last executing test programs: 6.755887005s ago: executing program 2 (id=44): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="985e245b61932bc097c25bd9bdfa379b67a3306b5f1049b43aa55c9044ea5b2f26f0aac770e2fa0c88815f2ce331d2fd4242866533dce0bb049de17a8bd0289b6211239f5f", 0x45}], 0x1}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000002280)="aeb7", 0x2}], 0x1}}], 0x2, 0x4c0c0) sendmmsg(r1, &(0x7f0000002080), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 6.711830414s ago: executing program 2 (id=47): r0 = socket(0x1, 0x5, 0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001300)={0x1, &(0x7f0000001340)=[{0x6, 0xff, 0x5, 0x7fc00002}]}) socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0xc0002016}) 5.83368091s ago: executing program 2 (id=69): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000012c0)={0x1, &(0x7f0000001300)=[{0x6, 0x7, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_lsm={0x1e, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000015c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001800)=[{&(0x7f0000001840)="580000001200add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710a8064720ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 5.806177135s ago: executing program 2 (id=71): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000800, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], 0x2, 0x552f, &(0x7f0000005bc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/file2\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file2\x00', 0x2081, 0x8) 5.405755492s ago: executing program 2 (id=74): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{0x5000, 0x100000, 0xb, 0xad, 0x3, 0x4, 0x7d, 0x7, 0x0, 0x2b, 0x9}, {0xa000, 0xe000, 0xf, 0x2c, 0x8, 0x0, 0x7f, 0x1, 0x4, 0xf0, 0x9, 0x80}, {0x2, 0x5000, 0x8, 0x5, 0x1, 0x22, 0x0, 0xa, 0x0, 0x5, 0xb, 0x7}, {0xdddd0000, 0xffff1000, 0x0, 0xe7, 0x4, 0x2, 0x1, 0x3c, 0x8, 0x8b, 0xd, 0xed}, {0x4, 0x8080000, 0xd, 0x3, 0x5, 0x86, 0xc, 0x7f, 0xa, 0x0, 0xf2, 0x44}, {0x30000, 0x6000, 0xb, 0x7c, 0x2, 0x24, 0x7f, 0xaf, 0x80, 0xc, 0x8, 0x3d}, {0xd000, 0x100002, 0x3, 0x3, 0x8, 0x5, 0x1, 0x3, 0x5, 0x82, 0x3}, {0x5000, 0x3000, 0x3, 0x10, 0x9, 0xf, 0x3, 0x37, 0x0, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0xd000, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x2104, 0x2, 0x0, 0x80a0000, [0x4, 0x7, 0x7, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.242704782s ago: executing program 2 (id=78): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e24, @remote}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x5, 0x0, 0x3}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0xfffd, @empty}, {0x2, 0x4000, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 5.218552568s ago: executing program 32 (id=78): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e24, @remote}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f00000001c0)='lo\x00', 0x5, 0x0, 0x3}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0xfffd, @empty}, {0x2, 0x4000, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) 3.606863324s ago: executing program 1 (id=111): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x56202325, @empty, 0x4000005}, 0x1c) r1 = dup(r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) 2.972366184s ago: executing program 5 (id=119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000140)="2e1221b23bb601c476d3df163e75963d86dd606712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000280)="89cca9ad7f624c060000850875090000000008", 0x62}, {&(0x7f0000000400)='\x00', 0x1}], 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) 2.954663558s ago: executing program 1 (id=120): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)=0x401, 0x4) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x162, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x81, 0x6, 0x9) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) fspick(0xffffffffffffffff, &(0x7f0000000700)='.\x00', 0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xb, 0xb0, 0xf, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x9e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x4, 0xa, 0xc, {0xa, 0x25, 0x25, 0x1ff, 0x50, 0x200}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x1, 0x0, 0x1, {0xa, 0x25, 0x25, 0x2, 0x3, 0x1}}}}}}}}]}}, 0x0) 2.618784112s ago: executing program 5 (id=125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x22, 0xb, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x1, 0x1, 0x0, "e5"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000200)=@x86={0xfa, 0x5, 0x6, 0x0, 0xc5, 0x5, 0x1, 0x7f, 0x7, 0x17, 0x0, 0x8, 0x0, 0x4, 0x65c, 0x1, 0xc, 0x8, 0x7, '\x00', 0x8, 0x5}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) 2.508336353s ago: executing program 0 (id=128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000700)={0x0, &(0x7f0000000740)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x32, {0x0, "488b042500304000488904250030400066ba420066b81d0066ef"}}, @nested_vmlaunch={0x12f, 0x18}], 0x7a}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000007c0)={0xb, 0x1, 0x400000, 0x100000, &(0x7f0000c68000/0x100000)=nil}) 2.446266585s ago: executing program 0 (id=129): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1572c0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0xfd, 0x4, 0x7fff7ffc}]}) chroot(&(0x7f0000000580)='./file0/../file0\x00') 2.435669616s ago: executing program 0 (id=130): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000e80)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000ec0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000f00)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2, 0x0, 0xe7}}}}}}, 0x0) 2.41527309s ago: executing program 0 (id=131): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000005800)='./file0\x00', 0x2048c4, &(0x7f0000000140)={[{@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@utf8}, {@fat=@usefree}, {@utf8no}, {@rodir}, {@numtail}, {@uni_xlate}, {@shortname_win95}, {@fat=@showexec}, {@rodir}, {@fat=@flush}]}, 0x0, 0x2c7, &(0x7f0000005900)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000005c00)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000005c80)='./file0\x00', &(0x7f0000005cc0)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000005d00)='./file0\x00', &(0x7f0000007d40)='./file0\x00', 0x0, 0x93085, 0x0) mount$bind(&(0x7f0000007d80)='.\x00', &(0x7f0000007dc0)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000007e00)={0x2020}, 0x2020) 2.393126215s ago: executing program 0 (id=132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000880)=[@text16={0x10, &(0x7f00000008c0)="b813018ed0f20f59db0f01d10f79674dbaf80c66b8c2adcf8766efbafc0cb80300ef2e0f32670f070f22240fc71b660f38816701", 0x34}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.239127604s ago: executing program 0 (id=133): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r0, &(0x7f0000000300)='cpu.stat\x00', 0xf000, 0x0) 2.238937944s ago: executing program 33 (id=133): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r0, &(0x7f0000000300)='cpu.stat\x00', 0xf000, 0x0) 2.162493089s ago: executing program 3 (id=135): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x54, 0x0, &(0x7f00000003c0)=[@increfs, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}]}) dup3(r1, r0, 0x80000) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000300)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000280)=[@decrefs={0x400c630e}], 0xfc}) 2.043374531s ago: executing program 5 (id=137): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) 1.617284472s ago: executing program 6 (id=139): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f00000001c0)='./proc\x00', 0x10, &(0x7f0000000400)=ANY=[], 0x1, 0x150f, &(0x7f0000006280)="$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") truncate(&(0x7f0000001cc0)='./file1\x00', 0x800) r0 = creat(&(0x7f0000001d00)='./proc\x00', 0x18e) r1 = open(&(0x7f0000001d40)='./file1\x00', 0x86442, 0x10) dup3(r1, r0, 0x0) io_setup(0x91, &(0x7f0000001d80)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000001dc0)=[&(0x7f0000001e00)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000001e40), 0x200a00}]) 1.427012479s ago: executing program 6 (id=145): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000013c0), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001400), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001780)={0x4000200d}) 1.336215505s ago: executing program 6 (id=149): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008c000000b70000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="0000e5ffffffffffffff00000000", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.149043881s ago: executing program 5 (id=152): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRES64], 0x43, 0x5542, &(0x7f0000007240)="$eJzs3M2LG2UYAPBndrv9ti7iwVsHirALTWi2H+itaosf2FKqHjxpNklD2iSzbNLsuiB48Cge/E9EwZNH/wYPnr2JB8WbUMnMRLtqQdl8tN3fD5Jn3jdvnnnesASemSUBHFqr6W+/JHEmTkTEckScjhgfP0giIpksulqEFyLibEQsPfRIyvk/J45GxMmIODNOXuRMype+OD86d/nnt3799vtjR059+c0Pi9s1sGgvRkRvqzje6RUxaxfxbjlfH3Xy2Ls0KmPxQu9eOc6KuNPazDPs1Cfr6nm82C7WZ1v3B+N4p1tvjGO7cyef3+oXJxyM2pM8+Rvu1rfzcbO1mcfOIMtje6+oa3ev+G7bGwyLPM0y30d5+hgOJ7GYb+22iv1s3ctjoz8s54u8WbO1O46jMk6+extZt5nXsXmAD/ox93anf383HbW2B52sn16u1l6q1q5UattZszVsXarUe80rl9K1dne8rDJs1XtX21nW7raqjay3nq61G41KrZauXWttdur9tFarXqxeqFxeL4/Op6/ffC/tNtO1cXy1078/7HQH6Z1sOy3esZ5uVC++vJ6eq6Xv3LiV3rp9/fqNW+9+cO39m6/cePO1ctE/ykrXNi5sbFRqFyobtfVDtP9Py6KnuH84kGTRBQA8eR7R/4f+H5il2fX/27cjZt//xwz7//J0+v/Hrf897P3/DPYPB/J/+/+PZ1QHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABz9+PKV2/kB6vF+FQ5/0w59Vw5TiJiKSIe/IvlOLov53KZZ+UR61f+VsN3SeQZxuc4Vj5ORsTV8vH7s7P+FAAAAODp9fUnZz8vuvXiaXXRBTFPxUWbpdMfTilfEhErqz9NKdvS+On5KSXL/76PxO6UsuUXsI5PKVlxye3ItLL9J8v7wvGHQlKEpbmWAwAAzMX+TmC+XQgAAADz9NmiC2AxkpjcypzcC87/8/6vG4In9o0AAACAJ1Cy6AIAAACAmcv7f7//BwAAAE+34vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiDnbvJWRqI4wD8b6F8+BGJce9V3MEpjEdw6dJwAC/BynW9ghfgDBg3HsFQQ6cQNIImTIu+eZ6k73T6lh8zBBJmJgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJ++VPXq0/uXH27N2TfNJCKaP5hfuidPbwAAAIDf2VX1qj1ZpPrj7vrT7tLzrl5ERHlh8D6KyVni7JRTXbi/+qUNnyPahMNzTLvjUUS86o7vz/p+FQAAAODh2q43y4jR4bT9s7h3gxhSmrQpn7zJlFdERLX4limtPOS9yBTWvr/H8S5TWjuBNcsUlqbcxrnS/kr7cT/N2s3OiiIV5fXHZ+s7AAAwoDQSOH7fH3YUAgAAwJDe3rsB9OT19X8XcVzKPC0FTlPRLe/Nf6oBAAAA/6Hi3g0AAAAAeteO/3dV/fFr5Nz/L/2mwP5/AAAA8G9I+/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQp11Vr7brzfLWnH1zmzy9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjB/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79+8bNxUHAPzZPl9JARECyhAGkBhgoem1tHQDBlDEwJ+AFKXXEnrlR5uBVhUoCxtk7oLKiBASKGydWTu3UpewdchQJOag5x+JQy/igNY+ms9Heve+tnx+3+ermnz9fAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGrbb+/FWXyZLeO02nf7/rWV2N/5Sx/d3Li7EFuMkzaT/n+YaW4k890lAgAAwOGQVLV9Vm1v5ZtLsU9ni/o/r4+LNf+Np/feE8bU/XVf1/6x/fLzved3B5stx4knPbc6Gh5/MJ3eo5vpdHvmb4/oFVe+uPeSFR9I+t76c9t5cT2Tr2/deqdfhEfayBYAONDOwT+Mj5Xd1o0qqH8fiv2gpfQAONx6jcK7rv+z2W5zAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjD9np4so6TEMJCby+O7ty/tjKuv7lxd6Fup69f32ieM54iDyGcWx0Nj7c4l2l3+crVC8uj0fBS+8GLIYSuRn+zmv6FDyY4OIROro/gIQVp9WFPSz5l8Ou/f/tO/a/3EWX4Vghh1NF/SAAAPLbyqsW6fivfXIr7krkQdr7bX/+/0ojDhPX/vQ9P3y4O/ibdN16s/wftTXHqLa5d/HTx8pWrr61eXD4/PD/8+PUTgzcGJ8+cOnVmsbhXsuiOCQAAAP9Nv2rN+j+de3D9/2gjDhPW/599O/iiOVam/h9rb9Gv60wAAAAOt2df+uP3ZMz+pN8Pny+vrV0alK+72yfK1w5S/ceOVK1Z/2dzXWcFAAAAtGF7Pdm3/n+2EYcJ1/+f+v6FH5vnzEIIM9X6/7GVT0Zn25vOVHuYXx7+8oDvyXc9RwAAALo1U7Xm+n9ePP+f7j7ykIYQXn25jKs/AzhR/Z+9+9UPzbGaz/+fbG+KUymdL69H0c+H0JvvOiMAAAAeZ09ULRb7v+WbSx/9dPT9vuf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANr2ZwAAAP//Gg03mw==") mkdir(&(0x7f0000000100)='./bus\x00', 0x63) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 1.145073042s ago: executing program 3 (id=153): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000018c0)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001900)={0x10000014}) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000001940)={r1, r0, 0x800}) 1.133727474s ago: executing program 1 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000880)='./proc\x00', &(0x7f00000008c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/net/netfilter/nfnetlink_log\x00', 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) read(r0, &(0x7f0000000e80), 0x1000) 1.094211802s ago: executing program 1 (id=155): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0xff, 0x5, 0x7fc00007}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) poll(&(0x7f0000000140)=[{r0, 0xc4aa}], 0x1, 0x8002) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) 1.081779994s ago: executing program 3 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x149000, 0x19a) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x8001, 0x7ffb, 0xb, 0x3}) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x10, 0x10000) 854.578857ms ago: executing program 3 (id=159): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) unshare(0x22020600) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x8e) r2 = openat$cgroup_ro(r1, &(0x7f0000000400)='cpu.stat\x00', 0x5000000, 0x0) pread64(r2, &(0x7f00000006c0)=""/226, 0xe2, 0x88) 806.158206ms ago: executing program 4 (id=161): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7a00, 0x0, 0x3) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, r2, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x3f8) 805.763096ms ago: executing program 3 (id=162): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000a40)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./proc/thread-self/fail-nth\x00', 0x2, 0x1) write(r0, &(0x7f0000000ac0)='27', 0x2) socket$inet6(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000b40)={@empty}, 0x14) 670.472212ms ago: executing program 5 (id=163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="b805000000090200e149b9320a00000f32320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa60040c0c0f320f3566b85700", 0x5a}], 0x1, 0x17, 0x0, 0x0) chroot(&(0x7f0000000300)='.\x00') syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 301.834162ms ago: executing program 6 (id=164): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x1, 0x0, 0x2}}, 0x2e) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) 296.459943ms ago: executing program 4 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x20000002}) r2 = epoll_create1(0x0) epoll_pwait(r1, 0x0, 0x0, 0x101, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000400)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000440)={0x28000006}) 281.964206ms ago: executing program 3 (id=166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa380, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0xfee00000, 0x2000, &(0x7f0000000000/0x2000)=nil}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 275.064347ms ago: executing program 6 (id=167): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x4}, {0x6, 0x8}, {0xffe0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x3, @loopback, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 261.45215ms ago: executing program 4 (id=168): syz_mount_image$fuse(0x0, 0x0, 0x1000000, 0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140)=ANY=[], 0x8) 218.506758ms ago: executing program 4 (id=169): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='my_sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x100) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r1, 0x0) preadv2(r0, &(0x7f0000002600)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0xa, 0xfffff53a, 0x0) 152.074491ms ago: executing program 1 (id=170): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) 98.217201ms ago: executing program 5 (id=171): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/hci\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/120, 0x78}], 0x1, 0x8, 0x1) 98.032071ms ago: executing program 34 (id=171): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setns(0xc9, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/hci\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/120, 0x78}], 0x1, 0x8, 0x1) 97.737121ms ago: executing program 4 (id=173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000000c0)={0xc0000, 0x0, {[0x0, 0xfffffffffffeffff, 0xfffffffffffffff9, 0xd4, 0x3, 0x5, 0x3, 0x7]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 30.511094ms ago: executing program 1 (id=174): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000200)=[@increfs]}) r2 = dup3(r1, r0, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x6164}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000280)=[@request_death]}) 363.86µs ago: executing program 4 (id=175): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000001240)='E', 0x1, 0x4fed3) r1 = open(&(0x7f0000001280)='./file1\x00', 0x14d142, 0x82) ftruncate(r1, 0x2007ffa) read$FUSE(r0, &(0x7f0000002e00)={0x2020}, 0x2021) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000004e40)={0x17c04, 0xffffffffffffffff, 0x4f001, 0x100000004, 0x6}) 0s ago: executing program 6 (id=176): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @loopback}, 0x2, 0x0, 0x0, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 18.961552][ T24] audit: type=1400 audit(1792731893.020:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.962612][ T271] cgroup: Unknown subsys name 'net' [ 18.965006][ T24] audit: type=1400 audit(1792731893.020:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.968775][ T24] audit: type=1400 audit(1792731893.030:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.968930][ T271] cgroup: Unknown subsys name 'devices' [ 19.063740][ T271] cgroup: Unknown subsys name 'hugetlb' [ 19.069326][ T271] cgroup: Unknown subsys name 'rlimit' [ 19.205544][ T24] audit: type=1400 audit(1792731893.270:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.228737][ T24] audit: type=1400 audit(1792731893.270:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 19.233991][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 19.253639][ T24] audit: type=1400 audit(1792731893.270:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.285091][ T24] audit: type=1400 audit(1792731893.320:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.310597][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.310664][ T24] audit: type=1400 audit(1792731893.320:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.344917][ T24] audit: type=1400 audit(1792731893.350:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.370406][ T24] audit: type=1400 audit(1792731893.350:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.974287][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.981335][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.988707][ T279] device bridge_slave_0 entered promiscuous mode [ 19.995586][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.002913][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.010272][ T279] device bridge_slave_1 entered promiscuous mode [ 20.060181][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.067280][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.074732][ T282] device bridge_slave_0 entered promiscuous mode [ 20.082611][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.089638][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.097028][ T282] device bridge_slave_1 entered promiscuous mode [ 20.193570][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.200605][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.207955][ T280] device bridge_slave_0 entered promiscuous mode [ 20.217487][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.224563][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.231818][ T280] device bridge_slave_1 entered promiscuous mode [ 20.255755][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.262795][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.270098][ T283] device bridge_slave_0 entered promiscuous mode [ 20.279196][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.286259][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.293589][ T283] device bridge_slave_1 entered promiscuous mode [ 20.311502][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.318554][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.325900][ T284] device bridge_slave_0 entered promiscuous mode [ 20.334813][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.341831][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.349343][ T284] device bridge_slave_1 entered promiscuous mode [ 20.408684][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.415743][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.423012][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.430052][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.479100][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.486154][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.493395][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.500404][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.517010][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.524064][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.531292][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.538337][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.546855][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.553926][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.561168][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.568216][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.597763][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.605438][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.612958][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.620074][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.627579][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.634871][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.642081][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.649292][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.656855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 20.664388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.685380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.692960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.700419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.708635][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.715656][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.723303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.731404][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.738455][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.746111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.754297][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.761301][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.768720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.776879][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.783916][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.791227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.799475][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.806504][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.820958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 20.844948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 20.853355][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.860375][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.868240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.876631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.884714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.892723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.900558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.923083][ T280] device veth0_vlan entered promiscuous mode [ 20.931241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.940062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.948244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.956199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.963889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 20.971963][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.979011][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.986474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.994490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.002630][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.009631][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.016960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.024845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.033246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 21.049982][ T284] device veth0_vlan entered promiscuous mode [ 21.061878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.069551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.077190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.085617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.094295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 21.102678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.110770][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.117799][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.125266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 21.133559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.141616][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.148649][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.155968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.164038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.173522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.180967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.191720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.200261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.215519][ T279] device veth0_vlan entered promiscuous mode [ 21.223144][ T280] device veth1_macvtap entered promiscuous mode [ 21.230590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.239118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.247670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.255978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.264076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.271565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.279816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.287832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.295860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.303912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.311870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.320879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.328477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.338605][ T284] device veth1_macvtap entered promiscuous mode [ 21.353991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.362112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.370293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.379218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.387100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.395186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.403524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.411780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.420145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.428498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.436785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.445289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.452841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.460847][ T282] device veth0_vlan entered promiscuous mode [ 21.468103][ T279] device veth1_macvtap entered promiscuous mode [ 21.483046][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.490677][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.498966][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.507477][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.516385][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.531972][ T280] request_module fs-gadgetfs succeeded, but still no fs? [ 21.532632][ T283] device veth0_vlan entered promiscuous mode [ 21.551074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.559539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.567949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 21.576024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.584337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.591787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.600799][ T280] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 21.616604][ T282] device veth1_macvtap entered promiscuous mode [ 21.637906][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.646456][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.655540][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.663279][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.671399][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.679817][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.688152][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.696532][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.704919][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.713513][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.721737][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.745591][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 21.756956][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.765160][ T309] fuse: root generation should be zero [ 21.777164][ T283] device veth1_macvtap entered promiscuous mode [ 21.791576][ T314] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 21.806063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 21.814108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 21.822399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.830828][ T314] EXT4-fs (loop1): invalid journal inode [ 21.848598][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 21.856979][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.928738][ T326] ====================================================== [ 21.928738][ T326] WARNING: the mand mount option is being deprecated and [ 21.928738][ T326] will be removed in v5.15! [ 21.928738][ T326] ====================================================== [ 21.956088][ T326] exfat: Deprecated parameter 'utf8' [ 21.961455][ T326] exfat: Deprecated parameter 'namecase' [ 21.967352][ T326] exfat: Deprecated parameter 'utf8' [ 21.979763][ T324] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 22.004636][ T324] EXT4-fs (loop2): 1 orphan inode deleted [ 22.010465][ T324] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,,errors=continue [ 22.020592][ T324] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 22.026455][ T326] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 22.082634][ T342] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 22.102706][ T339] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 22.144578][ T339] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nobarrier,norecovery,errors=remount-ro,grpid, [ 22.203941][ T339] EXT4-fs (loop1): Online resizing not supported with sparse_super2 [ 22.619424][ T367] FAULT_INJECTION: forcing a failure. [ 22.619424][ T367] name failslab, interval 1, probability 0, space 0, times 1 [ 22.640262][ T367] CPU: 1 PID: 367 Comm: syz.3.23 Not tainted syzkaller #0 [ 22.647390][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 22.657444][ T367] Call Trace: [ 22.660747][ T367] __dump_stack+0x21/0x24 [ 22.665078][ T367] dump_stack_lvl+0x1a7/0x208 [ 22.669765][ T367] ? thaw_kernel_threads+0x220/0x220 [ 22.675049][ T367] ? show_regs_print_info+0x18/0x18 [ 22.680250][ T367] dump_stack+0x15/0x1c [ 22.684408][ T367] should_fail+0x3ab/0x500 [ 22.688823][ T367] ? audit_log_d_path+0xa2/0x200 [ 22.693758][ T367] __should_failslab+0xa4/0xe0 [ 22.698516][ T367] should_failslab+0x9/0x20 [ 22.703020][ T367] kmem_cache_alloc_trace+0x3a/0x2e0 [ 22.708316][ T367] ? audit_log_n_string+0x217/0x5a0 [ 22.713510][ T367] audit_log_d_path+0xa2/0x200 [ 22.718266][ T367] ? audit_log_untrustedstring+0xe6/0x100 [ 22.723981][ T367] ? avc_audit_pre_callback+0x290/0x290 [ 22.729520][ T367] common_lsm_audit+0x8d2/0x1850 [ 22.734457][ T367] ? avc_alloc_node+0x83/0x340 [ 22.739215][ T367] ? avc_audit_pre_callback+0x290/0x290 [ 22.744757][ T367] ? ipv6_skb_to_auditdata+0xcd0/0xcd0 [ 22.750209][ T367] ? __kasan_check_write+0x14/0x20 [ 22.755318][ T367] ? __kasan_check_write+0x14/0x20 [ 22.760425][ T367] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 22.765882][ T367] ? _raw_spin_lock+0xf0/0xf0 [ 22.770561][ T367] slow_avc_audit+0x1c4/0x240 [ 22.775235][ T367] ? avc_get_hash_stats+0x180/0x180 [ 22.780428][ T367] ? avc_denied+0x133/0x1b0 [ 22.784931][ T367] avc_has_extended_perms+0x770/0xc90 [ 22.790302][ T367] ? avc_ss_reset+0x270/0x270 [ 22.794984][ T367] ? futex_wait+0x5bc/0x6f0 [ 22.799483][ T367] ? do_futex+0x1270/0x1270 [ 22.803984][ T367] ? ioctl_has_perm+0x1b8/0x4f0 [ 22.808876][ T367] ioctl_has_perm+0x3a6/0x4f0 [ 22.813565][ T367] ? has_cap_mac_admin+0x370/0x370 [ 22.818672][ T367] ? kernel_write+0x3c0/0x3c0 [ 22.823351][ T367] selinux_file_ioctl+0x3ad/0x4c0 [ 22.828372][ T367] ? mutex_trylock+0xb0/0xb0 [ 22.832957][ T367] ? __fget_files+0x2e1/0x340 [ 22.837629][ T367] ? selinux_file_alloc_security+0x120/0x120 [ 22.843598][ T367] ? __fget_files+0x2e1/0x340 [ 22.848265][ T367] security_file_ioctl+0x74/0xa0 [ 22.853189][ T367] __se_sys_ioctl+0x53/0x1a0 [ 22.857759][ T367] ? __kasan_check_read+0x11/0x20 [ 22.862759][ T367] __x64_sys_ioctl+0x7b/0x90 [ 22.867351][ T367] do_syscall_64+0x31/0x40 [ 22.871748][ T367] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 22.877615][ T367] RIP: 0033:0x7f350aadc559 [ 22.882018][ T367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 22.901694][ T367] RSP: 002b:00007f3509534028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 22.910096][ T367] RAX: ffffffffffffffda RBX: 00007f350ad62fa0 RCX: 00007f350aadc559 [ 22.918043][ T367] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 22.925991][ T367] RBP: 00007f350ab73b20 R08: 0000000000000000 R09: 0000000000000000 [ 22.933937][ T367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 22.941884][ T367] R13: 00007f350ad63038 R14: 00007f350ad62fa0 R15: 00007ffd035dc538 [ 23.012039][ T378] device veth1_to_bond entered promiscuous mode [ 23.023463][ T378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 23.044308][ T378] device veth1_to_bond left promiscuous mode [ 23.154136][ T389] ip_tables: iptables: counters copy to user failed while replacing table [ 23.302766][ T389] ip_tables: iptables: counters copy to user failed while replacing table [ 23.661343][ T405] xt_hashlimit: size too large, truncated to 1048576 [ 23.969051][ T418] FAULT_INJECTION: forcing a failure. [ 23.969051][ T418] name failslab, interval 1, probability 0, space 0, times 0 [ 24.019135][ T418] CPU: 0 PID: 418 Comm: syz.0.40 Not tainted syzkaller #0 [ 24.026270][ T418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 24.036324][ T418] Call Trace: [ 24.039616][ T418] __dump_stack+0x21/0x24 [ 24.043964][ T418] dump_stack_lvl+0x1a7/0x208 [ 24.048642][ T418] ? thaw_kernel_threads+0x220/0x220 [ 24.053924][ T418] ? show_regs_print_info+0x18/0x18 [ 24.059128][ T418] ? slab_post_alloc_hook+0x7d/0x2f0 [ 24.064417][ T418] dump_stack+0x15/0x1c [ 24.068579][ T418] should_fail+0x3ab/0x500 [ 24.073000][ T418] ? proc_alloc_inode+0x1d/0xb0 [ 24.077861][ T418] __should_failslab+0xa4/0xe0 [ 24.082626][ T418] should_failslab+0x9/0x20 [ 24.087130][ T418] kmem_cache_alloc+0x3d/0x2d0 [ 24.091894][ T418] ? proc_invalidate_siblings_dcache+0x3c0/0x3c0 [ 24.098223][ T418] proc_alloc_inode+0x1d/0xb0 [ 24.102906][ T418] ? proc_invalidate_siblings_dcache+0x3c0/0x3c0 [ 24.109243][ T418] new_inode_pseudo+0x62/0x210 [ 24.114042][ T418] new_inode+0x28/0x1e0 [ 24.118198][ T418] ? try_to_unlazy+0x39d/0x630 [ 24.122966][ T418] proc_get_inode+0x24/0x710 [ 24.127554][ T418] proc_lookup_de+0x24b/0x2f0 [ 24.132225][ T418] proc_lookup+0xc2/0xf0 [ 24.136462][ T418] proc_root_lookup+0x37/0x50 [ 24.141144][ T418] ? proc_fill_super+0x750/0x750 [ 24.146080][ T418] path_openat+0x145d/0x3040 [ 24.150670][ T418] ? do_filp_open+0x400/0x400 [ 24.155342][ T418] do_filp_open+0x1df/0x400 [ 24.159845][ T418] ? vfs_tmpfile+0x2c0/0x2c0 [ 24.164438][ T418] ? get_unused_fd_flags+0x92/0xa0 [ 24.169546][ T418] do_sys_openat2+0x19f/0x750 [ 24.174230][ T418] ? do_sys_open+0xe0/0xe0 [ 24.178648][ T418] ? __kasan_check_write+0x14/0x20 [ 24.183760][ T418] ? switch_fpu_return+0x19c/0x330 [ 24.188875][ T418] ? fpu__clear_all+0x20/0x20 [ 24.193551][ T418] __x64_sys_openat+0x136/0x160 [ 24.198401][ T418] do_syscall_64+0x31/0x40 [ 24.202814][ T418] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.208699][ T418] RIP: 0033:0x7f9f389a8559 [ 24.213113][ T418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.232719][ T418] RSP: 002b:00007f9f37400028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 24.241145][ T418] RAX: ffffffffffffffda RBX: 00007f9f38c2efa0 RCX: 00007f9f389a8559 [ 24.249119][ T418] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 24.257097][ T418] RBP: 00007f9f38a3fb20 R08: 0000000000000000 R09: 0000000000000000 [ 24.265070][ T418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.273042][ T418] R13: 00007f9f38c2f038 R14: 00007f9f38c2efa0 R15: 00007ffc8c2fa088 [ 24.335598][ T24] kauditd_printk_skb: 90 callbacks suppressed [ 24.335609][ T24] audit: type=1400 audit(1792731899.396:164): avc: denied { execute } for pid=419 comm="syz.1.41" path="/6/memory.stat" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 24.521048][ T370] F2FS-fs (loop4): Test dummy encryption mode enabled [ 24.546619][ T370] F2FS-fs (loop4): invalid crc value [ 24.558083][ T370] F2FS-fs (loop4): Found nat_bits in checkpoint [ 24.610128][ T434] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 24.621890][ T24] audit: type=1400 audit(1792731899.676:165): avc: denied { associate } for pid=446 comm="syz.0.50" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 24.651354][ T370] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 24.667997][ T434] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 24.740937][ T370] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 24.747520][ T24] audit: type=1400 audit(1792731899.706:166): avc: denied { block_suspend } for pid=432 comm="syz.2.47" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 24.782390][ T370] F2FS-fs (loop4): Start checkpoint disabled! [ 24.795048][ T370] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 24.803892][ T24] audit: type=1400 audit(1792731899.866:167): avc: denied { read } for pid=430 comm="syz.1.45" path="/8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 24.818231][ T457] netlink: 'syz.3.53': attribute type 4 has an invalid length. [ 24.921612][ T370] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 24.933249][ T24] audit: type=1400 audit(1792731899.926:168): avc: denied { map } for pid=430 comm="syz.1.45" path="/8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 24.993106][ T468] netlink: 'syz.3.53': attribute type 4 has an invalid length. [ 25.025145][ T7] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 25.040106][ T24] audit: type=1400 audit(1792731900.096:169): avc: denied { read append } for pid=466 comm="syz.1.56" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 25.099788][ T24] audit: type=1400 audit(1792731900.096:170): avc: denied { open } for pid=466 comm="syz.1.56" path="/9/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 25.123218][ T24] audit: type=1400 audit(1792731900.096:171): avc: denied { append } for pid=469 comm="syz.0.58" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 25.148160][ T24] audit: type=1400 audit(1792731900.126:172): avc: denied { sys_admin } for pid=472 comm="syz.1.61" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 25.192449][ T24] audit: type=1400 audit(1792731900.246:173): avc: denied { mounton } for pid=483 comm="syz.1.65" path="/12/file0" dev="tmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 25.283350][ T489] kvm: MWAIT instruction emulated as NOP! [ 25.494109][ T504] cgroup: syz.3.72 (504) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 25.549927][ T504] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 25.626821][ T501] F2FS-fs (loop2): invalid crc value [ 25.658270][ T501] F2FS-fs (loop2): Found nat_bits in checkpoint [ 25.691545][ T501] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 25.715736][ T509] EXT4-fs (loop3): Ignoring removed oldalloc option [ 25.723298][ T509] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 25.731292][ T509] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 25.740554][ T509] EXT4-fs (loop3): orphan cleanup on readonly fs [ 25.747352][ T509] EXT4-fs warning (device loop3): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 25.762192][ T509] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 25.769236][ T509] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.73: bg 0: block 40: padding at end of block bitmap is not set [ 25.783861][ T509] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5650: Corrupt filesystem [ 25.792838][ T509] EXT4-fs (loop3): 1 truncate cleaned up [ 25.793717][ T283] attempt to access beyond end of device [ 25.793717][ T283] loop2: rw=524288, want=45072, limit=40427 [ 25.798762][ T509] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,noload,noblock_validity,oldalloc,nouid32,grpjquota=,,errors=continue [ 25.812425][ T283] attempt to access beyond end of device [ 25.812425][ T283] loop2: rw=0, want=45072, limit=40427 [ 25.865909][ T7] attempt to access beyond end of device [ 25.865909][ T7] loop2: rw=2049, want=40992, limit=40427 [ 26.058415][ T527] kvm [526]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x9d00 [ 26.067655][ T527] kvm [526]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x9d00 [ 26.091808][ T527] APIC base relocation is unsupported by KVM [ 26.093652][ T537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 26.154421][ T530] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.161516][ T530] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.168955][ T530] device bridge_slave_0 entered promiscuous mode [ 26.177001][ T546] Illegal XDP return value 4294967274, expect packet loss! [ 26.185540][ T530] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.192717][ T530] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.200133][ T530] device bridge_slave_1 entered promiscuous mode [ 26.258256][ T530] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.265333][ T530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.272593][ T530] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.274215][ T549] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 26.279608][ T530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.295869][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.309581][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.317313][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.339030][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.347489][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.354564][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.363022][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.371200][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.378253][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.400578][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.410231][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.437632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.461754][ T552] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue [ 26.467593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.479981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.487973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.502389][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.510301][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.525993][ T530] device veth0_vlan entered promiscuous mode [ 26.542419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.552620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.561566][ T530] device veth1_macvtap entered promiscuous mode [ 26.572898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.580827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.589444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.598080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.606563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.616423][ T7] device bridge_slave_1 left promiscuous mode [ 26.622618][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.641816][ T576] capability: warning: `syz.1.98' uses deprecated v2 capabilities in a way that may be insecure [ 26.641920][ T7] device bridge_slave_0 left promiscuous mode [ 26.660105][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.680254][ T7] device veth1_macvtap left promiscuous mode [ 26.690287][ T7] device veth0_vlan left promiscuous mode [ 26.722401][ T15] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.808585][ T585] EXT4-fs (loop4): Ignoring removed nobh option [ 26.861194][ T585] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,nombcache,,errors=continue [ 26.910318][ T585] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.938449][ T585] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27 [ 26.954377][ T585] EXT4-fs error (device loop4): ext4_dirty_inode:6191: inode #2: comm syz.4.102: mark_inode_dirty error [ 26.969890][ T585] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27 [ 26.984256][ T585] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27 [ 26.992649][ T585] EXT4-fs error (device loop4): ext4_dirty_inode:6191: inode #2: comm syz.4.102: mark_inode_dirty error [ 27.008442][ T585] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27 [ 27.017029][ T585] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #2: comm syz.4.102: mark_inode_dirty error [ 27.024063][ T599] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 27.028509][ T585] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27 [ 27.037809][ T599] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.045895][ T585] EXT4-fs error (device loop4): ext4_dirty_inode:6191: inode #2: comm syz.4.102: mark_inode_dirty error [ 27.068505][ T608] EXT4-fs error (device loop4) in ext4_do_update_inode:5362: error 27 [ 27.085934][ T599] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.106: Invalid block bitmap block 5001287 in block_group 0 [ 27.099991][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.111325][ T15] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.124206][ T15] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 27.137311][ T15] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 27.146382][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.155047][ T15] usb 4-1: config 0 descriptor?? [ 27.487120][ T614] F2FS-fs (loop1): fault_injection options not supported [ 27.497234][ T614] F2FS-fs (loop1): fault_type options not supported [ 27.504855][ T614] F2FS-fs (loop1): invalid crc value [ 27.525418][ T614] F2FS-fs (loop1): Found nat_bits in checkpoint [ 27.558946][ T614] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 27.598279][ T280] attempt to access beyond end of device [ 27.598279][ T280] loop1: rw=2049, want=45104, limit=40427 [ 27.653485][ T15] plantronics 0003:047F:FFFF.0001: global environment stack underflow [ 27.666327][ T625] FAULT_INJECTION: forcing a failure. [ 27.666327][ T625] name failslab, interval 1, probability 0, space 0, times 0 [ 27.680208][ T15] plantronics 0003:047F:FFFF.0001: item 0 2 1 11 parsing failed [ 27.691994][ T15] plantronics 0003:047F:FFFF.0001: parse failed [ 27.698620][ T15] plantronics: probe of 0003:047F:FFFF.0001 failed with error -22 [ 27.706792][ T625] CPU: 0 PID: 625 Comm: syz.0.113 Not tainted syzkaller #0 [ 27.713984][ T625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 27.724032][ T625] Call Trace: [ 27.727327][ T625] __dump_stack+0x21/0x24 [ 27.731659][ T625] dump_stack_lvl+0x1a7/0x208 [ 27.736338][ T625] ? show_regs_print_info+0x18/0x18 [ 27.741543][ T625] ? kernel_write+0x3c0/0x3c0 [ 27.746314][ T625] dump_stack+0x15/0x1c [ 27.750468][ T625] should_fail+0x3ab/0x500 [ 27.754879][ T625] ? getname_flags+0xba/0x510 [ 27.759552][ T625] __should_failslab+0xa4/0xe0 [ 27.764320][ T625] should_failslab+0x9/0x20 [ 27.768825][ T625] kmem_cache_alloc+0x3d/0x2d0 [ 27.773595][ T625] getname_flags+0xba/0x510 [ 27.778104][ T625] do_mkdirat+0x4b/0x340 [ 27.782348][ T625] __x64_sys_mkdirat+0x7b/0x90 [ 27.787116][ T625] do_syscall_64+0x31/0x40 [ 27.791532][ T625] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 27.797418][ T625] RIP: 0033:0x7f9f389a8559 [ 27.801828][ T625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.821437][ T625] RSP: 002b:00007f9f37400028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 27.829863][ T625] RAX: ffffffffffffffda RBX: 00007f9f38c2efa0 RCX: 00007f9f389a8559 [ 27.837846][ T625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 27.845811][ T625] RBP: 00007f9f38a3fb20 R08: 0000000000000000 R09: 0000000000000000 [ 27.853876][ T625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.861848][ T625] R13: 00007f9f38c2f038 R14: 00007f9f38c2efa0 R15: 00007ffc8c2fa088 [ 27.911131][ T629] FAULT_INJECTION: forcing a failure. [ 27.911131][ T629] name failslab, interval 1, probability 0, space 0, times 0 [ 27.962834][ T629] CPU: 1 PID: 629 Comm: syz.5.115 Not tainted syzkaller #0 [ 27.970061][ T629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 27.980114][ T629] Call Trace: [ 27.983406][ T629] __dump_stack+0x21/0x24 [ 27.987735][ T629] dump_stack_lvl+0x1a7/0x208 [ 27.992409][ T629] ? show_regs_print_info+0x18/0x18 [ 27.997607][ T629] ? up_write+0x57/0x120 [ 28.001853][ T629] dump_stack+0x15/0x1c [ 28.006004][ T629] should_fail+0x3ab/0x500 [ 28.010424][ T629] ? vm_area_dup+0x26/0x250 [ 28.014922][ T629] __should_failslab+0xa4/0xe0 [ 28.019671][ T629] should_failslab+0x9/0x20 [ 28.024155][ T629] kmem_cache_alloc+0x3d/0x2d0 [ 28.028897][ T629] vm_area_dup+0x26/0x250 [ 28.033202][ T629] __split_vma+0xbd/0x420 [ 28.037504][ T629] ? find_vma+0x13b/0x150 [ 28.041808][ T629] __do_munmap+0x3c3/0x850 [ 28.046201][ T629] ? vfs_write+0xae4/0xd70 [ 28.050590][ T629] do_munmap+0x30/0x40 [ 28.054635][ T629] mremap_to+0x321/0x6b0 [ 28.058855][ T629] __se_sys_mremap+0x3fa/0x900 [ 28.063594][ T629] ? __x64_sys_mremap+0xd0/0xd0 [ 28.068421][ T629] ? switch_fpu_return+0x19c/0x330 [ 28.073512][ T629] ? __x64_sys_futex+0x100/0x100 [ 28.078428][ T629] ? fpu__clear_all+0x20/0x20 [ 28.083097][ T629] ? __fdget+0x1b3/0x230 [ 28.087319][ T629] __x64_sys_mremap+0xbf/0xd0 [ 28.091977][ T629] do_syscall_64+0x31/0x40 [ 28.096390][ T629] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.102263][ T629] RIP: 0033:0x7f5bc2f28559 [ 28.106660][ T629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.126248][ T629] RSP: 002b:00007f5bc1980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 28.134640][ T629] RAX: ffffffffffffffda RBX: 00007f5bc31aefa0 RCX: 00007f5bc2f28559 [ 28.142590][ T629] RDX: 000000000000f000 RSI: 0000000000003000 RDI: 0000200000006000 [ 28.150541][ T629] RBP: 00007f5bc2fbfb20 R08: 0000200000009000 R09: 0000000000000000 [ 28.158494][ T629] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 28.166444][ T629] R13: 00007f5bc31af038 R14: 00007f5bc31aefa0 R15: 00007ffda34a6288 [ 28.263079][ T648] FAULT_INJECTION: forcing a failure. [ 28.263079][ T648] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 28.276409][ T648] CPU: 0 PID: 648 Comm: syz.0.118 Not tainted syzkaller #0 [ 28.281212][ T565] F2FS-fs (loop3): invalid crc value [ 28.283601][ T648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 28.283606][ T648] Call Trace: [ 28.283622][ T648] __dump_stack+0x21/0x24 [ 28.283638][ T648] dump_stack_lvl+0x1a7/0x208 [ 28.293907][ T565] F2FS-fs (loop3): Found nat_bits in checkpoint [ 28.298996][ T648] ? show_regs_print_info+0x18/0x18 [ 28.322633][ T648] dump_stack+0x15/0x1c [ 28.326798][ T648] should_fail+0x3ab/0x500 [ 28.328337][ T565] F2FS-fs (loop3): Start checkpoint disabled! [ 28.331206][ T648] should_fail_alloc_page+0x4f/0x60 [ 28.331223][ T648] __alloc_pages_nodemask+0x11a/0x640 [ 28.347813][ T648] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 28.353367][ T648] ? bpf_ringbuf_alloc+0x69/0x500 [ 28.356765][ T565] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 28.358386][ T648] bpf_ringbuf_alloc+0x1a4/0x500 [ 28.358401][ T648] ringbuf_map_alloc+0x247/0x380 [ 28.375685][ T648] map_create+0x3dd/0x1f50 [ 28.380105][ T648] __se_sys_bpf+0x24b/0x740 [ 28.384612][ T648] ? __x64_sys_bpf+0x90/0x90 [ 28.389205][ T648] ? __kasan_check_read+0x11/0x20 [ 28.394224][ T648] __x64_sys_bpf+0x7b/0x90 [ 28.398644][ T648] do_syscall_64+0x31/0x40 [ 28.403055][ T648] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.408941][ T648] RIP: 0033:0x7f9f389a8559 [ 28.413350][ T648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.432951][ T648] RSP: 002b:00007f9f37400028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 28.441365][ T648] RAX: ffffffffffffffda RBX: 00007f9f38c2efa0 RCX: 00007f9f389a8559 [ 28.449369][ T648] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000 [ 28.457348][ T648] RBP: 00007f9f38a3fb20 R08: 0000000000000000 R09: 0000000000000000 [ 28.465312][ T648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.473275][ T648] R13: 00007f9f38c2f038 R14: 00007f9f38c2efa0 R15: 00007ffc8c2fa088 [ 28.523198][ T287] usb 4-1: USB disconnect, device number 2 [ 28.572563][ T641] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 28.774568][ T673] ip_tables: iptables: counters copy to user failed while replacing table [ 28.932978][ T659] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(5) blocks(1024) [ 28.951457][ T659] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 28.970671][ T659] F2FS-fs (loop4): Found nat_bits in checkpoint [ 29.005777][ T659] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 29.013007][ T659] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 29.021803][ T682] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.029170][ T682] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.042529][ T682] device bridge_slave_0 entered promiscuous mode [ 29.050000][ T682] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.057083][ T682] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.064512][ T682] device bridge_slave_1 entered promiscuous mode [ 29.113367][ T682] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.120427][ T682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.122464][ T641] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 29.127709][ T682] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.143813][ T682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.152407][ T641] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.171921][ T641] usb 2-1: Product: syz [ 29.176496][ T641] usb 2-1: Manufacturer: syz [ 29.190215][ T641] usb 2-1: SerialNumber: syz [ 29.209905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.218540][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.226053][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.242898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.251353][ T692] binder: 689:692 ioctl c0306201 200000000380 returned -14 [ 29.251407][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.265624][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.274177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.282561][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.289611][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.309262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.317390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.325908][ T694] EXT4-fs (loop4): Ignoring removed nobh option [ 29.331745][ T682] device veth0_vlan entered promiscuous mode [ 29.339544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.347951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.356056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.357232][ T694] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,usrquota,nobh,,errors=continue [ 29.364275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.375269][ T694] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.388142][ T682] device veth1_macvtap entered promiscuous mode [ 29.402323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.414626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.424135][ T694] EXT4-fs error (device loop4): ext4_find_dest_de:2079: inode #2: block 3: comm syz.4.136: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0 [ 29.445026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.470375][ T24] kauditd_printk_skb: 50 callbacks suppressed [ 29.470385][ T24] audit: type=1400 audit(1792731904.526:223): avc: denied { read } for pid=698 comm="syz.6.134" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.505404][ T24] audit: type=1400 audit(1792731904.526:224): avc: denied { open } for pid=698 comm="syz.6.134" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.529100][ T24] audit: type=1400 audit(1792731904.526:225): avc: denied { ioctl } for pid=698 comm="syz.6.134" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.554356][ T641] usb 2-1: Can't get UAC3 power state for id 10 [ 29.560729][ T24] audit: type=1400 audit(1792731904.566:226): avc: denied { create } for pid=700 comm="syz.4.138" dev="anon_inodefs" ino=17023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.591371][ T24] audit: type=1400 audit(1792731904.566:227): avc: denied { ioctl } for pid=700 comm="syz.4.138" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17023 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.652442][ T641] usb 2-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4 [ 29.665150][ T703] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xd55760ab, utbl_chksum : 0xe619d30d) [ 29.665956][ T641] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 29.685737][ T709] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 29.697271][ T24] audit: type=1400 audit(1792731904.756:228): avc: denied { read append } for pid=702 comm="syz.6.139" name="file1" dev="loop6" ino=1048666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 29.713756][ T641] usb 2-1: USB disconnect, device number 2 [ 29.796636][ T24] audit: type=1400 audit(1792731904.856:229): avc: denied { append } for pid=716 comm="syz.6.145" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.819452][ T24] audit: type=1400 audit(1792731904.866:230): avc: denied { write } for pid=716 comm="syz.6.145" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 29.878471][ T725] netlink: 16 bytes leftover after parsing attributes in process `syz.4.148'. [ 29.933093][ T7] device bridge_slave_1 left promiscuous mode [ 29.939340][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.947924][ T7] device bridge_slave_0 left promiscuous mode [ 29.954212][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.972360][ T7] device veth1_macvtap left promiscuous mode [ 29.980116][ T7] device veth0_vlan left promiscuous mode [ 29.986488][ T731] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 29.995045][ T731] EXT4-fs error (device loop4): ext4_iget_extra_inode:4692: inode #15: comm syz.4.151: corrupted in-inode xattr [ 30.007472][ T731] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.151: couldn't read orphan inode 15 (err -117) [ 30.031374][ T731] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000400000,errors=continue,,errors=continue [ 30.132985][ T24] audit: type=1400 audit(1792731905.196:231): avc: denied { mount } for pid=741 comm="syz.3.156" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 30.156481][ T742] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 5 (only 8 groups) [ 30.286109][ T736] F2FS-fs (loop5): Invalid log blocks per segment (4278190089) [ 30.302209][ T736] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 30.311331][ T736] F2FS-fs (loop5): invalid crc value [ 30.317951][ T736] F2FS-fs (loop5): Found nat_bits in checkpoint [ 30.351148][ T24] audit: type=1400 audit(1792731905.406:232): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 30.391090][ T736] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 30.406201][ T736] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 30.420855][ T761] FAULT_INJECTION: forcing a failure. [ 30.420855][ T761] name failslab, interval 1, probability 0, space 0, times 0 [ 30.433487][ T761] CPU: 1 PID: 761 Comm: syz.3.162 Not tainted syzkaller #0 [ 30.440678][ T761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 30.450728][ T761] Call Trace: [ 30.454025][ T761] __dump_stack+0x21/0x24 [ 30.458350][ T761] dump_stack_lvl+0x1a7/0x208 [ 30.463033][ T761] ? show_regs_print_info+0x18/0x18 [ 30.468220][ T761] dump_stack+0x15/0x1c [ 30.472372][ T761] should_fail+0x3ab/0x500 [ 30.473938][ T748] attempt to access beyond end of device [ 30.473938][ T748] loop5: rw=2049, want=45120, limit=40427 [ 30.476785][ T761] ? inet6_rt_notify+0x293/0x480 [ 30.476805][ T761] __should_failslab+0xa4/0xe0 [ 30.497633][ T761] should_failslab+0x9/0x20 [ 30.502121][ T761] __kmalloc_track_caller+0x5f/0x310 [ 30.507398][ T761] ? kmem_cache_alloc+0x15a/0x2d0 [ 30.512416][ T761] ? __alloc_skb+0x9e/0x520 [ 30.516918][ T761] ? inet6_rt_notify+0x293/0x480 [ 30.521842][ T530] attempt to access beyond end of device [ 30.521842][ T530] loop5: rw=524288, want=45072, limit=40427 [ 30.521878][ T530] attempt to access beyond end of device [ 30.521878][ T530] loop5: rw=0, want=45072, limit=40427 [ 30.533193][ T761] __alloc_skb+0xdc/0x520 [ 30.533206][ T761] inet6_rt_notify+0x293/0x480 [ 30.533218][ T761] ? rt6_nh_dump_exceptions+0x6b0/0x6b0 [ 30.533226][ T761] ? call_fib_notifiers+0xa0/0xc0 [ 30.533235][ T761] fib6_add+0x2174/0x3c60 [ 30.533246][ T761] ? __sys_setsockopt+0x2fa/0x480 [ 30.533256][ T761] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.533266][ T761] ? fib6_update_sernum_stub+0x190/0x190 [ 30.533276][ T761] ? __kasan_check_write+0x14/0x20 [ 30.533283][ T761] ? _raw_spin_lock_bh+0x94/0xf0 [ 30.533292][ T761] ip6_ins_rt+0xd3/0x130 [ 30.533300][ T761] ? rt6_lookup+0x220/0x220 [ 30.533307][ T761] ? _raw_spin_lock+0x94/0xf0 [ 30.533314][ T761] ? _raw_spin_trylock_bh+0x150/0x150 [ 30.533327][ T761] __ipv6_dev_ac_inc+0x65c/0x860 [ 30.533339][ T761] ipv6_sock_ac_join+0x45a/0x5c0 [ 30.533350][ T761] ipv6_setsockopt+0x20b4/0x36f0 [ 30.533361][ T761] ? ipv6_update_options+0x390/0x390 [ 30.533370][ T761] ? __schedule+0xc0b/0x13e0 [ 30.533379][ T761] ? __sched_text_start+0x8/0x8 [ 30.533388][ T761] ? __kasan_check_read+0x11/0x20 [ 30.533396][ T761] ? preempt_schedule_common+0xbe/0xf0 [ 30.533403][ T761] ? preempt_schedule+0xbc/0xd0 [ 30.533412][ T761] ? schedule_preempt_disabled+0x20/0x20 [ 30.533422][ T761] ? __kasan_check_read+0x11/0x20 [ 30.533431][ T761] ? ttwu_do_wakeup+0xfb/0x3d0 [ 30.533440][ T761] ? preempt_schedule_thunk+0x16/0x18 [ 30.533448][ T761] ? try_to_wake_up+0x670/0xdf0 [ 30.533465][ T761] ? __kasan_check_write+0x14/0x20 [ 30.689369][ T761] ? wake_up_q+0x123/0x1e0 [ 30.693780][ T761] ? avc_has_perm+0x168/0x3d0 [ 30.698461][ T761] ? avc_has_perm+0x27f/0x3d0 [ 30.703139][ T761] ? avc_has_perm_noaudit+0x260/0x260 [ 30.708586][ T761] ? slab_post_alloc_hook+0x7d/0x2f0 [ 30.713881][ T761] ? do_futex+0xfad/0x1270 [ 30.718304][ T761] ? selinux_socket_setsockopt+0x282/0x360 [ 30.724109][ T761] ? selinux_socket_getsockopt+0x340/0x340 [ 30.729916][ T761] ? __fget_files+0x2e1/0x340 [ 30.734595][ T761] udpv6_setsockopt+0x92/0xb0 [ 30.739275][ T761] sock_common_setsockopt+0xa0/0xb0 [ 30.744471][ T761] ? sock_common_recvmsg+0x1c0/0x1c0 [ 30.749749][ T761] __sys_setsockopt+0x2fa/0x480 [ 30.754598][ T761] ? __ia32_sys_recv+0xb0/0xb0 [ 30.759371][ T761] ? switch_fpu_return+0x19c/0x330 [ 30.764479][ T761] __x64_sys_setsockopt+0xbf/0xd0 [ 30.769500][ T761] do_syscall_64+0x31/0x40 [ 30.773919][ T761] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 30.779811][ T761] RIP: 0033:0x7f350aadc559 [ 30.784224][ T761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.803826][ T761] RSP: 002b:00007f3509534028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 30.812246][ T761] RAX: ffffffffffffffda RBX: 00007f350ad62fa0 RCX: 00007f350aadc559 [ 30.820200][ T761] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000005 [ 30.828151][ T761] RBP: 00007f350ab73b20 R08: 0000000000000014 R09: 0000000000000000 [ 30.836101][ T761] R10: 0000200000000b40 R11: 0000000000000246 R12: 0000000000000000 [ 30.844058][ T761] R13: 00007f350ad63038 R14: 00007f350ad62fa0 R15: 00007ffd035dc538 [ 30.882456][ T763] SELinux: failed to load policy [ 30.953084][ T776] xt_hashlimit: size too large, truncated to 1048576 [ 31.012760][ T778] resource sanity check: requesting [mem 0xfe800000-0xfe801fff], which spans more than 0000:00:03.0 [mem 0xfe800000-0xfe80007f] [ 31.045216][ T778] caller generic_access_phys+0x9b/0x130 mapping multiple BARs [ 31.062290][ T781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 31.214220][ T789] ================================================================== [ 31.222315][ T789] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x4b/0xa0 [ 31.229934][ T789] Write of size 8 at addr ffff888119d10d90 by task syz.6.176/789 [ 31.237633][ T789] [ 31.239957][ T789] CPU: 1 PID: 789 Comm: syz.6.176 Not tainted syzkaller #0 [ 31.244676][ T788] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.247140][ T789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 31.254199][ T788] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.264160][ T789] Call Trace: [ 31.264176][ T789] __dump_stack+0x21/0x24 [ 31.264190][ T789] dump_stack_lvl+0x1a7/0x208 [ 31.283415][ T789] ? show_regs_print_info+0x18/0x18 [ 31.288610][ T789] ? thaw_kernel_threads+0x220/0x220 [ 31.293889][ T789] print_address_description+0x7f/0x2c0 [ 31.294845][ T788] device bridge_slave_0 entered promiscuous mode [ 31.299425][ T789] ? rcu_segcblist_enqueue+0x4b/0xa0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 31.310994][ T789] kasan_report+0x100/0x140 [ 31.315494][ T789] ? rcu_segcblist_enqueue+0x4b/0xa0 [ 31.320775][ T789] __asan_report_store8_noabort+0x17/0x20 [ 31.326519][ T789] rcu_segcblist_enqueue+0x4b/0xa0 [ 31.331730][ T789] call_rcu+0x4df/0x1090 [ 31.335971][ T789] ? kfree+0xc0/0x270 [ 31.339953][ T789] ? rcu_gp_kthread_wake+0x90/0x90 [ 31.345065][ T789] ? __kasan_check_write+0x14/0x20 [ 31.350172][ T789] ? mutex_lock+0x92/0xf0 [ 31.354511][ T789] ? mutex_trylock+0xb0/0xb0 [ 31.359099][ T789] pppol2tp_release+0x1e3/0x2b0 [ 31.363967][ T789] sock_close+0xb8/0x200 [ 31.368184][ T789] ? sock_mmap+0xa0/0xa0 [ 31.372412][ T789] __fput+0x2dc/0x730 [ 31.376364][ T789] ____fput+0x15/0x20 [ 31.380318][ T789] task_work_run+0x127/0x190 [ 31.384880][ T789] exit_to_user_mode_loop+0xcb/0xe0 [ 31.390049][ T789] exit_to_user_mode_prepare+0x76/0xa0 [ 31.395479][ T789] syscall_exit_to_user_mode+0x1d/0x40 [ 31.400925][ T789] do_syscall_64+0x3d/0x40 [ 31.405328][ T789] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.411206][ T789] RIP: 0033:0x7fdf5ca9d559 [ 31.415611][ T789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.435197][ T789] RSP: 002b:00007ffd725c5d18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 31.443585][ T789] RAX: 0000000000000000 RBX: 00007ffd725c5e00 RCX: 00007fdf5ca9d559 [ 31.451528][ T789] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 31.459473][ T789] RBP: 00000000000079d2 R08: 0000000000000001 R09: 0000000000000000 [ 31.467422][ T789] R10: 0000001b2e620000 R11: 0000000000000246 R12: 00007ffd725c5e40 [ 31.475395][ T789] R13: 00007fdf5cd23fac R14: 0000000000007a09 R15: 00007fdf5cd23fa0 [ 31.483352][ T789] [ 31.485669][ T789] Allocated by task 790: [ 31.489901][ T789] __kasan_kmalloc+0xd4/0x100 [ 31.494557][ T789] __kmalloc+0x19f/0x330 [ 31.498774][ T789] l2tp_session_create+0x39/0xb60 [ 31.503774][ T789] pppol2tp_connect+0xbf5/0x1640 [ 31.508685][ T789] __sys_connect+0x3ce/0x450 [ 31.513251][ T789] __x64_sys_connect+0x7a/0x90 [ 31.517985][ T789] do_syscall_64+0x31/0x40 [ 31.522376][ T789] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.528232][ T789] [ 31.530635][ T789] Freed by task 566: [ 31.534512][ T789] kasan_set_track+0x4a/0x70 [ 31.539105][ T789] kasan_set_free_info+0x23/0x40 [ 31.544025][ T789] ____kasan_slab_free+0x125/0x160 [ 31.549114][ T789] __kasan_slab_free+0x11/0x20 [ 31.553860][ T789] slab_free_freelist_hook+0xc5/0x190 [ 31.559206][ T789] kfree+0xc0/0x270 [ 31.562988][ T789] l2tp_session_put+0xb2/0x1a0 [ 31.567744][ T789] l2tp_session_delete+0x3a9/0x4a0 [ 31.572830][ T789] l2tp_tunnel_del_work+0x180/0x3d0 [ 31.578089][ T789] process_one_work+0x6fd/0xbc0 [ 31.582915][ T789] worker_thread+0xa8e/0x13c0 [ 31.587563][ T789] kthread+0x324/0x3b0 [ 31.591604][ T789] ret_from_fork+0x1f/0x30 [ 31.595986][ T789] [ 31.598311][ T789] Last potentially related work creation: [ 31.604016][ T789] kasan_save_stack+0x3a/0x60 [ 31.608685][ T789] __kasan_record_aux_stack+0xd2/0x100 [ 31.614120][ T789] kasan_record_aux_stack_noalloc+0xb/0x10 [ 31.619910][ T789] call_rcu+0x11a/0x1090 [ 31.624130][ T789] pppol2tp_release+0x1e3/0x2b0 [ 31.628954][ T789] sock_close+0xb8/0x200 [ 31.633169][ T789] __fput+0x2dc/0x730 [ 31.637123][ T789] ____fput+0x15/0x20 [ 31.641074][ T789] task_work_run+0x127/0x190 [ 31.645649][ T789] exit_to_user_mode_loop+0xcb/0xe0 [ 31.650821][ T789] exit_to_user_mode_prepare+0x76/0xa0 [ 31.656253][ T789] syscall_exit_to_user_mode+0x1d/0x40 [ 31.661678][ T789] do_syscall_64+0x3d/0x40 [ 31.666069][ T789] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.671943][ T789] [ 31.674245][ T789] The buggy address belongs to the object at ffff888119d10c00 [ 31.674245][ T789] which belongs to the cache kmalloc-512 of size 512 [ 31.688267][ T789] The buggy address is located 400 bytes inside of [ 31.688267][ T789] 512-byte region [ffff888119d10c00, ffff888119d10e00) [ 31.701505][ T789] The buggy address belongs to the page: [ 31.707126][ T789] page:ffffea0004674400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888119d11800 pfn:0x119d10 [ 31.718719][ T789] head:ffffea0004674400 order:2 compound_mapcount:0 compound_pincount:0 [ 31.727031][ T789] flags: 0x4000000000010200(slab|head) [ 31.732473][ T789] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100043080 [ 31.741045][ T789] raw: ffff888119d11800 0000000080100007 00000001ffffffff 0000000000000000 [ 31.749680][ T789] page dumped because: kasan: bad access detected [ 31.756082][ T789] page_owner tracks the page as allocated [ 31.761775][ T789] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 109, ts 4463629276, free_ts 0 [ 31.779804][ T789] prep_new_page+0x176/0x190 [ 31.784388][ T789] get_page_from_freelist+0x225f/0x23f0 [ 31.789906][ T789] __alloc_pages_nodemask+0x29a/0x640 [ 31.795252][ T789] new_slab+0x84/0x3f0 [ 31.799292][ T789] ___slab_alloc+0x2f8/0x4c0 [ 31.803850][ T789] __slab_alloc+0x63/0xa0 [ 31.808148][ T789] __kmalloc_track_caller+0x1e4/0x310 [ 31.813490][ T789] __alloc_skb+0xdc/0x520 [ 31.817790][ T789] alloc_skb_with_frags+0xa3/0x560 [ 31.822876][ T789] sock_alloc_send_pskb+0x87f/0x9a0 [ 31.828046][ T789] unix_dgram_sendmsg+0x6f3/0x18f0 [ 31.833130][ T789] sock_write_iter+0x2a6/0x3a0 [ 31.837870][ T789] vfs_write+0x770/0xd70 [ 31.842084][ T789] ksys_write+0x14a/0x260 [ 31.846399][ T789] __x64_sys_write+0x7b/0x90 [ 31.850963][ T789] do_syscall_64+0x31/0x40 [ 31.855357][ T789] page_owner free stack trace missing [ 31.860705][ T789] [ 31.863005][ T789] Memory state around the buggy address: [ 31.868610][ T789] ffff888119d10c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.876644][ T789] ffff888119d10d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.884678][ T789] >ffff888119d10d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.892713][ T789] ^ [ 31.897279][ T789] ffff888119d10e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 31.905322][ T789] ffff888119d10e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 31.913483][ T789] ================================================================== [ 31.921531][ T789] Disabling lock debugging due to kernel taint [ 33.303019][ T7] device bridge_slave_1 left promiscuous mode [ 33.309129][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.316538][ T7] device bridge_slave_0 left promiscuous mode [ 33.322806][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.330212][ T7] device bridge_slave_0 left promiscuous mode [ 33.336459][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.344021][ T7] device bridge_slave_1 left promiscuous mode [ 33.350098][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.357511][ T7] device bridge_slave_0 left promiscuous mode [ 33.363653][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.371248][ T7] device bridge_slave_1 left promiscuous mode [ 33.377544][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.384895][ T7] device bridge_slave_0 left promiscuous mode [ 33.390984][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.398673][ T7] device bridge_slave_1 left promiscuous mode [ 33.404918][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.412537][ T7] device bridge_slave_0 left promiscuous mode [ 33.418632][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.426719][ T7] device veth1_macvtap left promiscuous mode [ 33.432732][ T7] device veth0_vlan left promiscuous mode [ 33.438530][ T7] device veth1_macvtap left promiscuous mode [ 33.444559][ T7] device veth0_vlan left promiscuous mode [ 33.450385][ T7] device veth1_macvtap left promiscuous mode [ 33.456420][ T7] device veth0_vlan left promiscuous mode [ 33.462439][ T7] device veth1_macvtap left promiscuous mode [ 33.468417][ T7] device veth0_vlan left promiscuous mode