices/virtual/input/input32 [ 1770.717808][ T30] audit: type=1326 audit(2000000392.910:8590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25981 comm="syz.2.6292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37cf55aff9 code=0x7ffc0000 [ 1770.744106][T20693] kernel read not supported for file /uinput (pid: 20693 comm: kworker/1:6) [ 1771.270257][ T10] device bridge_slave_1 left promiscuous mode [ 1771.278661][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.327464][ T10] device bridge_slave_0 left promiscuous mode [ 1772.202243][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.210334][ T10] device veth1_macvtap left promiscuous mode [ 1772.224552][ T10] device veth0_vlan left promiscuous mode [ 1772.447573][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1772.473779][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1772.482505][T26017] loop1: detected capacity change from 0 to 40427 [ 1772.494105][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1772.503140][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1772.511845][T26017] F2FS-fs (loop1): invalid crc value [ 1772.518042][T25992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1772.524946][T25992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1772.541574][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1772.548969][T26017] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1772.549496][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1772.564059][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1772.573236][T25992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1772.575437][T26037] kvm [26036]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xfe00000000 [ 1772.580119][T25992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1772.597406][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1772.605648][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1772.614272][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1772.614614][T26037] kvm [26036]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x27e00000080 [ 1772.622747][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1772.644253][T26037] kvm [26036]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x3ef00000000 [ 1772.654835][T26017] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 1772.660216][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1772.669633][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1772.673213][T26017] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1772.690578][ T310] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 1772.713053][T25975] device veth0_vlan entered promiscuous mode [ 1772.728093][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1772.736884][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1772.754085][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1772.762832][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1772.770277][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1772.780330][T25975] device veth1_macvtap entered promiscuous mode [ 1772.794263][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1772.802860][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1772.831525][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1772.852198][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1772.866618][T26052] F2FS-fs (loop1): switch extent_cache option is not allowed [ 1772.930242][T25760] attempt to access beyond end of device [ 1772.930242][T25760] loop1: rw=2049, want=45104, limit=40427 [ 1773.120930][ T310] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1773.138028][ T310] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1773.151332][ T310] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1773.410580][ T310] usb 5-1: string descriptor 0 read error: -22 [ 1773.417523][ T310] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 1773.435211][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.456581][T26060] loop3: detected capacity change from 0 to 40427 [ 1773.505557][T26060] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 1773.703372][T11005] usb 5-1: USB disconnect, device number 7 [ 1774.292404][T26076] loop3: detected capacity change from 0 to 512 [ 1774.322523][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 1774.322539][ T30] audit: type=1400 audit(2000000398.420:8636): avc: denied { ioctl } for pid=26073 comm="syz.1.6320" path="socket:[129585]" dev="sockfs" ino=129585 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1774.398495][T26076] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.6318: inode #1: comm syz.3.6318: iget: illegal inode # [ 1774.412051][T26076] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.6318: error while reading EA inode 1 err=-117 [ 1774.424493][T26076] EXT4-fs (loop3): 1 orphan inode deleted [ 1774.430083][T26076] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000007,journal_dev=0x0000000000008000,grpquota,minixdf,grpquota,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 1774.704819][T26089] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.6323'. [ 1775.303065][T26092] loop3: detected capacity change from 0 to 256 [ 1776.962123][T26129] loop3: detected capacity change from 0 to 256 [ 1778.324738][T26143] loop1: detected capacity change from 0 to 512 [ 1778.421574][T26143] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1778.475303][T26129] FAT-fs (loop3): Directory bread(block 64) failed [ 1778.501196][T26156] loop2: detected capacity change from 0 to 128 [ 1778.560812][T26129] FAT-fs (loop3): Directory bread(block 65) failed [ 1778.567393][T26129] FAT-fs (loop3): Directory bread(block 66) failed [ 1778.587929][T26129] FAT-fs (loop3): Directory bread(block 67) failed [ 1778.650795][T26129] FAT-fs (loop3): Directory bread(block 68) failed [ 1778.657283][T26129] FAT-fs (loop3): Directory bread(block 69) failed [ 1778.667904][T26129] FAT-fs (loop3): Directory bread(block 70) failed [ 1778.668005][T26143] EXT4-fs (loop1): 1 truncate cleaned up [ 1778.674379][T26129] FAT-fs (loop3): Directory bread(block 71) failed [ 1778.674619][T26129] FAT-fs (loop3): Directory bread(block 72) failed [ 1778.674700][T26129] FAT-fs (loop3): Directory bread(block 73) failed [ 1778.749443][T26143] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1782.836211][T26203] loop3: detected capacity change from 0 to 128 [ 1783.262237][T11005] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1783.440519][T26176] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1783.510521][T11005] usb 5-1: Using ep0 maxpacket: 8 [ 1783.631666][T11005] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1783.641613][T11005] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1783.713512][T11005] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1783.724651][T11005] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1783.740119][T11005] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1783.759608][T11005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.786680][T26220] loop2: detected capacity change from 0 to 16 [ 1783.796412][T26220] erofs: (device loop2): mounted with root inode @ nid 36. [ 1783.806431][T26220] overlayfs: failed to set xattr on upper [ 1783.814608][ T30] audit: type=1400 audit(2000000407.910:8637): avc: denied { mounton } for pid=26219 comm="syz.2.6364" path="/26/bus/file0" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1783.838290][ T30] audit: type=1400 audit(2000000407.910:8638): avc: denied { read } for pid=26219 comm="syz.2.6364" name="file0" dev="overlay" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1783.863286][ T30] audit: type=1400 audit(2000000407.910:8639): avc: denied { open } for pid=26219 comm="syz.2.6364" path="/26/bus/file0/file0" dev="overlay" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1783.914750][T26222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6363'. [ 1783.935701][T26222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6363'. [ 1784.058605][ T30] audit: type=1400 audit(2000000408.140:8640): avc: denied { unlink } for pid=25796 comm="syz-executor" name="file.cold" dev="overlay" ino=41 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1784.097005][ T30] audit: type=1400 audit(2000000408.150:8641): avc: denied { write } for pid=25796 comm="syz-executor" name="file0" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1784.121425][ T30] audit: type=1400 audit(2000000408.150:8642): avc: denied { remove_name } for pid=25796 comm="syz-executor" name="file0" dev="overlay" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1784.145101][ T30] audit: type=1400 audit(2000000408.150:8643): avc: denied { rename } for pid=25796 comm="syz-executor" name="#17e" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1784.171436][ T30] audit: type=1400 audit(2000000408.180:8644): avc: denied { reparent } for pid=25796 comm="syz-executor" name="#17e" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1784.194148][ T30] audit: type=1400 audit(2000000408.180:8645): avc: denied { add_name } for pid=25796 comm="syz-executor" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1784.215142][ T30] audit: type=1400 audit(2000000408.190:8646): avc: denied { unlink } for pid=25796 comm="syz-executor" name="file1" dev="overlay" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1784.260677][T26176] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1784.269687][T26176] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.290380][T26176] usb 1-1: Product: syz [ 1784.294629][T26176] usb 1-1: Manufacturer: syz [ 1784.299074][T26176] usb 1-1: SerialNumber: syz [ 1784.377617][T26224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.384595][T26224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.391969][T26224] device bridge_slave_0 entered promiscuous mode [ 1784.398913][T26224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.406074][T26224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.413439][T26224] device bridge_slave_1 entered promiscuous mode [ 1784.450076][T26228] UDC core: couldn't find an available UDC or it's busy: -16 [ 1784.457382][T26228] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1784.487676][T26224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.494575][T26224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1784.501694][T26224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.508532][T26224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1784.545325][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1784.555695][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.561340][T26232] loop1: detected capacity change from 0 to 512 [ 1784.569339][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.581776][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1784.589956][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.596839][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1784.625095][T26232] EXT4-fs (loop1): error: could not find journal device path: error -2 [ 1784.634713][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1784.642851][ T1383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.649682][ T1383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1784.657133][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1784.665607][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1784.692577][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1784.706397][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1784.716057][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1784.723563][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1784.732912][T26224] device veth0_vlan entered promiscuous mode [ 1784.746336][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1784.756787][T26224] device veth1_macvtap entered promiscuous mode [ 1784.769060][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1785.257992][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1785.289339][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1785.302854][ T10] device bridge_slave_1 left promiscuous mode [ 1785.309130][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.321373][ T10] device bridge_slave_0 left promiscuous mode [ 1785.327860][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.340224][ T10] device veth1_macvtap left promiscuous mode [ 1785.346285][ T10] device veth0_vlan left promiscuous mode [ 1785.584685][T26246] loop1: detected capacity change from 0 to 1024 [ 1785.619468][T26244] loop3: detected capacity change from 0 to 40427 [ 1785.665067][T26244] F2FS-fs (loop3): fault_injection options not supported [ 1785.677876][T26246] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1785.689232][T26244] F2FS-fs (loop3): invalid crc value [ 1785.694571][T26246] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1785.709456][T26246] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f014c01c, mo2=0002] [ 1785.720652][T26246] System zones: 0-1, 3-36 [ 1785.728395][T26244] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1785.796607][T26246] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsv1,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,debug,data_err=abort,,errors=continue. Quota mode: writeback. [ 1785.801373][T18283] usb 5-1: USB disconnect, device number 8 [ 1785.881847][T26244] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1785.900805][T26258] loop2: detected capacity change from 0 to 256 [ 1785.911899][T26244] attempt to access beyond end of device [ 1785.911899][T26244] loop3: rw=1, want=45104, limit=40427 [ 1785.923519][T26258] exfat: Bad value for 'uid' [ 1785.941612][T24853] F2FS-fs (loop3): access invalid blkaddr:2816 [ 1785.947876][T24853] CPU: 1 PID: 24853 Comm: syz-executor Tainted: G W 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 1785.959250][T24853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1785.969140][T24853] Call Trace: [ 1785.972262][T24853] [ 1785.975095][T24853] dump_stack_lvl+0x151/0x1c0 [ 1785.979554][T24853] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1785.985018][T24853] ? arch_stack_walk+0xf3/0x140 [ 1785.989712][T24853] dump_stack+0x15/0x20 [ 1785.993704][T24853] f2fs_is_valid_blkaddr+0xcc3/0x12d0 [ 1785.998913][T24853] f2fs_map_blocks+0x1622/0x3ab0 [ 1786.003683][T24853] ? __stack_depot_save+0x34/0x470 [ 1786.008638][T24853] ? f2fs_do_map_lock+0x70/0x70 [ 1786.013330][T24853] ? debug_smp_processor_id+0x17/0x20 [ 1786.018519][T24853] ? try_charge_memcg+0x213/0x1550 [ 1786.023483][T24853] f2fs_mpage_readpages+0xc9a/0x21a0 [ 1786.028600][T24853] ? dquot_release_reservation_block+0xa0/0xa0 [ 1786.034577][T24853] ? workingset_activation+0x3f0/0x3f0 [ 1786.039999][T24853] f2fs_readahead+0xfd/0x250 [ 1786.044430][T24853] ? blk_start_plug+0x5a/0x170 [ 1786.049029][T24853] read_pages+0x15e/0xb00 [ 1786.053196][T24853] ? lru_cache_add+0x279/0x540 [ 1786.057922][T24853] ? page_cache_ra_unbounded+0x920/0x920 [ 1786.063388][T24853] ? add_to_page_cache_lru+0x225/0x2c0 [ 1786.068682][T24853] ? add_to_page_cache_locked+0x40/0x40 [ 1786.074063][T24853] ? __stack_depot_save+0x34/0x470 [ 1786.079010][T24853] page_cache_ra_unbounded+0x6cb/0x920 [ 1786.084308][T24853] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 1786.090641][T24853] ? _raw_spin_unlock+0x4d/0x70 [ 1786.095328][T24853] ? wp_page_reuse+0xff/0x120 [ 1786.099856][T24853] ondemand_readahead+0x9c8/0xfa0 [ 1786.104706][T24853] ? page_cache_sync_ra+0x4d0/0x4d0 [ 1786.109736][T24853] ? debug_smp_processor_id+0x17/0x20 [ 1786.114941][T24853] ? kasan_quarantine_put+0x34/0x1a0 [ 1786.120061][T24853] ? selinux_inode_getattr+0x11f/0x3f0 [ 1786.125360][T24853] ? fault_around_bytes_set+0xc0/0xc0 [ 1786.130563][T24853] page_cache_sync_ra+0x2e9/0x4d0 [ 1786.135512][T24853] ? force_page_cache_ra+0x420/0x420 [ 1786.140634][T24853] ? do_handle_mm_fault+0x1807/0x2400 [ 1786.145843][T24853] f2fs_readdir+0x52d/0xba0 [ 1786.150182][T24853] ? f2fs_fill_dentries+0xd60/0xd60 [ 1786.155214][T24853] ? avc_policy_seqno+0x1b/0x70 [ 1786.159903][T24853] ? __kasan_check_read+0x11/0x20 [ 1786.164872][T24853] ? security_file_permission+0x86/0xb0 [ 1786.170231][T24853] iterate_dir+0x265/0x600 [ 1786.174480][T24853] ? f2fs_fill_dentries+0xd60/0xd60 [ 1786.179514][T24853] __se_sys_getdents64+0x1c1/0x460 [ 1786.184465][T24853] ? __x64_sys_getdents64+0x90/0x90 [ 1786.189492][T24853] ? filldir+0x680/0x680 [ 1786.193579][T24853] __x64_sys_getdents64+0x7b/0x90 [ 1786.198435][T24853] x64_sys_call+0x5ae/0x9a0 [ 1786.202775][T24853] do_syscall_64+0x3b/0xb0 [ 1786.207026][T24853] ? clear_bhb_loop+0x35/0x90 [ 1786.211543][T24853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1786.217269][T24853] RIP: 0033:0x7f79f8baa193 [ 1786.221520][T24853] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 1786.240960][T24853] RSP: 002b:00007ffca80e6de8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 1786.249206][T24853] RAX: ffffffffffffffda RBX: 00005555598754e0 RCX: 00007f79f8baa193 [ 1786.257027][T24853] RDX: 0000000000008000 RSI: 00005555598754e0 RDI: 0000000000000005 [ 1786.264829][T24853] RBP: 00005555598754b4 R08: 0000000000000000 R09: 0000000000000000 [ 1786.272639][T24853] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 1786.280453][T24853] R13: 0000000000000010 R14: 00005555598754b0 R15: 00007ffca80e9090 [ 1786.288268][T24853] [ 1786.299186][T24853] F2FS-fs (loop3): access invalid blkaddr:2816 [ 1786.300408][ T1009] usb 1-1: USB disconnect, device number 95 [ 1786.308890][T24853] CPU: 0 PID: 24853 Comm: syz-executor Tainted: G W 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 1786.322269][T24853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1786.332162][T24853] Call Trace: [ 1786.335284][T24853] [ 1786.338075][T24853] dump_stack_lvl+0x151/0x1c0 [ 1786.342576][T24853] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1786.348046][T24853] dump_stack+0x15/0x20 [ 1786.352035][T24853] f2fs_is_valid_blkaddr+0xcc3/0x12d0 [ 1786.357378][T24853] f2fs_map_blocks+0x1622/0x3ab0 [ 1786.362142][T24853] ? __stack_depot_save+0x34/0x470 [ 1786.367100][T24853] ? f2fs_do_map_lock+0x70/0x70 [ 1786.371784][T24853] f2fs_mpage_readpages+0xc9a/0x21a0 [ 1786.376907][T24853] ? dquot_release_reservation_block+0xa0/0xa0 [ 1786.382890][T24853] ? workingset_activation+0x3f0/0x3f0 [ 1786.388189][T24853] f2fs_readahead+0xfd/0x250 [ 1786.392606][T24853] ? blk_start_plug+0x5a/0x170 [ 1786.397292][T24853] read_pages+0x15e/0xb00 [ 1786.401460][T24853] ? lru_cache_add+0x279/0x540 [ 1786.406080][T24853] ? page_cache_ra_unbounded+0x920/0x920 [ 1786.411527][T24853] ? add_to_page_cache_lru+0x225/0x2c0 [ 1786.416822][T24853] ? add_to_page_cache_locked+0x40/0x40 [ 1786.422202][T24853] ? __stack_depot_save+0x34/0x470 [ 1786.427148][T24853] page_cache_ra_unbounded+0x6cb/0x920 [ 1786.432448][T24853] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 1786.438778][T24853] ? _raw_spin_unlock+0x4d/0x70 [ 1786.443464][T24853] ? wp_page_reuse+0xff/0x120 [ 1786.447977][T24853] ondemand_readahead+0x9c8/0xfa0 [ 1786.452841][T24853] ? page_cache_sync_ra+0x4d0/0x4d0 [ 1786.457871][T24853] ? debug_smp_processor_id+0x17/0x20 [ 1786.463082][T24853] ? kasan_quarantine_put+0x34/0x1a0 [ 1786.468200][T24853] ? selinux_inode_getattr+0x11f/0x3f0 [ 1786.473492][T24853] ? fault_around_bytes_set+0xc0/0xc0 [ 1786.478705][T24853] page_cache_sync_ra+0x2e9/0x4d0 [ 1786.483564][T24853] ? force_page_cache_ra+0x420/0x420 [ 1786.488683][T24853] ? do_handle_mm_fault+0x1807/0x2400 [ 1786.493890][T24853] f2fs_readdir+0x52d/0xba0 [ 1786.498235][T24853] ? f2fs_fill_dentries+0xd60/0xd60 [ 1786.503263][T24853] ? avc_policy_seqno+0x1b/0x70 [ 1786.507950][T24853] ? __kasan_check_read+0x11/0x20 [ 1786.512821][T24853] ? security_file_permission+0x86/0xb0 [ 1786.518302][T24853] iterate_dir+0x265/0x600 [ 1786.522551][T24853] ? f2fs_fill_dentries+0xd60/0xd60 [ 1786.527587][T24853] __se_sys_getdents64+0x1c1/0x460 [ 1786.532537][T24853] ? __x64_sys_getdents64+0x90/0x90 [ 1786.537566][T24853] ? filldir+0x680/0x680 [ 1786.541649][T24853] __x64_sys_getdents64+0x7b/0x90 [ 1786.546505][T24853] x64_sys_call+0x5ae/0x9a0 [ 1786.550845][T24853] do_syscall_64+0x3b/0xb0 [ 1786.555099][T24853] ? clear_bhb_loop+0x35/0x90 [ 1786.559612][T24853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1786.565427][T24853] RIP: 0033:0x7f79f8baa193 [ 1786.569681][T24853] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 1786.589209][T24853] RSP: 002b:00007ffca80e6de8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 1786.597452][T24853] RAX: ffffffffffffffda RBX: 00005555598754e0 RCX: 00007f79f8baa193 [ 1786.605268][T24853] RDX: 0000000000008000 RSI: 00005555598754e0 RDI: 0000000000000005 [ 1786.613082][T24853] RBP: 00005555598754b4 R08: 0000000000000000 R09: 0000000000000000 [ 1786.620885][T24853] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 1786.628698][T24853] R13: 0000000000000010 R14: 00005555598754b0 R15: 00007ffca80e9090 [ 1786.636513][T24853] [ 1786.649199][T26260] loop_set_status: loop1 () has still dirty pages (nrpages=2) [ 1786.661000][T24853] attempt to access beyond end of device [ 1786.661000][T24853] loop3: rw=0, want=45072, limit=40427 [ 1786.691466][T25992] attempt to access beyond end of device [ 1786.691466][T25992] loop3: rw=1048577, want=45112, limit=40427 [ 1786.710615][T25992] attempt to access beyond end of device [ 1786.710615][T25992] loop3: rw=2049, want=45152, limit=40427 [ 1786.898434][T18283] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1787.140531][T26275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6380'. [ 1787.149960][T26275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6380'. [ 1787.350791][T18283] usb 5-1: Using ep0 maxpacket: 8 [ 1787.810911][T18283] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1787.818769][T18283] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1787.843006][T18283] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1788.104042][T25992] device bridge_slave_1 left promiscuous mode [ 1788.127394][T25992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1788.143284][T25992] device bridge_slave_0 left promiscuous mode [ 1788.253205][T25992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1788.270774][T18283] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1788.278844][T18283] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1788.279390][T25992] device veth1_macvtap left promiscuous mode [ 1788.296151][T18283] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1788.296376][T25992] device veth0_vlan left promiscuous mode [ 1789.160507][T18283] usb 5-1: unable to read config index 2 descriptor/start: -71 [ 1789.169689][T18283] usb 5-1: can't read configurations, error -71 [ 1789.227831][T26307] loop4: detected capacity change from 0 to 256 [ 1789.284490][T26307] exfat: Bad value for 'uid' [ 1789.500525][ T310] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1789.520115][T26278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.583919][T26278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.608693][T26278] device bridge_slave_0 entered promiscuous mode [ 1789.643781][T26278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.662708][T26278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.686956][T26278] device bridge_slave_1 entered promiscuous mode [ 1790.839562][T26331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6394'. [ 1791.003902][T26331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6394'. [ 1791.760293][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1791.760313][ T30] audit: type=1400 audit(2000000415.850:8648): avc: denied { create } for pid=26335 comm="syz.0.6398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1791.803331][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1791.812577][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1791.824663][ T482] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1791.833229][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1791.846941][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1791.881747][ T1383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.888639][ T1383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1791.900588][ T310] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1791.916237][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1791.919719][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.924582][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1791.940463][ T310] usb 3-1: Product: syz [ 1791.944545][ T310] usb 3-1: Manufacturer: syz [ 1791.948876][ T310] usb 3-1: SerialNumber: syz [ 1791.950689][ T1383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1791.960224][ T1383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1791.965369][ T310] usb 3-1: config 0 descriptor?? [ 1791.995240][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1792.009327][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1792.019273][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1792.033183][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1792.041822][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1792.062331][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1792.074889][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1792.090682][ T482] usb 2-1: Using ep0 maxpacket: 32 [ 1792.099158][T26278] device veth0_vlan entered promiscuous mode [ 1792.105864][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1792.114178][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1792.123482][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1792.141226][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1792.152691][T11314] usb 3-1: USB disconnect, device number 114 [ 1792.158247][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1792.169524][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1792.180111][ T30] audit: type=1400 audit(2000000416.270:8649): avc: denied { read } for pid=26349 comm="syz.0.6403" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1792.209697][T26353] loop2: detected capacity change from 0 to 1024 [ 1792.211954][T26278] device veth1_macvtap entered promiscuous mode [ 1792.230713][ T482] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1792.237332][ T30] audit: type=1400 audit(2000000416.300:8650): avc: denied { open } for pid=26349 comm="syz.0.6403" path="/24/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1792.242155][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1792.277147][ T482] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1792.296771][ T482] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 1792.305946][T26353] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1792.316630][ T482] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.325370][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1792.331780][T26353] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1792.346437][ T482] usb 2-1: config 0 descriptor?? [ 1792.353040][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1792.441169][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1792.449298][T26353] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f014c01c, mo2=0002] [ 1792.462217][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1792.482641][T26353] System zones: 0-1, 3-36 [ 1792.744487][T26353] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsv1,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,debug,data_err=abort,,errors=continue. Quota mode: writeback. [ 1792.860512][ T482] usbhid 2-1:0.0: can't add hid device: -71 [ 1792.866333][ T482] usbhid: probe of 2-1:0.0 failed with error -71 [ 1792.878604][ T482] usb 2-1: USB disconnect, device number 124 [ 1792.910971][T26366] loop_set_status: loop2 () has still dirty pages (nrpages=2) [ 1793.070627][T26176] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1794.171110][T26383] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6409'. [ 1794.255912][T26373] loop1: detected capacity change from 0 to 8192 [ 1794.284558][T26176] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1794.382305][T26176] usb 4-1: config 1 has no interface number 0 [ 1794.392743][T26176] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1794.448774][T26176] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1794.932607][T26176] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1794.965741][T26176] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 99 [ 1795.940609][T26176] usb 4-1: string descriptor 0 read error: -71 [ 1796.900595][T26176] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1796.954090][T26176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.040913][T26176] usb 4-1: can't set config #1, error -71 [ 1797.100234][T26176] usb 4-1: USB disconnect, device number 38 [ 1797.321905][T26429] loop4: detected capacity change from 0 to 512 [ 1797.443291][T26430] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6422'. [ 1797.487582][T26429] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1797.567833][T26429] EXT4-fs (loop4): 1 truncate cleaned up [ 1797.574504][T26429] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,resuid=0x000000000000ee01,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 1798.259757][T26440] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6425'. [ 1799.836609][T26462] loop2: detected capacity change from 0 to 1024 [ 1799.918930][T26462] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 1799.926760][T26462] EXT4-fs (loop2): write access will be enabled during recovery [ 1799.938341][T26462] JBD2: no valid journal superblock found [ 1799.945075][T26462] EXT4-fs (loop2): error loading journal [ 1802.188545][T26525] loop2: detected capacity change from 0 to 16 [ 1802.261609][T26525] erofs: (device loop2): mounted with root inode @ nid 36. [ 1802.301498][T26525] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 1802.319761][T26525] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 1802.376112][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1802.432689][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1802.449179][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1802.457880][T26535] loop1: detected capacity change from 0 to 512 [ 1802.460725][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1802.474099][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1802.484333][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1802.496346][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1802.506237][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1802.519470][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1802.651831][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1802.753434][T26521] loop3: detected capacity change from 0 to 40427 [ 1802.763892][T26535] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1802.772201][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1802.780184][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1802.804172][T26535] EXT4-fs (loop1): 1 truncate cleaned up [ 1802.809828][T26535] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9b,nodiscard,,errors=continue. Quota mode: writeback. [ 1802.839414][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1802.966451][T26521] F2FS-fs (loop3): invalid crc value [ 1803.288229][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.301847][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.366564][T26521] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1803.585050][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.604650][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.612774][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.620775][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.628748][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.637019][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.645015][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.652982][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.661031][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.668962][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.676932][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.690611][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.698669][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.706965][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.734622][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.748088][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.759639][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.769186][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.777396][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.785720][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.793907][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.802096][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.810263][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.838643][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1803.846663][T26521] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1803.871107][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.092454][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.125898][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.180064][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.188257][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.197220][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.205242][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.213329][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.221870][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.229839][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.238676][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.246709][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.254843][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.262866][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.280666][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.288686][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.314027][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.330750][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.338765][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.360747][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.373072][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.380510][T26566] loop4: detected capacity change from 0 to 512 [ 1804.389861][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.403091][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.417984][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.431726][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.445351][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.449230][T26566] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1804.463171][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.463185][T26566] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1804.480624][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.480770][T26566] EXT4-fs error (device loop4): ext4_acquire_dquot:6187: comm syz.4.6460: Failed to acquire dquot type 1 [ 1804.496429][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.505788][T26566] EXT4-fs (loop4): 1 truncate cleaned up [ 1804.508018][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.518309][T26566] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1804.521230][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.540344][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.541699][T26566] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038 (0x7fffffff) [ 1804.562762][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.577199][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.600719][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.614457][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.627470][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.635671][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.645980][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.654041][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.662299][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.670252][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.678260][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.686510][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.704271][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.727530][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.745959][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.757946][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.766299][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1804.817933][T26576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6461'. [ 1804.851550][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1805.770968][T26581] overlayfs: unrecognized mount option "uuid=auto" or missing value [ 1805.848420][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1805.858905][ T30] audit: type=1400 audit(2000000429.870:8651): avc: denied { mounton } for pid=26573 comm="syz.1.6463" path="/syzcgroup/cpu/syz1/syz0/file0" dev="cgroup" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1805.891323][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1805.899301][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1805.925536][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1805.954091][ T30] audit: type=1400 audit(2000000429.980:8652): avc: denied { create } for pid=26578 comm="syz.4.6464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1805.974829][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1805.990727][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.000801][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.023395][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.043394][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.053179][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.062673][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.072205][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.081676][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.091331][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.100731][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.315909][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.408936][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.461766][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.469910][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.483037][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.492760][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.500977][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.509033][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.517179][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.525218][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.540667][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.556943][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.599431][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.608885][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.618248][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.627304][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1806.636591][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1807.028920][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1807.097251][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1807.130711][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1807.151096][T26278] attempt to access beyond end of device [ 1807.151096][T26278] loop3: rw=524288, want=45072, limit=40427 [ 1807.173064][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1807.183837][T26278] attempt to access beyond end of device [ 1807.183837][T26278] loop3: rw=0, want=45072, limit=40427 [ 1807.222242][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1807.320271][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1807.352786][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1807.503118][T26610] loop4: detected capacity change from 0 to 128 [ 1808.160159][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.169712][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.177780][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.186076][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.194086][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.202119][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.210083][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.232931][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.240992][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.249380][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.257539][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.270203][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.285966][T25992] attempt to access beyond end of device [ 1808.285966][T25992] loop3: rw=2049, want=41000, limit=40427 [ 1808.299310][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.311932][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.321200][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.329823][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.341321][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.349355][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.357681][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.366219][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.402417][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.410785][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.419463][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.427600][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.437059][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.456874][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.499789][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.529578][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.558011][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.582880][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.611903][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.632106][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.654002][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.694679][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.706527][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.716714][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.758146][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.796100][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.825243][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.854230][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.889213][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.924181][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.934182][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.952027][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1808.972563][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.003921][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.056578][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.077564][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.121341][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.137983][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.146118][T26631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6480'. [ 1809.156017][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.181813][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.195252][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.217148][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.236474][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.251527][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.311169][T15599] device bridge_slave_1 left promiscuous mode [ 1809.317327][T15599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1809.332321][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.357059][T15599] device bridge_slave_0 left promiscuous mode [ 1809.363595][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.401616][T15599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.411367][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.428107][T26621] loop4: detected capacity change from 0 to 40427 [ 1809.438197][T15599] device veth1_macvtap left promiscuous mode [ 1809.444063][T15599] device veth0_vlan left promiscuous mode [ 1809.510149][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.518211][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.527572][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.535634][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.548991][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.557036][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.565262][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.573278][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.583102][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.672662][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.690773][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.708981][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.722986][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.731076][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.739193][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.739369][T26621] F2FS-fs (loop4): fault_injection options not supported [ 1809.747508][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.762425][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.765147][T26621] F2FS-fs (loop4): invalid crc value [ 1809.773654][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.783908][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.793053][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.803049][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.814469][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.815428][T26621] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1809.822759][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.837051][T26636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1809.841779][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.852816][T26636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1809.862253][T26636] device bridge_slave_0 entered promiscuous mode [ 1809.870151][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.886971][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.889241][T26636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1809.895097][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.904069][T26636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1809.914157][T26621] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1809.935659][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.941039][T26636] device bridge_slave_1 entered promiscuous mode [ 1809.950906][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.965616][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.975707][T24343] F2FS-fs (loop4): access invalid blkaddr:2816 [ 1809.981988][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1809.982067][T24343] CPU: 1 PID: 24343 Comm: syz-executor Tainted: G W 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 1809.995206][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1810.001154][T24343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1810.001168][T24343] Call Trace: [ 1810.001175][T24343] [ 1810.001183][T24343] dump_stack_lvl+0x151/0x1c0 [ 1810.012647][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1810.019002][T24343] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1810.022885][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1810.024900][T24343] ? stack_trace_save+0x1c0/0x1c0 [ 1810.029688][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1810.037347][T24343] dump_stack+0x15/0x20 [ 1810.037378][T24343] f2fs_is_valid_blkaddr+0xcc3/0x12d0 [ 1810.037402][T24343] f2fs_map_blocks+0x1622/0x3ab0 [ 1810.045815][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1810.050635][T24343] ? f2fs_do_map_lock+0x70/0x70 [ 1810.050668][T24343] ? _raw_spin_lock+0x1b0/0x1b0 [ 1810.056077][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1810.063312][T24343] f2fs_mpage_readpages+0xc9a/0x21a0 [ 1810.063350][T24343] ? __this_cpu_preempt_check+0x13/0x20 [ 1810.067816][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1810.072495][T24343] ? dquot_release_reservation_block+0xa0/0xa0 [ 1810.072527][T24343] ? __this_cpu_preempt_check+0x13/0x20 [ 1810.077816][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1810.085081][T24343] ? __pagevec_lru_add+0xcde/0xd70 [ 1810.085109][T24343] f2fs_readahead+0xfd/0x250 [ 1810.090309][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1810.094450][T24343] ? blk_start_plug+0x5a/0x170 [ 1810.094476][T24343] read_pages+0x15e/0xb00 [ 1810.094496][T24343] ? lru_cache_add+0x279/0x540 [ 1810.094516][T24343] ? page_cache_ra_unbounded+0x920/0x920 [ 1810.103422][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1810.107385][T24343] ? add_to_page_cache_lru+0x225/0x2c0 [ 1810.113255][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1810.120592][T24343] ? add_to_page_cache_locked+0x40/0x40 [ 1810.120619][T24343] ? __stack_depot_save+0x34/0x470 [ 1810.127097][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1810.131946][T24343] page_cache_ra_unbounded+0x6cb/0x920 [ 1810.131977][T24343] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 1810.140282][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1810.144701][T24343] ? _raw_spin_unlock+0x4d/0x70 [ 1810.144730][T24343] ? wp_page_reuse+0xff/0x120 [ 1810.144751][T24343] ondemand_readahead+0x9c8/0xfa0 [ 1810.144776][T24343] ? page_cache_sync_ra+0x4d0/0x4d0 [ 1810.150457][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1810.156939][T24343] ? debug_smp_processor_id+0x17/0x20 [ 1810.161789][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1810.165707][T24343] ? kasan_quarantine_put+0x34/0x1a0 [ 1810.170890][T26224] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 1810.175773][T24343] ? selinux_inode_getattr+0x11f/0x3f0 [ 1810.292537][T24343] ? fault_around_bytes_set+0xc0/0xc0 [ 1810.297872][T24343] page_cache_sync_ra+0x2e9/0x4d0 [ 1810.302721][T24343] ? force_page_cache_ra+0x420/0x420 [ 1810.307841][T24343] ? do_handle_mm_fault+0x1807/0x2400 [ 1810.313049][T24343] f2fs_readdir+0x52d/0xba0 [ 1810.317396][T24343] ? f2fs_fill_dentries+0xd60/0xd60 [ 1810.322423][T24343] ? avc_policy_seqno+0x1b/0x70 [ 1810.327127][T24343] ? __kasan_check_read+0x11/0x20 [ 1810.331968][T24343] ? security_file_permission+0x86/0xb0 [ 1810.337355][T24343] iterate_dir+0x265/0x600 [ 1810.341603][T24343] ? f2fs_fill_dentries+0xd60/0xd60 [ 1810.346638][T24343] __se_sys_getdents64+0x1c1/0x460 [ 1810.351593][T24343] ? __x64_sys_getdents64+0x90/0x90 [ 1810.356738][T24343] ? filldir+0x680/0x680 [ 1810.360796][T24343] __x64_sys_getdents64+0x7b/0x90 [ 1810.365644][T24343] x64_sys_call+0x5ae/0x9a0 [ 1810.369985][T24343] do_syscall_64+0x3b/0xb0 [ 1810.374235][T24343] ? clear_bhb_loop+0x35/0x90 [ 1810.378757][T24343] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1810.384478][T24343] RIP: 0033:0x7fb441ad5193 [ 1810.388733][T24343] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 1810.408605][T24343] RSP: 002b:00007ffd564dc1f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 1810.416848][T24343] RAX: ffffffffffffffda RBX: 000055558dfc64e0 RCX: 00007fb441ad5193 [ 1810.424660][T24343] RDX: 0000000000008000 RSI: 000055558dfc64e0 RDI: 0000000000000005 [ 1810.432471][T24343] RBP: 000055558dfc64b4 R08: 0000000000000000 R09: 0000000000000000 [ 1810.440285][T24343] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 1810.448104][T24343] R13: 0000000000000010 R14: 000055558dfc64b0 R15: 00007ffd564de4a0 [ 1810.456023][T24343] [ 1810.470496][ T482] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1810.502473][T24343] F2FS-fs (loop4): access invalid blkaddr:2816 [ 1810.508470][T24343] CPU: 1 PID: 24343 Comm: syz-executor Tainted: G W 5.15.167-syzkaller-02003-g5e4635681cf1 #0 [ 1810.519836][T24343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1810.529734][T24343] Call Trace: [ 1810.532851][T24343] [ 1810.535669][T24343] dump_stack_lvl+0x151/0x1c0 [ 1810.540141][T24343] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1810.545611][T24343] dump_stack+0x15/0x20 [ 1810.549604][T24343] f2fs_is_valid_blkaddr+0xcc3/0x12d0 [ 1810.554812][T24343] f2fs_map_blocks+0x1622/0x3ab0 [ 1810.559588][T24343] ? f2fs_do_map_lock+0x70/0x70 [ 1810.564272][T24343] f2fs_mpage_readpages+0xc9a/0x21a0 [ 1810.569399][T24343] ? __this_cpu_preempt_check+0x13/0x20 [ 1810.574793][T24343] ? dquot_release_reservation_block+0xa0/0xa0 [ 1810.580765][T24343] ? __this_cpu_preempt_check+0x13/0x20 [ 1810.586148][T24343] ? __pagevec_lru_add+0xcde/0xd70 [ 1810.591096][T24343] f2fs_readahead+0xfd/0x250 [ 1810.595527][T24343] ? blk_start_plug+0x5a/0x170 [ 1810.600118][T24343] read_pages+0x15e/0xb00 [ 1810.604284][T24343] ? lru_cache_add+0x279/0x540 [ 1810.608884][T24343] ? page_cache_ra_unbounded+0x920/0x920 [ 1810.614349][T24343] ? add_to_page_cache_lru+0x225/0x2c0 [ 1810.619648][T24343] ? add_to_page_cache_locked+0x40/0x40 [ 1810.625026][T24343] ? __stack_depot_save+0x34/0x470 [ 1810.629974][T24343] page_cache_ra_unbounded+0x6cb/0x920 [ 1810.635271][T24343] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 1810.641607][T24343] ? _raw_spin_unlock+0x4d/0x70 [ 1810.646300][T24343] ? wp_page_reuse+0xff/0x120 [ 1810.650810][T24343] ondemand_readahead+0x9c8/0xfa0 [ 1810.655664][T24343] ? page_cache_sync_ra+0x4d0/0x4d0 [ 1810.656323][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 1810.660692][T24343] ? debug_smp_processor_id+0x17/0x20 [ 1810.660718][T24343] ? kasan_quarantine_put+0x34/0x1a0 [ 1810.660740][T24343] ? selinux_inode_getattr+0x11f/0x3f0 [ 1810.660764][T24343] ? fault_around_bytes_set+0xc0/0xc0 [ 1810.687688][T24343] page_cache_sync_ra+0x2e9/0x4d0 [ 1810.692547][T24343] ? force_page_cache_ra+0x420/0x420 [ 1810.697688][T24343] ? do_handle_mm_fault+0x1807/0x2400 [ 1810.702875][T24343] f2fs_readdir+0x52d/0xba0 [ 1810.707218][T24343] ? f2fs_fill_dentries+0xd60/0xd60 [ 1810.712276][T24343] ? avc_policy_seqno+0x1b/0x70 [ 1810.716937][T24343] ? __kasan_check_read+0x11/0x20 [ 1810.721805][T24343] ? security_file_permission+0x86/0xb0 [ 1810.727277][T24343] iterate_dir+0x265/0x600 [ 1810.731515][T24343] ? f2fs_fill_dentries+0xd60/0xd60 [ 1810.736548][T24343] __se_sys_getdents64+0x1c1/0x460 [ 1810.741497][T24343] ? __x64_sys_getdents64+0x90/0x90 [ 1810.746530][T24343] ? filldir+0x680/0x680 [ 1810.750701][T24343] __x64_sys_getdents64+0x7b/0x90 [ 1810.755558][T24343] x64_sys_call+0x5ae/0x9a0 [ 1810.759897][T24343] do_syscall_64+0x3b/0xb0 [ 1810.764149][T24343] ? clear_bhb_loop+0x35/0x90 [ 1810.768660][T24343] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1810.774390][T24343] RIP: 0033:0x7fb441ad5193 [ 1810.778649][T24343] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 42 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 1810.798089][T24343] RSP: 002b:00007ffd564dc1f8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 1810.806330][T24343] RAX: ffffffffffffffda RBX: 000055558dfc64e0 RCX: 00007fb441ad5193 [ 1810.814143][T24343] RDX: 0000000000008000 RSI: 000055558dfc64e0 RDI: 0000000000000005 [ 1810.821951][T24343] RBP: 000055558dfc64b4 R08: 0000000000000000 R09: 0000000000000000 [ 1810.829769][T24343] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 1810.837691][T24343] R13: 0000000000000010 R14: 000055558dfc64b0 R15: 00007ffd564de4a0 [ 1810.845499][T24343] [ 1810.851620][T24343] attempt to access beyond end of device [ 1810.851620][T24343] loop4: rw=0, want=45072, limit=40427 [ 1810.883475][T25992] attempt to access beyond end of device [ 1810.883475][T25992] loop4: rw=2049, want=40992, limit=40427 [ 1810.930566][ T482] usb 1-1: device descriptor read/64, error -71 [ 1810.951382][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1810.960860][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1810.970351][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1810.978957][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1810.987324][T15599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.994191][T15599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1811.001499][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1811.030193][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1811.040794][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1811.048820][T15599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.055703][T15599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1811.086038][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1811.094866][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1811.102989][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1811.111367][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1811.136788][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1811.145483][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1811.169646][T26671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.176514][T26671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.183896][T26671] device bridge_slave_0 entered promiscuous mode [ 1811.194271][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1811.202054][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1811.210554][T26671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.217392][T26671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.224866][T26671] device bridge_slave_1 entered promiscuous mode [ 1811.232682][T26636] device veth0_vlan entered promiscuous mode [ 1811.239271][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1811.246563][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1811.299330][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1811.321614][T26636] device veth1_macvtap entered promiscuous mode [ 1811.352577][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1811.360575][ T482] usb 1-1: device descriptor read/64, error -71 [ 1811.360917][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1811.385613][T26676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.392698][T26676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.399905][T26676] device bridge_slave_0 entered promiscuous mode [ 1811.410069][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1811.418517][T15599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1811.427029][T26676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.434098][T26676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.441578][T26676] device bridge_slave_1 entered promiscuous mode [ 1811.494623][ T10] device bridge_slave_1 left promiscuous mode [ 1811.501604][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.509025][ T10] device bridge_slave_0 left promiscuous mode [ 1811.515625][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.523612][ T10] device veth1_macvtap left promiscuous mode [ 1811.616776][T26682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6478'. [ 1811.640486][ T482] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1811.674838][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1811.685316][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1811.694242][T25992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.701116][T25992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1811.720089][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1811.728269][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1811.736275][T25992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.743125][T25992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1811.767459][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1811.787870][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1811.817439][T26688] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.6497' sets config #0 [ 1811.908425][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1811.917411][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1811.920575][ T482] usb 1-1: device descriptor read/64, error -71 [ 1811.979902][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1811.989430][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1812.001114][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1812.009302][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1812.022119][T26671] device veth0_vlan entered promiscuous mode [ 1812.086168][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1812.095020][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1812.107716][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1812.115916][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1812.148743][T26671] device veth1_macvtap entered promiscuous mode [ 1812.159798][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1812.168803][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1812.178174][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1812.186823][T25992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1812.193701][T25992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1812.203614][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1812.241709][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1812.250835][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1812.259311][T25992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1812.266276][T25992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1812.301694][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1812.311820][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1812.341047][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1812.349779][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1812.357719][ T482] usb 1-1: device descriptor read/64, error -71 [ 1812.361213][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1812.372524][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1812.398786][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1812.408515][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1812.471695][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1812.486633][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1812.500313][T26676] device veth0_vlan entered promiscuous mode [ 1812.506710][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1812.515270][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1812.530769][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1812.538145][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1812.545752][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1812.554387][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1812.566016][T26676] device veth1_macvtap entered promiscuous mode [ 1812.587165][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1812.605044][T26691] loop2: detected capacity change from 0 to 512 [ 1812.612312][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1812.615660][ T482] usb usb1-port1: attempt power cycle [ 1812.634597][T25992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1812.650130][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1812.658262][ T1383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1812.670651][T26424] Bluetooth: hci0: command 0x1003 tx timeout [ 1812.676570][ T382] Bluetooth: hci0: sending frame failed (-49) [ 1812.686872][T26691] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1812.699770][T26691] EXT4-fs (loop2): 1 truncate cleaned up [ 1812.705920][T26691] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 1812.731592][ T10] device bridge_slave_1 left promiscuous mode [ 1812.737695][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 1812.745440][ T10] device bridge_slave_0 left promiscuous mode [ 1812.872749][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 1812.936938][ T10] device veth1_macvtap left promiscuous mode [ 1812.943977][ T10] device veth0_vlan left promiscuous mode [ 1813.090577][T26176] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1813.500647][T26176] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1813.522952][T26176] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1813.598786][T26699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6496'. [ 1813.601416][T26176] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1813.691846][T26176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.714140][T26176] usb 4-1: config 0 descriptor?? [ 1813.722998][T26709] loop4: detected capacity change from 0 to 512 [ 1813.750621][T26693] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1813.773040][T26176] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1813.786999][T26709] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1813.814198][T26709] EXT4-fs (loop4): 1 truncate cleaned up [ 1813.819739][T26709] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1814.144597][T26713] hub 6-0:1.0: USB hub found [ 1814.149214][T26713] hub 6-0:1.0: 1 port detected [ 1814.519959][T26723] tipc: Enabling of bearer rejected, failed to enable media [ 1814.753047][ T482] Bluetooth: hci0: command 0x1001 tx timeout [ 1814.761150][ T382] Bluetooth: hci0: sending frame failed (-49) [ 1815.653891][ T30] audit: type=1400 audit(2000000439.710:8653): avc: denied { read } for pid=26741 comm="syz.4.6508" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1815.686883][ T30] audit: type=1400 audit(2000000439.710:8654): avc: denied { open } for pid=26741 comm="syz.4.6508" path="/3/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1815.750518][T16728] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1815.774569][ T482] usb 4-1: USB disconnect, device number 39 [ 1816.360477][T16728] usb 1-1: Using ep0 maxpacket: 32 [ 1816.490559][T16728] usb 1-1: config 0 has an invalid interface number: 231 but max is 0 [ 1816.498615][T16728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1816.508522][T16728] usb 1-1: config 0 has no interface number 0 [ 1816.514633][T16728] usb 1-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1816.559537][T26176] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1817.010527][T26424] Bluetooth: hci0: command 0x1009 tx timeout [ 1817.080673][T26775] loop3: detected capacity change from 0 to 512 [ 1817.162898][T26775] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 1817.178970][T26775] ext4 filesystem being mounted at /5/bus supports timestamps until 2038 (0x7fffffff) [ 1817.247242][T16728] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1817.256291][T16728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.264223][T16728] usb 1-1: Product: syz [ 1817.268179][T16728] usb 1-1: Manufacturer: syz [ 1817.272627][T16728] usb 1-1: SerialNumber: syz [ 1817.277819][T16728] usb 1-1: config 0 descriptor?? [ 1817.321229][T16728] plusb: probe of 1-1:0.231 failed with error -22 [ 1817.535360][ T465] usb 1-1: USB disconnect, device number 99 [ 1817.693738][T26176] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1817.703863][T26176] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1817.718027][T26176] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1817.944650][T26176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.953498][T26176] usb 5-1: config 0 descriptor?? [ 1817.991065][T26176] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1818.121724][ T30] audit: type=1400 audit(2000000442.220:8655): avc: denied { accept } for pid=26794 comm="syz.0.6525" path="socket:[132738]" dev="sockfs" ino=132738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1818.831291][T26802] loop3: detected capacity change from 0 to 40427 [ 1818.923437][T26802] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 1819.743810][T26821] hub 6-0:1.0: USB hub found [ 1819.748830][T26821] hub 6-0:1.0: 1 port detected [ 1819.942459][T26552] usb 5-1: USB disconnect, device number 11 [ 1819.948307][T26826] loop3: detected capacity change from 0 to 512 [ 1819.997310][T26826] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1820.008718][T26826] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 1820.260589][ T465] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1820.346754][ T30] audit: type=1400 audit(2000000444.440:8656): avc: denied { setopt } for pid=26842 comm="syz.3.6539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1820.427685][ T30] audit: type=1400 audit(2000000444.460:8657): avc: denied { write } for pid=26842 comm="syz.3.6539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1820.578524][ T465] usb 3-1: Using ep0 maxpacket: 32 [ 1820.711551][T26856] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6544'. [ 1821.089683][ T30] audit: type=1400 audit(2000000445.180:8658): avc: denied { connect } for pid=26849 comm="syz.3.6543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1821.240631][ T465] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 1821.249031][ T465] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.259229][ T465] usb 3-1: config 0 has no interface number 0 [ 1821.266050][ T465] usb 3-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1821.460556][ T465] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 1821.490646][ T465] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.500693][ T465] usb 3-1: Product: syz [ 1821.504679][ T465] usb 3-1: Manufacturer: syz [ 1821.509106][ T465] usb 3-1: SerialNumber: syz [ 1821.535239][ T30] audit: type=1400 audit(2000000445.630:8659): avc: denied { create } for pid=26866 comm="syz.4.6549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1821.638602][ T465] usb 3-1: config 0 descriptor?? [ 1821.737730][T26863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1821.744776][T26863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.752355][T26863] device bridge_slave_0 entered promiscuous mode [ 1821.759503][T26863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1821.766418][T26863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.774371][T26863] device bridge_slave_1 entered promiscuous mode [ 1821.936714][ T465] plusb: probe of 3-1:0.231 failed with error -22 [ 1822.192270][ T482] usb 3-1: USB disconnect, device number 115 [ 1822.222048][T26863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.228947][T26863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1822.236103][T26863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.242992][T26863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1822.309817][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1822.318498][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1822.320483][ T465] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1822.333044][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.344787][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1822.353337][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.360635][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1822.369495][ T1383] device bridge_slave_1 left promiscuous mode [ 1822.375630][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.383486][ T1383] device bridge_slave_0 left promiscuous mode [ 1822.389492][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1822.398313][ T1383] device veth1_macvtap left promiscuous mode [ 1822.404483][ T1383] device veth0_vlan left promiscuous mode [ 1822.590692][ T465] usb 4-1: Using ep0 maxpacket: 32 [ 1822.684378][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1822.692749][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1822.701756][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.708594][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1822.749137][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1822.995241][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1823.011039][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1823.019345][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1823.047752][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1823.059785][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1823.077738][T26863] device veth0_vlan entered promiscuous mode [ 1823.090543][ T465] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1823.100512][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1823.108542][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1823.123969][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1823.131871][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1823.139201][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1823.147749][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1823.156527][T26863] device veth1_macvtap entered promiscuous mode [ 1823.167699][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1823.175774][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1823.187952][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1823.204874][ T465] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.216026][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1823.219515][ T465] usb 4-1: Product: syz [ 1823.233516][ T465] usb 4-1: Manufacturer: syz [ 1823.233708][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1823.238021][ T465] usb 4-1: SerialNumber: syz [ 1823.251820][ T465] usb 4-1: config 0 descriptor?? [ 1823.253967][T26904] EXT4-fs (sda1): shut down requested (2) [ 1823.262200][T26904] Aborting journal on device sda1-8. [ 1823.331448][T26905] loop4: detected capacity change from 0 to 128 [ 1823.568938][T16728] usb 4-1: USB disconnect, device number 40 SYZFAIL: posix_spawn failed (errno 5: Input/output error) [ 1824.074422][ T30] audit: type=1400 audit(2000000448.170:8660): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[483]" dev="pipefs" ino=483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1824.751391][ T1383] device bridge_slave_1 left promiscuous mode [ 1824.757336][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.765596][ T1383] device bridge_slave_0 left promiscuous mode [ 1824.771679][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.779446][ T1383] device veth1_macvtap left promiscuous mode [ 1824.785338][ T1383] device veth0_vlan left promiscuous mode [ 1826.271757][ T1383] device bridge_slave_1 left promiscuous mode [ 1826.277998][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1826.285434][ T1383] device bridge_slave_0 left promiscuous mode [ 1826.291515][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1826.299292][ T1383] device bridge_slave_1 left promiscuous mode [ 1826.305566][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1826.312909][ T1383] device bridge_slave_0 left promiscuous mode [ 1826.318844][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1826.326784][ T1383] device bridge_slave_1 left promiscuous mode [ 1826.332788][ T1383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1826.340032][ T1383] device bridge_slave_0 left promiscuous mode [ 1826.346509][ T1383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1826.354900][ T1383] device veth1_macvtap left promiscuous mode [ 1826.360757][ T1383] device veth0_vlan left promiscuous mode [ 1826.366398][ T1383] device veth1_macvtap left promiscuous mode [ 1826.372255][ T1383] device veth0_vlan left promiscuous mode [ 1826.377887][ T1383] device veth1_macvtap left promiscuous mode [ 1826.383735][ T1383] device veth0_vlan left promiscuous mode