last executing test programs: 1m29.041672085s ago: executing program 2 (id=36): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x2) recvmmsg(r1, &(0x7f0000000500), 0x80002c1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) getpid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) pread64(0xffffffffffffffff, &(0x7f00000008c0)=""/102400, 0x19020, 0x1000000000) 1m27.660825036s ago: executing program 2 (id=37): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x401d831, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = timerfd_create(0x1, 0x80000) read(r4, &(0x7f0000000880)=""/250, 0xfa) timerfd_settime(r4, 0x3, &(0x7f0000000980)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x2000490, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000500)="$eJzs3c9qY1UYAPDvpkkaLZIsXIngXczCjWUyWxdmkApiV0oW/gEdnBkYmjDQQGBUDF35BC5c+B7uXLlR3PgGgg/gziKFIze5TWKbpk1rWun8fpsezvm+nO/k3PYuLvf0s1f7ew+fDh4ffPV7NBpZVDrRicMsWlGJY6kUAMCtcJhS/Hmp+3u1sq6aAID1mrv/184I2Tzd9da6ywIA1uiDDz967/7u7s77ed6I6H8z7GYx+TkZv/84nkQvHsXdaMbR7FlASpP2O+/u7kQ1L7TiTn807BaZ/U9/nX9sUOS3oxmtxfntfGIufzTs1uLFiCyLeNIpCrkXzXj5VH4xvnNvQX506/F6o1xkMf92NOO3z+Np9OLh+JnGbP6v23n+dvr2ry8/LoKL/Gw07G6O42bSxnXvDQAAAAAAAAAAAAAAAAAAAAAAt9d2PtWKO/2iqzx/Z+NoPL79r/Hx+TqV8fgkP4uojxsnzgcapfj++Hydu3mep2wSPzvfpxqvVKN6YwsHAAAAAAAAAAAAAAAAAACA/5HBsy/2HvR6j/b/k0b5kv/0tf7Lfk5nrue1WB68udJcsVGGF7WejGn//El/2lMsYvXiD18a1vKIZTXXTvW8UNRz/hR/p5RSlkVcbZtqF5nrnMbW8pjiC/7xu6039h5k532HjeON+2F+qB77g2cn9jSyovHTLxfb7rTS5VdfElMvr5gLfc7WFX+J3vxjMlnZk62wilrZiLMuv8ZK1/M1/QECAAAAAAAAAAAAAAAAAACmZi/9Lhg8WJpaWVtRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDNZv//f4XGqExeHJNSGk176rE/uOElAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bz4JwAA///l5m1V") r5 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000800)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) 1m26.400276824s ago: executing program 2 (id=38): socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000bc0)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) setitimer(0x0, &(0x7f0000000c40)={{0x0, 0x1}, {0x0, 0x1}}, 0x0) rt_sigtimedwait(&(0x7f0000000c80)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x9, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffd, @mcast2, 0x5}, 0x1c) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x3, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x4, 0x4, 0x10000, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50) gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8003, 0xc, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000003c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={0xffffffffffffffff, 0x1f00, 0x18, 0x19, &(0x7f0000000a80)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000ac0)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000b80)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) r5 = io_uring_setup(0x168e, &(0x7f0000001d80)={0x0, 0x1, 0x0, 0x0, 0x3af}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000d80)=""/4081, 0xff1}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x2, 0x0, 0x0) 1m24.457196123s ago: executing program 0 (id=42): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x10) recvmmsg(r2, &(0x7f0000000340), 0x4000087, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2004402, &(0x7f0000000400)=ANY=[]) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='mounts\x00') read$FUSE(r5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[], 0x1, 0x24b, &(0x7f0000000b40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) 1m23.488530642s ago: executing program 2 (id=44): syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x808, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYRES32, @ANYRES32, @ANYRES64], 0x2, 0x5545, &(0x7f0000000200)="$eJzs3L1vG2UYAPDHSdOmH5QIMbD1pAopkWqrzkcFW4BWfIhUUYGBCRzbsdzavih2nJCJgREx8J8gkJgY+RsYmNkQA4gNCeS7S2kKRUhx4yb5/aTzc+/r83PPa0UnPXeRAziz5pLffy3F1bgYEdMRcSUi2y8V48xqHl6KiGsRMfXIVirmH06cj4hLEXF1lDzPUSre+vLG8PrKL+/89t0PF85d/urbHye3amDSXo6I7la+v9vNY9rK4/1ivjZsZ7G7PCxi/kb3QTFO87jb3Mgy7NYOjqtlcamVH59u7fRHcbNTq49iq72ZzW/18hP2h62DPNkH7te2s3GjuZHFdj/NYms/r2tvP7+27fcHeZ5Gke+TLH0MBgcxn2/uNfP1bD3IYr03KObzvGmjuTeKwyIWp4t62mlkdWwc5Zt+tr3b7u3sJcPmdr+d9pKVSvWVSvVWubqdNpqD5nK51m3cWk7mW53RYeVBs9ZdbaVpq9Os1NPuQjLfqtfL1Woyf7u50a71kmq1slS5WV5ZKPZuJG/e/SDpNJL5UXy93dsZtDv9ZDPdTvJPLCSLlaVXF5Lr1eS9tfVk/d6dO2vr7390+8O7r629/UZx0D/KSuYXby4ulqs3y4vVhTO0/s+Kose4fjiS0qQLADh5/qv/f3hZ1f8DY/bE/n90ATpS/799L+Lp9/+h/x+LE9X/PjP9/2yclvXDkej/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrJ9mvn4r25nLx5eL+eeKqReKcSkipiLiz38xHecP5Zwu8sw84fiZx2r4vhRZhtE5LhTbpYhYLbY/nn/a3wIAAACcXt98eu2LvFvPX+YmXRDHKb9pM3Xl4zHlm42Imbmfx5RtavTy4piSZX/f52JvTNmyG1izY0qW33I7N65s/8v0oTD7SCjlYepYywEAAI7F4U7geLsQAAAAjtPnky6AySjFwaPMg2fB2X/e//1A8OKhEQAAAHAClSZdAAAAADB2jz/Hz/p/v/8HAAAAp1v++38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwF/s3E1O3DAcB9B/EjLQLzGquu9VumOO0SN02SXiAL0EB+hieoXuuuIMdNcjVLhibGhSUgTCyUjoPSkEW84v9mg2tkcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDn97Lebb6fvv3RPzLlKd60m6lL6ERF3aysNBwAAAJhw2W83u3/Wufyq1L8pVW9LuYmIdnLmnlIXq1FmV3L6v+2/Dtv3//The8Qu4fodh+V6GREfyvX7eO5PAQAAAJ6vi7Pzkzxbz3/W/296ulyvWEhetGlff6yU10REv/5VKa29zntXI2lVvt8H8blGXFnYiqNKYXnJ7aBW2oPkX/vcrNodDW5NvrWTj912strYAQCABXWj27KzEAAAAJb0ad8doLaHbc81cbOVebsVeDh6/sVj0gAAAID9uP9Qv9383+QeAAAAnrWmGZbmPf8vOf8PAAAA9iOf/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCcLvvt5uLs/GRcmx6dc5WeZvDu4wrDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+MP+vKtgCIMxAM1/FTfp+7+oUyWgm7vLOVAICR0+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAG6/z5X2FT8OW5Nu24dd6JPl3alg6jX3O2bnN2g/j6WsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAg/15SYEQCIIomDP+d9L3P6wk6BlEiICGRxW1aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC/63S//J6bGmWTutLF0PJKsXTW2rhp7DxpHD8bbvwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi537eY2jigMA/p2ZzMZUxRglh4goeNCLTbe1tTfxoAQP/glCSLc1duuPNgdbipiLN8m5F9GjiKDEW/+Hnlvopd56yKGCZ2V2ZrLTdMXVlplt8/nAm/fd2TDv+95CyHfeZAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgtvfuOM6Kw2IZp9W5m/eubhT9rQN94frO7ZWiFXHSZtIzJf+nN16ug2Itk+XWEgIAAOBw2W6+yOr6PiLu5LtrRZ8ujur//QK2qFO/f7aM63r+YN1f93XtX7Tffr374v5AixHzVVV8dnM4OPZgXnOPfKaPief+5f1yYZLy3ks2+kDSD7Zf2MtH65l8e+PGe71RON9GtgDA/3G07qug/nuo6PtdJgbAoTHXKLzr+j9b7DYnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDbsbcfTdZxExMrcOC7cund1Y1J/fef2St1OXbu2E1+Pr1lcIo+Is5vDwbFWZzPbLl2+cn59OBxcbD94JSK6Gv2davrnP5rwMwsHzkR0sj6CRxSk1Yc9K/k8HkGHv5QAAHgi5VUr6vo7+e5acS5Zivjrh/vr/9cbcUxZ/9/9+NTN5ljN+r/f2gxn3+rWhc9XL12+8ubmhfVzg3ODT9863n+7f+L0yZOnV0f3SlbdMQEAAODh9KrWrP/TpQf3/4804piy/v/iu/5XzbEy9f9E402/rjMBAAA43J5/9c8/kgnnk14vvlzf2rrYL4/7r4+Xxw5S/c/mq9as/7OlrrMCAAAA2rC3ndy3/3+mEceU+//P/PjSz81rZhGxUO3/H934bHimvenMtDb+nbjrOQIAANCthao19//z0fP/6f4jD2lEvPFaGVdfAzhV/Z+9/81PzbGaz/+faG+KMyldLtdj1C9HzC13nREAAABPsqeqVhT7v+e7a5/8cuTDnuf/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANr2dwAAAP//24M+LQ==") r0 = open(&(0x7f0000000000)='./file1\x00', 0x4827e, 0x20) socket(0x2, 0xa, 0xffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000005880)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000058c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000005900)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000005940)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000005980)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000059c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000005a00)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000005a80), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000005ac0)=0x2) recvmmsg(r2, &(0x7f0000005b00), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005b40)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000005b80)='./my_debugfs\x00', &(0x7f0000005bc0)='debugfs\x00', 0x0, 0x0) connect$inet6(r4, &(0x7f0000005c00)={0xa, 0x4e24, 0x1, @local, 0x8}, 0x1c) sendto$inet6(r4, 0x0, 0xfffffffffffffdcc, 0x60c81, &(0x7f0000005c40)={0xa, 0x4e21, 0x10007, @loopback={0x91}, 0xe75}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000005c80)={'bridge0\x00', &(0x7f0000005cc0)=@ethtool_coalesce={0xf, 0x0, 0x1000, 0x0, 0x400000, 0x7ff, 0x40004, 0xc0000000, 0x401, 0x9, 0x4, 0x4, 0x3, 0x4006, 0x84, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x5, 0x424f, 0x4}}) sched_setscheduler(0x0, 0x2, &(0x7f0000005d40)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000057c0)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000005800)={@id={0x2, 0x0, @d}}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, 0x0) 1m22.272308426s ago: executing program 0 (id=46): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x14552, &(0x7f0000000080)=ANY=[], 0x7b, 0x1207, &(0x7f00000000c0)="$eJzs3E+LW1UYB+B3xtqpU+ePWqstiAfdqItLZxZudDPIFKQBpe0IrSDcOnc05JqE3DAQEasrt34OEURwJ4g73czGbyC4m43LCuqVSbRtJF0EZa6W59nkhXN+nHOSk8AJOTl8+dP3OntVtpcPY3FhIRb7EelWihSL8ZeP4vmXvvv+qSvXrl/aarW2L6d0cevqxosppdWnv3nzg8+f+XZ4+o2vVr9eioP1tw5/3vzp4OzBucPfr77brlK7St3eMOXpRq83zG+URdptV50spdfLIq+K1O5WxWCqfa/s9fujlHd3V5b7g6KqUt4dpU4xSsNeGg5GKX8nb3dTlmVpZTmY34nb1c5nt+q6jqjrB+Nk1HVdPxTLcToejpVYjbVYj0fi0XgszsTjcTaeiCfjyx+/GB0lAAAAAAAAAAAAAAAAAAAAgH/PvPf/z417NT1rAAAAAAAAAAAAAAAAAAAAuL9cuXb90lartX05pVMR5Sf7O/s7k8dJ+9ZetKOMIi7EWvwa49v/E5P64qut7QtpbD0+Lm/+mb+5v/PAdH5j/HcCM/Mbk3yazi/F8t35zViLM7PzmzPzp+K5Z+/KZ7EWP7wdvShjN46yd/IfbqT0ymutv+XPj/sBAADA/SBLt808v2fZvdon+Tm+H5g6Xx9lz59odOlERDV6v5OXZTE4/uKFiGhu9P9hcbLZafxS13WTT8JvTY5+73fK0j/ZxgsR8V/YWjOKpj+ZOA53XvSmZwIAAAAAAAAAAMA8juPnhE2vEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mAHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwUAAP//s1rSqA==") bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x12, 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB="180000000540000000000000070000006b1108000000000095"], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001300)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000001340)=ANY=[], 0x32600) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000001380)='.\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(r1, &(0x7f0000002f40)={0x9, {"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", 0x35e}}, 0x1006) 1m20.920370295s ago: executing program 0 (id=50): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4}, 0x50) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfb, 0x100}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000380)=0xf, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18050000080000000000000003000000b7080000000000007b8af8ff00000000b70800000000000000000000000007010000e3ffffffbfa4000000000000070400a1ebffffffb70200000800000018230000613c9e4889463ea89b515b77f478267505e7bb2fa9299e00ed6ad6e6733d536ca2003d5d1e3824c1767e9244983f03555a67b77d4ca254dd1b157442d03184d620", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)) syz_usb_connect$midi(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406307122040000102030109021b0001fe04c80d09040000000103"], 0x0) sched_setscheduler(r2, 0x6, &(0x7f0000000200)) 1m19.264335094s ago: executing program 2 (id=53): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4, 0x1}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @float={0x2, 0x0, 0x0, 0x10, 0x2}, @array={0x0, 0x300, 0x0, 0x3, 0x0, {0x3, 0x2, 0xb}}]}, {0x0, [0x61, 0x5f]}}, 0x0, 0x60}, 0x28) 1m19.00537589s ago: executing program 2 (id=56): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x2) recvmmsg(r1, &(0x7f0000000500), 0x80002c1, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) getpid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) pread64(0xffffffffffffffff, &(0x7f00000008c0)=""/102400, 0x19020, 0x1000000000) 1m19.0049774s ago: executing program 32 (id=56): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x2) recvmmsg(r1, &(0x7f0000000500), 0x80002c1, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) getpid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) pread64(0xffffffffffffffff, &(0x7f00000008c0)=""/102400, 0x19020, 0x1000000000) 1m17.152123099s ago: executing program 0 (id=61): syz_mount_image$exfat(&(0x7f00000004c0), &(0x7f0000000500)='./file1\x00', 0x10000c0, &(0x7f0000000540)=ANY=[], 0x1, 0x1531, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0xc0280, 0x190) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x1800714, &(0x7f0000000280)={[{@debug}]}, 0x1, 0x4c0, &(0x7f0000001c00)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") r1 = openat(0xffffffffffffff9c, &(0x7f00000020c0)='./file1\x00', 0x42, 0x0) r2 = creat(&(0x7f0000002100)='./bus\x00', 0x182) mount(&(0x7f0000002140)=@loop={'/dev/loop', 0x0}, &(0x7f0000002180)='./bus\x00', 0x0, 0x1084, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./bus\x00', 0x8840, 0xa2) r4 = openat(0xffffffffffffff9c, &(0x7f0000002200)='./bus\x00', 0x1c1002, 0x12) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@multicast1}, {@multicast1}]}, @generic={0x7, 0x4, "0403"}]}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) write(r4, &(0x7f0000002240)="d4", 0x1) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x4, 0x70bd2a, 0x25dfdbff, {0x7, 0x7, './file0', './file1'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40004) setxattr$incfs_size(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f00000002c0)=0x3, 0x8, 0x2) sendfile(r4, r3, 0x0, 0x3ffff) write$P9_RREADLINK(r1, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCOUTQ(r5, 0x8902, &(0x7f0000000300)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) io_setup(0x9, &(0x7f0000000480)) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @mcast2, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000040)=0xc811, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, 0x0, &(0x7f0000000440)=0x0) timer_getoverrun(r7) unlinkat(0xffffffffffffff9c, &(0x7f0000003a00)='./file1\x00', 0x0) 1m15.87009944s ago: executing program 0 (id=65): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f00000001c0), 0x1004) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) io_setup(0x239f, &(0x7f0000000440)=0x0) eventfd2(0x5, 0x1) io_submit(r4, 0x0, &(0x7f00000005c0)) shutdown(0xffffffffffffffff, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x62842, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r3, 0x0, &(0x7f0000000640)={0x2e, 0x51, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000006c0)=@new_dev={0x83, 0x48, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000700)=0x0) syz_ublk_setup_queues(r5, r6, &(0x7f0000000780)={0x0, 0xcab4, 0x400, 0x3, 0x1b5}, 0x0, 0x4, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x0, &(0x7f0000000880)=ANY=[@ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000008c0)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x2, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) syz_clone(0x1021000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) 1m15.639781684s ago: executing program 0 (id=68): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x21081e, &(0x7f0000000400)={[{@grpquota}, {@oldalloc}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000500)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000a00)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000a40)={0x4, 0x7, 0x3, 0x8, 0x6, 0x6, 0x20000000ffd, 0x6, 0xfffffffd}) syz_mount_image$vfat(&(0x7f0000000ac0), &(0x7f0000000b00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8c91, 0x0, 0x1, 0x0, &(0x7f0000000b80)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000c00)={0x1, &(0x7f0000000c40)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r3 = open(&(0x7f0000000c80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x58100, 0x18) fstat(r2, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, r4, 0xffffffffffffffff) r5 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x5) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) pause() r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r10, 0x40383d0c, &(0x7f0000000340)={{0xfffffffffffffefc, 0x2}, {0x0, 0x6}, 0xfffffe2d, 0x6}) pread64(r9, &(0x7f0000000240)=""/15, 0xf, 0x4) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, 0x0) setns(0xc9, 0x0) r11 = socket(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c010}, 0x8000) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x400000b6, 0x0, 0x7f}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb51f210cf1b400b85780000000109021200010100c00009042100000e01"], 0x0) r12 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000004c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro_nat=0x640a, 0x30000, 0x83, 0x5}}], 0x6f}) ioctl$KVM_RUN(r12, 0xae80, 0x0) 1m15.611144467s ago: executing program 33 (id=68): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x21081e, &(0x7f0000000400)={[{@grpquota}, {@oldalloc}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000500)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000a00)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000a40)={0x4, 0x7, 0x3, 0x8, 0x6, 0x6, 0x20000000ffd, 0x6, 0xfffffffd}) syz_mount_image$vfat(&(0x7f0000000ac0), &(0x7f0000000b00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8c91, 0x0, 0x1, 0x0, &(0x7f0000000b80)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000c00)={0x1, &(0x7f0000000c40)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r3 = open(&(0x7f0000000c80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x58100, 0x18) fstat(r2, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, r4, 0xffffffffffffffff) r5 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x5) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) pause() r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r10, 0x40383d0c, &(0x7f0000000340)={{0xfffffffffffffefc, 0x2}, {0x0, 0x6}, 0xfffffe2d, 0x6}) pread64(r9, &(0x7f0000000240)=""/15, 0xf, 0x4) ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, 0x0) setns(0xc9, 0x0) r11 = socket(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c010}, 0x8000) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x400000b6, 0x0, 0x7f}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb51f210cf1b400b85780000000109021200010100c00009042100000e01"], 0x0) r12 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000004c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro_nat=0x640a, 0x30000, 0x83, 0x5}}], 0x6f}) ioctl$KVM_RUN(r12, 0xae80, 0x0) 56.225154057s ago: executing program 6 (id=189): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000, 0x0) socket(0x1e, 0x2, 0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xffe, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x810018, &(0x7f0000000340)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x4a1, &(0x7f0000000b00)="$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") 55.875763573s ago: executing program 6 (id=192): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x16, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 55.80770832s ago: executing program 6 (id=193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x70}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x0, 0x1c, 0x67, 0x0, 0x1, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010100}, {0x11, 0x2, 0x0, @broadcast}}}}}}, 0x2e) (async) write$tun(r0, &(0x7f0000000280)={@val={0x70}, @void, @eth={@broadcast, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x0, 0x1c, 0x67, 0x0, 0x1, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010100}, {0x11, 0x2, 0x0, @broadcast}}}}}}, 0x2e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) eventfd(0x8c66) (async) r5 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000380)={0x2d1, 0x0, 0x1, r5}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000003c0)={0x9f, 0x0, 0x4, r5, 0x1}) (async) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000003c0)={0x9f, 0x0, 0x4, r5, 0x1}) ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000400)={0x86, 0x0, 0x1, r5, 0x5}) socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x15, &(0x7f0000000300)={0x11, 0xf5, r8, 0x1, 0x0, 0x6, @local}, 0x14) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x280c4cb, &(0x7f0000000180)=ANY=[], 0x1, 0x23b, &(0x7f0000002680)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000800000004000000000000930100b80bd80b82cefac4575aff8632cb000000615f5f615f600015412b929efcae2fb74da0f815b097cebbb485b5d89309f7f26e76240aff5f83ad7fb1a37ac1801944421133b2023f53af2707"], 0x0, 0x2c, 0x0, 0x9}, 0x28) listxattr(&(0x7f00000002c0)='./file2\x00', 0x0, 0x300) creat(&(0x7f0000000100)='./file3/file0\x00', 0xc2) (async) creat(&(0x7f0000000100)='./file3/file0\x00', 0xc2) 55.682784082s ago: executing program 6 (id=195): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file2\x00', 0x2210802, &(0x7f0000000340), 0xff, 0x240, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x42, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000bc0)=0x2) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@dioread_nolock}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x499, &(0x7f0000001a00)="$eJzs3M9vFFUcAPDvbLulgNiK+AMEqSKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4p149S8wnvRi1IsmXvVuSIjhAuJlzezM2KX7oy3dsoX9fJLdvrfzuu99Z+bNvJk3bQBdayh9SyIeiIg/ImIgy95eYCj7cfP6xYl/rl+cSKJSefvvpFruxvWLE0XR4ve2ZplKJc9valDvpfcixmdmps7l+ZH5Mx+OzJ2/8OL0mfFTU6emzo4dO3b40J6+o2NH2hJnGteNXZ/M7t55/N3Lb06cuPz+z0kpsrhjSRztMpSt3Yb2t7uyDttWk0560/f+PLf318UljfYEOqknItLNVa72/4Hoic3/LxuI1z/vaOOAdVWpVCotjsoLFeA+lkSnWwB0RnGiT69/i9ddGnpsCNdeyS6A0rhv5q9sSW+UssTe8pLr23YaiogTC7eupK9Yp/sQAAC1vk/HPy80Gv+V4tEs0Ze+PZjPoQxGxEMRsT0iHo6IHRHxSES17GMR8fgq6186Q1I//ildvePgViAd/72cz23dPv4rFUUGe/Lctmr85eTk9MzUwXydHIjyppPTydRoizp+eO33L5stq47/isH4wq0raf3FWDBvx9XeJTfoJsfnx9cSc61rn0Xs6m0Uf1KdF4h8Xm9nROy6wzqmn+ttuqx2/HuiYfwtNP/aFat8HfFstv0XYkn8haTp/OToS0fHjoz0x8zUwZFir6j3y2+X3mpW/5rib4N0+2+pxl9cC9bFP5j0R8ydv3C6Ol87t/o6Lv35RdNrmuXjv23/P74t3//7kneqH/TlCz4en58/NxrRl7xR//nY4rcV+aJ8Gv+BfY37//ZYXBNPRMTuiNgTEU+mF4V525+KiKcjYl+L+H969ZkPVh9/47vy5Rb13Ik0/smGx7+a7R+123/1iZ7TP363fPz9EdFs+x+upg7kn6zk+LfSBq5l3QEAAMC9InsGPikNL6aT4eHsGf4dsaU0Mzs3//zJ2Y/OTmbPyg9GuVTc6RqouR86mt8bLvJjS/KH8vvGX/VsruaHJ2ZnJjsdPHS5rXX9v1RK+3/qr55Otw5Yd22YRwPuUfo/dC/9H7pTsmz/b/cjR8BG4vwP3atR//+0aenhb9e1McBd5fwP3WsF/X8h+9F8VADcm5z/oXvp/9CVmv5tfGlNf/Lf1sSeb7K2tirzb/4vVDZKm+//RJQ2RDPu/0Rv639msT8ilvmecn1frgxkfSr9ZFPD3+roYQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/gsAAP//90bgLQ==") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpriority(0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x8, 0x4, 0x2, 0x8c, 0x1}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000004a00030000000000000000000a008000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b'], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x24008880) r3 = open(&(0x7f0000000380)='./bus\x00', 0x44040, 0x10) truncate(&(0x7f00000003c0)='./bus\x00', 0x9471) finit_module(r3, 0x0, 0x0) 52.465191121s ago: executing program 6 (id=202): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r0 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r1, r1, 0x0, 0x40000000800) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) (async) socket(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) (async) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) (async) fallocate(r1, 0x0, 0x0, 0x1000f4) (async) sendfile(r1, r1, 0x0, 0x40000000800) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) sendfile(r2, r1, 0x0, 0x7ffff000) (async) 50.863044825s ago: executing program 6 (id=208): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x2) recvmmsg(r1, &(0x7f0000000500), 0x80002c1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xb21ec000, 0x0, 0x0, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x8100, &(0x7f0000000640)={0x0, 0x84, 0x40000}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') 35.521979712s ago: executing program 34 (id=208): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000004c0)=0x2) recvmmsg(r1, &(0x7f0000000500), 0x80002c1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0xb21ec000, 0x0, 0x0, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x8100, &(0x7f0000000640)={0x0, 0x84, 0x40000}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') 17.158302627s ago: executing program 1 (id=329): mlockall(0x0) syz_emit_ethernet(0x27, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a84d0081004b0088480e542900500098fd0b001b0bb3639b137db1ab57c9b8889692a70ce9c781add31c769d18dbd1f37a4402dc1361e2703b5c50cf2dc181ccf847f843ea732b334bbd6fde706decaff24b826711e93a17b094b96bee426ff8f0b6054aec6fa73db89858af9db031968a0e18aa57c318b2262e477da882a01168ee3dddaa88c5a2fcc68380818de3d6e80328db3fe5f7ee5c974089624845155723d445c7ea7a5d22431338c16d69d2d614274747e55d330d18f36c5ff4d36787c88c2b75"], 0x0) syz_emit_ethernet(0xae, 0x0, 0x0) unshare(0x22020600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_create_resource$futex(&(0x7f0000000040)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) futex(r0, 0x5, 0x1, 0x0, r0, 0x5000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000440)='./file1\x00', 0x4604, &(0x7f0000000480)=ANY=[], 0x3, 0x335, &(0x7f00000004c0)="$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") r1 = getpid() syz_pidfd_open(r1, 0x0) truncate(&(0x7f0000000d00)='./file1\x00', 0x3c4c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs, 0x6e) 15.311295686s ago: executing program 1 (id=334): r0 = syz_create_resource$futex(&(0x7f0000000000)) futex(r0, 0x5, 0xfffffffe, 0x0, r0, 0xbffffffd) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00') write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000001580)={0xd091, 0xa, 0x1a18f3d5, 0x7, 0xfffffffffffffffe}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001400)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd27, 0x25dfd402, {0x0, 0x0, 0x0, r4, 0x65e98, 0x16a81}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x83}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x3}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2400c844}, 0x200088c2) r5 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000001080)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r1], 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001540), 0x800, 0x0) syz_usb_control_io(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001380)={&(0x7f00000010c0)="7936c3db8579f60b4de68c27de8123ddfb549569665d0f96601380d3ef9d2be73ee3a3a6ff0083a43484470181423bcb913a408e8e603136be99b53b9c1d5069fee49de6255b7bcd469f5ce165c85254aa7075fa43832eb0053816a6488616e15c3f51794cdd6373c21b23e2f5df27606033a0a38adfabe8fdb627cc48a4a78ee4a6e7ceb6b98fd781cd790a298fbdcea6b3ca485e7bc67d7d237b9babc1", &(0x7f0000001180)=""/192, &(0x7f0000001240)="e3d917cc0af085a45ec77239d75822957ca048bfbda071217a1a9a1eb2c73924b37779d7631f55ac76a9", &(0x7f0000001280)="fe24b88042f739be53027b53817d29b700c43d9f523f1b7dbffb9bd3b5ebbfe1beb84f7c86a1a5a836192a61fa193507e02fca6bf06df2c0002afa3078fff37dac8cbcb47bc7617198b06c91853c828160712ab44e3a17f72b997a527d3bcd3164b68576cefc8706377aed07c28b66195c196061be7ef2a4be1f997efb143fa188e877170355e039bf37d1744c81feb0570ac7d76b771a44853c3493417e0e2c82e9cf0d78822cdf47b0c3e1b2154a7039e2ebc2ceeec5ebda4dcfb37e361af57c8b274451b6b6a48d61a972b3d9722ff26843a19e531920575fc3087cf15a7c767f93cf53587658d1df4f8d774f85f5dbdcf18decc59fcd", 0x5f8a, 0xffffffffffffffff, 0x80139d1a914f6b7c}, 0x38) socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) 15.07574714s ago: executing program 7 (id=252): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x452800, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1000000801, 0x3) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) 13.433839538s ago: executing program 5 (id=337): socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000bc0)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) setitimer(0x0, &(0x7f0000000c40)={{0x0, 0x1}, {0x0, 0x1}}, 0x0) rt_sigtimedwait(&(0x7f0000000c80)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x9, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x3, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x4, 0x4, 0x10000, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50) gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8003, 0xc, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r3, 0x2, &(0x7f00000003c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={0xffffffffffffffff, 0x1f00, 0x18, 0x19, &(0x7f0000000a80)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000ac0)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000b80)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) r5 = io_uring_setup(0x168e, &(0x7f0000001d80)={0x0, 0x1, 0x0, 0x0, 0x3af}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000d80)=""/4081, 0xff1}, {0x0}], 0x2) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) getsockopt$nfc_llcp(r0, 0x118, 0x2, 0x0, 0x0) 12.783541734s ago: executing program 3 (id=341): r0 = gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000100)=""/120) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r4, &(0x7f0000000340), 0x10106, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000380)={0xa, 0x4c04, 0x6, @dev={0xfe, 0x80, '\x00', 0x35}, 0x22}, 0x1c) sendmmsg$inet6(r6, &(0x7f00000003c0)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r6, 0x0, 0x0, 0x8000, 0x0, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000840)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) syz_mount_image$erofs(&(0x7f0000001880), &(0x7f00000018c0)='./file0\x00', 0x2000802, &(0x7f0000001900)=ANY=[@ANYRES16=0x0, @ANYRESOCT=r4, @ANYRES16=r2, @ANYRES16=r4], 0x0, 0x193, &(0x7f0000001940)="$eJzsmD9PKkEUxc/M8ifv5TWvfc0rJIqFy+6ixoYYOksTUWMngZWgixjYQqi08XuY2FlY2/khjLVaGBtKO82amR3YAQU1mpDo/RWXc3fvDnfvbE4xIAjix3J783C9WLjiBoA/SCGprt8bUQ3X6h8vj0rNv0u508m73Hmyfja4HgMQBO///xiAi7wBX+VB0P90Sv0WwHt6FRzTSq+DwVR6ExxrSrtg2FB6W9N1UW+aW1XPNUt1ryyEJYItgiNCdrC/ziFDWeuPafebrfZO0fPcBqBE78qXibfm18lz5LT+9P3qzsbS5meDw1Y6C4YVpReQ7M4mHIn2/v9i0frGa+9PYowiLr748bdB4vPi5LtsZeRPwTHDlOZPMc0/Mn5tL9NstWeqtWLFrbi7jpOdt2Yta87JSCMK4wj/+yX96be2fnxIbYIlsF/0/YYdxl7uhPEpeOm4XPofR3oizIX3J4Z2E95n6jkmVdoYUU4QBEEQBEEQBEEQBEEQBPEB/oPJU1AJO0CU9OEsy3PM5wAAAP//yWpwiw==") mkdir(&(0x7f0000001b00)='./bus\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0xc, 0xe, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000002700)='syzkaller\x00'}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0xc, 0x7, &(0x7f0000002800)=ANY=[@ANYBLOB="7911a800000000005501020000000000b7000000000000009500000000000000850000008b000000b70000000000000095"], &(0x7f0000002840)='GPL\x00', 0x2, 0x20000, &(0x7f0000002880)=""/131072, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000022880)={r7, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000022900)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000022a00), &(0x7f0000022a40)}, 0x2a) setrlimit(0x40000000000008, &(0x7f0000022a80)={0x4848, 0xfffffffffffff006}) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) 12.783376174s ago: executing program 7 (id=252): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x452800, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1000000801, 0x3) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) 10.263660482s ago: executing program 1 (id=342): r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x8541, 0x1a9) timer_create(0x8, &(0x7f0000000300)={0x0, 0x11, 0x1}, &(0x7f0000000380)=0x0) timer_settime(r1, 0xca9a3b, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(r1, &(0x7f0000000400)) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000280)={0x9, 0x48, [0x9, 0x7, 0x7, 0x9], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000100)="0c9ccd33de9aacff5a7d649d0c393af3e6e6b6f481cded7bb7fb2e48648cf2519bd999299ec3577702479c98d9d2266f53570c6df69c7cc2e5895962718fc0db17d631538b4d0f0ce28fce7c168d294be63b6f0f6fdaf6bc62c83cfa5f90a5a64095e69ef088ba8b9a6a9ebc8ed659cd197933ec7d37a6df0f0ab97bac071bcd91961b9ddf20e7bc1c49abbbb2da8977284bd8daf51d6f1ed58a65cf099b3ce780dda7d24e9f68128fe4c9e6b45c9c9af4fe94e60c681c7fc01715ae4ad2b3f0c6303961ebaf9d7a40e4e25f72b1f983", 0xd0, 0x8000c65) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x101042, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000070001000000000000000071123300000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) read$FUSE(r3, &(0x7f0000001640)={0x2020}, 0xfffffeb1) fallocate(r0, 0x8, 0x4000, 0x8000) ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, 0x0) 10.262155852s ago: executing program 5 (id=343): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x10) recvmmsg(r2, &(0x7f0000000340), 0x4000087, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2004402, &(0x7f0000000400)=ANY=[]) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='mounts\x00') read$FUSE(r5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[], 0x1, 0x24b, &(0x7f0000000b40)="$eJzs3bFqFFEUBuCTZJMsaUwtFgM2Vota2S4SQVwQVqbQyoFok4gwaUareQyfwUfyMVKlG9FZMpu4CpJs7u7s98FyD/wsnNvMbc6def/g08nx57OPzY9vMRxmMYiomybiMLZjJ2a2u2Ur9mJeHQDAuplOi3HqHliushwXuxGx/0eSf0/SEAAAAAAAAAAAADe2aP4/Lq7O/2/NVvP/ANAP5v/7ryzHxUF3jXOO+X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgnYumudf845e6PwDg9jn/AWDzOP8BYPP83/lfpWoTALhFb96+ezWeTI6mWTaMOK+rvMrbtc1fvJwcPc5+O+z+dV5V+c5l/qTNs6v5bhzM8qcL87149LDNf2XPX0+u5ftxvPztAwAAAAAAAAAAAAAAAAAAwEoYZZcW3u8fjf6Wt9Xc+wGu3d8fxP3BnW0DAAAAAAAAAAAAAAAAAAAA1trZl68nxenph1LRmyKerUQbd11ErEQbfSlSP5kAAAAAAAAAAAAAAAAAAGDzdJd+U3cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOl03/9fXhERddNKvV0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgx34GAAD//xz2m0c=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) 10.257442122s ago: executing program 3 (id=344): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000001c0), 0x651, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x401d831, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = timerfd_create(0x1, 0x80000) read(r2, &(0x7f0000000880)=""/250, 0xfa) timerfd_settime(r2, 0x3, &(0x7f0000000980)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x2000490, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000500)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000800)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) 8.525755159s ago: executing program 5 (id=346): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000100000000000000e0400000002000000000000000000000d00000000000000000000000b02000000006100302600d92ded243753e194bb83f9e558a5359ed782c77feff80b440a579dcbe2c9e77f4787"], 0x0, 0x46}, 0x28) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r1, &(0x7f00000017c0)=""/4096, 0x1000) r2 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x85ac81, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000003180)='.\x00', &(0x7f00000031c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000003200)='./file0\x00', &(0x7f0000003240)='./file0/../file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xe, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002cc0)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002d80)={0x1, 0x8, &(0x7f0000002e40)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000002e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002ec0)={{r6}, &(0x7f0000002f00), &(0x7f0000002f40)=r3}, 0x20) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000003280)) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000002f80)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000002fc0)={0x0, 0x0, 0x0}, 0x80) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x0}) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000032c0)=""/176, &(0x7f0000003380)=0xb0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f00000033c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003480)={{r1, 0xffffffffffffffff}, &(0x7f0000003400), &(0x7f0000003440)=r3}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000034c0)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0x5, '\x00', r10, r3, 0x4, 0x5}, 0x50) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000003000)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000003080)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000003100)=@newtclass={0x6c, 0x28, 0x601, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x1, 0xfff1}, {0x8, 0xfff1}, {0x0, 0xa}}, [@tclass_kind_options=@c_htb={{0x8}, {0x40, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x1, 0x0, 0x3f1, 0x2, 0x8}, {0x8, 0x0, 0x8, 0x7b, 0x7ff, 0x4}, 0x4, 0x5, 0xffff, 0x8, 0x2}}, @TCA_HTB_RATE64={0xc, 0x6, 0x400000400}]}}]}, 0x6c}}, 0x20000000) syz_ublk_setup_queues(r2, 0x0, &(0x7f0000000140)={0x0, 0xca87, 0x8, 0x1, 0x1e4}, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9496, 0x4a020, 0x2, 0x2f3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xde9f, 0x42050, 0x0, 0x96}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7b86, 0x8, 0x0, 0x321}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c4, 0x4000, 0x3, 0x260}}], 0x4, &(0x7f00000016c0)={0x2e, 0x2d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x0, 0x283, 0x0, &(0x7f00000006c0)=@buf_512="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"}}, &(0x7f0000001740)) io_uring_enter(r12, 0x1366, 0xda79, 0x1, &(0x7f0000001780)={[0x64e]}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f0000000100)={0x11, 0xe, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x5, 0x4) 8.482236224s ago: executing program 7 (id=252): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x452800, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1000000801, 0x3) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) 6.611020435s ago: executing program 1 (id=347): r0 = socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="100000000400000004000000"], 0x50) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_open_dev$loop(0x0, 0x5, 0x86100) ioctl$EVIOCRMFF(r1, 0x83c0550b, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000740)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000780)=0x0) rt_tgsigqueueinfo(r3, r2, 0x1d, &(0x7f00000007c0)={0x30, 0x10}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x220d4e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@jqfmt_vfsold}, {@nodelalloc}, {@bsdgroups}]}, 0x3, 0x471, &(0x7f00000002c0)="$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") 6.610434835s ago: executing program 5 (id=348): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0xb8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000640)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x181441, 0x148) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0x0) (async) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000b80)={0xa, 0x400000000008d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000c00)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000c40)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f00000000c0)=0x7, 0x4) (async) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) (async) connect$unix(r3, &(0x7f0000000cc0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000d40), 0x651, 0x0) (async) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) (async) recvmmsg(r3, &(0x7f0000000d80), 0x4000087, 0x2, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000dc0)=[{{&(0x7f0000000e00)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24004800) syz_mount_image$vfat(&(0x7f0000000e40), &(0x7f0000000e80)='./file0\x00', 0x18000, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES64=r1, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0xff, 0x304, &(0x7f0000000f40)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) (async) mkdir(&(0x7f0000001280)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300), 0x8, &(0x7f0000001340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) unlink(&(0x7f0000001380)='./file0/file1\x00') (async) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_pid(r6, 0x0, 0x0) 6.608581335s ago: executing program 3 (id=349): r0 = syz_clone(0x81248080, 0x0, 0x4c, 0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x561000, 0x0) ptrace(0x10, r0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES8], 0x0) wait4(r0, 0x0, 0x8, 0x0) 6.510043385s ago: executing program 4 (id=351): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x5, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000061180000000000007a0af8ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150802000000010018110000", @ANYRES32=r1, @ANYBLOB="0000000000000040bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.496622166s ago: executing program 7 (id=252): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x452800, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1000000801, 0x3) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) 4.571023113s ago: executing program 1 (id=352): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000004c0)={0x2c, 0xd, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48020}, 0x80) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./dev\x00', &(0x7f00000006c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e40)='./dev/console\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000e80)={0x7ffffff9, 0xfcd, 0x70, 0xff, 0x16, "388d673f088b000000020000000000001af800"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000ec0)=0xb8) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000400)={0x2, &(0x7f0000000440)=[{0x20, 0x81, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000000480), 0x400000000000159, 0x40840) sched_setscheduler(r2, 0x2, &(0x7f0000000500)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000600), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000640), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x1c1) read$FUSE(0xffffffffffffffff, &(0x7f00000017c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000003800)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x62b, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) add_key(&(0x7f0000000480)='asymmetric\x00', 0x0, &(0x7f00000008c0)="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", 0x559, 0xfffffffffffffffd) getdents(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc010000190001000000000000000000e0000001000000000000000000000000ac1414bb0000000000000000000000004e200000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder0\x00', 0x800, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) 4.570266093s ago: executing program 5 (id=353): readv(0xffffffffffffffff, 0x0, 0x0) (async) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) (async, rerun: 64) r1 = syz_io_uring_setup(0x37e7, &(0x7f0000000a80)={0x0, 0x30dd, 0x1000, 0x1, 0x29}, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)) (rerun: 64) r2 = eventfd2(0xf1b, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000bc0)=r2, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x96af, 0x2a}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x16}]}, 0x48}}, 0x4011) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) (async) syz_emit_ethernet(0x2b, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x2000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9, 0x0, @opaque='\x00'}}}}}, 0x0) (async, rerun: 64) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000280)={{0x2, 0x0, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x11, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xff}}, 'vcan0\x00'}) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0xd, 0x4, &(0x7f0000000e80)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x50}]}, &(0x7f0000000ec0)='GPL\x00'}, 0x80) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000880)={r7, &(0x7f00000008c0), &(0x7f0000000900)=@tcp6=r5}, 0x20) sendmmsg$inet(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='U', 0x1}], 0x1}}], 0x1, 0x804) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={0x0}, 0x11, 0x0, 0x0, 0x24000000}, 0x4) syz_usb_connect(0x0, 0x97, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e04103000010000000109028500020100803209040000000101000009240100013f0001010c24020101020002030000000c240202fe050002030000000c2402030506000203000000092405080301020300092403090101000800"], 0x0) syz_usb_connect$midi(0x1, 0xd1, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x1, 0x1, 0x63, 0x70, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x20, 0x8, [@ms_header={0x7, 0x24, 0x1, 0xd, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xee, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0x10}, @midi_out_jack={0xf, 0x24, 0x3, 0x1, 0x80, 0x4, [{0xbe, 0x5}, {0x2, 0x73}, {0xe, 0xf0}, {0x2, 0x8}], 0xf9}, @midi_out_jack={0x11, 0x24, 0x3, 0x3, 0xfe, 0x5, [{0x0, 0x4}, {0x0, 0x4}, {0x10, 0x9}, {0x1, 0xc}, {0x4, 0x46}], 0x2}], [{{0x9, 0x5, 0x7, 0x10, 0x28, 0x6, 0x80, 0xa, {0xa, 0x25, 0x1, 0x6, "3684e674a23c"}}}, {{0x9, 0x5, 0x5, 0xc, 0x408, 0xfd, 0x9, 0x80, {0x5, 0x25, 0x1, 0x1, 'o'}}}, {{0x9, 0x5, 0x1, 0x8, 0x400, 0x6, 0x7, 0x6, {0xd, 0x25, 0x1, 0x9, "33cbe875f1418992c7"}}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x9, 0xd, 0x8, {0x9, 0x25, 0x1, 0x5, "1b5a1ed07f"}}}, {{0x9, 0x5, 0xd, 0xc, 0x8, 0x8d, 0x9, 0x7f, {0x5, 0x25, 0x1, 0x1, "d9"}}}, {{0x9, 0x5, 0x0, 0x437d099d0e3d5b9e, 0x20, 0xa, 0x6, 0x80, {0x12, 0x25, 0x1, 0xe, "eb5b97dce313440c2f0e316bb9f2"}}}]}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x300, 0x5, 0x0, 0x7, 0x8, 0x7}, 0xfffffe09, &(0x7f0000000180)={0x5, 0xf, 0x2d, 0x2, [@ptm_cap={0x3}, @generic={0x25, 0x10, 0x1, "d4ed6485b17a9f131edc247c79eddeedb55a2da251d82fde2c5433f48b694d9d178b"}]}, 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x445}}, {0x9f, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, {0x91, &(0x7f0000000380)=@string={0x91, 0x3, "5f01b57ec6c5f310b7c01820ffd883a4879aad94cac1fb853c301d7d90db53c399c604975a9fb0eb28e9d190b752b359ae8bd3e4c6f28f5835220078ed702aed7e8fc78b0b775908c620d69f24159bc14d576e8e11cec0ee67ba40d98b09cec5923df4d3b0c69a723731cbd16aade27368142c6ef948c364b1a9ee12206d5b638c8a78675692bc9a108a0c85f2aa05"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2001}}, {0xfb, &(0x7f0000000500)=@string={0xfb, 0x3, "58d4766faa0abc5a7e427119d425bb2c582cf855865c9154ba09b5acc11e20a1f843454985ce30475fb218464b7af8cbe6b71d91bb8af3cf9981a3aefbc2aae4dc615c7d50120e3d7652554ab746116ca34bff7a3f709647d59339b86fe5d11e916d1809e6109939d2ed0d635d351f26adcb70ef3e74721a1dd2d7bd7ea49bc8a530ec8e943c547687e91b5716eeacc50a57738a34e0cbbf2fe8d8dd5b97098383aaee3ed7c563b63949a59d36f8b5ba9baa306c21237eacd86fc00411c11c754f336073d39504ca13364e3f75f9a410e7cca4614fc8ade42e7ad1a415b0387bafed4417b6291ddb7ef42396ab861071dd0840c4af4e4a35bd"}}]}) 4.569023133s ago: executing program 3 (id=354): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000060000402505a1a440000102030109025c0002010000000901000100020d0000052406000105240000000d240f0100000000000000000006241a00e8000905810300020000000904010000020d00000904010120ee0e"], 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000005680)=[{0x20, 0x2, 0x84, 0xfffff034}, {0x20, 0x0, 0x6, 0xfffff00c}, {0x6, 0x2, 0x2, 0xffff}]}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000056c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000005700)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000005740)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000005780)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000057c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005800)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, 0x0, 0x0) connect$unix(r3, &(0x7f0000005840)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000058c0), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000005900)=0x2) recvmmsg(r3, &(0x7f0000005940), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005980)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000059c0)='./proc\x00', &(0x7f0000005a00)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000005a40)='./proc/mtrr\x00', 0x2, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000005a80)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) connect$unix(r1, &(0x7f0000005ac0)=@file={0x0, './file0\x00'}, 0x6e) poll(&(0x7f0000005b40), 0x20000000000000b5, 0x9) r5 = syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file2\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0x1, 0x5504, &(0x7f0000000140)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=") ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) dup(0xffffffffffffffff) 4.566979694s ago: executing program 4 (id=355): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000080)={[{@delalloc}, {@jqfmt_vfsv1}]}, 0x2, 0x456, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', 0x100, 0x52) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) read(r0, &(0x7f00000009c0)=""/204, 0xcc) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000780), 0x0, 0x20004020) recvmmsg(r4, &(0x7f0000004500)=[{{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000140)=""/254, 0xfe}, {&(0x7f0000000240)=""/206, 0xce}, {&(0x7f0000000340)=""/120, 0x78}, {&(0x7f00000003c0)=""/178, 0xb2}, {&(0x7f0000000480)=""/8, 0x8}, {&(0x7f0000000880)=""/129, 0x81}, {&(0x7f0000000940)=""/67, 0x43}, {&(0x7f0000000cc0)=""/233, 0xe9}], 0x8, &(0x7f0000001440)=""/154, 0x9a}, 0x8}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001500)=""/187, 0xbb}, {&(0x7f00000015c0)=""/137, 0x89}, {&(0x7f0000001680)=""/47, 0x2f}, {&(0x7f00000016c0)=""/37, 0x25}, {&(0x7f0000001700)=""/79, 0x4f}, {&(0x7f0000001780)=""/9, 0x9}, {&(0x7f00000017c0)=""/81, 0x51}, {&(0x7f0000001840)=""/6, 0x6}, {&(0x7f0000001880)=""/126, 0x7e}], 0x9, &(0x7f00000019c0)=""/201, 0xc9}, 0x1}, {{&(0x7f0000001ac0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/166, 0xa6}, {&(0x7f0000002c00)=""/45, 0x2d}], 0x3, &(0x7f0000002c80)=""/2, 0x2}, 0x2}, {{&(0x7f0000002cc0)=@phonet, 0x80, &(0x7f0000003e80)=[{&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/145, 0x91}, {&(0x7f0000003e00)=""/12, 0xc}, {&(0x7f0000003e40)}], 0x4, &(0x7f0000003ec0)=""/201, 0xc9}, 0xc8}, {{&(0x7f0000003fc0)=@generic, 0x80, &(0x7f0000004200)=[{&(0x7f0000004040)=""/155, 0x9b}, {&(0x7f0000004100)=""/186, 0xba}, {&(0x7f00000041c0)=""/18, 0x12}], 0x3, &(0x7f0000004240)=""/102, 0x66}, 0x7}, {{&(0x7f00000042c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004340)=""/219, 0xdb}, {&(0x7f0000004440)=""/107, 0x6b}], 0x2}, 0x3d}], 0x6, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000e40)=ANY=[@ANYBLOB="38010000100001000000000000000000fc010000000000000000000000000001fc0100000000000000000000000000014e2000004e2000000a00a08000000000", @ANYRES16=r2, @ANYRES8=r6, @ANYBLOB="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"], 0x138}}, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000804}, 0x8004) rt_sigqueueinfo(0x0, 0x36, &(0x7f0000000ac0)={0xfffffffe, 0xff, 0x7}) r8 = syz_create_resource$futex(&(0x7f00000007c0)=0x1) r9 = syz_create_resource$futex(&(0x7f00000004c0)) futex(r8, 0xb, 0x1, 0x0, r9, 0x0) futex(r8, 0xc, 0x1, 0x0, r9, 0x1) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000000b80), 0x101001, 0x0) syz_clone3(&(0x7f0000000bc0)={0x280000000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, {r10}}, 0x58) futex(r9, 0x7, 0x0, 0x0, 0x0, 0x0) ioctl(r7, 0x6, 0x0) 3.937565748s ago: executing program 7 (id=252): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x452800, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1000000801, 0x3) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) 1.700210317s ago: executing program 1 (id=356): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x10) recvmmsg(r2, &(0x7f0000000340), 0x4000087, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2004402, &(0x7f0000000400)=ANY=[]) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='mounts\x00') read$FUSE(r5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[], 0x1, 0x24b, &(0x7f0000000b40)="$eJzs3bFqFFEUBuCTZJMsaUwtFgM2Vota2S4SQVwQVqbQyoFok4gwaUareQyfwUfyMVKlG9FZMpu4CpJs7u7s98FyD/wsnNvMbc6def/g08nx57OPzY9vMRxmMYiomybiMLZjJ2a2u2Ur9mJeHQDAuplOi3HqHliushwXuxGx/0eSf0/SEAAAAAAAAAAAADe2aP4/Lq7O/2/NVvP/ANAP5v/7ryzHxUF3jXOO+X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgnYumudf845e6PwDg9jn/AWDzOP8BYPP83/lfpWoTALhFb96+ezWeTI6mWTaMOK+rvMrbtc1fvJwcPc5+O+z+dV5V+c5l/qTNs6v5bhzM8qcL87149LDNf2XPX0+u5ftxvPztAwAAAAAAAAAAAAAAAAAAwEoYZZcW3u8fjf6Wt9Xc+wGu3d8fxP3BnW0DAAAAAAAAAAAAAAAAAAAA1trZl68nxenph1LRmyKerUQbd11ErEQbfSlSP5kAAAAAAAAAAAAAAAAAAGDzdJd+U3cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOl03/9fXhERddNKvV0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgx34GAAD//xz2m0c=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) 1.693593997s ago: executing program 4 (id=357): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x3de8, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x80000000, 0x101, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x7fff, 0x6, 0x2, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x3, 0x8001, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1004, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x1ff, 0x2, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x40000008, 0x809, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x400, 0xd67, 0x7, 0x5, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x800, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x7ff, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x4, 0x1b2a, 0x81, 0x9, 0x1c, 0x4, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x9, 0x3, 0x3, 0xfffffff4, 0x8, 0x6, 0xfff, 0x8, 0x2, 0x5, 0x3, 0x3, 0xd7c3, 0x2, 0xfffffffe, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x3, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x6, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x3, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x7ffe, 0xa, 0x9, 0xca000000, 0x4, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x61fe, 0x9, 0x6, 0x7, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x7117, 0x3, 0x7e54, 0xa, 0x4, 0x4, 0xc, 0x80000001, 0x4, 0x5, 0x10000002, 0xb, 0x7, 0x2, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff}, 0x9, 0xbc, 0xdf72c67}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x490}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0xf, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.650464152s ago: executing program 4 (id=358): r0 = socket(0x22, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@getlink={0x20, 0x12, 0x2fa9ccd93d5c0097, 0x70bd3b, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x10, 0x4, &(0x7f0000000e40)=ANY=[@ANYBLOB="b400000000000000791048000000000079001800000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e0c01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cd93263ff755d611c4cca1684b14708f6a83366aa430ad2d700b186da622d6fba700000000000000000000000002000000000000f2badf9815c5000000"], &(0x7f0000000f00)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000000f40)=""/209, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x36) 488.86026ms ago: executing program 4 (id=359): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x800) 254.256624ms ago: executing program 5 (id=360): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/wireless\x00') preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000340)=""/171, 0xab}], 0x1, 0x0, 0x0) (async) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000400)=@generic={0x1, 0x1, 0x400}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'pimreg1\x00', 0x2}) (async) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x3, [{}]}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x5a}, 0x28) 247.085015ms ago: executing program 4 (id=361): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x201}}}}}]}}]}}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000300)={0x0, 0x0}, 0x10) 149.024965ms ago: executing program 3 (id=362): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2a1f, &(0x7f0000000480)={0x0, 0xae7a, 0x80, 0x1, 0x240}, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/130, 0x82}, {&(0x7f0000000280)=""/167, 0xe6}, {&(0x7f0000000340)=""/213, 0xd5}, {&(0x7f00000017c0)=""/249, 0xf9}, {&(0x7f0000000600)=""/146, 0x92}, {&(0x7f00000006c0)=""/54, 0x36}, {&(0x7f0000000700)=""/107, 0x6b}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x8}, 0x5}, {{0x0, 0x0, 0x0}, 0xedb4}], 0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000440)={@remote, @multicast2}, &(0x7f0000001780)=0xc) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000040)={0x2, 0x7, 0x28, &(0x7f0000000000)=""/40}) 25.166317ms ago: executing program 3 (id=363): r0 = socket$netlink(0x10, 0x3, 0x4) read(r0, &(0x7f0000000040)=""/63, 0x3f) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xe) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c1000ffffffa6224e0000", 0x58}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000067d0304f176a02e7ac80d0c20924495c766b3d8781e2046b67e8d74364dda6072dc35493886632d6cd6dc7f554dcbf454cc7b4493251292afafd66ac1c6a4a1c0fb62de5612a3cfe69731290418c6e942a91a8f125cab8fc684e3c10bf0e3d2152", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f0000001f40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000020000207bb91859f89312e2e92844a2e4000000000500020000f8ffffffb70300eb07000000d30e0000000000008501000003000000955d177217a1d001fa1eb37dbd473cd9453afb0673bcae81a8b200ebefd3fefed0dbed72b4087c8bc869f84fd88815b04171e254a6cc79d472afe2495d51191359214c5243e80fedbfbf92d529c8448d6e9f2b345f0e"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000500)=0x5) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000600), 0x318, 0x0) recvmmsg(r5, &(0x7f0000000640), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x100000000e2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) keyctl$clear(0x3, 0xfffffffffffffffd) ptrace$ARCH_MAP_VDSO_64(0x1e, r4, 0x7, 0x2003) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000006c0)={0xaf76, 0x3, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5455a3247e500f61669905db88235f8a5447dd2a2ed6e91626f158881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb7bc33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a825782f14eee686be0e358e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39e1aefe363590d1f600"}) syz_mount_image$exfat(&(0x7f0000000800), &(0x7f0000000840)='./file1\x00', 0x8000, &(0x7f0000000880)=ANY=[], 0x1, 0x14fe, &(0x7f0000000a40)="$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") 0s ago: executing program 7 (id=252): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x452800, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x1000000801, 0x3) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): (NETDEV_CHANGE): vcan0: link becomes ready [ 49.970337][ T548] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.989243][ T551] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 50.031984][ T547] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 50.040600][ T547] FAT-fs (loop4): Filesystem has been set read-only [ 50.065575][ T290] syz-executor: attempt to access beyond end of device [ 50.065575][ T290] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 50.080368][ T290] syz-executor: attempt to access beyond end of device [ 50.080368][ T290] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 50.082378][ T551] device xfrm0 left promiscuous mode [ 50.103616][ T291] EXT4-fs (loop1): unmounting filesystem. [ 50.112457][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 50.149880][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.165163][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 50.173489][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.182205][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.190523][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.198856][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.207349][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.325343][ T318] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 50.412720][ T562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.55'. [ 50.441239][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 50.662171][ T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 50.721327][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 50.837838][ T24] usb 2-1: New USB device found, idVendor=2b73, idProduct=0023, bcdDevice= 0.40 [ 50.937683][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.012908][ T41] device bridge_slave_1 left promiscuous mode [ 51.020881][ T24] usb 2-1: Product: syz [ 51.031138][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.063595][ T24] usb 2-1: Manufacturer: syz [ 51.254270][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 51.254283][ T28] audit: type=1400 audit(1794115567.975:192): avc: denied { mounton } for pid=566 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 51.264102][ T24] usb 2-1: SerialNumber: syz [ 51.309811][ T41] device bridge_slave_0 left promiscuous mode [ 51.316055][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.331471][ T318] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 51.343419][ T318] usb 1-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40 [ 51.352799][ T318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.361935][ T318] usb 1-1: Product: syz [ 51.366209][ T318] usb 1-1: Manufacturer: syz [ 51.371012][ T318] usb 1-1: SerialNumber: syz [ 51.375793][ T41] device veth1_macvtap left promiscuous mode [ 51.381951][ T41] device veth0_vlan left promiscuous mode [ 51.519283][ T570] device xfrm0 entered promiscuous mode [ 51.556396][ T570] loop3: detected capacity change from 0 to 512 [ 51.606851][ T28] audit: type=1400 audit(1794115568.325:193): avc: denied { create } for pid=554 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 51.633854][ T570] FAT-fs (loop3): Directory bread(block 2080) failed [ 51.640689][ T570] FAT-fs (loop3): Directory bread(block 2081) failed [ 51.647448][ T570] FAT-fs (loop3): Directory bread(block 2082) failed [ 51.654210][ T570] FAT-fs (loop3): Directory bread(block 2083) failed [ 51.660956][ T570] FAT-fs (loop3): Directory bread(block 2084) failed [ 51.667696][ T570] FAT-fs (loop3): Directory bread(block 2085) failed [ 51.674445][ T570] FAT-fs (loop3): Directory bread(block 2086) failed [ 51.681199][ T570] FAT-fs (loop3): Directory bread(block 2087) failed [ 51.719644][ T570] FAT-fs (loop3): Directory bread(block 2080) failed [ 51.726494][ T570] FAT-fs (loop3): Directory bread(block 2081) failed [ 51.817936][ T555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.965615][ T555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.018123][ T574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 52.032664][ T573] loop0: detected capacity change from 0 to 256 [ 52.053980][ T555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.105818][ T574] netlink: 28 bytes leftover after parsing attributes in process `syz.4.60'. [ 52.122933][ T573] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 52.142902][ T555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.218108][ T318] usb 1-1: Fast Track Pro config OK [ 52.240869][ T318] usb 1-1: MIDIStreaming interface descriptor not found [ 52.265767][ T28] audit: type=1400 audit(1794115568.945:194): avc: denied { create } for pid=566 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.288688][ T318] usb 1-1: USB disconnect, device number 3 [ 52.328715][ T28] audit: type=1400 audit(1794115569.035:195): avc: denied { write } for pid=572 comm="syz.0.61" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.352041][ T28] audit: type=1400 audit(1794115569.035:196): avc: denied { add_name } for pid=572 comm="syz.0.61" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.373202][ T28] audit: type=1400 audit(1794115569.035:197): avc: denied { associate } for pid=572 comm="syz.0.61" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 52.375522][ T575] ------------[ cut here ]------------ [ 52.400005][ T575] WARNING: CPU: 1 PID: 575 at crypto/rsa-pkcs1pad.c:540 pkcs1pad_verify+0x4b8/0x600 [ 52.409480][ T575] Modules linked in: [ 52.413403][ T575] CPU: 1 PID: 575 Comm: syz.4.60 Not tainted syzkaller #0 [ 52.420831][ T575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 52.428760][ T566] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.430929][ T575] RIP: 0010:pkcs1pad_verify+0x4b8/0x600 [ 52.438430][ T566] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.443492][ T575] Code: 44 89 f6 e8 4a 0f 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 56 1b 2c ff 0f 0b b8 ea ff ff ff eb e3 e8 48 1b 2c ff <0f> 0b b8 ea ff ff ff eb d5 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 85 [ 52.470143][ T575] RSP: 0018:ffffc9000dc2f728 EFLAGS: 00010287 [ 52.471079][ T28] audit: type=1400 audit(1794115569.045:198): avc: denied { read write open } for pid=572 comm="syz.0.61" path="/12/file1/file1" dev="loop0" ino=1048654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.476209][ T575] RAX: ffffffff824556d8 RBX: ffff8881177f1e00 RCX: 0000000000080000 [ 52.476224][ T575] RDX: ffffc90004315000 RSI: 00000000000004d6 RDI: 00000000000004d7 [ 52.476235][ T575] RBP: ffffc9000dc2f770 R08: ffffc9000dc2f8af R09: ffffc9000dc2f898 [ 52.501182][ T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:254.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.508237][ T575] R10: 0000000000000000 R11: ffffffff82455220 R12: 0000000000000000 [ 52.508252][ T575] R13: ffff888136302280 R14: dffffc0000000000 R15: ffff8881177f1e38 [ 52.508265][ T575] FS: 00007ff46511a6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 52.517064][ T566] device bridge_slave_0 entered promiscuous mode [ 52.524229][ T575] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.524244][ T575] CR2: 0000001b2f011ff8 CR3: 0000000112cc3000 CR4: 00000000003506a0 [ 52.524260][ T575] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.547052][ T566] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.548060][ T575] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.556317][ T28] audit: type=1400 audit(1794115569.075:199): avc: denied { mount } for pid=571 comm="syz.4.60" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 52.564928][ T575] Call Trace: [ 52.564935][ T575] [ 52.564941][ T575] ? sg_init_one+0x93/0x140 [ 52.564965][ T575] public_key_verify_signature+0x90f/0xd80 [ 52.571651][ T566] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.577864][ T575] ? __cfi_public_key_verify_signature+0x10/0x10 [ 52.600933][ T28] audit: type=1400 audit(1794115569.075:200): avc: denied { mounton } for pid=572 comm="syz.0.61" path="/12/file1/bus" dev="loop0" ino=1048655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.608798][ T575] ? __kmalloc_node_track_caller+0xb1/0x1e0 [ 52.641928][ T566] device bridge_slave_1 entered promiscuous mode [ 52.647126][ T575] ? memdup_user+0x2a/0xc0 [ 52.647149][ T575] ? keyctl_pkey_verify+0x3a4/0x460 [ 52.671308][ T28] audit: type=1400 audit(1794115569.095:201): avc: denied { setattr } for pid=572 comm="syz.0.61" name="file1" dev="loop0" ino=1048654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.683581][ T575] ? __se_sys_keyctl+0x817/0xe10 [ 52.700181][ T423] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 52.700249][ T575] ? __x64_sys_keyctl+0xbf/0xd0 [ 52.735583][ T566] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.740233][ T575] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 52.745074][ T566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.752093][ T575] public_key_verify_signature_2+0x43/0x50 [ 52.758642][ T566] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.765739][ T575] verify_signature+0xe4/0x110 [ 52.771525][ T566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.778516][ T575] asymmetric_key_verify_signature+0x177/0x220 [ 52.796674][ T575] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 52.800605][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.803397][ T575] ? __kasan_check_write+0x14/0x20 [ 52.815686][ T575] keyctl_pkey_verify+0x434/0x460 [ 52.820787][ T575] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 52.825125][ T583] FAULT_INJECTION: forcing a failure. [ 52.825125][ T583] name failslab, interval 1, probability 0, space 0, times 0 [ 52.826339][ T575] __se_sys_keyctl+0x817/0xe10 [ 52.843712][ T575] ? __x64_sys_keyctl+0xd0/0xd0 [ 52.848579][ T575] ? do_futex+0x2e2/0x430 [ 52.850244][ T583] CPU: 0 PID: 583 Comm: syz.1.63 Not tainted syzkaller #0 [ 52.852949][ T575] ? __cfi_do_futex+0x10/0x10 [ 52.860000][ T583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 52.864682][ T575] ? __se_sys_futex+0x136/0x310 [ 52.874695][ T583] Call Trace: [ 52.874703][ T583] [ 52.874709][ T583] __dump_stack+0x21/0x24 [ 52.879545][ T575] ? __this_cpu_preempt_check+0x13/0x20 [ 52.882808][ T583] dump_stack_lvl+0x110/0x170 [ 52.882826][ T583] ? __cfi_dump_stack_lvl+0x8/0x8 [ 52.885751][ T575] ? xfd_validate_state+0x70/0x150 [ 52.890053][ T583] dump_stack+0x15/0x24 [ 52.895605][ T575] ? __kasan_check_write+0x14/0x20 [ 52.900225][ T583] should_fail_ex+0x3bf/0x510 [ 52.900245][ T583] __should_failslab+0xac/0xf0 [ 52.905254][ T575] ? fpregs_restore_userregs+0x128/0x260 [ 52.910335][ T583] should_failslab+0x9/0x20 [ 52.910354][ T583] __kmem_cache_alloc_node+0x3d/0x2d0 [ 52.914482][ T575] __x64_sys_keyctl+0xbf/0xd0 [ 52.919560][ T583] ? do_check+0x2dcd/0xf140 [ 52.924235][ T575] x64_sys_call+0x71a/0x9a0 [ 52.928945][ T583] ? do_check+0x2dcd/0xf140 [ 52.934561][ T575] do_syscall_64+0x4c/0xa0 [ 52.939016][ T583] __kmalloc_node_track_caller+0xa1/0x1e0 [ 52.944377][ T575] ? clear_bhb_loop+0x30/0x80 [ 52.949009][ T583] krealloc+0x6f/0x110 [ 52.953504][ T575] ? clear_bhb_loop+0x30/0x80 [ 52.957957][ T583] do_check+0x2dcd/0xf140 [ 52.962443][ T575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.966814][ T583] ? bpf_check+0xa04e/0x10e90 [ 52.972514][ T575] RIP: 0033:0x7ff46419fb19 [ 52.977148][ T583] ? __x64_sys_bpf+0x7c/0x90 [ 52.981202][ T575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.985835][ T583] ? do_syscall_64+0x4c/0xa0 [ 52.990147][ T575] RSP: 002b:00007ff46511a028 EFLAGS: 00000246 [ 52.996015][ T583] ? init_func_state+0x640/0x640 [ 53.000683][ T575] ORIG_RAX: 00000000000000fa [ 53.005040][ T583] ? kasan_save_alloc_info+0x1f/0x30 [ 53.009598][ T575] RAX: ffffffffffffffda RBX: 00007ff464426090 RCX: 00007ff46419fb19 [ 53.029178][ T583] do_check_common+0x11c3/0x1970 [ 53.029205][ T583] bpf_check+0xa04e/0x10e90 [ 53.033769][ T575] RDX: 0000200000000b40 RSI: 0000200000000b00 RDI: 000000000000001c [ 53.039795][ T583] ? __kasan_check_write+0x14/0x20 [ 53.044710][ T575] RBP: 00007ff464237b70 R08: 0000200000000c00 R09: 0000000000000000 [ 53.049344][ T583] ? prep_new_page+0x35/0x110 [ 53.054609][ T575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.062543][ T583] ? get_page_from_freelist+0x2ca9/0x2d20 [ 53.062567][ T583] ? __cfi_bpf_check+0x10/0x10 [ 53.062587][ T583] ? is_bpf_text_address+0x177/0x190 [ 53.062608][ T583] ? kernel_text_address+0xa0/0xd0 [ 53.062628][ T583] ? __kernel_text_address+0xd/0x30 [ 53.062645][ T583] ? unwind_get_return_address+0x4d/0x90 [ 53.062662][ T583] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 53.062682][ T583] ? arch_stack_walk+0xfc/0x150 [ 53.062708][ T583] ? stack_trace_save+0xa6/0xf0 [ 53.062727][ T583] ? __stack_depot_save+0x36/0x490 [ 53.062750][ T583] ? kasan_set_track+0x60/0x70 [ 53.062769][ T583] ? kasan_set_track+0x4b/0x70 [ 53.062786][ T583] ? kasan_save_alloc_info+0x1f/0x30 [ 53.062801][ T583] ? __kasan_kmalloc+0x95/0xb0 [ 53.062824][ T583] ? kmalloc_trace+0x40/0xb0 [ 53.062841][ T583] ? selinux_bpf_prog_alloc+0x51/0x140 [ 53.062864][ T583] ? security_bpf_prog_alloc+0x73/0xa0 [ 53.062879][ T583] ? bpf_prog_load+0xa03/0x1670 [ 53.062895][ T583] ? __sys_bpf+0x57b/0x850 [ 53.062909][ T583] ? __x64_sys_bpf+0x7c/0x90 [ 53.067813][ T575] R13: 00007ff464426128 R14: 00007ff464426090 R15: 00007ffcead23dc8 [ 53.072287][ T583] ? x64_sys_call+0x488/0x9a0 [ 53.072307][ T583] ? do_syscall_64+0x4c/0xa0 [ 53.080283][ T575] [ 53.085375][ T583] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.093337][ T575] ---[ end trace 0000000000000000 ]--- [ 53.097972][ T583] ? __kasan_check_write+0x14/0x20 [ 53.106867][ T24] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 53.111605][ T583] ? _raw_spin_lock+0x94/0xf0 [ 53.111625][ T583] ? __cfi__raw_spin_lock+0x10/0x10 [ 53.111639][ T583] ? _raw_spin_unlock+0x4c/0x70 [ 53.111654][ T583] ? memset+0x35/0x40 [ 53.133014][ T24] usb 2-1: USB disconnect, device number 4 [ 53.137513][ T583] ? bpf_obj_name_cpy+0x193/0x1e0 [ 53.137541][ T583] bpf_prog_load+0x10f4/0x1670 [ 53.137559][ T583] ? map_freeze+0x3a0/0x3a0 [ 53.137576][ T583] ? selinux_bpf+0xc7/0xf0 [ 53.153423][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 53.158447][ T583] ? security_bpf+0x93/0xb0 [ 53.313387][ T583] __sys_bpf+0x57b/0x850 [ 53.317610][ T583] ? bpf_link_show_fdinfo+0x330/0x330 [ 53.322957][ T583] ? fpregs_restore_userregs+0x128/0x260 [ 53.328578][ T583] __x64_sys_bpf+0x7c/0x90 [ 53.332977][ T583] x64_sys_call+0x488/0x9a0 [ 53.337470][ T583] do_syscall_64+0x4c/0xa0 [ 53.341865][ T583] ? clear_bhb_loop+0x30/0x80 [ 53.346526][ T583] ? clear_bhb_loop+0x30/0x80 [ 53.351189][ T583] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.357062][ T583] RIP: 0033:0x7fc6f119fb19 [ 53.361464][ T583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.381071][ T583] RSP: 002b:00007fc6f1f93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 53.389468][ T583] RAX: ffffffffffffffda RBX: 00007fc6f1425fa0 RCX: 00007fc6f119fb19 [ 53.397415][ T583] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 53.405362][ T583] RBP: 00007fc6f1237b70 R08: 0000000000000000 R09: 0000000000000000 [ 53.413316][ T583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.421284][ T583] R13: 00007fc6f1426038 R14: 00007fc6f1425fa0 R15: 00007fff25cb37d8 [ 53.429243][ T583] [ 53.434000][ T308] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.443999][ T308] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.458118][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.469287][ T423] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 53.478260][ T423] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.486967][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.494142][ T288] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 53.507128][ T423] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 53.507459][ T308] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.516565][ T288] exFAT-fs (loop0): Filesystem has been set read-only [ 53.523190][ T308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.530283][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.537520][ T288] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0xd4d4d4d4) [ 53.556732][ T423] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.566175][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.570059][ T423] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.574752][ T308] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.588400][ T423] usb 4-1: Product: syz [ 53.589398][ T308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.593577][ T423] usb 4-1: Manufacturer: syz [ 53.612489][ T423] usb 4-1: SerialNumber: syz [ 53.627818][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.638069][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.665096][ T590] loop1: detected capacity change from 0 to 512 [ 53.666330][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.686072][ T590] EXT4-fs: Ignoring removed oldalloc option [ 53.691001][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.710626][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.719518][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.736603][ T566] device veth0_vlan entered promiscuous mode [ 53.743099][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.751122][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.759452][ T590] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 53.768897][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.776514][ T590] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.790472][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.809088][ T566] device veth1_macvtap entered promiscuous mode [ 53.818138][ T593] loop4: detected capacity change from 0 to 512 [ 53.824906][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.840569][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.858971][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.896618][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.905133][ T593] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 53.908440][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.915171][ T593] FAT-fs (loop4): Filesystem has been set read-only [ 53.923838][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.938502][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.986798][ T602] loop5: detected capacity change from 0 to 2048 [ 54.011306][ T600] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.018420][ T600] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.026309][ T600] device bridge_slave_0 entered promiscuous mode [ 54.033906][ T600] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.041399][ T600] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.041729][ T611] loop4: detected capacity change from 0 to 16 [ 54.049033][ T600] device bridge_slave_1 entered promiscuous mode [ 54.062255][ T602] syz.5.57 (602): attempted to duplicate a private mapping with mremap. This is not supported. [ 54.077077][ T611] erofs: (device loop4): mounted with root inode @ nid 36. [ 54.117120][ T611] syz.4.72: attempt to access beyond end of device [ 54.117120][ T611] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 54.122757][ T600] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.137716][ T600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.145006][ T600] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.151883][ T611] syz.4.72: attempt to access beyond end of device [ 54.151883][ T611] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 54.152039][ T600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.170151][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 54.185900][ T611] syz.4.72: attempt to access beyond end of device [ 54.185900][ T611] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 54.198719][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.200726][ T611] syz.4.72: attempt to access beyond end of device [ 54.200726][ T611] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 54.220419][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.230469][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.236162][ T611] syz.4.72: attempt to access beyond end of device [ 54.236162][ T611] loop4: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 54.258511][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.269283][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.276359][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.284947][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.300568][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.307640][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.322853][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.334814][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.375247][ T620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.380170][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 54.387595][ T620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.396851][ T620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.404704][ T620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.413593][ T600] device veth0_vlan entered promiscuous mode [ 54.427023][ T620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.436760][ T600] device veth1_macvtap entered promiscuous mode [ 54.485190][ T24] usb 2-1: config 1 has an invalid interface number: 33 but max is 0 [ 54.517516][ T24] usb 2-1: config 1 has no interface number 0 [ 55.532313][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.586106][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.624078][ T24] usb 2-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 55.688976][ T480] device bridge_slave_1 left promiscuous mode [ 55.701094][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.729580][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.759935][ T474] usb 4-1: USB disconnect, device number 5 [ 55.771023][ T480] device bridge_slave_0 left promiscuous mode [ 55.777404][ T480] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.789870][ T480] device veth1_macvtap left promiscuous mode [ 55.796355][ T480] device veth0_vlan left promiscuous mode [ 55.826396][ T24] usb 2-1: Found UVC 0.00 device (1bcf:0b40) [ 55.923732][ T24] usb 2-1: Forcing UVC version to 1.0a [ 55.933614][ T24] usb 2-1: No valid video chain found. [ 56.303274][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.314918][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.323876][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 56.323889][ T28] audit: type=1400 audit(1794115573.045:217): avc: denied { ioctl } for pid=634 comm="syz.3.77" path="socket:[17802]" dev="sockfs" ino=17802 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.366874][ T28] audit: type=1400 audit(1794115573.085:218): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 56.392861][ T639] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.396862][ T641] loop4: detected capacity change from 0 to 40427 [ 56.399965][ T639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.410785][ T641] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 56.421938][ T641] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 56.430351][ T28] audit: type=1400 audit(1794115573.145:219): avc: denied { create } for pid=642 comm="syz.5.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 56.431029][ T635] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 56.451943][ T28] audit: type=1400 audit(1794115573.145:220): avc: denied { append } for pid=634 comm="syz.3.77" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 56.460889][ T635] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 56.480545][ T28] audit: type=1400 audit(1794115573.175:221): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.514368][ T641] F2FS-fs (loop4): invalid crc value [ 56.575908][ T28] audit: type=1400 audit(1794115573.175:222): avc: denied { read } for pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=941 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.608041][ T645] loop5: detected capacity change from 0 to 256 [ 56.615565][ T645] exfat: Deprecated parameter 'namecase' [ 56.621455][ T645] exfat: Deprecated parameter 'namecase' [ 56.639270][ T645] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d) [ 56.682644][ T645] netlink: 64 bytes leftover after parsing attributes in process `syz.5.79'. [ 56.809642][ T28] audit: type=1400 audit(1794115573.175:223): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=941 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.837505][ T650] FAULT_INJECTION: forcing a failure. [ 56.837505][ T650] name failslab, interval 1, probability 0, space 0, times 0 [ 56.856018][ T28] audit: type=1400 audit(1794115573.175:224): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=941 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.860412][ T650] CPU: 1 PID: 650 Comm: syz.6.69 Tainted: G W syzkaller #0 [ 56.887543][ T650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 56.897602][ T650] Call Trace: [ 56.900885][ T650] [ 56.901879][ T641] F2FS-fs (loop4): Found nat_bits in checkpoint [ 56.903817][ T650] __dump_stack+0x21/0x24 [ 56.903841][ T650] dump_stack_lvl+0x110/0x170 [ 56.919014][ T650] ? __cfi_dump_stack_lvl+0x8/0x8 [ 56.924050][ T650] dump_stack+0x15/0x24 [ 56.928204][ T650] should_fail_ex+0x3bf/0x510 [ 56.932886][ T650] __should_failslab+0xac/0xf0 [ 56.937657][ T650] should_failslab+0x9/0x20 [ 56.938365][ T641] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 56.942156][ T650] __kmem_cache_alloc_node+0x3d/0x2d0 [ 56.942179][ T650] ? do_check_common+0xd0/0x1970 [ 56.942203][ T650] ? do_check_common+0xd0/0x1970 [ 56.949419][ T641] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 56.954572][ T650] kmalloc_trace+0x29/0xb0 [ 56.954592][ T650] do_check_common+0xd0/0x1970 [ 56.954612][ T650] ? memset+0x35/0x40 [ 56.954626][ T650] ? check_cfg+0xe74/0xf40 [ 56.954645][ T650] ? do_check_subprogs+0x33e/0x390 [ 56.994588][ T650] bpf_check+0xa04e/0x10e90 [ 56.999085][ T650] ? __cfi_gfp_zone+0x10/0x10 [ 57.003754][ T650] ? __cfi_bpf_check+0x10/0x10 [ 57.008533][ T650] ? 0xffffffffa0000954 [ 57.012669][ T650] ? is_bpf_text_address+0x177/0x190 [ 57.017946][ T650] ? kernel_text_address+0xa0/0xd0 [ 57.023050][ T650] ? __kernel_text_address+0xd/0x30 [ 57.028236][ T650] ? unwind_get_return_address+0x4d/0x90 [ 57.033854][ T650] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 57.039996][ T650] ? arch_stack_walk+0xfc/0x150 [ 57.044859][ T650] ? stack_trace_save+0xa6/0xf0 [ 57.049717][ T650] ? __stack_depot_save+0x36/0x490 [ 57.054902][ T650] ? kasan_set_track+0x60/0x70 [ 57.059652][ T650] ? kasan_set_track+0x4b/0x70 [ 57.064398][ T650] ? kasan_save_alloc_info+0x1f/0x30 [ 57.069663][ T650] ? __kasan_kmalloc+0x95/0xb0 [ 57.074410][ T650] ? kmalloc_trace+0x40/0xb0 [ 57.078980][ T650] ? selinux_bpf_prog_alloc+0x51/0x140 [ 57.084422][ T650] ? security_bpf_prog_alloc+0x73/0xa0 [ 57.089863][ T650] ? bpf_prog_load+0xa03/0x1670 [ 57.094694][ T650] ? __sys_bpf+0x57b/0x850 [ 57.099112][ T650] ? __x64_sys_bpf+0x7c/0x90 [ 57.103721][ T650] ? x64_sys_call+0x488/0x9a0 [ 57.108390][ T650] ? do_syscall_64+0x4c/0xa0 [ 57.112984][ T650] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.119045][ T650] ? __kasan_check_write+0x14/0x20 [ 57.124158][ T650] ? _raw_spin_lock+0x94/0xf0 [ 57.128847][ T650] ? __cfi__raw_spin_lock+0x10/0x10 [ 57.134049][ T650] ? _raw_spin_unlock+0x4c/0x70 [ 57.138883][ T650] ? memset+0x35/0x40 [ 57.142943][ T650] ? bpf_obj_name_cpy+0x193/0x1e0 [ 57.147980][ T650] bpf_prog_load+0x10f4/0x1670 [ 57.152820][ T650] ? map_freeze+0x3a0/0x3a0 [ 57.157312][ T650] ? selinux_bpf+0xc7/0xf0 [ 57.161712][ T650] ? security_bpf+0x93/0xb0 [ 57.166211][ T650] __sys_bpf+0x57b/0x850 [ 57.170435][ T650] ? bpf_link_show_fdinfo+0x330/0x330 [ 57.175788][ T650] ? fpregs_restore_userregs+0x128/0x260 [ 57.181410][ T650] __x64_sys_bpf+0x7c/0x90 [ 57.185813][ T650] x64_sys_call+0x488/0x9a0 [ 57.190356][ T650] do_syscall_64+0x4c/0xa0 [ 57.194751][ T650] ? clear_bhb_loop+0x30/0x80 [ 57.199407][ T650] ? clear_bhb_loop+0x30/0x80 [ 57.204066][ T650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.209949][ T650] RIP: 0033:0x7fef50d9fb19 [ 57.214345][ T650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.233936][ T650] RSP: 002b:00007fef4f7f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.242334][ T650] RAX: ffffffffffffffda RBX: 00007fef51025fa0 RCX: 00007fef50d9fb19 [ 57.249245][ T423] usb 2-1: USB disconnect, device number 5 [ 57.250290][ T650] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 57.250304][ T650] RBP: 00007fef50e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 57.250314][ T650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.250323][ T650] R13: 00007fef51026038 R14: 00007fef51025fa0 R15: 00007ffcf21a2d88 [ 57.250338][ T650] [ 57.449887][ T291] EXT4-fs (loop1): unmounting filesystem. [ 58.535409][ T670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 58.560883][ T289] syz-executor: attempt to access beyond end of device [ 58.560883][ T289] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 58.885753][ T675] loop5: detected capacity change from 0 to 512 [ 58.894273][ T674] loop3: detected capacity change from 0 to 512 [ 58.903748][ T674] EXT4-fs: Ignoring removed oldalloc option [ 58.910327][ T675] EXT4-fs: Ignoring removed oldalloc option [ 58.976824][ T674] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 59.047500][ T674] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 59.060238][ T28] audit: type=1400 audit(1794115575.755:225): avc: denied { write } for pid=679 comm="syz.6.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.088136][ T674] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.101439][ T675] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 59.120194][ T674] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.86: bad orphan inode 267 [ 59.130457][ T675] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.145770][ T28] audit: type=1400 audit(1794115575.755:226): avc: denied { nlmsg_write } for pid=679 comm="syz.6.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.169156][ T683] 9pnet_virtio: no channels available for device ./bus [ 59.180333][ T674] EXT4-fs (loop3): Remounting filesystem read-only [ 59.195261][ T674] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 59.237159][ T674] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.86: dx entry: limit 0 != root limit 125 [ 59.266018][ T674] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.86: Corrupt directory, running e2fsck is recommended [ 59.287051][ T692] loop6: detected capacity change from 0 to 256 [ 59.303827][ T287] EXT4-fs (loop3): unmounting filesystem. [ 59.341285][ T362] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 59.413208][ T698] loop3: detected capacity change from 0 to 128 [ 59.498251][ T701] loop6: detected capacity change from 0 to 256 [ 59.505999][ T701] exfat: Deprecated parameter 'namecase' [ 59.511905][ T701] exfat: Deprecated parameter 'namecase' [ 59.529182][ T701] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xef5d2b8f, utbl_chksum : 0xe619d30d) [ 59.575854][ T701] netlink: 64 bytes leftover after parsing attributes in process `syz.6.92'. [ 59.831871][ T685] loop4: detected capacity change from 0 to 131072 [ 59.842587][ T685] F2FS-fs (loop4): Test dummy encryption mode enabled [ 59.849838][ T685] F2FS-fs (loop4): invalid crc value [ 59.856622][ T685] F2FS-fs (loop4): Found nat_bits in checkpoint [ 59.884157][ T685] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 60.181061][ T710] loop1: detected capacity change from 0 to 256 [ 60.954744][ T711] fscrypt (loop4, inode 10): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 61.008235][ T710] exfat: Unknown parameter '019 Vend' [ 61.035770][ T715] loop3: detected capacity change from 0 to 512 [ 61.043342][ T715] EXT4-fs: Ignoring removed oldalloc option [ 61.051975][ T715] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 61.063701][ T715] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.083200][ T720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.95'. [ 61.229002][ T727] SELinux: failed to load policy [ 61.269297][ T731] netlink: 12 bytes leftover after parsing attributes in process `syz.6.96'. [ 61.290181][ T6] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 61.460252][ T423] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 61.470229][ T6] usb 2-1: Using ep0 maxpacket: 32 [ 61.476436][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.487407][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.497241][ T6] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 61.506365][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.515054][ T6] usb 2-1: config 0 descriptor?? [ 61.520854][ T6] hub 2-1:0.0: USB hub found [ 61.640167][ T423] usb 4-1: Using ep0 maxpacket: 16 [ 61.646347][ T423] usb 4-1: config 1 has an invalid interface number: 33 but max is 0 [ 61.654511][ T423] usb 4-1: config 1 has no interface number 0 [ 61.661105][ T423] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 61.670208][ T423] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.679881][ T566] EXT4-fs (loop5): unmounting filesystem. [ 61.680605][ T423] usb 4-1: Found UVC 0.00 device (1bcf:0b40) [ 61.692554][ T423] usb 4-1: Forcing UVC version to 1.0a [ 61.698029][ T423] usb 4-1: No valid video chain found. [ 61.721854][ T6] hub 2-1:0.0: 1 port detected [ 61.736194][ T6] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 61.742722][ T6] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 61.751735][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 61.757747][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 61.790604][ T6] usb 2-1: USB disconnect, device number 6 [ 61.980179][ T423] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 61.993057][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 61.993071][ T28] audit: type=1400 audit(1794115578.715:244): avc: denied { create } for pid=742 comm="syz.6.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.034985][ T28] audit: type=1400 audit(1794115578.755:245): avc: denied { execute } for pid=744 comm="syz.6.103" path="/10/file0" dev="tmpfs" ino=74 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.058630][ T28] audit: type=1400 audit(1794115578.775:246): avc: denied { append } for pid=744 comm="syz.6.103" name="uprobe_events" dev="tracefs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 62.086777][ T745] event trace: Could not enable event p [ 62.105992][ T749] loop6: detected capacity change from 0 to 512 [ 62.119829][ T749] EXT4-fs: Ignoring removed bh option [ 62.127632][ T749] EXT4-fs: Ignoring removed i_version option [ 62.138170][ T749] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.160197][ T423] usb 6-1: Using ep0 maxpacket: 16 [ 62.166933][ T423] usb 6-1: unable to get BOS descriptor or descriptor too short [ 62.175865][ T423] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.186588][ T423] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 62.195815][ T749] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 62.205046][ T749] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.217767][ T423] usb 6-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 62.218522][ T28] audit: type=1400 audit(1794115578.945:247): avc: denied { read } for pid=748 comm="syz.6.105" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 62.230071][ T423] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.257025][ T423] usb 6-1: Product: syz [ 62.261227][ T423] usb 6-1: Manufacturer: syz [ 62.265817][ T423] usb 6-1: SerialNumber: syz [ 62.279304][ T600] EXT4-fs (loop6): unmounting filesystem. [ 62.372116][ T759] capability: warning: `syz.6.108' uses deprecated v2 capabilities in a way that may be insecure [ 62.495033][ T764] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 62.559100][ T763] loop6: detected capacity change from 0 to 256 [ 62.566822][ T763] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.581250][ T766] process 'syz.1.107' launched '/dev/fd/-1/./bus' with NULL argv: empty string added [ 62.591510][ T28] audit: type=1400 audit(1794115579.305:248): avc: denied { block_suspend } for pid=754 comm="syz.1.107" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.614445][ T763] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 62.622990][ T763] FAT-fs (loop6): Filesystem has been set read-only [ 62.653996][ T28] audit: type=1400 audit(1794115579.305:249): avc: denied { setopt } for pid=754 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.943139][ T768] loop4: detected capacity change from 0 to 256 [ 62.949775][ T768] exfat: Deprecated parameter 'utf8' [ 62.955216][ T768] exfat: Deprecated parameter 'utf8' [ 62.963026][ T768] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 63.024813][ T28] audit: type=1400 audit(1794115579.745:250): avc: denied { create } for pid=767 comm="syz.4.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 63.050506][ T423] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 63.059798][ T423] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 63.070157][ T423] usb 6-1: USB disconnect, device number 2 [ 63.410939][ T28] audit: type=1326 audit(1794115580.035:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=767 comm="syz.4.110" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff46419fb19 code=0x7ffc0000 [ 63.588270][ T772] audit: audit_backlog=65 > audit_backlog_limit=64 [ 63.595479][ T772] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 63.857126][ T780] xt_hashlimit: size too large, truncated to 1048576 [ 64.023406][ T24] usb 4-1: USB disconnect, device number 6 [ 64.058227][ T791] loop1: detected capacity change from 0 to 512 [ 64.100616][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 64.123020][ T287] EXT4-fs (loop3): unmounting filesystem. [ 64.146689][ T796] netlink: 136 bytes leftover after parsing attributes in process `syz.6.120'. [ 64.179699][ T798] loop5: detected capacity change from 0 to 512 [ 64.224761][ T798] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.121: missing EA_INODE flag [ 64.236455][ T798] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.121: error while reading EA inode 2 err=-117 [ 64.248885][ T798] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.121: inode #3584: comm syz.5.121: iget: illegal inode # [ 64.262202][ T798] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.121: error while reading EA inode 3584 err=-117 [ 64.275699][ T798] EXT4-fs (loop5): 1 orphan inode deleted [ 64.276417][ T807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.117'. [ 64.281673][ T798] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 64.327087][ T811] 9pnet_fd: Insufficient options for proto=fd [ 64.351945][ T809] loop6: detected capacity change from 0 to 256 [ 64.359257][ T809] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.370955][ T809] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 64.379495][ T809] FAT-fs (loop6): Filesystem has been set read-only [ 64.560175][ T6] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 64.751448][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 64.759788][ T6] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.770027][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.780284][ T6] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 64.789351][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.797411][ T6] usb 2-1: Product: syz [ 64.801609][ T6] usb 2-1: Manufacturer: syz [ 64.806232][ T6] usb 2-1: SerialNumber: syz [ 64.850687][ T815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.859381][ T815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.900185][ T318] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 65.064950][ T817] loop3: detected capacity change from 0 to 256 [ 65.080926][ T318] usb 6-1: not running at top speed; connect to a high speed hub [ 65.089387][ T318] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.100197][ T318] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 65.109096][ T318] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 65.118651][ T318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.147135][ T409] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.154713][ T576] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 65.195884][ T318] usb 6-1: Found UVC 71.01 device (0000:0000) [ 65.204428][ T318] usb 6-1: No valid video chain found. [ 65.314033][ T823] loop3: detected capacity change from 0 to 128 [ 65.340190][ T409] usb 5-1: Using ep0 maxpacket: 8 [ 65.351012][ T409] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 142, changing to 7 [ 65.373828][ T409] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 65.385110][ T409] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.393320][ T409] usb 5-1: Product: syz [ 65.397518][ T409] usb 5-1: Manufacturer: syz [ 65.410177][ T409] usb 5-1: SerialNumber: syz [ 65.472480][ T798] ip_tables: iptables: counters copy to user failed while replacing table [ 65.482447][ T318] usb 6-1: USB disconnect, device number 3 [ 65.620716][ T409] snd-usb-audio: probe of 5-1:1.1 failed with error -2 [ 65.631622][ T409] usb 5-1: USB disconnect, device number 2 [ 65.932831][ T827] fuse: Bad value for 'user_id' [ 66.001125][ T566] EXT4-fs (loop5): unmounting filesystem. [ 66.029432][ T840] x_tables: duplicate underflow at hook 3 [ 66.072689][ T847] loop6: detected capacity change from 0 to 512 [ 66.080258][ T847] ext3: Unknown parameter 'euid' [ 66.140363][ T857] loop4: detected capacity change from 0 to 512 [ 66.213936][ T860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.138'. [ 66.223056][ T860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 66.232212][ T860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.328993][ T862] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.348183][ T862] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 66.356865][ T862] FAT-fs (loop3): Filesystem has been set read-only [ 67.030694][ T28] kauditd_printk_skb: 634 callbacks suppressed [ 67.030718][ T28] audit: type=1400 audit(1794115583.755:885): avc: denied { map } for pid=869 comm="syz.4.141" path="/28/dev/sda" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 67.242247][ T872] set_capacity_and_notify: 1 callbacks suppressed [ 67.242402][ T872] loop4: detected capacity change from 0 to 256 [ 67.261134][ T877] loop5: detected capacity change from 0 to 512 [ 67.268797][ T6] usb 2-1: selecting invalid altsetting 1 [ 67.280344][ T6] usb 2-1: unit 0 not found! [ 67.287457][ T877] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 67.292125][ T6] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 67.297002][ T877] I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 67.323353][ T6] usb 2-1: USB disconnect, device number 7 [ 67.336901][ T877] EXT4-fs (loop5): couldn't read superblock of external journal [ 67.349080][ T576] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 67.368287][ T883] loop6: detected capacity change from 0 to 128 [ 67.377658][ T885] netlink: 3576 bytes leftover after parsing attributes in process `syz.1.144'. [ 67.389063][ T883] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 67.403736][ T883] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.415145][ T887] loop3: detected capacity change from 0 to 128 [ 67.434967][ T28] audit: type=1400 audit(1794115584.155:886): avc: denied { map } for pid=882 comm="syz.6.145" path="/22/file1/file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.531685][ T892] loop1: detected capacity change from 0 to 128 [ 67.591891][ T892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 67.600799][ T892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.146'. [ 68.030248][ T891] xt_policy: too many policy elements [ 68.210408][ T907] xt_policy: too many policy elements [ 68.233195][ T909] loop5: detected capacity change from 0 to 512 [ 68.503767][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 68.549535][ T892] syz.1.146 (892) used greatest stack depth: 20648 bytes left [ 68.571769][ T911] futex_wake_op: syz.1.149 tries to shift op by 144; fix this program [ 68.590191][ T409] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.593462][ T911] futex_wake_op: syz.1.149 tries to shift op by 144; fix this program [ 68.601216][ T600] EXT4-fs (loop6): unmounting filesystem. [ 68.630558][ T28] audit: type=1400 audit(1794115585.355:887): avc: denied { write } for pid=917 comm="syz.5.151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 68.645025][ T920] loop1: detected capacity change from 0 to 256 [ 68.650101][ T914] netlink: 20 bytes leftover after parsing attributes in process `syz.6.150'. [ 68.663457][ T28] audit: type=1400 audit(1794115585.355:888): avc: denied { read } for pid=917 comm="syz.5.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.683585][ T28] audit: type=1400 audit(1794115585.355:889): avc: denied { connect } for pid=917 comm="syz.5.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.774491][ T932] loop6: detected capacity change from 0 to 128 [ 68.782111][ T932] EXT4-fs (loop6): Test dummy encryption mode enabled [ 68.790251][ T409] usb 5-1: Using ep0 maxpacket: 16 [ 68.797116][ T409] usb 5-1: unable to get BOS descriptor or descriptor too short [ 68.810182][ T932] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 68.812020][ T409] usb 5-1: string descriptor 0 read error: -22 [ 68.826357][ T926] loop5: detected capacity change from 0 to 256 [ 68.834883][ T926] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.836935][ T932] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.851570][ T409] usb 5-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 68.886503][ T926] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 68.895705][ T926] FAT-fs (loop5): Filesystem has been set read-only [ 68.904316][ T409] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.909045][ T932] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 69.004547][ T600] EXT4-fs (loop6): unmounting filesystem. [ 69.072455][ T28] audit: type=1400 audit(1794115585.795:890): avc: denied { read } for pid=940 comm="syz.5.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.092286][ T28] audit: type=1400 audit(1794115585.805:891): avc: denied { write } for pid=943 comm="syz.1.159" name="file0" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.115019][ T28] audit: type=1400 audit(1794115585.805:892): avc: denied { open } for pid=943 comm="syz.1.159" path="/24/file0" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.140685][ T409] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 69.142155][ T28] audit: type=1400 audit(1794115585.805:893): avc: denied { ioctl } for pid=943 comm="syz.1.159" path="/24/file0" dev="tmpfs" ino=152 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 69.155069][ T409] usb 5-1: USB disconnect, device number 3 [ 69.259222][ T958] loop5: detected capacity change from 0 to 512 [ 69.316853][ T958] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #12: comm syz.5.161: missing EA_INODE flag [ 69.380416][ T958] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.161: error while reading EA inode 12 err=-117 [ 69.394946][ T958] EXT4-fs (loop5): 1 orphan inode deleted [ 69.415436][ T958] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 69.439192][ T28] audit: type=1400 audit(1794115586.155:894): avc: denied { listen } for pid=956 comm="syz.5.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.683254][ T566] EXT4-fs (loop5): unmounting filesystem. [ 69.984581][ T968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 70.264318][ T970] raw_sendmsg: syz.5.163 forgot to set AF_INET. Fix it! [ 70.704688][ T975] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.936180][ T975] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 70.945229][ T975] EXT4-fs (loop3): orphan cleanup on readonly fs [ 70.951639][ T975] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.166: bad orphan inode 15 [ 70.961994][ T975] ext4_test_bit(bit=14, block=5) = 0 [ 70.967299][ T975] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 70.986337][ T982] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.997964][ T982] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 71.006540][ T982] FAT-fs (loop6): Filesystem has been set read-only [ 71.021937][ T975] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 71.043849][ T975] tipc: Invalid UDP bearer configuration [ 71.043871][ T975] tipc: Enabling of bearer rejected, failed to enable media [ 71.084032][ T287] EXT4-fs (loop3): unmounting filesystem. [ 71.138932][ T1002] device-mapper: table: 252:0: ram8 too small for target: start=4096, len=18014398509473791, dev_size=16384 [ 71.150913][ T1002] device-mapper: core: Cannot calculate initial queue limits [ 71.158517][ T1002] device-mapper: ioctl: unable to set up device queue for new table. [ 71.250656][ T1014] EXT4-fs (loop4): Test dummy encryption mode enabled [ 71.257599][ T1014] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 71.270786][ T1014] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.282603][ T1014] EXT4-fs (loop4): 1 truncate cleaned up [ 71.288384][ T1014] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 71.309953][ T1014] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 71.380187][ T638] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 71.450177][ T318] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 71.466648][ T289] EXT4-fs (loop4): unmounting filesystem. [ 71.510783][ T1028] EXT4-fs: Ignoring removed oldalloc option [ 71.530158][ T638] usb 4-1: device descriptor read/64, error -71 [ 71.541887][ T1028] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 71.558024][ T289] EXT4-fs (loop4): unmounting filesystem. [ 71.641140][ T318] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 71.649335][ T318] usb 7-1: config 0 has no interface number 0 [ 71.661112][ T318] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 71.670185][ T318] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.678168][ T318] usb 7-1: Product: syz [ 71.682355][ T318] usb 7-1: Manufacturer: syz [ 71.686945][ T318] usb 7-1: SerialNumber: syz [ 71.692158][ T318] usb 7-1: config 0 descriptor?? [ 71.810135][ T638] usb 4-1: device descriptor read/64, error -71 [ 71.850135][ T295] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.030873][ T295] usb 5-1: unable to get BOS descriptor or descriptor too short [ 72.040563][ T295] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 72.113718][ T638] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 72.148126][ T318] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 72.158475][ T318] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61 [ 72.169560][ T318] asix: probe of 7-1:0.251 failed with error -5 [ 72.197223][ T295] usb 5-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.40 [ 72.270202][ T638] usb 4-1: device descriptor read/64, error -71 [ 72.378501][ T295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.378614][ T1010] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.386600][ T295] usb 5-1: Product: syz [ 72.399225][ T295] usb 5-1: Manufacturer: syz [ 72.409138][ T295] usb 5-1: SerialNumber: syz [ 72.409865][ T24] usb 7-1: USB disconnect, device number 2 [ 72.540108][ T638] usb 4-1: device descriptor read/64, error -71 [ 72.620976][ T28] kauditd_printk_skb: 133 callbacks suppressed [ 72.620991][ T28] audit: type=1400 audit(2000000001.290:1028): avc: denied { bind } for pid=1036 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.626820][ T1037] ip_tables: iptables: counters copy to user failed while replacing table [ 72.660263][ T638] usb usb4-port1: attempt power cycle [ 72.668459][ T295] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 72.678179][ T295] usb 5-1: USB disconnect, device number 4 [ 72.931942][ T1056] set_capacity_and_notify: 4 callbacks suppressed [ 72.931959][ T1056] loop1: detected capacity change from 0 to 512 [ 72.950103][ T1056] EXT4-fs: Ignoring removed oldalloc option [ 72.957706][ T1053] loop5: detected capacity change from 0 to 256 [ 72.965696][ T1053] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.978290][ T1053] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 72.986939][ T1053] FAT-fs (loop5): Filesystem has been set read-only [ 72.998265][ T1056] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 73.007316][ T1056] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.049520][ T1057] loop6: detected capacity change from 0 to 40427 [ 73.080083][ T638] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 73.134232][ T638] usb 4-1: device descriptor read/8, error -71 [ 73.217292][ T1066] device gretap0 entered promiscuous mode [ 73.223203][ T1066] device vlan2 entered promiscuous mode [ 73.253769][ T1064] loop5: detected capacity change from 0 to 40427 [ 73.263334][ T1064] F2FS-fs (loop5): Image doesn't support compression [ 73.270238][ T1064] F2FS-fs (loop5): fault_type options not supported [ 73.272191][ T1070] loop6: detected capacity change from 0 to 512 [ 73.282971][ T1064] F2FS-fs (loop5): invalid crc value [ 73.291619][ T1064] F2FS-fs (loop5): Found nat_bits in checkpoint [ 73.299278][ T1070] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 73.308556][ T1070] System zones: 1-12 [ 73.313076][ T638] usb 4-1: device descriptor read/8, error -71 [ 73.319847][ T1070] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.189: missing EA_INODE flag [ 73.327524][ T1064] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 73.332023][ T1070] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.189: error while reading EA inode 12 err=-117 [ 73.348691][ T28] audit: type=1400 audit(2000000002.010:1029): avc: denied { create } for pid=1063 comm="syz.5.188" name="blkio.bfq.sectors" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.355434][ T1064] syz.5.188: attempt to access beyond end of device [ 73.355434][ T1064] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 73.372259][ T318] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 73.386398][ T1070] EXT4-fs (loop6): 1 orphan inode deleted [ 73.399331][ T28] audit: type=1400 audit(2000000002.060:1030): avc: denied { read append open } for pid=1063 comm="syz.5.188" path="/24/file0/blkio.bfq.sectors" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 73.407113][ T1070] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 73.424295][ T28] audit: type=1400 audit(2000000002.070:1031): avc: denied { create } for pid=1063 comm="syz.5.188" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 73.490651][ T600] EXT4-fs (loop6): unmounting filesystem. [ 73.534106][ T1079] loop6: detected capacity change from 0 to 16 [ 73.540421][ T318] usb 2-1: device descriptor read/64, error -71 [ 73.549650][ T1079] erofs: (device loop6): mounted with root inode @ nid 36. [ 73.561703][ T1079] syz.6.193: attempt to access beyond end of device [ 73.561703][ T1079] loop6: rw=0, sector=16, nr_sectors = 8 limit=16 [ 73.574993][ T1080] syz.6.193: attempt to access beyond end of device [ 73.574993][ T1080] loop6: rw=0, sector=16, nr_sectors = 8 limit=16 [ 73.620084][ T638] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 73.661078][ T638] usb 4-1: device descriptor read/8, error -71 [ 73.689922][ T1090] loop6: detected capacity change from 0 to 128 [ 74.682407][ T28] audit: type=1400 audit(2000000002.420:1032): avc: denied { create } for pid=1087 comm="syz.5.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 74.730023][ T1090] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 74.752678][ T1090] FAT-fs (loop6): Filesystem has been set read-only [ 74.768726][ T28] audit: type=1326 audit(2000000003.410:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1096 comm="syz.3.197" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd579fb19 code=0x7ffc0000 [ 74.793799][ T318] usb 2-1: device descriptor read/64, error -71 [ 74.804510][ T1099] audit: audit_backlog=65 > audit_backlog_limit=64 [ 74.834336][ T1099] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 74.850016][ T1099] audit: backlog limit exceeded [ 74.862165][ T28] audit: type=1326 audit(2000000003.410:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1096 comm="syz.3.197" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd579fb19 code=0x7ffc0000 [ 74.910528][ T638] usb 4-1: device descriptor read/8, error -71 [ 74.989352][ T295] smpboot: CPU 1 is now offline [ 75.054800][ T638] usb usb4-port1: unable to enumerate USB device [ 75.119978][ T318] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 75.160659][ T1110] loop5: detected capacity change from 0 to 256 [ 77.259953][ T1117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.200'. [ 78.082180][ T1110] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.118768][ T1118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.201'. [ 78.136008][ T291] EXT4-fs (loop1): unmounting filesystem. [ 78.155503][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 78.155514][ T28] audit: type=1400 audit(2000000006.820:1107): avc: denied { mounton } for pid=1124 comm="syz.6.202" path="/36/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 78.259300][ T1129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.206'. [ 78.327267][ T1137] loop1: detected capacity change from 0 to 512 [ 78.342604][ T1137] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.204: bg 0: block 127: padding at end of block bitmap is not set [ 78.357149][ T1137] EXT4-fs (loop1): Remounting filesystem read-only [ 78.364464][ T1137] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 78.380857][ T1137] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.204: iget: bad extra_isize 58 (inode size 256) [ 78.395526][ T1137] EXT4-fs (loop1): Remounting filesystem read-only [ 78.402794][ T1137] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.204: error while reading EA inode 11 err=-117 [ 78.415729][ T1137] EXT4-fs (loop1): Remounting filesystem read-only [ 78.422589][ T1137] EXT4-fs (loop1): 1 orphan inode deleted [ 78.428559][ T1137] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.468054][ T291] EXT4-fs (loop1): unmounting filesystem. [ 78.480576][ T28] audit: type=1400 audit(2000000007.150:1108): avc: denied { rmdir } for pid=600 comm="syz-executor" name="proc" dev="sda1" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.503298][ T1137] syz.1.204 (1137) used greatest stack depth: 20448 bytes left [ 78.538199][ T28] audit: type=1400 audit(2000000007.200:1109): avc: denied { create } for pid=1164 comm="syz.1.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 78.558417][ T295] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 78.569753][ T423] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 79.091968][ T423] usb 5-1: device descriptor read/64, error -71 [ 79.098258][ T295] usb 4-1: device descriptor read/64, error -71 [ 79.109000][ T1173] loop1: detected capacity change from 0 to 128 [ 79.120644][ T1173] FAT-fs (loop1): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 79.129709][ T1173] FAT-fs (loop1): bogus number of directory entries (66) [ 79.136720][ T1173] FAT-fs (loop1): Can't find a valid FAT filesystem [ 80.687568][ T1179] loop1: detected capacity change from 0 to 512 [ 80.699369][ T1179] EXT4-fs: Ignoring removed oldalloc option [ 80.720460][ T1179] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 80.730967][ T1179] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.853392][ T423] usb 5-1: device descriptor read/64, error -71 [ 80.859766][ T295] usb 4-1: device descriptor read/64, error -71 [ 81.890657][ T1190] loop3: detected capacity change from 0 to 256 [ 81.909209][ T1190] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 82.342247][ T1186] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -2 [ 82.391711][ T28] audit: type=1400 audit(2000000011.060:1110): avc: denied { append } for pid=1188 comm="syz.3.216" path="/41/file2/blkio.bfq.idle_time" dev="loop3" ino=1048703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.419541][ T19] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 82.508704][ T1196] loop3: detected capacity change from 0 to 512 [ 82.530329][ T1196] EXT4-fs (loop3): Test dummy encryption mode enabled [ 82.548978][ T1196] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.572239][ T1196] EXT4-fs (loop3): 1 truncate cleaned up [ 82.583390][ T1196] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 82.592004][ T19] usb 2-1: device descriptor read/64, error -71 [ 82.617158][ T28] audit: type=1400 audit(2000000011.280:1111): avc: denied { write } for pid=1195 comm="syz.3.218" path="/42/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 82.720623][ T1198] loop5: detected capacity change from 0 to 40427 [ 82.738698][ T1198] F2FS-fs (loop5): Fix alignment : internally, start(4096) end(16896) block(12288) [ 82.763503][ T28] audit: type=1326 audit(2000000011.330:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1195 comm="syz.3.218" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd579fb19 code=0x7ffc0000 [ 82.789659][ T1198] F2FS-fs (loop5): invalid crc value [ 82.802887][ T1198] F2FS-fs (loop5): Found nat_bits in checkpoint [ 82.839219][ T28] audit: type=1326 audit(2000000011.330:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1195 comm="syz.3.218" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd579fb19 code=0x7ffc0000 [ 82.868303][ T1198] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 82.875892][ T19] usb 2-1: device descriptor read/64, error -71 [ 82.926096][ T28] audit: type=1326 audit(2000000011.330:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1195 comm="syz.3.218" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd579fb19 code=0x7ffc0000 [ 83.044631][ T28] audit: type=1326 audit(2000000011.330:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1195 comm="syz.3.218" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd579fb19 code=0x7ffc0000 [ 83.100084][ T1209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.223'. [ 83.118584][ T103] udevd[103]: could not touch /run/udev/queue: No such file or directory [ 83.130293][ T28] audit: type=1326 audit(2000000011.330:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1195 comm="syz.3.218" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f6fd579fb19 code=0x7ffc0000 [ 83.179517][ T19] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 83.249549][ T28] audit: type=1326 audit(2000000011.340:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1195 comm="syz.3.218" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd579fb19 code=0x7ffc0000 [ 83.291681][ T1214] loop5: detected capacity change from 0 to 256 [ 83.328286][ T28] audit: type=1326 audit(2000000011.340:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1195 comm="syz.3.218" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd579fb19 code=0x7ffc0000 [ 84.780588][ T19] usb 2-1: device descriptor read/64, error -71 [ 84.792895][ T1214] exfat: Deprecated parameter 'utf8' [ 84.821693][ T291] EXT4-fs (loop1): unmounting filesystem. [ 84.828490][ T1214] exfat: Bad value for 'uid' [ 84.877141][ T28] audit: type=1326 audit(2000000011.340:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1195 comm="syz.3.218" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd579fb19 code=0x7ffc0000 [ 84.957417][ T1227] ip_tables: iptables: counters copy to user failed while replacing table [ 85.029217][ T1234] loop1: detected capacity change from 0 to 1024 [ 85.037678][ T28] audit: type=1326 audit(2000000011.340:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1195 comm="syz.3.218" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd579fb19 code=0x7ffc0000 [ 85.085980][ T1234] EXT4-fs: Ignoring removed orlov option [ 85.099802][ T1234] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 85.122060][ T1238] ip_tables: iptables: counters copy to user failed while replacing table [ 85.154116][ T28] audit: type=1326 audit(2000000011.340:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1195 comm="syz.3.218" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fd579fb19 code=0x7ffc0000 [ 85.193798][ T1238] FAULT_INJECTION: forcing a failure. [ 85.193798][ T1238] name failslab, interval 1, probability 0, space 0, times 0 [ 85.229401][ T1238] CPU: 0 PID: 1238 Comm: syz.5.230 Tainted: G W syzkaller #0 [ 85.238186][ T1238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 85.248217][ T1238] Call Trace: [ 85.251472][ T1238] [ 85.254381][ T1238] __dump_stack+0x21/0x24 [ 85.258685][ T1238] dump_stack_lvl+0x110/0x170 [ 85.263333][ T1238] ? __cfi_dump_stack_lvl+0x8/0x8 [ 85.268330][ T1238] ? kasan_set_track+0x60/0x70 [ 85.273068][ T1238] ? kasan_set_track+0x4b/0x70 [ 85.277805][ T1238] ? kasan_save_alloc_info+0x1f/0x30 [ 85.283059][ T1238] ? __kasan_kmalloc+0x95/0xb0 [ 85.287800][ T1238] dump_stack+0x15/0x24 [ 85.291933][ T1238] should_fail_ex+0x3bf/0x510 [ 85.296584][ T1238] __should_failslab+0xac/0xf0 [ 85.301323][ T1238] should_failslab+0x9/0x20 [ 85.305801][ T1238] kmem_cache_alloc_node+0x42/0x330 [ 85.310974][ T1238] ? alloc_vmap_area+0x184/0x18c0 [ 85.315979][ T1238] alloc_vmap_area+0x184/0x18c0 [ 85.320818][ T1238] ? vm_map_ram+0x930/0x930 [ 85.325302][ T1238] ? __kasan_kmalloc+0x95/0xb0 [ 85.330050][ T1238] ? kmalloc_node_trace+0x3d/0xb0 [ 85.335056][ T1238] __get_vm_area_node+0x160/0x360 [ 85.340060][ T1238] __vmalloc_node_range+0x326/0x1440 [ 85.345324][ T1238] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 85.350844][ T1238] ? avc_has_perm_noaudit+0x390/0x490 [ 85.356208][ T1238] ? __x64_sys_seccomp+0x7b/0x90 [ 85.361125][ T1238] ? __cfi___vmalloc_node_range+0x10/0x10 [ 85.366819][ T1238] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 85.372338][ T1238] __vmalloc+0x79/0x90 [ 85.376381][ T1238] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 85.381905][ T1238] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 85.387249][ T1238] bpf_prog_alloc+0x21/0x1c0 [ 85.391812][ T1238] bpf_prog_create_from_user+0xa7/0x420 [ 85.397334][ T1238] ? __cfi_seccomp_check_filter+0x10/0x10 [ 85.403027][ T1238] do_seccomp+0x801/0xec0 [ 85.407343][ T1238] ? prctl_set_seccomp+0x60/0x60 [ 85.412254][ T1238] ? __this_cpu_preempt_check+0x13/0x20 [ 85.417785][ T1238] ? xfd_validate_state+0x70/0x150 [ 85.422883][ T1238] ? fpregs_restore_userregs+0x128/0x260 [ 85.428489][ T1238] __x64_sys_seccomp+0x7b/0x90 [ 85.433249][ T1238] x64_sys_call+0x721/0x9a0 [ 85.437729][ T1238] do_syscall_64+0x4c/0xa0 [ 85.442118][ T1238] ? clear_bhb_loop+0x30/0x80 [ 85.446767][ T1238] ? clear_bhb_loop+0x30/0x80 [ 85.451420][ T1238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.457300][ T1238] RIP: 0033:0x7f8619d9fb19 [ 85.461687][ T1238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.481272][ T1238] RSP: 002b:00007f861ac7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 85.489667][ T1238] RAX: ffffffffffffffda RBX: 00007f861a025fa0 RCX: 00007f8619d9fb19 [ 85.497671][ T1238] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 85.505631][ T1238] RBP: 00007f8619e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 85.513613][ T1238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.521571][ T1238] R13: 00007f861a026038 R14: 00007f861a025fa0 R15: 00007ffd6eedf708 [ 85.529522][ T1238] [ 85.555829][ T28] audit: type=1326 audit(2000000011.340:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1195 comm="syz.3.218" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd579fb19 code=0x7ffc0000 [ 85.602857][ T1247] loop1: detected capacity change from 0 to 128 [ 85.620406][ T1247] ext2: Bad value for 'mb_optimize_scan' [ 85.633646][ T28] audit: type=1326 audit(2000000011.340:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1195 comm="syz.3.218" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd579fb19 code=0x7ffc0000 [ 85.684796][ T28] audit: type=1326 audit(2000000011.340:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1195 comm="syz.3.218" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd579fb19 code=0x7ffc0000 [ 85.733044][ T1249] loop1: detected capacity change from 0 to 16 [ 85.787244][ T1254] loop1: detected capacity change from 0 to 512 [ 85.793581][ T28] audit: type=1326 audit(2000000011.340:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1195 comm="syz.3.218" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fd579fb19 code=0x7ffc0000 [ 85.857071][ T28] audit: type=1326 audit(2000000011.340:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1195 comm="syz.3.218" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f6fd579fb19 code=0x7ffc0000 [ 85.913318][ T287] EXT4-fs (loop3): unmounting filesystem. [ 86.004661][ T1260] x_tables: duplicate underflow at hook 3 [ 86.348734][ T1265] xt_hashlimit: overflow, try lower: 3/0 [ 86.377235][ T1265] loop4: detected capacity change from 0 to 512 [ 86.395026][ T1265] ext3: Unknown parameter 'func' [ 86.436549][ T1267] loop4: detected capacity change from 0 to 512 [ 86.454178][ T1267] EXT4-fs: Ignoring removed oldalloc option [ 86.474815][ T1267] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 86.490962][ T1267] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.592891][ T1238] syz.5.230: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0 [ 86.626042][ T1238] CPU: 0 PID: 1238 Comm: syz.5.230 Tainted: G W syzkaller #0 [ 86.634809][ T1238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 86.644839][ T1238] Call Trace: [ 86.648092][ T1238] [ 86.651003][ T1238] __dump_stack+0x21/0x24 [ 86.655308][ T1238] dump_stack_lvl+0x110/0x170 [ 86.659955][ T1238] ? __cfi_dump_stack_lvl+0x8/0x8 [ 86.664951][ T1238] ? pr_cont_kernfs_name+0x133/0x160 [ 86.670209][ T1238] dump_stack+0x15/0x24 [ 86.674336][ T1238] warn_alloc+0x1dc/0x200 [ 86.678642][ T1238] ? __cfi_warn_alloc+0x10/0x10 [ 86.683473][ T1238] ? __get_vm_area_node+0x175/0x360 [ 86.688641][ T1238] __vmalloc_node_range+0x34b/0x1440 [ 86.693900][ T1238] ? avc_has_perm_noaudit+0x390/0x490 [ 86.699266][ T1238] ? __x64_sys_seccomp+0x7b/0x90 [ 86.704279][ T1238] ? __cfi___vmalloc_node_range+0x10/0x10 [ 86.709973][ T1238] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 86.715493][ T1238] __vmalloc+0x79/0x90 [ 86.719533][ T1238] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 86.725052][ T1238] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 86.730396][ T1238] bpf_prog_alloc+0x21/0x1c0 [ 86.734961][ T1238] bpf_prog_create_from_user+0xa7/0x420 [ 86.740501][ T1238] ? __cfi_seccomp_check_filter+0x10/0x10 [ 86.746196][ T1238] do_seccomp+0x801/0xec0 [ 86.750508][ T1238] ? prctl_set_seccomp+0x60/0x60 [ 86.755456][ T1238] ? __this_cpu_preempt_check+0x13/0x20 [ 86.760978][ T1238] ? xfd_validate_state+0x70/0x150 [ 86.766064][ T1238] ? fpregs_restore_userregs+0x128/0x260 [ 86.771674][ T1238] __x64_sys_seccomp+0x7b/0x90 [ 86.776416][ T1238] x64_sys_call+0x721/0x9a0 [ 86.780904][ T1238] do_syscall_64+0x4c/0xa0 [ 86.785297][ T1238] ? clear_bhb_loop+0x30/0x80 [ 86.789953][ T1238] ? clear_bhb_loop+0x30/0x80 [ 86.794609][ T1238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.800485][ T1238] RIP: 0033:0x7f8619d9fb19 [ 86.804890][ T1238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.824487][ T1238] RSP: 002b:00007f861ac7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 86.832884][ T1238] RAX: ffffffffffffffda RBX: 00007f861a025fa0 RCX: 00007f8619d9fb19 [ 86.840845][ T1238] RDX: 0000200000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 86.848792][ T1238] RBP: 00007f8619e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 86.856747][ T1238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.864691][ T1238] R13: 00007f861a026038 R14: 00007f861a025fa0 R15: 00007ffd6eedf708 [ 86.872639][ T1238] [ 87.894455][ T19] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 88.373745][ T423] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 88.492296][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 88.542838][ T19] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 88.559204][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.569290][ T423] usb 5-1: Using ep0 maxpacket: 16 [ 88.577369][ T423] usb 5-1: no configurations [ 88.589940][ T19] usb 2-1: config 0 descriptor?? [ 89.875470][ T423] usb 5-1: can't read configurations, error -22 [ 89.892230][ T19] usb 2-1: can't set config #0, error -71 [ 89.899598][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 89.899608][ T28] audit: type=1400 audit(2000000018.571:1181): avc: denied { read } for pid=1280 comm="syz.1.242" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.031526][ T1281] mmap: syz.1.242 (1281) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.047732][ T19] usb 2-1: USB disconnect, device number 12 [ 90.071073][ T1281] loop1: detected capacity change from 0 to 512 [ 90.090853][ T289] EXT4-fs (loop4): unmounting filesystem. [ 90.096733][ T1281] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 90.111925][ T28] audit: type=1400 audit(2000000018.691:1182): avc: denied { unlink } for pid=1276 comm="syz.3.241" name="#6" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.229101][ T28] audit: type=1400 audit(2000000018.691:1183): avc: denied { create } for pid=1276 comm="syz.3.241" name="#8" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.254734][ T1290] loop4: detected capacity change from 0 to 8192 [ 90.291917][ T1290] cgroup: Invalid name [ 90.296370][ T1290] fuse: Bad value for 'group_id' [ 90.309151][ T28] audit: type=1400 audit(2000000018.691:1184): avc: denied { link } for pid=1276 comm="syz.3.241" name="#8" dev="tmpfs" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.336016][ T1238] Mem-Info: [ 90.361514][ T1238] active_anon:67620 inactive_anon:1 isolated_anon:0 [ 90.361514][ T1238] active_file:24452 inactive_file:2352 isolated_file:0 [ 90.361514][ T1238] unevictable:0 dirty:197 writeback:0 [ 90.361514][ T1238] slab_reclaimable:9317 slab_unreclaimable:80534 [ 90.361514][ T1238] mapped:29910 shmem:60721 pagetables:663 [ 90.361514][ T1238] sec_pagetables:0 bounce:0 [ 90.361514][ T1238] kernel_misc_reclaimable:0 [ 90.361514][ T1238] free:1438819 free_pcp:10573 free_cma:0 [ 90.446534][ T28] audit: type=1400 audit(2000000018.691:1185): avc: denied { rename } for pid=1276 comm="syz.3.241" name="#9" dev="tmpfs" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.469362][ T295] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 90.492449][ T1295] netlink: 'syz.4.247': attribute type 1 has an invalid length. [ 90.509611][ T1295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 90.528538][ T28] audit: type=1400 audit(2000000018.691:1186): avc: denied { open } for pid=1280 comm="syz.1.242" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.552662][ T1295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 90.562447][ T1238] Node 0 active_anon:266268kB inactive_anon:4kB active_file:97808kB inactive_file:9356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119692kB dirty:788kB writeback:0kB shmem:238828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4544kB pagetables:2652kB sec_pagetables:0kB all_unreclaimable? no [ 90.605567][ T1312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 90.619098][ T19] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 90.629576][ T1312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.247'. [ 90.648491][ T28] audit: type=1400 audit(2000000019.011:1187): avc: denied { unmount } for pid=1289 comm="syz.4.245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 90.668270][ T295] usb 4-1: device descriptor read/64, error -71 [ 90.697838][ T1238] DMA32 free:2966484kB boost:0kB min:31276kB low:39092kB high:46908kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971856kB mlocked:0kB bounce:0kB free_pcp:5372kB local_pcp:5372kB free_cma:0kB [ 90.756441][ T1238] lowmem_reserve[]: 0 3932 3932 3932 [ 90.766510][ T1238] Normal free:2784312kB boost:0kB min:42448kB low:53060kB high:63672kB reserved_highatomic:0KB active_anon:266476kB inactive_anon:4kB active_file:97808kB inactive_file:9356kB unevictable:0kB writepending:788kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:43248kB local_pcp:43248kB free_cma:0kB [ 90.827487][ T1238] lowmem_reserve[]: 0 0 0 0 [ 90.837165][ T1238] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2966484kB [ 90.854784][ T19] usb 2-1: Using ep0 maxpacket: 8 [ 90.863873][ T19] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 90.880345][ T19] usb 2-1: config 179 has no interface number 0 [ 90.891741][ T1238] Normal: 781*4kB (U) 87*8kB (U) 293*16kB (UE) 1*32kB (U) 1*64kB (U) 3*128kB (UME) 2*256kB (UM) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (UM) 675*4096kB (M) = 2781468kB [ 90.910326][ T19] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 90.933572][ T19] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 90.945016][ T295] usb 4-1: device descriptor read/64, error -71 [ 90.955094][ T1238] 86485 total pagecache pages [ 90.964911][ T1238] 2 pages in swap cache [ 90.972164][ T19] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 90.985397][ T1238] Free swap = 124928kB [ 90.993537][ T1238] Total swap = 124996kB [ 91.001772][ T1238] 2097051 pages RAM [ 91.007624][ T19] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 91.021126][ T1238] 0 pages HighMem/MovableOnly [ 91.030895][ T1238] 347487 pages reserved [ 91.039284][ T1238] 0 pages cma reserved [ 91.044391][ T19] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 91.075958][ T19] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 91.095217][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.115426][ T1281] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 91.229079][ T295] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 91.335689][ T19] usb 2-1: USB disconnect, device number 13 [ 91.341649][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 91.341670][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 91.389027][ T295] usb 4-1: device descriptor read/64, error -71 [ 91.659054][ T295] usb 4-1: device descriptor read/64, error -71 [ 91.789044][ T295] usb usb4-port1: attempt power cycle [ 92.208991][ T295] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 92.246414][ T1323] fuse: Bad value for 'fd' [ 92.252568][ T295] usb 4-1: device descriptor read/8, error -71 [ 92.270206][ T1323] ip_tables: iptables: counters copy to user failed while replacing table [ 92.410589][ T295] usb 4-1: device descriptor read/8, error -71 [ 93.865931][ T1336] loop3: detected capacity change from 0 to 512 [ 93.952791][ T1336] EXT4-fs: Ignoring removed oldalloc option [ 94.216803][ T1342] loop1: detected capacity change from 0 to 512 [ 94.226375][ T1342] FAT-fs (loop1): Directory bread(block 2080) failed [ 94.233084][ T1342] FAT-fs (loop1): Directory bread(block 2081) failed [ 94.239774][ T1342] FAT-fs (loop1): Directory bread(block 2082) failed [ 94.246426][ T1342] FAT-fs (loop1): Directory bread(block 2083) failed [ 94.253116][ T1342] FAT-fs (loop1): Directory bread(block 2084) failed [ 94.259781][ T1342] FAT-fs (loop1): Directory bread(block 2085) failed [ 94.266427][ T1342] FAT-fs (loop1): Directory bread(block 2086) failed [ 94.273084][ T1342] FAT-fs (loop1): Directory bread(block 2087) failed [ 94.281202][ T1342] FAT-fs (loop1): Directory bread(block 2080) failed [ 94.287967][ T1342] FAT-fs (loop1): Directory bread(block 2081) failed [ 94.338088][ T1336] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 94.352503][ T28] audit: type=1400 audit(2000000023.021:1188): avc: denied { execute } for pid=1346 comm="syz.5.256" path="/selinux/checkreqprot" dev="selinuxfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 94.404650][ T1336] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.423096][ T1354] loop5: detected capacity change from 0 to 256 [ 94.453030][ T1354] FAT-fs (loop5): Unrecognized mount option "iocharÚTt=cp950" or missing value [ 94.488533][ T28] audit: type=1400 audit(2000000023.051:1189): avc: denied { mounton } for pid=1349 comm="syz.4.257" path="/55/file0" dev="tmpfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.556453][ T28] audit: type=1400 audit(2000000023.051:1190): avc: denied { mount } for pid=1349 comm="syz.4.257" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 94.678843][ T6] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 94.773879][ T1374] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 94.801150][ T621] device bridge_slave_1 left promiscuous mode [ 94.814436][ T621] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.837920][ T621] device bridge_slave_0 left promiscuous mode [ 94.853226][ T621] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.869209][ T621] device veth1_macvtap left promiscuous mode [ 94.875712][ T6] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.892717][ T621] device veth0_vlan left promiscuous mode [ 94.908380][ T6] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 94.941944][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.955903][ T1379] loop1: detected capacity change from 0 to 8192 [ 94.979442][ T6] usb 6-1: Product: syz [ 94.993471][ T1379] cgroup: Invalid name [ 95.007224][ T6] usb 6-1: Manufacturer: syz [ 95.018866][ T295] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 95.035885][ T6] usb 6-1: SerialNumber: syz [ 95.069679][ T295] usb 4-1: Using ep0 maxpacket: 16 [ 95.074904][ T6] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 95.087229][ T295] usb 4-1: no configurations [ 95.096381][ T295] usb 4-1: can't read configurations, error -22 [ 95.102911][ T295] usb usb4-port1: unable to enumerate USB device [ 95.265931][ T6] usb 6-1: USB disconnect, device number 4 [ 95.519594][ T28] audit: type=1400 audit(2000000024.191:1191): avc: denied { sqpoll } for pid=1383 comm="syz.4.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.143781][ T1400] hub 1-0:1.0: USB hub found [ 96.156659][ T1400] hub 1-0:1.0: 1 port detected [ 96.214729][ T1407] loop5: detected capacity change from 0 to 256 [ 96.238333][ T1407] FAT-fs (loop5): Directory bread(block 64) failed [ 96.255541][ T1407] FAT-fs (loop5): Directory bread(block 65) failed [ 96.269235][ T1407] FAT-fs (loop5): Directory bread(block 66) failed [ 96.284350][ T1407] FAT-fs (loop5): Directory bread(block 67) failed [ 96.296611][ T1407] FAT-fs (loop5): Directory bread(block 68) failed [ 96.303310][ T1407] FAT-fs (loop5): Directory bread(block 69) failed [ 96.312206][ T1407] FAT-fs (loop5): Directory bread(block 70) failed [ 96.319242][ T1407] FAT-fs (loop5): Directory bread(block 71) failed [ 96.325953][ T1407] FAT-fs (loop5): Directory bread(block 72) failed [ 96.336684][ T1407] FAT-fs (loop5): Directory bread(block 73) failed [ 96.890474][ T287] EXT4-fs (loop3): unmounting filesystem. [ 96.963275][ T1419] loop3: detected capacity change from 0 to 512 [ 97.000747][ T1414] loop5: detected capacity change from 0 to 256 [ 97.011188][ T1414] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.022453][ T1414] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 97.031051][ T1414] FAT-fs (loop5): Filesystem has been set read-only [ 97.055420][ T1419] EXT4-fs (loop3): 1 orphan inode deleted [ 97.062516][ T1419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 97.072339][ T621] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 97.092348][ T1419] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.102817][ T621] EXT4-fs error (device loop3): ext4_release_dquot:6864: comm kworker/u4:7: Failed to release dquot type 1 [ 97.228726][ T318] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 97.408689][ T318] usb 2-1: Using ep0 maxpacket: 32 [ 97.416103][ T318] usb 2-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 97.425342][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.433471][ T318] usb 2-1: Product: syz [ 97.437673][ T318] usb 2-1: Manufacturer: syz [ 97.442415][ T318] usb 2-1: SerialNumber: syz [ 97.652543][ T318] usb 2-1: 1:1 : sample bitwidth 99 in over sample bytes 4 [ 97.659888][ T318] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 97.666159][ T318] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 97.683170][ T318] usb 2-1: USB disconnect, device number 14 [ 97.851774][ T287] EXT4-fs (loop3): unmounting filesystem. [ 97.914883][ T1434] loop5: detected capacity change from 0 to 512 [ 97.944445][ T28] audit: type=1400 audit(2000000026.611:1192): avc: denied { set_context_mgr } for pid=1436 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 97.966623][ T1438] binder: 1436:1438 ioctl c0306201 200000000ac0 returned -14 [ 97.979188][ T1434] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 98.006547][ T1437] binder_alloc: 1436: binder_alloc_buf, no vma [ 98.020394][ T1434] EXT4-fs error (device loop5): xattr_find_entry:297: inode #15: comm syz.5.277: corrupted xattr entries [ 98.032087][ T1439] netlink: 'syz.3.280': attribute type 4 has an invalid length. [ 98.041792][ T28] audit: type=1400 audit(2000000026.671:1193): avc: denied { call } for pid=1436 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 98.074952][ T1434] EXT4-fs (loop5): Remounting filesystem read-only [ 98.100650][ T1451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1451 comm=syz.3.282 [ 98.113766][ T1434] EXT4-fs (loop5): 1 truncate cleaned up [ 98.124226][ T1434] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 98.147141][ T28] audit: type=1400 audit(2000000026.811:1194): avc: denied { execmem } for pid=1450 comm="syz.3.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 98.176443][ T1434] EXT4-fs error (device loop5): ext4_iget_extra_inode:4765: inode #15: comm syz.5.277: corrupted in-inode xattr [ 98.216526][ T1434] EXT4-fs (loop5): Remounting filesystem read-only [ 98.237231][ T566] EXT4-fs (loop5): unmounting filesystem. [ 99.052308][ T28] audit: type=1400 audit(2000000027.721:1195): avc: denied { read write } for pid=1463 comm="syz.5.284" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 99.077512][ T6] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 99.097765][ T6] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.133140][ T1466] sch_tbf: burst 4 is lower than device veth0_vlan mtu (1514) ! [ 99.148592][ T1476] loop3: detected capacity change from 0 to 256 [ 99.155466][ T1476] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.167008][ T1476] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 99.175824][ T1476] FAT-fs (loop3): Filesystem has been set read-only [ 99.194642][ T1484] udevd[1484]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 99.222171][ T28] audit: type=1400 audit(2000000027.741:1196): avc: denied { open } for pid=1463 comm="syz.5.284" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 99.759666][ T28] audit: type=1400 audit(2000000028.431:1197): avc: denied { mount } for pid=1487 comm="syz.5.290" name="/" dev="configfs" ino=5528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 99.810397][ T28] audit: type=1326 audit(2000000028.461:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1487 comm="syz.5.290" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8619d9fb19 code=0x7ffc0000 [ 99.835310][ T28] audit: type=1326 audit(2000000028.461:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1487 comm="syz.5.290" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8619d9fb19 code=0x7ffc0000 [ 100.659308][ T1509] loop1: detected capacity change from 0 to 128 [ 100.690681][ T1508] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 100.734493][ T1509] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 100.763403][ T1509] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.776385][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 100.776393][ T28] audit: type=1400 audit(2000000029.441:1209): avc: denied { read } for pid=142 comm="dhcpcd" name="n20" dev="sda1" ino=50 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:root_t tclass=file permissive=1 [ 100.805148][ T1520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.294'. [ 100.949334][ T291] EXT4-fs (loop1): unmounting filesystem. [ 100.955378][ T28] audit: type=1400 audit(2000000029.441:1210): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n20" dev="sda1" ino=50 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:root_t tclass=file permissive=1 [ 102.355324][ T1539] overlayfs: failed to clone upperpath [ 102.395906][ T1542] loop1: detected capacity change from 0 to 256 [ 102.430114][ T1542] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 102.450270][ T28] audit: type=1400 audit(2000000029.441:1211): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n20" dev="sda1" ino=50 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:root_t tclass=file permissive=1 [ 102.536647][ T28] audit: type=1400 audit(2000000029.601:1212): avc: denied { execute } for pid=1503 comm="syz.1.293" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 102.588400][ T28] audit: type=1400 audit(2000000029.601:1213): avc: denied { execute_no_trans } for pid=1503 comm="syz.1.293" path="/54/file1/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 102.628398][ T28] audit: type=1400 audit(2000000031.031:1214): avc: denied { create } for pid=1534 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.664329][ T1535] io-wq is not configured for unbound workers [ 104.891970][ T1574] netlink: 56 bytes leftover after parsing attributes in process `syz.4.306'. [ 106.101455][ T6] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 106.109133][ T295] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 106.149990][ T1553] loop3: detected capacity change from 0 to 256 [ 106.288251][ T295] usb 6-1: device descriptor read/64, error -71 [ 106.309275][ T6] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 106.318029][ T6] usb 2-1: config 1 has an invalid descriptor of length 94, skipping remainder of the config [ 106.328441][ T6] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid maxpacket 60928, setting to 1024 [ 106.339615][ T6] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 106.349607][ T6] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 106.363844][ T6] usb 2-1: New USB device found, idVendor=174c, idProduct=56aa, bcdDevice= 1.00 [ 106.373000][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.381106][ T6] usb 2-1: Product: syz [ 106.385287][ T6] usb 2-1: Manufacturer: syz [ 106.390034][ T6] usb 2-1: SerialNumber: syz [ 106.399441][ T6] usb-storage 2-1:1.0: USB Mass Storage device detected [ 106.407610][ T6] scsi host1: usb-storage 2-1:1.0 [ 106.518241][ T6] usb 2-1: USB disconnect, device number 15 [ 106.558285][ T295] usb 6-1: device descriptor read/64, error -71 [ 107.340938][ T1599] loop1: detected capacity change from 0 to 512 [ 107.348957][ T1599] FAT-fs (loop1): Directory bread(block 2080) failed [ 107.355630][ T1599] FAT-fs (loop1): Directory bread(block 2081) failed [ 107.362336][ T1599] FAT-fs (loop1): Directory bread(block 2082) failed [ 107.369020][ T1599] FAT-fs (loop1): Directory bread(block 2083) failed [ 107.375684][ T1599] FAT-fs (loop1): Directory bread(block 2084) failed [ 107.382373][ T1599] FAT-fs (loop1): Directory bread(block 2085) failed [ 107.389063][ T1599] FAT-fs (loop1): Directory bread(block 2086) failed [ 107.395722][ T1599] FAT-fs (loop1): Directory bread(block 2087) failed [ 107.404160][ T1599] FAT-fs (loop1): Directory bread(block 2080) failed [ 107.410855][ T1599] FAT-fs (loop1): Directory bread(block 2081) failed [ 107.435170][ T1596] xt_hashlimit: size too large, truncated to 1048576 [ 107.468762][ T1601] xt_hashlimit: size too large, truncated to 1048576 [ 107.497695][ T1607] loop3: detected capacity change from 0 to 512 [ 107.515977][ T1605] fuse: Bad value for 'fd' [ 107.529769][ T1607] EXT4-fs: quotafile must be on filesystem root [ 107.589962][ T1604] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 108.839331][ T1618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.316'. [ 108.849874][ T28] audit: type=1400 audit(2000000037.522:1215): avc: denied { mount } for pid=1614 comm="syz.4.318" name="/" dev="ramfs" ino=21812 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 108.882684][ T1615] overlayfs: failed to clone upperpath [ 108.900345][ T1617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 108.926951][ T1616] input: syz0 as /devices/virtual/input/input5 [ 108.958865][ T28] audit: type=1400 audit(2000000037.542:1216): avc: denied { remount } for pid=1614 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.038379][ T28] audit: type=1400 audit(2000000037.552:1217): avc: denied { write } for pid=1614 comm="syz.4.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.059465][ T1636] loop1: detected capacity change from 0 to 256 [ 109.092481][ T1636] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 109.138277][ T28] audit: type=1400 audit(2000000037.622:1218): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=819 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.191112][ T1634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.323'. [ 109.200218][ T28] audit: type=1400 audit(2000000037.622:1219): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=819 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.242779][ T28] audit: type=1400 audit(2000000037.622:1220): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=819 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 109.302014][ T28] audit: type=1400 audit(2000000037.652:1221): avc: denied { module_request } for pid=1628 comm="syz.1.321" kmod="net-pf-2-proto-2-type-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 109.348209][ T28] audit: type=1400 audit(2000000037.662:1222): avc: denied { read } for pid=1628 comm="syz.1.321" path="socket:[21907]" dev="sockfs" ino=21907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 109.383199][ T28] audit: type=1400 audit(2000000037.732:1223): avc: denied { getopt } for pid=1628 comm="syz.1.321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.498476][ T28] audit: type=1400 audit(2000000039.172:1224): avc: denied { write } for pid=1643 comm="syz.1.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.554702][ T1648] loop5: detected capacity change from 0 to 2048 [ 110.621087][ T1648] EXT4-fs: Mount option(s) incompatible with ext2 [ 110.654438][ T1657] loop3: detected capacity change from 0 to 512 [ 110.681568][ T1657] FAT-fs (loop3): Directory bread(block 2080) failed [ 110.698042][ T1657] FAT-fs (loop3): Directory bread(block 2081) failed [ 110.706630][ T1657] FAT-fs (loop3): Directory bread(block 2082) failed [ 110.722356][ T1661] loop5: detected capacity change from 0 to 512 [ 110.733182][ T1657] FAT-fs (loop3): Directory bread(block 2083) failed [ 110.757460][ T1661] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.328: Invalid block bitmap block 0 in block_group 0 [ 110.774212][ T1657] FAT-fs (loop3): Directory bread(block 2084) failed [ 110.789519][ T1657] FAT-fs (loop3): Directory bread(block 2085) failed [ 110.803181][ T1661] EXT4-fs (loop5): Remounting filesystem read-only [ 110.809936][ T1657] FAT-fs (loop3): Directory bread(block 2086) failed [ 110.816638][ T1661] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 110.825553][ T318] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 110.833748][ T1657] FAT-fs (loop3): Directory bread(block 2087) failed [ 110.840857][ T1661] EXT4-fs (loop5): Remounting filesystem read-only [ 110.848843][ T1657] FAT-fs (loop3): Directory bread(block 2080) failed [ 110.855610][ T1661] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.328: attempt to clear invalid blocks 983261 len 1 [ 110.869578][ T1657] FAT-fs (loop3): Directory bread(block 2081) failed [ 110.877002][ T1661] EXT4-fs (loop5): Remounting filesystem read-only [ 110.883771][ T1661] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.328: invalid indirect mapped block 2683928664 (level 0) [ 110.901589][ T1661] EXT4-fs (loop5): Remounting filesystem read-only [ 110.909884][ T1661] EXT4-fs error (device loop5): __ext4_get_inode_loc:4522: comm syz.5.328: Invalid inode table block 0 in block_group 0 [ 110.922815][ T1661] EXT4-fs (loop5): Remounting filesystem read-only [ 110.929881][ T1661] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 110.939651][ T1661] EXT4-fs (loop5): Remounting filesystem read-only [ 110.946192][ T1661] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 110.955058][ T1661] EXT4-fs (loop5): Remounting filesystem read-only [ 110.961682][ T1661] EXT4-fs error (device loop5): __ext4_get_inode_loc:4522: comm syz.5.328: Invalid inode table block 0 in block_group 0 [ 110.974531][ T1661] EXT4-fs (loop5): Remounting filesystem read-only [ 110.981232][ T1661] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 110.991231][ T1661] EXT4-fs (loop5): Remounting filesystem read-only [ 110.997754][ T1661] EXT4-fs error (device loop5): ext4_truncate:4327: inode #13: comm syz.5.328: mark_inode_dirty error [ 111.008998][ T1661] EXT4-fs (loop5): Remounting filesystem read-only [ 111.015546][ T1661] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 111.024825][ T1661] EXT4-fs (loop5): Remounting filesystem read-only [ 111.031558][ T1661] EXT4-fs error (device loop5): __ext4_get_inode_loc:4522: comm syz.5.328: Invalid inode table block 0 in block_group 0 [ 111.044710][ T1661] EXT4-fs (loop5): Remounting filesystem read-only [ 111.051326][ T318] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 111.061379][ T1661] EXT4-fs (loop5): 1 truncate cleaned up [ 111.067025][ T1661] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 111.075675][ T318] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 111.093930][ T318] usb 2-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 111.103247][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.111564][ T318] usb 2-1: Product: syz [ 111.115774][ T318] usb 2-1: Manufacturer: syz [ 111.120487][ T318] usb 2-1: SerialNumber: syz [ 111.128944][ T1655] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 111.136395][ T1655] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 111.144136][ T318] usbserial_generic 2-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 111.156214][ T318] usbserial_generic 2-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 111.167114][ T318] usbserial_generic 2-1:1.0: generic converter detected [ 111.174840][ T318] usb 2-1: generic converter now attached to ttyUSB0 [ 111.359080][ T295] usb 2-1: USB disconnect, device number 16 [ 111.373193][ T295] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 111.387425][ T1647] capability: warning: `syz.1.324' uses 32-bit capabilities (legacy support in use) [ 111.402254][ T295] usbserial_generic 2-1:1.0: device disconnected [ 111.506693][ T566] EXT4-fs (loop5): unmounting filesystem. [ 112.227058][ T1667] loop3: detected capacity change from 0 to 1024 [ 112.273907][ T1667] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.335981][ T1667] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.349072][ T1680] loop1: detected capacity change from 0 to 128 [ 112.394156][ T1680] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 113.071229][ T287] EXT4-fs (loop3): unmounting filesystem. [ 114.058653][ T1689] futex_wake_op: syz.1.334 tries to shift op by -1; fix this program [ 114.072391][ T1691] loop3: detected capacity change from 0 to 2048 [ 114.098550][ T1689] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 114.130941][ T1691] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 114.365448][ T1691] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.397020][ T318] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 114.442151][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 114.442161][ T28] audit: type=1400 audit(2000000043.112:1228): avc: denied { ioctl } for pid=1690 comm="syz.3.335" path="/64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 114.515886][ T1691] fs-verity: sha512 using implementation "sha512-avx2" [ 114.577757][ T318] usb 2-1: device descriptor read/64, error -71 [ 114.847706][ T318] usb 2-1: device descriptor read/64, error -71 [ 114.905275][ T287] EXT4-fs (loop3): unmounting filesystem. [ 115.117732][ T318] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 115.267733][ T318] usb 2-1: device descriptor read/64, error -71 [ 115.537685][ T318] usb 2-1: device descriptor read/64, error -71 [ 115.657811][ T318] usb usb2-port1: attempt power cycle [ 116.436312][ T28] audit: type=1400 audit(2000000044.882:1229): avc: denied { associate } for pid=1704 comm="syz.4.339" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 116.488156][ T1702] device syzkaller0 entered promiscuous mode [ 116.547626][ T318] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 116.955928][ T1714] loop3: detected capacity change from 0 to 16 [ 116.967372][ T1714] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x7c752359, 0x02d6543f expected [ 117.369733][ T362] udevd[362]: incorrect erofs checksum on /dev/loop3 [ 117.377728][ T318] usb 2-1: device descriptor read/8, error -71 [ 117.539135][ T318] usb 2-1: device descriptor read/8, error -71 [ 119.109826][ T28] audit: type=1400 audit(2000000047.772:1230): avc: denied { wake_alarm } for pid=1722 comm="syz.1.342" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.620309][ T1730] device xfrm0 entered promiscuous mode [ 120.628156][ T1730] loop5: detected capacity change from 0 to 512 [ 120.640888][ T1730] FAT-fs (loop5): Directory bread(block 2080) failed [ 120.647723][ T1730] FAT-fs (loop5): Directory bread(block 2081) failed [ 120.654394][ T1730] FAT-fs (loop5): Directory bread(block 2082) failed [ 120.661177][ T1730] FAT-fs (loop5): Directory bread(block 2083) failed [ 120.667873][ T1730] FAT-fs (loop5): Directory bread(block 2084) failed [ 120.674530][ T1730] FAT-fs (loop5): Directory bread(block 2085) failed [ 120.681245][ T1730] FAT-fs (loop5): Directory bread(block 2086) failed [ 120.687951][ T1730] FAT-fs (loop5): Directory bread(block 2087) failed [ 120.696236][ T1730] FAT-fs (loop5): Directory bread(block 2080) failed [ 120.702989][ T1730] FAT-fs (loop5): Directory bread(block 2081) failed [ 120.711688][ T1732] loop3: detected capacity change from 0 to 256 [ 120.745694][ T1732] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.792744][ T1731] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 120.867454][ T1731] FAT-fs (loop3): Filesystem has been set read-only [ 123.027277][ T295] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 123.208219][ T295] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.219230][ T295] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.232145][ T6] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 123.239739][ T295] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.246383][ T295] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 123.255784][ T295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.266372][ T295] usb 6-1: config 0 descriptor?? [ 123.429674][ T1746] loop1: detected capacity change from 0 to 512 [ 123.474329][ T1759] loop5: detected capacity change from 0 to 128 [ 123.675780][ T295] usbhid 6-1:0.0: can't add hid device: -71 [ 123.681794][ T295] usbhid: probe of 6-1:0.0 failed with error -71 [ 123.691058][ T295] usb 6-1: USB disconnect, device number 7 [ 123.958352][ T6] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 123.968215][ T6] usb 2-1: can't read configurations, error -71 8[ 124.813174][ T28] audit: type=1400 audit(2000000053.472:1231): avc: denied { sys_module } for pid=195 comm="getty" capability=16 scontext=system_u:system_r:getty_t tcontext=system_u:system_r:getty_t tclass=capability permissive=1 [ 124.981542][ T1775] netlink: 72 bytes leftover after parsing attributes in process `syz.4.355'. [ 125.315314][ T1774] X.509: Couldn't decode AuthKeyIdentifier [ 125.345094][ T28] audit: type=1400 audit(2000000053.472:1232): avc: denied { module_request } for pid=195 comm="getty" kmod="tty-ldisc-22" scontext=system_u:system_r:getty_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 125.387118][ T295] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 125.428050][ T28] audit: type=1400 audit(2000000053.703:1233): avc: denied { ioctl } for pid=1766 comm="syz.4.355" path="socket:[22277]" dev="sockfs" ino=22277 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 125.578068][ T295] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 125.587732][ T295] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.599000][ T295] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 125.608829][ T295] usb 4-1: config 1 has no interface number 0 [ 125.615585][ T295] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 125.627508][ T295] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 125.693861][ T295] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.704135][ T295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.713577][ T295] usb 4-1: Product: syz [ 125.718501][ T295] usb 4-1: Manufacturer: syz [ 125.723539][ T295] usb 4-1: SerialNumber: syz can't run '/sbi[ 127.567344][ T1782] loop3: detected capacity change from 0 to 40427 [ 127.577076][ T28] audit: type=1400 audit(2000000055.283:1234): avc: denied { read write } for pid=1765 comm="syz.3.354" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 127.606247][ T1782] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 127.613550][ T1782] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 127.622695][ T1782] F2FS-fs (loop3): Unrecognized mount option "" or missing value can't run '/sbican't run '/sbin/getty': No suc[ 128.912992][ T28] audit: type=1400 audit(2000000055.283:1235): avc: denied { open } for pid=1765 comm="syz.3.354" path="/69/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 129.178946][ T1792] loop1: detected capacity change from 0 to 512 [ 129.203146][ T295] usb 4-1: USB disconnect, device number 17 [ 129.226070][ T1792] FAT-fs (loop1): Directory bread(block 2080) failed [ 129.233487][ T1792] FAT-fs (loop1): Directory bread(block 2081) failed [ 129.240840][ T1792] FAT-fs (loop1): Directory bread(block 2082) failed [ 129.248203][ T1792] FAT-fs (loop1): Directory bread(block 2083) failed [ 129.255587][ T1792] FAT-fs (loop1): Directory bread(block 2084) failed [ 129.263001][ T1792] FAT-fs (loop1): Directory bread(block 2085) failed [ 129.270362][ T1792] FAT-fs (loop1): Directory bread(block 2086) failed [ 129.277697][ T1792] FAT-fs (loop1): Directory bread(block 2087) failed [ 129.286643][ T1792] FAT-fs (loop1): Directory bread(block 2080) failed [ 129.294048][ T1792] FAT-fs (loop1): Directory bread(block 2081) failed [ 129.366934][ T28] audit: type=1400 audit(2000000056.383:1236): avc: denied { create } for pid=1790 comm="syz.4.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 129.399045][ T1817] futex_wake_op: syz.3.363 tries to shift op by 144; fix this program SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=7 req=252 state=3 status=67 (errno 9: Bad file descriptor) [ 129.430277][ T1817] loop3: detected capacity change from 0 to 256 [ 129.437389][ T1817] exfat: Unknown parameter '0x0000000000000003˙˙˙˙' [ 129.468626][ T362] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 129.536911][ T28] audit: type=1326 audit(2000000057.563:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1804 comm="syz.5.360" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8619d9fb19 code=0x7ffc0000 [ 129.686884][ T28] audit: type=1326 audit(2000000057.563:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1804 comm="syz.5.360" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8619d9fb19 code=0x7ffc0000 [ 129.779958][ T28] audit: type=1326 audit(2000000057.563:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1804 comm="syz.5.360" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8619d9fb19 code=0x7ffc0000 [ 129.848567][ T28] audit: type=1326 audit(2000000057.563:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1804 comm="syz.5.360" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8619d9fb19 code=0x7ffc0000 can't run '/sbi[ 129.894543][ T28] audit: type=1326 audit(2000000057.563:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1804 comm="syz.5.360" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8619d9f882 code=0x7ffc0000 [ 129.927142][ T1800] device bridge_slave_1 left promiscuous mode [ 129.933887][ T1800] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.942520][ T28] audit: type=1326 audit(2000000057.563:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1804 comm="syz.5.360" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8619d9f917 code=0x7ffc0000 [ 129.974986][ T1800] device bridge_slave_0 left promiscuous mode [ 129.981723][ T1800] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.990127][ T28] audit: type=1326 audit(2000000057.563:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1804 comm="syz.5.360" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8619d5c811 code=0x7ffc0000 [ 130.017532][ T1800] device veth1_macvtap left promiscuous mode [ 130.024217][ T1800] device veth0_vlan left promiscuous mode [ 130.046863][ T28] audit: type=1326 audit(2000000057.563:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1804 comm="syz.5.360" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8619da0909 code=0x7ffc0000 [ 130.085777][ T28] audit: type=1400 audit(2000000057.563:1245): avc: denied { map } for pid=1801 comm="syz.4.361" path="socket:[22383]" dev="sockfs" ino=22383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 130.113062][ T28] audit: type=1400 audit(2000000057.563:1246): avc: denied { read } for pid=1801 comm="syz.4.361" path="socket:[22383]" dev="sockfs" ino=22383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 130.138786][ T28] audit: type=1326 audit(2000000057.573:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1804 comm="syz.5.360" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8619d5c87b code=0x7ffc0000 [ 130.165906][ T28] audit: type=1326 audit(2000000057.573:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1804 comm="syz.5.360" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8619d9fb19 code=0x7ffc0000 [ 130.194976][ T28] audit: type=1326 audit(2000000057.573:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1804 comm="syz.5.360" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8619d9fb19 code=0x7ffc0000 [ 130.222668][ T1809] pimreg1: tun_chr_ioctl cmd 1074025680 [ 130.667457][ T1800] device bridge_slave_1 left promiscuous mode [ 130.674175][ T1800] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.682372][ T1800] device bridge_slave_0 left promiscuous mode [ 130.689149][ T1800] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.697756][ T1800] device bridge_slave_1 left promiscuous mode [ 130.704499][ T1800] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.712754][ T1800] device bridge_slave_0 left promiscuous mode [ 130.719528][ T1800] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.728160][ T1800] device veth1_macvtap left promiscuous mode [ 130.734771][ T1800] device veth0_vlan left promiscuous mode [ 130.741466][ T1800] device veth1_macvtap left promiscuous mode [ 130.748120][ T1800] device veth0_vlan left promiscuous mode [ 131.327207][ T1800] device bridge_slave_1 left promiscuous mode [ 131.333925][ T1800] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.342115][ T1800] device bridge_slave_0 left promiscuous mode [ 131.348917][ T1800] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.357567][ T1800] device veth1_macvtap left promiscuous mode [ 131.364170][ T1800] device veth0_vlan left promiscuous mode