last executing test programs: 35m2.177457688s ago: executing program 32 (id=130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000240)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000300)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000023c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 34m56.031819117s ago: executing program 33 (id=177): madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000b0601020000000000000000000000000900020073797a310000000005000100060000002c00078018000180143a9b24000000005900000000000000000000bb060004400e1f00000500070011000000ef1f05cf5b3c61779adf846e2c7c083c4cec17aa837b1511d62851c344806387"], 0x54}}, 0x0) 34m53.422459244s ago: executing program 3 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x5) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0), 0x0, 0x10, &(0x7f0000001000), 0xfffffffffffffd00}, 0x48) bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000500)=@base={0xa, 0x8, 0x4932, 0x7f, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 34m52.531536585s ago: executing program 3 (id=216): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000540), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000580), 0x10106, 0x2, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0xa8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000640)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x5420, 0x0) 34m50.586571284s ago: executing program 3 (id=223): r0 = socket(0x1e, 0x1, 0x0) syz_clone3(&(0x7f00000002c0)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r1, &(0x7f0000001fc0)={0x2020}, 0xa5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) connect$tipc(r0, &(0x7f0000000600)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x3, &(0x7f00000004c0)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x20, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @multicast2}, {{0x0, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}, 0x0) 34m50.347891258s ago: executing program 3 (id=224): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000900), &(0x7f0000000940)='./file1\x00', 0x1800c10, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="d9cd3bba99656213c9bdb6ad25829865e2b093446735a7c79832913d0e551fd4a79514d8cb4c2db49bb6488f55766f25ab190595c0f81e7c5928ef3a518e86e4c4412871c86c04d4e87e2e07100992c35fb1d429ccbdd39a3abbaf652ba590a4a25b078ca6f4236447e05f21205f42a1a0d8d478861b9cd4019d49f2023ca04c14e773cf774fd38e9a7f1b6e18d9288ffd23d922719f8d9a49287cfdb56a527f5cad89e3e257a6b22243139d97cd9b41642eff023b3ba3bed69af42c0fa9d8700dbd4ffdf61bf86d164ff52542aa807e9b2990741e774dec46a68182c39bcb52a98bbb", @ANYRES64, @ANYRES8=0x0, @ANYRES32, @ANYRES16], 0x1, 0x304, &(0x7f0000000b40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001680)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r1, 0x4a8e) r2 = socket(0x28, 0x801, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = syz_clone3(&(0x7f0000000280)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r2, 0x2) ppoll(&(0x7f0000000040)=[{r2, 0x2}, {r2, 0x1}], 0x2, 0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) 34m50.160334278s ago: executing program 3 (id=226): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x14) sendmsg$nl_route(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@ipv4_newaddr={0x20, 0x14, 0x101, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000cc0)={@multicast1=0xe0000300, @local}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) listen(0xffffffffffffffff, 0x5) 34m50.009901283s ago: executing program 3 (id=227): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) listen(0xffffffffffffffff, 0x7) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000380)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000f00), 0x0, 0x10, &(0x7f0000000f40), 0xfffffffffffffd64}, 0x48) 34m49.977009436s ago: executing program 34 (id=227): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) listen(0xffffffffffffffff, 0x7) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000380)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000f00), 0x0, 0x10, &(0x7f0000000f40), 0xfffffffffffffd64}, 0x48) 34m35.87797997s ago: executing program 5 (id=371): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pause() pread64(0xffffffffffffffff, 0x0, 0x0, 0x4) keyctl$get_security(0x11, 0x0, 0x0, 0x0) 34m35.846822713s ago: executing program 5 (id=372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x5, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0xa, 0x7) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(r0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000380)='./file2\x00', 0x8010, &(0x7f00000003c0), 0x5, 0x565, &(0x7f0000000400)="$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") mount(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x2200020, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 34m35.48491489s ago: executing program 5 (id=381): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0xec776000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) 34m35.401765838s ago: executing program 5 (id=383): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1, 0xa, 0x10, 0x10, 0x10, 0x2710, 0xea60}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000cc0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_mount_image$vfat(&(0x7f0000000840), &(0x7f00000012c0)='./file1\x00', 0x2000494, &(0x7f0000001300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2ca, &(0x7f00000013c0)="$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") add_key$keyring(&(0x7f0000000d00), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e40)='./proc\x00', &(0x7f0000000e80)='proc\x00', 0x1000004, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./proc/net/ip6t_hashlimit/lo\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f00)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x81, 0x2000007, 0x110, r1, 0x0) 34m35.245168154s ago: executing program 5 (id=387): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x2, 0x0) setns(0xc9, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x1fe) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_clone(0x40005100, 0x0, 0x0, 0x0, 0x0, 0x0) 34m35.077942891s ago: executing program 5 (id=391): epoll_create1(0x80000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x78, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2e}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x5}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x78}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 34m35.016799098s ago: executing program 35 (id=391): epoll_create1(0x80000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x78, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @local}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x5}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2e}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x5}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x78}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 11m34.130088532s ago: executing program 2 (id=5175): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000300), 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e0, 0x98, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) sched_setaffinity(0x0, 0x8, &(0x7f0000000980)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000009c0)=0x7) lsetxattr$system_posix_acl(&(0x7f0000000a00)='.\x00', &(0x7f0000000a40)='system.posix_acl_default\x00', &(0x7f0000000a80)={{}, {}, [], {0x2}, [{0x8, 0x4}], {0x2}, {0x2}}, 0x2c, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000b00)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b80), 0x651, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000c00)={'veth0_to_team\x00', &(0x7f0000000c40)=@ethtool_channels={0x3d, 0x9, 0x5, 0xfffffffc, 0x11, 0x8, 0x5, 0x7, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000d00)={'veth0_to_team\x00', 0x800}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000d40)={'sit0\x00', &(0x7f0000000d80)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x465, 0x0, 0x8, 0x4, 0x0, @broadcast, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000dc0)={'syztnl0\x00', &(0x7f0000000e00)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @local, @empty}}}}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000e40)={0x4001}, 0xfea3) syz_open_procfs(0x0, &(0x7f0000000e80)='net/fib_trie\x00') 11m22.570644277s ago: executing program 2 (id=5202): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18, 0x5}, @nested_amd_stgi={0x17e, 0x10}, @wr_drn={0x68, 0x20, {0x4, 0x6f}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x4, 0x69}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control_nat=0x600c, 0x800000000000, 0x4, 0x5ac069eb}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host32=0x4c00, 0xd8, 0x6, 0x2}}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x1e, @gpa=0x4000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host16=0xc02, 0x0, 0x8, 0xe1fa}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0x82e6, 0x4, 0xd}}, @nested_load_code={0x12e, 0x58, {0x3, "b90f0400000f3226450f01c966b8fe008ec0653e0f01c50f06b8010000000f01c167660f519603000000b8010000000f01c166b8c2008ee8f33636410f0053b0"}}, @in_dx={0x69, 0x20, {0xf29d}}, @wrmsr={0x65, 0x20, {0x1c9, 0x4}}], 0x270}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001800ffff00000000000000000a001000fd000200008e4b0014000500fc0000000000000000000000000000000c00090008"], 0x3c}, 0x1, 0x0, 0x0, 0x2048800}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000002380)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000002480), &(0x7f00000024c0)}, 0x2a) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x46}}, 0x14}, 0x1, 0x0, 0x0, 0x44804}, 0x80) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x38, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@routing={0x2c, 0x0, 0x0, 0x5}]}}}}}}}, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f00000007c0)={[0xfff, 0x400, 0x4, 0x101, 0xffff8001, 0x43b0, 0x5, 0x0, 0x6, 0x5, 0x400, 0x2, 0x1, 0x2, 0x8, 0xb, 0x2, 0x7fff, 0xe9, 0x1, 0x9, 0x9, 0x6, 0x6, 0x1, 0x3, 0x46, 0x1ff, 0x1000, 0x0, 0x5, 0x2892990c, 0xd0, 0xb, 0xfff, 0x7fff, 0xe, 0x7, 0x4, 0x2, 0x20d, 0x5, 0x3, 0x9, 0x7, 0x9, 0xff, 0x5, 0x3, 0xc, 0x5, 0x1, 0x10000, 0x9f00000, 0x80000000, 0x1, 0x80000000, 0x30000, 0xfffffffb, 0x2, 0x0, 0x0, 0x3, 0xd, 0x10001, 0x7fffffff, 0x7e6, 0x5, 0x91, 0x4, 0x5, 0xe, 0x2a, 0x8, 0x1, 0xd95, 0x2, 0x4, 0x8, 0x2, 0xec77, 0x0, 0x5, 0x4, 0x8, 0x2, 0x3, 0x8000, 0x3, 0x657, 0x4, 0x1, 0x400, 0x1, 0x10001, 0x1, 0x2, 0x7, 0xa012, 0x1000, 0x9, 0x9, 0xdbef, 0x7, 0x63c, 0x6, 0x10000, 0xffff, 0x4fc4366, 0x0, 0x7, 0x1b4e, 0xb, 0xe, 0x1fd, 0x93b1, 0x7ff, 0x1, 0x6, 0x80a8, 0x5, 0x81, 0x3, 0xb, 0x7a, 0x80, 0x72cd, 0x1, 0x8, 0xcc6e, 0x8, 0x9, 0x223a, 0x3, 0x3, 0x0, 0x4, 0x4, 0x1, 0x299, 0x2, 0x3, 0x8001, 0x4, 0x1, 0xb, 0x4, 0x259, 0x6, 0x2, 0x0, 0xc4, 0x2, 0x80, 0x4, 0x4, 0x7, 0xe29, 0x6, 0xfffffff8, 0x4, 0x8, 0x1f, 0x4, 0x95, 0x9, 0x5, 0x401, 0x0, 0x4, 0x7fffffff, 0x5, 0xff, 0xfff, 0x8d6, 0xb00, 0x200, 0x4, 0xc8, 0x170380fd, 0x12bd, 0x7f6, 0x8c, 0x5, 0x80, 0x1, 0x3, 0x9, 0x2, 0x5, 0xff, 0x9, 0x5, 0xb7, 0x10, 0x80000001, 0xfffffff8, 0x0, 0x6, 0x800, 0x2, 0x3, 0xfffffffb, 0xe, 0x5, 0xfff, 0x0, 0x2, 0xffffffff, 0x1, 0xfffffffb, 0x10001, 0x6, 0xc09, 0x5, 0x1000, 0x9, 0x0, 0x8, 0x9, 0x9, 0xb68, 0xfff, 0x5, 0xffffffff, 0x4, 0x5d, 0x7fff, 0x2, 0x7fff, 0x9, 0x0, 0xe000000, 0x0, 0x6, 0x81, 0x5a82c482, 0x10, 0x8, 0x2, 0x5, 0x3, 0x4, 0x6, 0x81, 0x200, 0x81, 0x4, 0x140, 0x5, 0x5, 0x1, 0x6, 0x4, 0xffff, 0x0, 0x3, 0x5782, 0x9, 0xfffffffe, 0x3, 0x4, 0x9, 0xfe63, 0x7d4, 0x1, 0x20000000, 0x6, 0x3, 0x3e7, 0x5, 0xd8e, 0xe, 0xfffffffc, 0xfffffffc, 0xfff, 0x7, 0x7, 0xe2, 0x3, 0x5, 0x8, 0x2, 0x3, 0x100, 0x2, 0x4, 0x4, 0x3, 0x2, 0x8, 0x8000, 0xfffffc00, 0x3, 0xfff, 0x4290, 0x10001, 0x3, 0xcb191c2, 0x8, 0x8, 0x8, 0x3, 0x2, 0x8001, 0xe, 0x5, 0x69d, 0x101, 0x4, 0x8, 0xd51, 0x4800000, 0x5, 0x101, 0x3, 0xffffffdf, 0x3, 0x1ff00000, 0x7, 0x80, 0x2, 0x2, 0x1, 0x10000, 0xfffffff8, 0x639, 0x3ff, 0x8, 0x8e2, 0x99, 0x6, 0x2, 0x1, 0x9, 0xfffffffb, 0xfffffffc, 0xffffff81, 0x4, 0xe1, 0xb, 0xfffff3c0, 0x7, 0x1c000, 0x9, 0x10001, 0x10000, 0x9, 0x5, 0x9, 0x7, 0x1, 0xfffffffd, 0xf00, 0x1, 0xffffffff, 0xfffffff8, 0x67, 0x7, 0xe1c1, 0x9, 0x7fff, 0x9, 0x8, 0x8, 0xfffffffe, 0x6, 0x8, 0xfffffff1, 0x4, 0x6, 0x3, 0x3ff, 0xe, 0x4082, 0xfffffffe, 0x0, 0x7, 0x8, 0xba90, 0xb, 0x3, 0x5, 0x2, 0x4, 0x8, 0xff, 0xfffffff0, 0x5, 0x2, 0x2, 0xfffffff7, 0x0, 0x2, 0xfffffffc, 0x3, 0x0, 0x0, 0xe, 0x2, 0x80, 0x9, 0xd, 0xfffffffe, 0xd0, 0xfffff000, 0xa7a6, 0xa27a, 0x4, 0x5, 0x3, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x2, 0x200, 0xa4, 0x3ff, 0x3, 0x8, 0xb, 0x2, 0xb, 0x7ff, 0x4, 0x2, 0x1, 0x78b, 0x0, 0xa, 0x5, 0x81, 0x1, 0x8d4, 0x8, 0x2, 0x8, 0x6, 0x2b4, 0x2c8, 0x3, 0x7, 0x4, 0x8, 0x0, 0x2, 0x1, 0x189a, 0x3, 0x9, 0xffffffff, 0x401, 0x4, 0x1, 0x0, 0xf7, 0x7, 0x4, 0x8001, 0x5, 0x5, 0x514a, 0xfffffffa, 0x9, 0x5, 0x5, 0x1ff, 0xa2f, 0x3, 0x2, 0xb109, 0xfffffff8, 0xb17adbc, 0x337a, 0xe, 0xfca7, 0x6, 0x7, 0x7f, 0xffff0000, 0xd76, 0x5e, 0xffff, 0x4, 0x7, 0x8, 0x10000, 0x9, 0x2, 0xd62, 0x4, 0x9, 0xd, 0x0, 0x2, 0x2, 0x0, 0xbaa, 0x5, 0x80000000, 0x400, 0x81, 0x1000, 0x7fffffff, 0x7, 0x54cb, 0x40, 0x7e4f1400, 0xd, 0x9, 0x5, 0x5, 0x65f, 0xbd, 0xc, 0x4, 0x3, 0x7, 0x1, 0x2, 0x8001, 0xfd, 0x401, 0x1, 0x5, 0x335, 0x0, 0xc, 0x8, 0x2, 0xd7, 0x1, 0x4, 0x7f, 0x2c, 0xfffffff8, 0x9, 0x3, 0x9, 0x29b9, 0x3, 0x1, 0x6, 0x3, 0x8, 0x332c7d27, 0x1, 0x100, 0x80, 0x0, 0x1, 0x8, 0x8, 0x300000, 0x0, 0x7ff, 0x5, 0xfffffffb, 0xf2a1, 0x5, 0xe45c, 0x7f, 0x7f, 0x6, 0x80000000, 0x30000, 0x0, 0x80000001, 0xffff, 0x3, 0x0, 0x903d, 0x0, 0x4, 0xfffffff8, 0x9, 0x3, 0x4, 0xca9, 0x7ff, 0x6, 0x5, 0x2, 0x6, 0x40, 0x2, 0x80, 0x3, 0x7, 0x5f8f, 0x4, 0x8, 0x84e, 0x5, 0x1, 0x0, 0x80, 0x0, 0x6, 0x1, 0xcd77, 0x5, 0x80000001, 0x10000, 0x0, 0x8000, 0x2, 0x80000001, 0x4, 0x7484, 0x9, 0x8000, 0x2, 0x40, 0xaec6, 0x8, 0x233, 0x5, 0x3, 0x6, 0x7ff, 0x2, 0xb, 0x8, 0x4, 0x9, 0x3, 0xfb8, 0xfffffffb, 0x7f, 0xfffffe01, 0x0, 0x6, 0x8000, 0x4f30, 0x7fffffff, 0x0, 0x2, 0x1, 0x101, 0x66, 0x8000, 0x2, 0x5, 0xfffffff8, 0x4, 0x4, 0x0, 0x4, 0x2, 0x5, 0x3, 0x8001, 0x9, 0x3, 0x9, 0x0, 0x8, 0x7, 0x8, 0x6, 0x8, 0x0, 0x10, 0x1, 0xffffff47, 0x8, 0x0, 0x990, 0x3ff, 0x80000000, 0xfffffff2, 0x44f9c564, 0xfffffffa, 0x80000, 0xfe, 0xff, 0x8, 0x2, 0x1ffc, 0xad3, 0x2, 0x7, 0x5, 0x80000000, 0x749747b, 0x5, 0x1, 0x6, 0x23c7, 0x4, 0x10001, 0x0, 0x9, 0x5, 0x2, 0x9, 0x305a, 0x7, 0x4, 0x9, 0xffff, 0x90, 0x7c8, 0x7, 0x9, 0x9, 0x4, 0x8, 0x1, 0x2, 0x2, 0xc7, 0x9, 0xfffffffd, 0x0, 0x36d3, 0x407, 0x7, 0x612, 0x3, 0x7, 0xb37, 0x77f3, 0xf, 0xfffffffd, 0xa, 0x8, 0x3, 0x6, 0xb, 0x5, 0xffff5490, 0x6e0f75ea, 0xd6e7, 0x400, 0xe64, 0xc8f1, 0x7e05, 0x1, 0x80, 0xc4b, 0x328dd9dc, 0x0, 0x3, 0x2, 0xffffffff, 0x1, 0xb, 0x7, 0x1, 0x3, 0x100, 0x0, 0x1f, 0x0, 0x3, 0x8, 0x7, 0x80000000, 0x1, 0x3, 0xe, 0x101, 0xd, 0x98a9, 0x8, 0x40, 0x7ff, 0xff, 0x0, 0x2, 0x162, 0x9, 0x2, 0x8, 0x2, 0x8001, 0x1576, 0xfffff800, 0x2, 0x1, 0x3, 0x9, 0x2, 0x100, 0x200, 0x8, 0x0, 0x0, 0x4, 0x8, 0x5, 0x2, 0x7, 0x10000, 0x8c, 0x5, 0x2, 0xf2, 0xb1, 0x5, 0x200, 0xb, 0x8000, 0x7, 0x5, 0x80000001, 0x8, 0x9, 0x3, 0x8000, 0x7, 0x6, 0x9, 0x4, 0x8, 0x3, 0x9, 0xffffa3f4, 0x8, 0x0, 0x5, 0x0, 0x2, 0x5, 0x9, 0x7, 0x9, 0x7a5, 0x2, 0x7cd, 0x0, 0x7, 0x9, 0x6, 0x1, 0xd, 0xa6, 0x1000, 0x3, 0x0, 0x7, 0x9, 0xd, 0x40, 0x5, 0x5, 0x5, 0x3, 0x80, 0x4, 0xffffc000, 0x6, 0x10, 0x8, 0xfffffffe, 0x4, 0x81, 0xfffffff9, 0xffff, 0x9, 0x7, 0x8, 0x6, 0x4, 0x8, 0x1, 0x5, 0xffffffff, 0x2, 0x8, 0x80000000, 0x9, 0xc000000, 0x400, 0x6, 0x10001, 0x7, 0x3, 0x6, 0x0, 0x9, 0x18, 0x7, 0x8, 0x924a, 0x4, 0x9, 0xfff, 0x689, 0x4800000, 0x6, 0x1, 0x3, 0x80, 0x6, 0x8, 0xfff, 0x7, 0x2, 0x2, 0x9, 0xdcd, 0x0, 0x8, 0xffff6cb5, 0x1, 0x9b6c, 0x7, 0x7, 0x40, 0x26034831, 0x9, 0x1d, 0x80, 0x6, 0x8, 0x6, 0x3, 0x2, 0x6f81bf4f, 0x6, 0x5, 0x3, 0x3e, 0x16, 0x6, 0x8e89, 0x5, 0x7, 0xb2bdbd5, 0x5, 0x2, 0x7, 0x0, 0x8d, 0x4, 0x401, 0x7, 0x1, 0xa0, 0x4, 0x2c, 0x1, 0x3, 0x3, 0x9, 0x2, 0x9, 0x200, 0xb, 0x11a5, 0x8, 0xe00, 0x3, 0xbb08, 0x1, 0x2, 0x7, 0x1000, 0xb04, 0x7fffffff, 0xbd, 0xffffffff, 0x42, 0x0, 0x3, 0x94, 0x7ff, 0x8000, 0x8, 0x2, 0x85e, 0x5c9, 0x8001, 0x7, 0x480d, 0x0, 0x2, 0xffff7fff, 0x0, 0x0, 0x6, 0x5, 0x8, 0x4, 0x7, 0x3, 0xfffffffa, 0x7, 0x0, 0x80000000, 0x2, 0x33, 0x6, 0x3, 0x1, 0x5, 0x8, 0x2b4, 0x1, 0x7, 0x39, 0xfffffffa, 0xf, 0xa, 0xe, 0x5, 0x2, 0x0, 0x703d127c, 0x0, 0x9c37, 0x9, 0xfffffffb, 0x5, 0x3, 0x3, 0x7fffffff, 0x4]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x74, 0xa3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r5, 0x5602, &(0x7f00000003c0)={0x0, 0x1, 0x7ff, 0x0, 0x1}) ioctl$KDFONTOP_GET(r5, 0x560f, &(0x7f0000000400)={0x1, 0x1, 0x7, 0x2, 0x3effffff, 0x0}) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000380)={0x2, [0x5, 0x7ff]}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'vlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f00000005c0)={0x1, 0x1, 0xe}) 11m21.332342024s ago: executing program 2 (id=5208): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000000000001801000078", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000800)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a80)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000ac0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000b00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b80)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c00), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000c40), 0x4000087, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000505000/0x4000)=nil, 0x4000, &(0x7f0000000000)='lo\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000c00)={0x2020}, 0xff14) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}}], 0x2, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000003240)) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) 11m18.978941885s ago: executing program 2 (id=5211): socket(0x10, 0x3, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x7dea6bc29d40f3c1) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x8000, 0x100) r1 = inotify_init1(0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x101c082, &(0x7f0000000140)={[{@uni_xlateno}, {@utf8}, {@uni_xlateno}, {@uni_xlate}, {@numtail}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@shortname_winnt}, {@fat=@showexec}, {@shortname_win95}, {@utf8no}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@uni_xlateno}, {}]}, 0x6, 0x2b8, &(0x7f0000000240)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000540)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$getenv(0x4201, r2, 0x1ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000700), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000740), 0x4000087, 0x2, 0x0) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x20a02, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f0000000800)='./file1\x00', 0x1000040, &(0x7f0000000840)={[], [{@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '\'-'}}, {@uid_gt}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x39, 0x30, 0x36, 0x69, 0x36, 0x30], 0x2d, [0x65, 0x56, 0x38, 0x32], 0x2d, [0x37, 0x39, 0x66, 0x31], 0x2d, [0x30, 0x39, 0x31, 0x36], 0x2d, [0x62, 0x35, 0x63, 0x62, 0x31, 0x62, 0x36, 0x34]}}}]}, 0x1, 0x5a3, &(0x7f00000008c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./file1\x00', 0x143042, 0x58) copy_file_range(r5, 0x0, r5, 0x0, 0x863, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000ec0)={0x1, &(0x7f0000000f00)=[{0x6, 0x1, 0x3, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000f40)={0x1, &(0x7f0000000f80)=[{0x6, 0x1, 0x80, 0x7fff0000}]}) inotify_add_watch(r1, &(0x7f0000000fc0)='.\x00', 0x40001a2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000001000)={0x0, 0x21, 0x800000000004}, 0x0) 11m17.364752331s ago: executing program 2 (id=5213): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000300), 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x0, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e0, 0x98, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) sched_setaffinity(0x0, 0x8, &(0x7f0000000980)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000009c0)=0x7) lsetxattr$system_posix_acl(&(0x7f0000000a00)='.\x00', &(0x7f0000000a40)='system.posix_acl_default\x00', &(0x7f0000000a80)={{}, {}, [], {0x2}, [{0x8, 0x4}], {0x2}, {0x2}}, 0x2c, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000b00)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b80), 0x651, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000c00)={'veth0_to_team\x00', &(0x7f0000000c40)=@ethtool_channels={0x3d, 0x9, 0x5, 0xfffffffc, 0x11, 0x8, 0x5, 0x7, 0x1}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000d00)={'veth0_to_team\x00', 0x800}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000d40)={'sit0\x00', &(0x7f0000000d80)={'syztnl0\x00', 0x0, 0x80, 0x1, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x465, 0x0, 0x8, 0x4, 0x0, @broadcast, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000dc0)={'syztnl0\x00', &(0x7f0000000e00)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @local, @empty}}}}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000e40)={0x4001}, 0xfea3) syz_open_procfs(0x0, &(0x7f0000000e80)='net/fib_trie\x00') 11m12.514640748s ago: executing program 2 (id=5229): socket(0x840000000002, 0x3, 0xff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x4000087, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt(r0, 0x28, 0x1, 0x0, 0x0) 10m56.439830015s ago: executing program 36 (id=5229): socket(0x840000000002, 0x3, 0xff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x4000087, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt(r0, 0x28, 0x1, 0x0, 0x0) 4m29.982574639s ago: executing program 9 (id=7961): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4m29.946007203s ago: executing program 9 (id=7963): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000140)) r2 = syz_io_uring_setup(0xec4, &(0x7f0000000000)={0x0, 0xffffff7c, 0x2, 0x3, 0x34b}, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x14bd, 0xb4e6, 0x3, &(0x7f0000000100)={[0xfffffffffffffffa]}, 0x8) ioctl$KDSKBSENT(r1, 0x4b49, 0x0) sendmsg$nl_route(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000080)=ANY=[@ANYBLOB="680000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000380012800a00010076786c616e0000002800028005001f000000000004001700080001000400000006000f004e220000050016"], 0x68}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 4m29.834451914s ago: executing program 9 (id=7968): socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1d, r1}, 0x10, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 4m29.753910823s ago: executing program 9 (id=7969): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000940)='./file1\x00', 0x214802, &(0x7f0000000b40)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000c00)="$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") open(&(0x7f0000001180)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f00000011c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000001200)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000001280)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000012c0)=0x3f) r1 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x5, 0x8ffff) r2 = open(&(0x7f0000000900)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f00000009c0)=[{&(0x7f0000000a00)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 4m28.801686171s ago: executing program 9 (id=7973): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000718000/0x2000)=nil) syz_read_part_table(0x5c6, &(0x7f00000002c0)="$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") bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x9, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000003000000884b020001000000950000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0xd}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x3) mount$tmpfs(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nr_inodes=t']) syz_mount_image$fuse(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x107002e, &(0x7f0000000b80)=ANY=[], 0x4, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000bc0)='./file0\x00', 0x22000, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000c00)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x8, &(0x7f0000000cc0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 4m28.464275765s ago: executing program 9 (id=7981): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x80, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f00000002c0)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 4m28.364573856s ago: executing program 37 (id=7981): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x80, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f00000002c0)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 1m6.62659375s ago: executing program 0 (id=9048): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0x45, 0x0, 0x2, 0xfffffffd}, {0x45, 0x0, 0xfd}, {0x6, 0x0, 0xf7}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000014c0)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x1, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x1c}}, 0x20004000) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001d80)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x2b8, 0x25c, 0xf0, 0x7, 0x1e0, 0x3a8, 0x3a8, 0x1e0, 0x3a8, 0x7fffffe, 0x0, {[{{@ipv6={@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xffffffff], [], 'macvlan1\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x4, 0x2}, 0x16c, 0xa8, 0xf0, 0xa010000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffb}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffff00, 0xffffff], [0xff000000, 0xff000000, 0xff, 0xffffff00], 'veth0_virt_wifi\x00', 'wlan1\x00', {0xff}, {0xff}, 0x88, 0xa, 0x5, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) r5 = syz_open_procfs(0x0, &(0x7f0000001a40)='smaps\x00') preadv(r5, &(0x7f0000001ac0)=[{&(0x7f0000001b00)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x17, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x2, 0x1001, &(0x7f0000000400)=""/4097, 0x41000, 0xb, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001480)={'batadv_slave_1\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001540)={0x1b, 0x0, 0x0, 0x6, 0x0, r2, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="0500000004000000080000000001"], 0x50) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000002100), 0x0) close(r6) connect$inet6(r7, &(0x7f0000002140)={0xa, 0x4e04, 0x101, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x10000}, 0x1c) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000021c0)='./file1\x00', 0x9, &(0x7f0000002200)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000002240)="$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") fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002700)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @val=@iter={0x0}}, 0x20) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000002740)={0x1e59, 0x1005a, 0xffff7002, 0x3, 0x6, "e9d30d0000000000000100", 0xfffffffc, 0x201}) 1m5.896215475s ago: executing program 0 (id=9051): syz_io_uring_setup(0x4fba, 0x0, 0x0, &(0x7f0000000000), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000380)={@local, @local, @void, {@llc={0x4, {@snap={0xaa, 0x0, 'S', "05621b"}}}}}, 0x0) getrandom(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000003f40)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket(0xa, 0x3, 0xff) bind$inet6(r2, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000401bbbbbbbbbbbb86dd6c04f70000082c01fc000000000081a7d7e1335200000000000000000001"], 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000200)='./file1\x00', 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1, 0x1505, &(0x7f0000000740)="$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") r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, &(0x7f00000004c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000001cc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000003d00)=0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000004580)) fchown(r1, 0x0, r4) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r6, &(0x7f0000000500)={&(0x7f0000000540)={0xa, 0x4e23, 0x1, @empty, 0x38a}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000003dc0)="ec1b4e3cfe93408f320b25f674", 0xd}], 0x1, &(0x7f0000003d40)=ANY=[@ANYBLOB], 0x30}, 0x4) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x220001e, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1m2.905399652s ago: executing program 0 (id=9055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000200)) ioctl$PPPIOCSMAXCID(r7, 0x40047451, &(0x7f0000000300)=0x8) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000340)=0x4) pwritev(r7, &(0x7f00000003c0)=[{&(0x7f0000000400)="00214500002800000000400600000a0000010a000002", 0x16}], 0x1, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x86801, 0x0) r8 = fsmount(r4, 0x1, 0x0) fchdir(r8) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpu.stat\x00', 0x275a, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) 1m1.65068988s ago: executing program 0 (id=9059): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f00000004c0)={[{@nodioread_nolock}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, 'debug_want_extra_isize'}}, {@euid_lt}]}, 0xfe, 0x2a4, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501010000000000850000006000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000800)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000880)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'xfrm0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000d40)="10131400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000d80)={0x11, 0x0, r4}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xd, 0x0, &(0x7f0000000640)="63eced8e46dc3f010000000000", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 59.642276356s ago: executing program 0 (id=9063): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) chdir(&(0x7f00000001c0)='./cgroup\x00') fchown(0xffffffffffffffff, 0x0, 0xee01) r3 = syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@stripe={'stripe', 0x3d, 0x4}}, {@data_err_ignore}, {@block_validity}, {@norecovery}, {@dioread_nolock}, {@oldalloc}, {@oldalloc}, {@sysvgroups}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000003c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000940)='./file1\x00', 0x190864, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x203a075, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x3a08082, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x109342, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) fallocate(r5, 0x3, 0x3f, 0x8000c66) syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000c80)='./file0\x00', 0x2000010, &(0x7f0000000cc0)={[{@usrjquota}, {@dax_always}]}, 0x30, 0x538, &(0x7f0000000d00)="$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") ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000240)={0x0, 0x0, "016044be9e05141d45d14a8cba2f3f08"}) bind$inet6(0xffffffffffffffff, &(0x7f0000000b80)={0xa, 0x4e22, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008000a00"], 0x1c}], 0x1}, 0x4040000) 55.928743067s ago: executing program 0 (id=9067): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) io_setup(0x5, &(0x7f0000000240)=0x0) r1 = inotify_init() io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) prlimit64(r2, 0x7, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000280), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) fsopen(&(0x7f0000000280)='logfs\x00', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x120c, &(0x7f0000001540)={@broadcast, @empty, @void, {@ipv6={0x86dd, @comp={0xe, 0x6, "3dcdc7", 0x11d6, 0x6c, 0x0, @empty, @private1, {[@fragment={0x4, 0x0, 0x5, 0x0, 0x0, 0x4, 0x64}, @fragment={0x0, 0x0, 0x2, 0x1, 0x0, 0x17, 0x65}, @hopopts={0x32, 0x208, '\x00', [@generic={0x7, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x200}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x4, 0x5, [0x4]}}, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0xf}, @hao={0xc9, 0x10, @remote}]}, @routing={0x2c, 0x10, 0x0, 0x10, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @loopback, @loopback, @mcast1]}, @hopopts={0x1, 0x1b, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x5, 0xff7, [0x5, 0x3ff, 0x100000000, 0x8, 0x2, 0x3, 0x3]}}, @generic={0x0, 0x91, "34699f6213957c1e49793c199d85bab01b3b9627cdd2f95552cef38f4185cb6278877a41f5c5007f60f90c9a86be51296517e0054049facc63e4fc5a861489041c361cf3eb95f6c6e30a098f91e74eb094162a85cfc9f1fed9a1d9e00b9d5c3bac2e6e475e4c0c0bc098c9309f27f19a3235a7976b1d4d728c5afe6ce130bdb4b8298853c634e10be92d240eb74167e3d8"}, @pad1]}], {0x88, 0x0, 0x4d3, "70a375813fc123c50f6b"}}}}}}, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r7, 0x0, 0x0) symlinkat(&(0x7f0000000500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000001500)='./file0\x00') inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) mkdir(&(0x7f0000000300)='./bus\x00', 0x2c) 40.09237218s ago: executing program 38 (id=9067): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) io_setup(0x5, &(0x7f0000000240)=0x0) r1 = inotify_init() io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) prlimit64(r2, 0x7, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000280), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) fsopen(&(0x7f0000000280)='logfs\x00', 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x120c, &(0x7f0000001540)={@broadcast, @empty, @void, {@ipv6={0x86dd, @comp={0xe, 0x6, "3dcdc7", 0x11d6, 0x6c, 0x0, @empty, @private1, {[@fragment={0x4, 0x0, 0x5, 0x0, 0x0, 0x4, 0x64}, @fragment={0x0, 0x0, 0x2, 0x1, 0x0, 0x17, 0x65}, @hopopts={0x32, 0x208, '\x00', [@generic={0x7, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x200}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x4, 0x5, [0x4]}}, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0xf}, @hao={0xc9, 0x10, @remote}]}, @routing={0x2c, 0x10, 0x0, 0x10, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @loopback, @loopback, @mcast1]}, @hopopts={0x1, 0x1b, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x5, 0xff7, [0x5, 0x3ff, 0x100000000, 0x8, 0x2, 0x3, 0x3]}}, @generic={0x0, 0x91, "34699f6213957c1e49793c199d85bab01b3b9627cdd2f95552cef38f4185cb6278877a41f5c5007f60f90c9a86be51296517e0054049facc63e4fc5a861489041c361cf3eb95f6c6e30a098f91e74eb094162a85cfc9f1fed9a1d9e00b9d5c3bac2e6e475e4c0c0bc098c9309f27f19a3235a7976b1d4d728c5afe6ce130bdb4b8298853c634e10be92d240eb74167e3d8"}, @pad1]}], {0x88, 0x0, 0x4d3, "70a375813fc123c50f6b"}}}}}}, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r7, 0x0, 0x0) symlinkat(&(0x7f0000000500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000001500)='./file0\x00') inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) mkdir(&(0x7f0000000300)='./bus\x00', 0x2c) 4.624609666s ago: executing program 4 (id=9377): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x54c, 0xba0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x6, "", [{{0x9, 0x4, 0x0, 0x8, 0x12, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xfff9, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf, 0x14, 0xf}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 3.100376832s ago: executing program 1 (id=9394): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newnexthop={0x38, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x1}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}]}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newnexthop={0x34, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0xc, 0x2, [{0x2}]}]}, 0x34}}, 0x0) 3.086890923s ago: executing program 1 (id=9395): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0xfffffffd, 0x2000}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x2, 0x0, 0x5}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x11}, 0x1c, 0x0}}], 0x1, 0x20002040) 3.072822995s ago: executing program 1 (id=9397): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x20, 0x81, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x400000000000159, 0x40840) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x80, &(0x7f0000000600)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000044c0)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004540)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r3, &(0x7f0000004580)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000006580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r5, 0x0, 0x4000) socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x70, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_LINK={0x8, 0x1, r7}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x43}]}}}]}, 0x70}}, 0x0) 1.8499173s ago: executing program 6 (id=9400): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140), 0xfe, 0x250, &(0x7f0000000340)="$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") creat(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x140) mknod$loop(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlinkat(&(0x7f0000000800)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.803536965s ago: executing program 6 (id=9401): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYBLOB="0100ffffffff000000000c00002904000180040003"], 0x1c}}, 0x0) 1.775189498s ago: executing program 6 (id=9402): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x180c8, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRESHEX=0x0], 0x1, 0x263, &(0x7f0000000500)="$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") write$UHID_INPUT(r0, &(0x7f00000009c0)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='freezer.parent_freezing\x00', 0x275a, 0x0) 1.764497079s ago: executing program 1 (id=9403): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000003c0)) 1.705654855s ago: executing program 1 (id=9404): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000800)={[{}, {@nombcache}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r0 = creat(&(0x7f0000001240)='./file1\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000001280)=0x0) io_submit(r1, 0x1, &(0x7f00000012c0)=[&(0x7f0000001300)={0x25, 0x0, 0x1f, 0x8, 0x0, r0, 0x0, 0x0, 0x8000000}]) 1.705426575s ago: executing program 6 (id=9405): syz_mount_image$exfat(&(0x7f0000002fc0), &(0x7f0000003000)='./file1\x00', 0x800000, &(0x7f0000003040)=ANY=[], 0x1, 0x14fd, &(0x7f0000003080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004580)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) syz_mount_image$vfat(&(0x7f00000045c0), &(0x7f0000004600)='./file1\x00', 0x2805c64, &(0x7f0000004640)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX, @ANYRES16, @ANYRESDEC, @ANYRESHEX, @ANYBLOB="5f3bf3c4ac70ca7ffa801e1575262421d76427e35c4961b03f2766bddf55fc3371320679ac4e3037e79ec005252a2e2cce7fb31c346eb62551e4e7f8a3c26624851abc29ce59ca3a7ea965f9e481e15a8d7e4207f0f16b8b48ecc4d143ffc92e29915ff67f191bb66761c1be27e61f424ebc7779099eee474b30ae2aa9eace84a92d9a443cc2c169e4c259cae1a3e96a3a3c5484434af2"], 0x1, 0x1221, &(0x7f0000004740)="$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") fdatasync(r0) 1.625370213s ago: executing program 6 (id=9408): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000080)=0x4000005, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 1.598177786s ago: executing program 4 (id=9412): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000004c0)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000540)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000580)=""/245, 0xfffffffffffffe4e, 0x30c64a8c5dc2dff0, 0x0, 0x0) 1.567970319s ago: executing program 1 (id=9414): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000880)='./file1\x00', 0x20c484, &(0x7f00000008c0)=ANY=[], 0x1, 0x105d8, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000f00)=[{&(0x7f0000000f40)="ff", 0x1}], 0x1, 0x25412, 0x4, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000011640)='./file1\x00', 0x6042, 0x101) sendfile(r1, r1, 0x0, 0xe3aa6ea) 1.567851309s ago: executing program 4 (id=9415): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000162000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x480, 0x0, 0xd8100011e57ed0}]}) 1.206039286s ago: executing program 4 (id=9417): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000f40)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000019f40)={0x2020}, 0x2020) io_setup(0x1bf9, &(0x7f0000000e80)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000, 0x3}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000000c0)) 824.658985ms ago: executing program 6 (id=9423): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000a80)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000ac0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000003400)={0x2020}, 0x2020) 623.200365ms ago: executing program 8 (id=9426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100ffffffff000000000c00002904000180040003"], 0x1c}}, 0x0) 576.85947ms ago: executing program 8 (id=9428): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000009e00000095"], &(0x7f0000000840)='GPL\x00', 0x4, 0xc0, &(0x7f0000000880)=""/192}, 0x80) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000ac0)='syzkaller\x00'}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000b00)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000b40)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000bc0)={r2, r0, 0x4, r1}, 0x10) 480.81842ms ago: executing program 8 (id=9430): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x50, 0x4, 0x9, 0x80000000}, {0x6, 0x2, 0x2, 0x401}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000540)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4000080, 0x0, 0x0) 480.34924ms ago: executing program 8 (id=9432): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42842, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 441.933034ms ago: executing program 8 (id=9433): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x10000, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000140)=0x40000006, 0x4) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/19, 0x13}, 0x97}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000240)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000280)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 317.840417ms ago: executing program 8 (id=9434): syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f00000003c0)='./bus\x00', 0x0, &(0x7f0000000400)=ANY=[], 0xfd, 0x553e, &(0x7f0000002540)="$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") prlimit64(0x0, 0xe, &(0x7f0000007a80)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000007ac0)=0x8) r0 = getpid() sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000007b00)={&(0x7f0000007b40)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8084}, 0x8080) sched_setaffinity(0x0, 0x8, &(0x7f0000007b80)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000007bc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000007c00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000007c40)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000007cc0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000007d00), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000007d40)='ext4\x00', &(0x7f0000007d80)='./mnt\x00', 0x2000c10, &(0x7f0000007dc0), 0xff, 0x23f, &(0x7f0000007e00)="$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") setxattr$system_posix_acl(0x0, &(0x7f0000008080)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) open(&(0x7f0000008100)='./bus\x00', 0x143943, 0x18) lsetxattr$system_posix_acl(&(0x7f0000008140)='./bus\x00', &(0x7f0000008180)='system.posix_acl_access\x00', &(0x7f00000081c0)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000088c0)={0x0, 0x0, 0x0}, 0x0) unshare(0x24020400) io_uring_setup(0x3c46, &(0x7f0000000480)={0x0, 0xeb7f, 0x3000, 0x2, 0x26c}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x900, 0x6, 0x420, 0x1}, 0x50) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x989680}, 0x0) 315.367957ms ago: executing program 4 (id=9435): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 271.484572ms ago: executing program 4 (id=9436): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./dev\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/kmsg\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 164.631752ms ago: executing program 7 (id=9438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100ffffffff000000000c00002904000180040003"], 0x1c}}, 0x0) 131.912886ms ago: executing program 7 (id=9439): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) setuid(0xee00) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40042, 0x1) 53.924514ms ago: executing program 7 (id=9440): mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/kmsg\x00', 0x6a0983, 0x86) r0 = syz_open_procfs(0x0, &(0x7f0000001100)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001140)) 53.705604ms ago: executing program 7 (id=9441): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x0) mount(&(0x7f0000000480)=@filename='./dev/sda1\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000006c0)={0x0, 0x2904c, 0x20, 0x10003, '\x00', [{0x0, 0x5, 0xcd, 0xffffffffffffffff}, {0x801, 0x0, 0x8001, 0x0, 0x0, 0x9}]}) 39.395525ms ago: executing program 7 (id=9442): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) chroot(&(0x7f0000000180)='./file0/../file0/file0\x00') mount(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000240)='./file0/../file0\x00') 0s ago: executing program 7 (id=9443): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x400, &(0x7f0000000140), 0x2, 0x790, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x101042, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000001bc0)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000001c00)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)) kernel console output (not intermixed with test programs): 39] [ 1149.370135][T31039] public_key_verify_signature+0x90f/0xd80 [ 1149.376012][T31039] ? __cfi_public_key_verify_signature+0x10/0x10 [ 1149.382456][T31039] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 1149.388335][T31039] ? verify_signature+0xcd/0x110 [ 1149.393321][T31039] ? __sanitizer_cov_trace_pc+0x1/0x60 [ 1149.398941][T31039] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 1149.405488][T31039] public_key_verify_signature_2+0x43/0x50 [ 1149.411353][T31039] verify_signature+0xe4/0x110 [ 1149.416168][T31039] asymmetric_key_verify_signature+0x177/0x220 [ 1149.422385][T31039] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 1149.429148][T31039] ? __kasan_check_write+0x14/0x20 [ 1149.434302][T31039] keyctl_pkey_verify+0x434/0x460 [ 1149.439382][T31039] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 1149.444958][T31039] ? __kasan_check_write+0x14/0x20 [ 1149.450208][T31039] ? push_rt_task+0x46f/0x5d0 [ 1149.455015][T31039] ? finish_task_switch+0x16b/0x7c0 [ 1149.460304][T31039] ? switch_mm_irqs_off+0x2fb/0x960 [ 1149.465579][T31039] __se_sys_keyctl+0x817/0xe10 [ 1149.470463][T31039] ? __x64_sys_keyctl+0xd0/0xd0 [ 1149.475357][T31039] ? release_firmware_map_entry+0x190/0x190 [ 1149.481311][T31039] ? _raw_spin_unlock+0x4c/0x70 [ 1149.486187][T31039] ? __cfi_push_rt_tasks+0x10/0x10 [ 1149.491374][T31039] ? finish_task_switch+0x140/0x7c0 [ 1149.496613][T31039] ? switch_mm_irqs_off+0x2fb/0x960 [ 1149.501864][T31039] ? __kasan_check_read+0x11/0x20 [ 1149.506931][T31039] ? preempt_schedule_irq+0xca/0x120 [ 1149.512277][T31039] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 1149.518138][T31039] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 1149.524342][T31039] ? irqentry_exit+0x37/0x40 [ 1149.529018][T31039] ? sysvec_reschedule_ipi+0x78/0x80 [ 1149.534347][T31039] __x64_sys_keyctl+0xbf/0xd0 [ 1149.539103][T31039] x64_sys_call+0x71a/0x9a0 [ 1149.543647][T31039] do_syscall_64+0x4c/0xa0 [ 1149.548201][T31039] ? clear_bhb_loop+0x30/0x80 [ 1149.552926][T31039] ? clear_bhb_loop+0x30/0x80 [ 1149.557652][T31039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1149.563583][T31039] RIP: 0033:0x7ff5971a94d9 [ 1149.568107][T31039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.587793][T31039] RSP: 002b:00007ff597f93028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1149.596266][T31039] RAX: ffffffffffffffda RBX: 00007ff597426180 RCX: 00007ff5971a94d9 [ 1149.604315][T31039] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 000000000000001c [ 1149.612377][T31039] RBP: 00007ff59723804e R08: 0000200000000780 R09: 0000000000000000 [ 1149.620407][T31039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1149.628431][T31039] R13: 00007ff597426218 R14: 00007ff597426180 R15: 00007ffc69ab5228 [ 1149.636445][T31039] [ 1149.639506][T31039] ---[ end trace 0000000000000000 ]--- [ 1150.345755][ T28] audit: type=1326 audit(2000000066.642:10044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.7.4373" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1151.300787][ T28] audit: type=1326 audit(2000000066.642:10045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.7.4373" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1151.326743][ T28] audit: type=1326 audit(2000000066.642:10046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.7.4373" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1151.989651][ T28] audit: type=1326 audit(2000000066.652:10047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.7.4373" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1152.047724][ T28] audit: type=1326 audit(2000000066.652:10048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.7.4373" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1152.179922][ T28] audit: type=1326 audit(2000000066.652:10049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31047 comm="syz.7.4373" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f787c169d0e code=0x7ffc0000 [ 1152.257027][T31071] ip_tables: iptables: counters copy to user failed while replacing table [ 1153.069051][ T28] audit: type=1326 audit(2000000066.662:10050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.7.4373" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1153.094396][ T28] audit: type=1326 audit(2000000066.672:10051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.7.4373" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1153.129809][ T28] audit: type=1326 audit(2000000066.672:10052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.7.4373" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1153.199822][ T28] audit: type=1326 audit(2000000067.102:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31034 comm="syz.7.4373" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1154.863479][T31089] ------------[ cut here ]------------ [ 1154.869012][T31089] WARNING: CPU: 0 PID: 31089 at crypto/rsa-pkcs1pad.c:540 pkcs1pad_verify+0x4b8/0x600 [ 1154.878655][T31089] Modules linked in: [ 1154.882582][T31089] CPU: 0 PID: 31089 Comm: syz.6.4385 Tainted: G W syzkaller #0 [ 1154.891585][T31089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1154.901696][T31089] RIP: 0010:pkcs1pad_verify+0x4b8/0x600 [ 1154.907323][T31089] Code: 44 89 f6 e8 4a 0f 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c6 1a 2c ff 0f 0b b8 ea ff ff ff eb e3 e8 b8 1a 2c ff <0f> 0b b8 ea ff ff ff eb d5 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 85 [ 1154.927007][T31089] RSP: 0018:ffffc9000e227728 EFLAGS: 00010287 [ 1154.933154][T31089] RAX: ffffffff82455768 RBX: ffff8881130fc000 RCX: 0000000000080000 [ 1154.941175][T31089] RDX: ffffc90001adb000 RSI: 0000000000000541 RDI: 0000000000000542 [ 1154.949209][T31089] RBP: ffffc9000e227770 R08: ffffc9000e2278af R09: ffffc9000e227898 [ 1154.957251][T31089] R10: 0000000000000000 R11: ffffffff824552b0 R12: 0000000000000000 [ 1154.965255][T31089] R13: ffff888135c26800 R14: dffffc0000000000 R15: ffff8881130fc038 [ 1154.973281][T31089] FS: 00007f868cf9d6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1154.982294][T31089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1154.988966][T31089] CR2: 0000001b3271bff8 CR3: 000000015e6ad000 CR4: 00000000003506b0 [ 1154.996995][T31089] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 1155.005059][T31089] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1155.013082][T31089] Call Trace: [ 1155.016413][T31089] [ 1155.019395][T31089] ? sg_init_one+0x93/0x140 [ 1155.023948][T31089] public_key_verify_signature+0x90f/0xd80 [ 1155.029846][T31089] ? __cfi_public_key_verify_signature+0x10/0x10 [ 1155.036222][T31089] ? __kmalloc_node_track_caller+0xb1/0x1e0 [ 1155.042207][T31089] ? memdup_user+0x2a/0xc0 [ 1155.046659][T31089] ? keyctl_pkey_verify+0x3a4/0x460 [ 1155.051999][T31089] ? __se_sys_keyctl+0x817/0xe10 [ 1155.056980][T31089] ? __x64_sys_keyctl+0xbf/0xd0 [ 1155.061900][T31089] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 1155.068476][T31089] public_key_verify_signature_2+0x43/0x50 [ 1155.074326][T31089] verify_signature+0xe4/0x110 [ 1155.079164][T31089] asymmetric_key_verify_signature+0x177/0x220 [ 1155.085368][T31089] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 1155.092102][T31089] ? __kasan_check_write+0x14/0x20 [ 1155.097273][T31089] keyctl_pkey_verify+0x434/0x460 [ 1155.102340][T31089] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 1155.107944][T31089] ? kasan_quarantine_put+0x34/0x190 [ 1155.113261][T31089] __se_sys_keyctl+0x817/0xe10 [ 1155.118094][T31089] ? ____kasan_slab_free+0x13d/0x180 [ 1155.123422][T31089] ? __x64_sys_keyctl+0xd0/0xd0 [ 1155.128337][T31089] ? do_futex+0x2e2/0x430 [ 1155.132698][T31089] ? slab_free_freelist_hook+0xc2/0x190 [ 1155.138302][T31089] ? __cfi_do_futex+0x10/0x10 [ 1155.143053][T31089] ? __se_sys_futex+0x136/0x310 [ 1155.147955][T31089] ? __this_cpu_preempt_check+0x13/0x20 [ 1155.153544][T31089] ? xfd_validate_state+0x70/0x150 [ 1155.158714][T31089] ? __kasan_check_write+0x14/0x20 [ 1155.163896][T31089] ? fpregs_restore_userregs+0x128/0x260 [ 1155.169586][T31089] __x64_sys_keyctl+0xbf/0xd0 [ 1155.174328][T31089] x64_sys_call+0x71a/0x9a0 [ 1155.178914][T31089] do_syscall_64+0x4c/0xa0 [ 1155.183373][T31089] ? clear_bhb_loop+0x30/0x80 [ 1155.188108][T31089] ? clear_bhb_loop+0x30/0x80 [ 1155.192831][T31089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1155.198802][T31089] RIP: 0033:0x7f868c1a94d9 [ 1155.203262][T31089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.222979][T31089] RSP: 002b:00007f868cf9d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1155.231470][T31089] RAX: ffffffffffffffda RBX: 00007f868c426180 RCX: 00007f868c1a94d9 [ 1155.239500][T31089] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 000000000000001c [ 1155.247531][T31089] RBP: 00007f868c23804e R08: 0000200000000780 R09: 0000000000000000 [ 1155.255537][T31089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1155.263560][T31089] R13: 00007f868c426218 R14: 00007f868c426180 R15: 00007ffd1f7231b8 [ 1155.271590][T31089] [ 1155.274645][T31089] ---[ end trace 0000000000000000 ]--- [ 1157.949643][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 1157.949666][ T28] audit: type=1326 audit(2000000074.012:10116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.1.4391" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5971a94d9 code=0x7ffc0000 [ 1157.992986][ T28] audit: type=1326 audit(2000000074.012:10117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.1.4391" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5971a94d9 code=0x7ffc0000 [ 1158.018559][ T28] audit: type=1326 audit(2000000074.012:10118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.1.4391" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff5971a94d9 code=0x7ffc0000 [ 1158.127716][ T28] audit: type=1326 audit(2000000074.012:10119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.1.4391" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5971a94d9 code=0x7ffc0000 [ 1158.162836][ T28] audit: type=1326 audit(2000000074.012:10120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.1.4391" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5971a94d9 code=0x7ffc0000 [ 1158.203200][ T28] audit: type=1326 audit(2000000074.022:10121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31130 comm="syz.1.4391" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff597169d0e code=0x7ffc0000 [ 1158.228599][ T28] audit: type=1326 audit(2000000074.022:10122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.1.4391" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff5971a94d9 code=0x7ffc0000 [ 1158.296888][ T28] audit: type=1326 audit(2000000074.022:10123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.1.4391" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5971a94d9 code=0x7ffc0000 [ 1158.322065][ T28] audit: type=1326 audit(2000000074.022:10124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.1.4391" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5971a94d9 code=0x7ffc0000 [ 1158.530152][ T28] audit: type=1326 audit(2000000074.022:10125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31118 comm="syz.1.4391" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7ff5971a94d9 code=0x7ffc0000 [ 1158.742024][T31148] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4396'. [ 1159.783517][T31162] netlink: 'syz.1.4399': attribute type 16 has an invalid length. [ 1159.792052][T31162] netlink: 'syz.1.4399': attribute type 17 has an invalid length. [ 1159.827150][T31162] device ip6gre1 left promiscuous mode [ 1159.858965][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1159.887084][T30478] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1160.764988][T31179] ------------[ cut here ]------------ [ 1160.770541][T31179] WARNING: CPU: 1 PID: 31179 at crypto/rsa-pkcs1pad.c:540 pkcs1pad_verify+0x4b8/0x600 [ 1160.780173][T31179] Modules linked in: [ 1160.784204][T31179] CPU: 1 PID: 31179 Comm: syz.2.4401 Tainted: G W syzkaller #0 [ 1160.793186][T31179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1160.803288][T31179] RIP: 0010:pkcs1pad_verify+0x4b8/0x600 [ 1160.808890][T31179] Code: 44 89 f6 e8 4a 0f 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c6 1a 2c ff 0f 0b b8 ea ff ff ff eb e3 e8 b8 1a 2c ff <0f> 0b b8 ea ff ff ff eb d5 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 85 [ 1160.828817][T31179] RSP: 0018:ffffc90000987728 EFLAGS: 00010287 [ 1160.834926][T31179] RAX: ffffffff82455768 RBX: ffff88811c6a2400 RCX: 0000000000080000 [ 1160.842961][T31179] RDX: ffffc90006aef000 RSI: 0000000000001e58 RDI: 0000000000001e59 [ 1160.850989][T31179] RBP: ffffc90000987770 R08: ffffc900009878af R09: ffffc90000987898 [ 1160.859035][T31179] R10: 0000000000000000 R11: ffffffff824552b0 R12: 0000000000000000 [ 1160.867057][T31179] R13: ffff88811c61ef80 R14: dffffc0000000000 R15: ffff88811c6a2438 [ 1160.875130][T31179] FS: 00007f6cbbeb86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1160.884273][T31179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1160.890968][T31179] CR2: 0000001b2ec1aff8 CR3: 0000000154b5a000 CR4: 00000000003506a0 [ 1160.899031][T31179] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000083 [ 1160.907040][T31179] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1160.915116][T31179] Call Trace: [ 1160.918443][T31179] [ 1160.921401][T31179] ? sg_init_one+0x93/0x140 [ 1160.925948][T31179] public_key_verify_signature+0x90f/0xd80 [ 1160.931828][T31179] ? __cfi_public_key_verify_signature+0x10/0x10 [ 1160.938239][T31179] ? __schedule+0xcbb/0x1700 [ 1160.942887][T31179] ? release_firmware_map_entry+0x190/0x190 [ 1160.948852][T31179] ? preempt_schedule_irq+0xca/0x120 [ 1160.954178][T31179] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 1160.959967][T31179] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 1160.966512][T31179] public_key_verify_signature_2+0x43/0x50 [ 1160.972384][T31179] verify_signature+0xe4/0x110 [ 1160.977198][T31179] asymmetric_key_verify_signature+0x177/0x220 [ 1160.983409][T31179] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 1160.990175][T31179] ? __kasan_check_write+0x14/0x20 [ 1160.995610][T31179] keyctl_pkey_verify+0x434/0x460 [ 1161.000695][T31179] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 1161.006279][T31179] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1161.011982][T31179] ? __se_sys_keyctl+0xe1/0xe10 [ 1161.016873][T31179] ? __sanitizer_cov_trace_switch+0x64/0xe0 [ 1161.022843][T31179] __se_sys_keyctl+0x817/0xe10 [ 1161.027667][T31179] ? __x64_sys_keyctl+0xd0/0xd0 [ 1161.032554][T31179] ? do_futex+0x2e2/0x430 [ 1161.036913][T31179] ? release_firmware_map_entry+0x190/0x190 [ 1161.042855][T31179] ? __cfi_do_futex+0x10/0x10 [ 1161.047593][T31179] ? __se_sys_futex+0x136/0x310 [ 1161.052623][T31179] ? __this_cpu_preempt_check+0x13/0x20 [ 1161.058263][T31179] ? xfd_validate_state+0x70/0x150 [ 1161.063427][T31179] ? __kasan_check_write+0x14/0x20 [ 1161.069114][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1161.077039][T31179] ? fpregs_restore_userregs+0x128/0x260 [ 1161.082765][T31179] __x64_sys_keyctl+0xbf/0xd0 [ 1161.087512][T31179] x64_sys_call+0x71a/0x9a0 [ 1161.092060][T31179] do_syscall_64+0x4c/0xa0 [ 1161.096540][T31179] ? clear_bhb_loop+0x30/0x80 [ 1161.101294][T31179] ? clear_bhb_loop+0x30/0x80 [ 1161.106017][T31179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1161.111981][T31179] RIP: 0033:0x7f6cbafa94d9 [ 1161.116427][T31179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.136128][T31179] RSP: 002b:00007f6cbbeb8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1161.144630][T31179] RAX: ffffffffffffffda RBX: 00007f6cbb226270 RCX: 00007f6cbafa94d9 [ 1161.152685][T31179] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 000000000000001c [ 1161.160738][T31179] RBP: 00007f6cbb03804e R08: 0000200000000780 R09: 0000000000000000 [ 1161.168774][T31179] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 1161.176777][T31179] R13: 00007f6cbb226308 R14: 00007f6cbb226270 R15: 00007fff0a4a7f38 [ 1161.184840][T31179] [ 1161.187914][T31179] ---[ end trace 0000000000000000 ]--- [ 1161.287245][T30478] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1162.708816][T31166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.716091][T31166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.279302][T31193] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4407'. [ 1164.229007][T31228] overlayfs: failed to clone upperpath [ 1164.983059][T31227] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1165.016526][T31227] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1165.025640][T31227] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1165.473994][T31227] device veth0_vlan left promiscuous mode [ 1165.481463][T31227] device veth0_vlan entered promiscuous mode [ 1166.019429][T31227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1166.067510][T30501] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1166.100952][T31234] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4417'. [ 1166.110861][T13565] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1166.120966][T13565] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1166.129121][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1166.136759][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1166.144797][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1166.213643][T31254] ------------[ cut here ]------------ [ 1166.219307][T31254] WARNING: CPU: 1 PID: 31254 at crypto/rsa-pkcs1pad.c:540 pkcs1pad_verify+0x4b8/0x600 [ 1166.228938][T31254] Modules linked in: [ 1166.232859][T31254] CPU: 1 PID: 31254 Comm: syz.6.4418 Tainted: G W syzkaller #0 [ 1166.241845][T31254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1166.252004][T31254] RIP: 0010:pkcs1pad_verify+0x4b8/0x600 [ 1166.257611][T31254] Code: 44 89 f6 e8 4a 0f 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c6 1a 2c ff 0f 0b b8 ea ff ff ff eb e3 e8 b8 1a 2c ff <0f> 0b b8 ea ff ff ff eb d5 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 85 [ 1166.277377][T31254] RSP: 0018:ffffc90000c77728 EFLAGS: 00010287 [ 1166.283483][T31254] RAX: ffffffff82455768 RBX: ffff8881475e1400 RCX: 0000000000080000 [ 1166.291535][T31254] RDX: ffffc90001adb000 RSI: 000000000000134a RDI: 000000000000134b [ 1166.299569][T31254] RBP: ffffc90000c77770 R08: ffffc90000c778af R09: ffffc90000c77898 [ 1166.307600][T31254] R10: 0000000000000000 R11: ffffffff824552b0 R12: 0000000000000000 [ 1166.315606][T31254] R13: ffff88813285ee80 R14: dffffc0000000000 R15: ffff8881475e1438 [ 1166.323633][T31254] FS: 00007f868cf9d6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 1166.332655][T31254] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1166.339287][T31254] CR2: 0000001b3271aff8 CR3: 000000014b78c000 CR4: 00000000003506a0 [ 1166.347455][T31254] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000083 [ 1166.355479][T31254] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 1166.363515][T31254] Call Trace: [ 1166.366820][T31254] [ 1166.369815][T31254] ? sg_init_one+0x93/0x140 [ 1166.374819][T31254] public_key_verify_signature+0x90f/0xd80 [ 1166.380702][T31254] ? __cfi_public_key_verify_signature+0x10/0x10 [ 1166.387099][T31254] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 1166.392872][T31254] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 1166.399435][T31254] public_key_verify_signature_2+0x43/0x50 [ 1166.405281][T31254] verify_signature+0xe4/0x110 [ 1166.410187][T31254] asymmetric_key_verify_signature+0x177/0x220 [ 1166.416388][T31254] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 1166.423230][T31254] ? __kasan_check_write+0x14/0x20 [ 1166.428407][T31254] keyctl_pkey_verify+0x434/0x460 [ 1166.433465][T31254] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 1166.439062][T31254] ? irqentry_exit+0x37/0x40 [ 1166.443691][T31254] ? sysvec_reschedule_ipi+0x78/0x80 [ 1166.449035][T31254] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1166.454712][T31254] __se_sys_keyctl+0x817/0xe10 [ 1166.459535][T31254] ? __x64_sys_keyctl+0xd0/0xd0 [ 1166.464439][T31254] ? do_futex+0x2e2/0x430 [ 1166.468847][T31254] ? release_firmware_map_entry+0x190/0x190 [ 1166.474882][T31254] ? __cfi_do_futex+0x10/0x10 [ 1166.479609][T31254] ? __se_sys_futex+0x136/0x310 [ 1166.484493][T31254] ? __this_cpu_preempt_check+0x13/0x20 [ 1166.490126][T31254] ? xfd_validate_state+0x70/0x150 [ 1166.495280][T31254] ? __kasan_check_write+0x14/0x20 [ 1166.500448][T31254] ? fpregs_restore_userregs+0x128/0x260 [ 1166.506112][T31254] __x64_sys_keyctl+0xbf/0xd0 [ 1166.510847][T31254] x64_sys_call+0x71a/0x9a0 [ 1166.515383][T31254] do_syscall_64+0x4c/0xa0 [ 1166.519866][T31254] ? clear_bhb_loop+0x30/0x80 [ 1166.524663][T31254] ? clear_bhb_loop+0x30/0x80 [ 1166.529397][T31254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1166.535320][T31254] RIP: 0033:0x7f868c1a94d9 [ 1166.539961][T31254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1166.559657][T31254] RSP: 002b:00007f868cf9d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1166.568132][T31254] RAX: ffffffffffffffda RBX: 00007f868c426180 RCX: 00007f868c1a94d9 [ 1166.576135][T31254] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 000000000000001c [ 1166.584158][T31254] RBP: 00007f868c23804e R08: 0000200000000780 R09: 0000000000000000 [ 1166.592220][T31254] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 1166.600250][T31254] R13: 00007f868c426218 R14: 00007f868c426180 R15: 00007ffd1f7231b8 [ 1166.608287][T31254] [ 1166.611337][T31254] ---[ end trace 0000000000000000 ]--- [ 1166.655148][T30515] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.662285][T30515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.751495][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1166.794542][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1166.843804][T30515] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.850957][T30515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.985333][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1167.002706][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1167.021041][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1167.038295][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1167.055533][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1167.073863][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1167.090870][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1167.108038][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1167.125947][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1167.143377][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1167.162240][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1167.182437][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1167.202805][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1167.222841][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1167.237700][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1167.254527][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1167.273427][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1167.288803][T30501] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1167.294700][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1167.296858][T30501] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1167.313729][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1167.321857][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1167.364963][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1167.373893][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1167.381741][T30515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1168.575396][T13565] ip6_tunnel:  xmit: Local address not yet configured! [ 1169.097068][T31277] device vlan0 entered promiscuous mode [ 1169.102717][T31277] device syz_tun entered promiscuous mode [ 1169.947316][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1170.257701][ T28] kauditd_printk_skb: 130 callbacks suppressed [ 1170.257814][ T28] audit: type=1400 audit(2000000086.532:10256): avc: denied { dac_override } for pid=31284 comm="syz.6.4424" capability=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1172.308324][T31294] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4427'. [ 1172.907510][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1173.160287][T31296] ip_tables: iptables: counters copy to user failed while replacing table [ 1174.384023][T31303] ./dev/sda1: Can't open blockdev [ 1174.533224][T31302] syz.2.4426 (31302) used greatest stack depth: 18344 bytes left [ 1174.813020][T31290] syz.2.4425 (31290) used greatest stack depth: 13800 bytes left [ 1175.572903][T31313] ------------[ cut here ]------------ [ 1175.578441][T31313] WARNING: CPU: 0 PID: 31313 at crypto/rsa-pkcs1pad.c:540 pkcs1pad_verify+0x4b8/0x600 [ 1175.588060][T31313] Modules linked in: [ 1175.592012][T31313] CPU: 0 PID: 31313 Comm: syz.1.4431 Tainted: G W syzkaller #0 [ 1175.600988][T31313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1175.611123][T31313] RIP: 0010:pkcs1pad_verify+0x4b8/0x600 [ 1175.616732][T31313] Code: 44 89 f6 e8 4a 0f 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c6 1a 2c ff 0f 0b b8 ea ff ff ff eb e3 e8 b8 1a 2c ff <0f> 0b b8 ea ff ff ff eb d5 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 85 [ 1175.636408][T31313] RSP: 0018:ffffc90000e17728 EFLAGS: 00010287 [ 1175.642576][T31313] RAX: ffffffff82455768 RBX: ffff888154b51600 RCX: 0000000000080000 [ 1175.650643][T31313] RDX: ffffc900042e5000 RSI: 0000000000000541 RDI: 0000000000000542 [ 1175.658693][T31313] RBP: ffffc90000e17770 R08: ffffc90000e178af R09: ffffc90000e17898 [ 1175.666789][T31313] R10: 0000000000000000 R11: ffffffff824552b0 R12: 0000000000000000 [ 1175.674824][T31313] R13: ffff88810fa65200 R14: dffffc0000000000 R15: ffff888154b51638 [ 1175.682851][T31313] FS: 00007ff597f936c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 1175.691861][T31313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1175.698514][T31313] CR2: 0000001b2eb1bff8 CR3: 00000001564af000 CR4: 00000000003506b0 [ 1175.706526][T31313] DR0: 0000000000000008 DR1: 0000000000000007 DR2: 0000000000000004 [ 1175.714550][T31313] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1175.722594][T31313] Call Trace: [ 1175.725899][T31313] [ 1175.728902][T31313] ? sg_init_one+0x93/0x140 [ 1175.733453][T31313] public_key_verify_signature+0x90f/0xd80 [ 1175.739328][T31313] ? __cfi_public_key_verify_signature+0x10/0x10 [ 1175.745695][T31313] ? __kmalloc_node_track_caller+0xb1/0x1e0 [ 1175.751643][T31313] ? memdup_user+0x2a/0xc0 [ 1175.756087][T31313] ? keyctl_pkey_verify+0x3a4/0x460 [ 1175.761362][T31313] ? __se_sys_keyctl+0x817/0xe10 [ 1175.766377][T31313] ? __x64_sys_keyctl+0xbf/0xd0 [ 1175.771317][T31313] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 1175.777890][T31313] public_key_verify_signature_2+0x43/0x50 [ 1175.783745][T31313] verify_signature+0xe4/0x110 [ 1175.788598][T31313] asymmetric_key_verify_signature+0x177/0x220 [ 1175.794807][T31313] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 1175.801565][T31313] ? __kasan_check_write+0x14/0x20 [ 1175.806723][T31313] keyctl_pkey_verify+0x434/0x460 [ 1175.811803][T31313] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 1175.817406][T31313] ? kasan_quarantine_put+0x34/0x190 [ 1175.822728][T31313] __se_sys_keyctl+0x817/0xe10 [ 1175.827542][T31313] ? ____kasan_slab_free+0x13d/0x180 [ 1175.832866][T31313] ? __x64_sys_keyctl+0xd0/0xd0 [ 1175.837773][T31313] ? do_futex+0x2e2/0x430 [ 1175.842133][T31313] ? slab_free_freelist_hook+0xc2/0x190 [ 1175.847725][T31313] ? __cfi_do_futex+0x10/0x10 [ 1175.852432][T31313] ? __se_sys_futex+0x136/0x310 [ 1175.857367][T31313] ? __this_cpu_preempt_check+0x13/0x20 [ 1175.862959][T31313] ? xfd_validate_state+0x70/0x150 [ 1175.868134][T31313] ? __kasan_check_write+0x14/0x20 [ 1175.873300][T31313] ? fpregs_restore_userregs+0x128/0x260 [ 1175.879015][T31313] __x64_sys_keyctl+0xbf/0xd0 [ 1175.883743][T31313] x64_sys_call+0x71a/0x9a0 [ 1175.888322][T31313] do_syscall_64+0x4c/0xa0 [ 1175.892972][T31313] ? clear_bhb_loop+0x30/0x80 [ 1175.897759][T31313] ? clear_bhb_loop+0x30/0x80 [ 1175.902492][T31313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1175.908462][T31313] RIP: 0033:0x7ff5971a94d9 [ 1175.912917][T31313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.932585][T31313] RSP: 002b:00007ff597f93028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1175.941089][T31313] RAX: ffffffffffffffda RBX: 00007ff597426180 RCX: 00007ff5971a94d9 [ 1175.949123][T31313] RDX: 0000200000000180 RSI: 0000200000000040 RDI: 000000000000001c [ 1175.957129][T31313] RBP: 00007ff59723804e R08: 0000200000000780 R09: 0000000000000000 [ 1175.965331][T31313] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 1175.973398][T31313] R13: 00007ff597426218 R14: 00007ff597426180 R15: 00007ffc69ab5228 [ 1175.981430][T31313] [ 1175.984488][T31313] ---[ end trace 0000000000000000 ]--- [ 1176.289111][T31319] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4434'. [ 1176.313047][T31319] tipc: Invalid UDP bearer configuration [ 1176.313076][T31319] tipc: Enabling of bearer rejected, failed to enable media [ 1177.624384][T31334] overlayfs: failed to clone upperpath [ 1178.347314][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1178.800380][T31324] overlayfs: failed to clone upperpath [ 1180.713578][T31358] ip_tables: iptables: counters copy to user failed while replacing table [ 1182.187385][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1183.809267][T31393] overlayfs: failed to clone upperpath [ 1183.926214][T31394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.933489][T31394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.993972][T31392] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4451'. [ 1185.127324][T31405] fuse: Bad value for 'fd' [ 1185.269275][T31409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4455'. [ 1187.747998][T31438] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1191.674881][T31467] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4468'. [ 1193.290744][ T28] audit: type=1400 audit(2000000109.163:10257): avc: denied { setopt } for pid=31474 comm="syz.1.4469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1202.031173][T31537] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4480'. [ 1202.041936][T31537] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4480'. [ 1207.990912][T31611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4498'. [ 1209.424063][ T28] audit: type=1400 audit(2000000125.723:10258): avc: denied { accept } for pid=31617 comm="syz.1.4501" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1213.821287][T31657] overlayfs: failed to clone upperpath [ 1215.310949][ T28] audit: type=1400 audit(2000000131.613:10259): avc: denied { nlmsg_tty_audit } for pid=31661 comm="syz.7.4510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1215.320769][T31662] tipc: Enabling of bearer rejected, failed to enable media [ 1215.560827][ T28] audit: type=1400 audit(2000000131.863:10260): avc: denied { setattr } for pid=31661 comm="syz.7.4510" name="" dev="pipefs" ino=63393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1217.837143][T31685] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4514'. [ 1217.863612][T31685] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4514'. [ 1218.286232][T31687] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4516'. [ 1221.293343][T31701] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1221.383264][T31721] overlayfs: failed to clone upperpath [ 1225.390834][T31730] overlayfs: failed to clone upperpath [ 1225.450387][T31737] netlink: 'syz.2.4528': attribute type 13 has an invalid length. [ 1225.458829][T31737] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1225.467374][T31737] gretap0: refused to change device tx_queue_len [ 1225.484064][T31737] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1226.221788][T31748] overlayfs: failed to clone upperpath [ 1228.740440][T31769] overlayfs: failed to clone upperpath [ 1231.225597][T31780] overlayfs: failed to clone upperpath [ 1232.593136][T31803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4541'. [ 1234.194603][T31807] overlayfs: failed to clone upperpath [ 1235.416031][T31827] netlink: 'syz.8.4547': attribute type 12 has an invalid length. [ 1235.423932][T31827] netlink: 'syz.8.4547': attribute type 29 has an invalid length. [ 1235.432075][T31827] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4547'. [ 1241.593112][T31863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4555'. [ 1244.170139][T31892] x_tables: duplicate underflow at hook 4 [ 1246.562871][T31913] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4567'. [ 1247.678499][T31925] overlayfs: failed to clone upperpath [ 1251.491770][T31945] overlayfs: failed to clone upperpath [ 1255.572603][T31984] netlink: 3544 bytes leftover after parsing attributes in process `syz.6.4582'. [ 1256.930388][T31990] futex_wake_op: syz.1.4581 tries to shift op by 144; fix this program [ 1258.347285][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1258.354932][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1270.384336][T32099] overlayfs: failed to clone lowerpath [ 1272.092895][T32127] ip_tables: iptables: counters copy to user failed while replacing table [ 1274.038174][T32133] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1274.184714][T32133] overlayfs: failed to clone lowerpath [ 1277.187754][T32169] netem: change failed [ 1284.801092][T32263] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1284.810851][T32263] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 1285.284887][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1285.293343][T30501] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1285.302695][T30501] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1285.775034][T32275] 9pnet_fd: Insufficient options for proto=fd [ 1286.107345][T30501] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1286.187654][T30501] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1287.548253][T32328] 9pnet_fd: Insufficient options for proto=fd [ 1288.122899][T32334] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4663'. [ 1294.599368][T32381] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1295.024281][T32394] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1295.031714][T32394] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1295.039024][T32394] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1299.558303][T32439] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 1299.620232][ T28] audit: type=1400 audit(2000000024.050:10261): avc: denied { relabelto } for pid=32437 comm="syz.6.4691" name="923" dev="tmpfs" ino=5005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1300.179586][ T28] audit: type=1400 audit(2000000024.080:10262): avc: denied { associate } for pid=32437 comm="syz.6.4691" name="923" dev="tmpfs" ino=5005 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 1300.217772][ T28] audit: type=1400 audit(2000000024.110:10263): avc: denied { write } for pid=32437 comm="syz.6.4691" name="923" dev="tmpfs" ino=5005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1300.242977][ T28] audit: type=1400 audit(2000000024.110:10264): avc: denied { add_name } for pid=32437 comm="syz.6.4691" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1300.268193][ T28] audit: type=1400 audit(2000000024.110:10265): avc: denied { create } for pid=32437 comm="syz.6.4691" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 1300.298502][ T28] audit: type=1400 audit(2000000024.110:10266): avc: denied { associate } for pid=32437 comm="syz.6.4691" name=E91F7189591E9233614B scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1300.321237][ T28] audit: type=1400 audit(2000000024.600:10267): avc: denied { remove_name } for pid=856 comm="syz-executor" name=E91F7189591E9233614B dev="tmpfs" ino=5011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1300.474256][ T28] audit: type=1400 audit(2000000024.600:10268): avc: denied { unlink } for pid=856 comm="syz-executor" name=E91F7189591E9233614B dev="tmpfs" ino=5011 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 1300.498389][ T28] audit: type=1400 audit(2000000024.600:10269): avc: denied { rmdir } for pid=856 comm="syz-executor" name="923" dev="tmpfs" ino=5005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1301.976337][T32479] overlayfs: failed to clone upperpath [ 1307.480696][T32529] xt_hashlimit: size too large, truncated to 1048576 [ 1308.284488][T32544] netlink: 792 bytes leftover after parsing attributes in process `syz.6.4716'. [ 1310.941603][T32579] ip_tables: iptables: counters copy to user failed while replacing table [ 1312.058552][T32591] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1312.674150][T32599] overlayfs: failed to clone upperpath [ 1313.549694][T32603] futex_wake_op: syz.6.4731 tries to shift op by 144; fix this program [ 1315.233817][T32631] ip_tables: iptables: counters copy to user failed while replacing table [ 1316.309050][T32645] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1321.234071][T32680] overlayfs: failed to clone upperpath [ 1321.262083][T32685] xt_hashlimit: size too large, truncated to 1048576 [ 1321.320959][ T28] audit: type=1400 audit(2000000045.750:10270): avc: denied { setattr } for pid=32683 comm="syz.8.4753" name="NETLINK" dev="sockfs" ino=64490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1321.347203][T32687] 9pnet_fd: Insufficient options for proto=fd [ 1323.177128][ T28] audit: type=1400 audit(2000000047.600:10271): avc: denied { mounton } for pid=32709 comm="syz.2.4757" path=2F3932312FE91F7189591E9233614B dev="tmpfs" ino=4977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1323.202900][T32710] 9pnet_fd: Insufficient options for proto=fd [ 1323.332488][ T28] audit: type=1400 audit(2000000047.760:10272): avc: denied { accept } for pid=32719 comm="syz.8.4761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1323.973317][T32747] ip_tables: iptables: counters copy to user failed while replacing table [ 1324.329413][T32753] overlayfs: failed to clone upperpath [ 1324.907300][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 1325.893858][ T311] lo: Caught tx_queue_len zero misconfig [ 1325.912430][ T312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=312 comm=syz.7.4778 [ 1328.195669][ T341] overlayfs: failed to clone upperpath [ 1329.399895][ T369] fuse: Bad value for 'group_id' [ 1331.672662][ T399] ip_tables: iptables: counters copy to user failed while replacing table [ 1333.433605][ T423] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4804'. [ 1335.058199][ T450] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4812'. [ 1337.120280][ T483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4819'. [ 1339.359494][ T516] ip_tables: iptables: counters copy to user failed while replacing table [ 1342.052041][ T561] netlink: 964 bytes leftover after parsing attributes in process `syz.8.4839'. [ 1342.064604][ T561] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4839'. [ 1342.701325][ T574] futex_wake_op: syz.7.4841 tries to shift op by 144; fix this program [ 1343.151466][ T582] overlayfs: failed to clone upperpath [ 1343.593508][ T581] ip_tables: iptables: counters copy to user failed while replacing table [ 1346.366566][ T633] overlayfs: failed to clone upperpath [ 1346.984274][ T638] device bridge_slave_1 left promiscuous mode [ 1346.990825][ T638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.061779][ T638] device bridge_slave_0 left promiscuous mode [ 1347.068308][ T638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.591992][ T676] overlayfs: failed to clone upperpath [ 1349.758713][ T681] ip_tables: iptables: counters copy to user failed while replacing table [ 1350.047928][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1350.079702][ T685] device gretap0 left promiscuous mode [ 1350.211423][ T685] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1350.260510][ T685] device bridge_slave_1 entered promiscuous mode [ 1350.273114][ T685] device veth0_vlan left promiscuous mode [ 1350.279806][ T685] device veth0_vlan entered promiscuous mode [ 1350.287005][ T685] device gretap0 entered promiscuous mode [ 1350.294126][ T685] device ip6gre1 left promiscuous mode [ 1350.303343][T20649] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1350.311036][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1350.337766][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1350.348290][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1350.366112][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1350.386346][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1350.406610][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1350.416642][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1350.437505][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1350.455905][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1350.467635][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1350.486804][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1350.502181][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1350.520637][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1350.537583][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1350.556416][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1350.576629][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1350.596869][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1350.606958][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1350.627375][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1350.646746][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1350.665201][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1350.677595][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1350.695984][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1350.712055][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1350.730869][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1350.748918][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1350.768438][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan.4093: link becomes ready [ 1350.786924][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1350.804983][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1350.822448][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1354.329125][ T726] overlayfs: failed to clone upperpath [ 1354.587221][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1355.923465][ T739] overlayfs: failed to clone upperpath [ 1357.063034][ T605] syz.6.4851 (605) used greatest stack depth: 13728 bytes left [ 1358.350321][ T779] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1358.438514][ T780] overlayfs: missing 'lowerdir' [ 1358.445359][ T779] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1358.552119][ T784] overlayfs: failed to clone upperpath [ 1358.625157][ T779] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 1358.648352][T30501] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1358.667707][T30501] ip6_tunnel:  xmit: Local address not yet configured! [ 1358.932967][ T802] 9pnet_fd: Insufficient options for proto=fd [ 1360.071069][T30501] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1360.089582][T30501] ip6_tunnel:  xmit: Local address not yet configured! [ 1362.961962][ T837] overlayfs: failed to clone upperpath [ 1363.307459][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1363.742134][ T873] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4911'. [ 1363.910645][ T877] netlink: 'syz.6.4912': attribute type 9 has an invalid length. [ 1366.592929][ T921] overlayfs: failed to clone upperpath [ 1366.612020][ T923] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4926'. [ 1367.000725][ T929] tipc: Enabling of bearer rejected, failed to enable media [ 1369.546569][ T952] overlayfs: missing 'lowerdir' [ 1373.135512][ T1018] overlayfs: failed to clone upperpath [ 1378.414227][ T1060] ip_tables: iptables: counters copy to user failed while replacing table [ 1379.947333][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1383.319567][ T1120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4979'. [ 1383.803833][ T1124] 9pnet_fd: Insufficient options for proto=fd [ 1384.703972][ T1134] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4981'. [ 1384.714359][ T1134] netlink: 'syz.8.4981': attribute type 16 has an invalid length. [ 1384.722349][ T1134] netlink: 'syz.8.4981': attribute type 17 has an invalid length. [ 1392.686109][ T1256] tipc: Enabling of bearer rejected, failed to enable media [ 1394.266725][ T1290] tipc: Failed to remove unknown binding: 66,0,0/4:2487704041/2487704043 [ 1394.275275][ T1290] tipc: Failed to remove unknown binding: 66,0,0/4:2487704041/2487704042 [ 1394.290610][ T1290] tipc: Failed to remove unknown binding: 66,0,0/4:2487704041/2487704043 [ 1394.299136][ T1290] tipc: Failed to remove unknown binding: 66,0,0/4:2487704041/2487704042 [ 1403.469203][ T1417] ip_tables: iptables: counters copy to user failed while replacing table [ 1403.931047][ T1436] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5060'. [ 1404.702543][ T1436] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5060'. [ 1406.827395][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1407.046996][ T1475] bridge0: port 1(syz_tun) entered blocking state [ 1407.054980][ T1475] bridge0: port 1(syz_tun) entered disabled state [ 1408.204159][ T1484] fuse: Unknown parameter '00000000000000000000' [ 1410.191231][ T28] audit: type=1400 audit(2000000546.843:10273): avc: denied { getopt } for pid=1501 comm="syz.6.5076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1410.382342][ T1506] ip_tables: iptables: counters copy to user failed while replacing table [ 1410.503790][ T28] audit: type=1400 audit(2000000546.893:10274): avc: denied { create } for pid=1504 comm="syz.6.5077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1413.227252][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1413.827086][ T1571] overlayfs: failed to clone upperpath [ 1425.283855][ T28] audit: type=1400 audit(2000000561.173:10275): avc: denied { read } for pid=1677 comm="syz.6.5125" lport=18 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1430.050916][ T1718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5133'. [ 1430.409496][ T1722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5138'. [ 1430.658926][ T1734] overlayfs: failed to clone upperpath [ 1434.304357][ T1739] 9pnet_fd: Insufficient options for proto=fd [ 1441.576392][ T1795] ./dev/sda1: Can't open blockdev [ 1441.634758][ T1796] overlayfs: failed to clone upperpath [ 1442.308824][ T1809] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 1442.328530][ T28] audit: type=1400 audit(2000000578.983:10276): avc: denied { relabelto } for pid=1799 comm="syz.8.5159" name="912" dev="tmpfs" ino=4947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 1442.364407][ T28] audit: type=1400 audit(2000000579.003:10277): avc: denied { associate } for pid=1799 comm="syz.8.5159" name="912" dev="tmpfs" ino=4947 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsa" [ 1442.573226][ T28] audit: type=1400 audit(2000000579.223:10278): avc: denied { write } for pid=1543 comm="syz-executor" name="912" dev="tmpfs" ino=4947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 1442.603352][ T28] audit: type=1400 audit(2000000579.253:10279): avc: denied { remove_name } for pid=1543 comm="syz-executor" name="dev" dev="tmpfs" ino=4952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 1442.629931][ T28] audit: type=1400 audit(2000000579.253:10280): avc: denied { rmdir } for pid=1543 comm="syz-executor" name="912" dev="tmpfs" ino=4947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 1442.658594][ T28] audit: type=1326 audit(2000000579.313:10281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.8.5160" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43999a94d9 code=0x7ffc0000 [ 1442.685017][ T28] audit: type=1326 audit(2000000579.333:10282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.8.5160" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43999a94d9 code=0x7ffc0000 [ 1442.757963][ T28] audit: type=1326 audit(2000000579.333:10283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.8.5160" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43999a94d9 code=0x7ffc0000 [ 1442.791117][ T28] audit: type=1326 audit(2000000579.333:10284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.8.5160" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43999a94d9 code=0x7ffc0000 [ 1442.884181][ T28] audit: type=1326 audit(2000000579.333:10285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1810 comm="syz.8.5160" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f43999a94d9 code=0x7ffc0000 [ 1442.944139][ T1823] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5163'. [ 1443.345939][ T1827] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5162'. [ 1443.991192][ T1845] tipc: Enabled bearer , priority 0 [ 1448.103932][ T1860] overlayfs: failed to clone upperpath [ 1453.497492][ T1919] overlayfs: failed to clone lowerpath [ 1455.386332][ T1936] futex_wake_op: syz.8.5192 tries to shift op by 144; fix this program [ 1455.697852][ T1936] overlayfs: failed to clone upperpath [ 1458.267318][ T28] kauditd_printk_skb: 116 callbacks suppressed [ 1458.267373][ T28] audit: type=1400 audit(2000000594.803:10402): avc: denied { create } for pid=1952 comm="syz.1.5197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1465.627428][ T28] audit: type=1326 audit(2000000005.710:10403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2025 comm="syz.8.5215" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43999a94d9 code=0x0 [ 1465.709065][ T2031] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5215'. [ 1465.728616][ T2031] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5215'. [ 1465.757150][ T2031] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5215'. [ 1465.777537][ T2031] netlink: 108 bytes leftover after parsing attributes in process `syz.8.5215'. [ 1469.705508][ T2085] ip_tables: iptables: counters copy to user failed while replacing table [ 1471.191372][ T2108] ip_tables: iptables: counters copy to user failed while replacing table [ 1472.625202][ T2129] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5236'. [ 1473.655781][ T2141] ip_tables: iptables: counters copy to user failed while replacing table [ 1474.028646][ T2145] ip_tables: iptables: counters copy to user failed while replacing table [ 1478.507233][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1478.778544][ T2186] ip_tables: iptables: counters copy to user failed while replacing table [ 1479.562403][ T2194] ip_tables: iptables: counters copy to user failed while replacing table [ 1480.175958][ T2187] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1480.183864][ T2187] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1480.191629][ T2187] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1482.960067][ T2218] overlayfs: failed to clone upperpath [ 1483.628658][ T2242] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1486.434296][ T2260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.471006][ T2260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.479125][ T2260] device bridge_slave_0 entered promiscuous mode [ 1486.486351][ T2260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.493778][ T2260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.501551][ T2260] device bridge_slave_1 entered promiscuous mode [ 1487.946240][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1487.954319][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1488.153754][ T1498] tipc: Left network mode [ 1488.177256][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1488.209589][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1488.269878][ T482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.276997][ T482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1488.432324][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1488.510574][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1488.587854][ T2295] ip_tables: iptables: counters copy to user failed while replacing table [ 1488.867601][ T482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.874702][ T482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1488.907276][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1488.935911][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1489.098478][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1489.110632][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1489.139821][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1489.205985][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1489.266296][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1489.313065][ T2260] device veth0_vlan entered promiscuous mode [ 1489.322673][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1489.360990][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1489.486120][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1489.533763][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1489.650761][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1489.731487][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1489.931924][ T2260] device veth1_macvtap entered promiscuous mode [ 1489.962165][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1489.970353][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1490.000420][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1490.046394][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1490.087599][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1490.240421][ T2310] overlayfs: failed to clone upperpath [ 1490.309028][ T1498] device veth0_vlan left promiscuous mode [ 1490.589055][ T2319] overlayfs: failed to clone upperpath [ 1491.616702][ T2337] loop9: detected capacity change from 0 to 256 [ 1491.637693][ T2337] exfat: Deprecated parameter 'utf8' [ 1491.643313][ T2337] exfat: Deprecated parameter 'utf8' [ 1491.699629][ T2337] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1493.009955][ T2354] ip_tables: iptables: counters copy to user failed while replacing table [ 1493.021160][ T2354] loop9: detected capacity change from 0 to 256 [ 1493.027828][ T2354] exfat: Unknown parameter '' [ 1496.331299][ T2380] overlayfs: failed to clone upperpath [ 1499.519952][ T2420] overlayfs: failed to clone upperpath [ 1499.706536][ T2427] loop9: detected capacity change from 0 to 256 [ 1500.446952][ T2427] exfat: Deprecated parameter 'utf8' [ 1500.604869][ T2427] exfat: Deprecated parameter 'utf8' [ 1500.717447][ T2427] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1503.077242][ T2449] ip_tables: iptables: counters copy to user failed while replacing table [ 1503.088140][ T2449] loop9: detected capacity change from 0 to 256 [ 1503.094771][ T2449] exfat: Unknown parameter '' [ 1504.278341][ T2334] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1507.377683][ T2503] overlayfs: failed to clone upperpath [ 1507.572146][ T2505] overlayfs: failed to clone upperpath [ 1510.301495][ T2545] loop9: detected capacity change from 0 to 2048 [ 1510.438325][ T2545] loop9: p1 < > p4 [ 1510.458932][ T2545] loop9: p4 size 722688 extends beyond EOD, truncated [ 1511.516134][ T28] audit: type=1400 audit(2000000009.530:10404): avc: denied { mounton } for pid=2536 comm="syz.9.5349" path="/dev/loop9p1" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1512.029552][ T2566] 9pnet_fd: Insufficient options for proto=fd [ 1512.957549][ T28] audit: type=1400 audit(2000000009.560:10405): avc: denied { remount } for pid=2536 comm="syz.9.5349" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1513.180104][ T2583] overlayfs: failed to clone upperpath [ 1516.157176][ T2613] netlink: 'syz.6.5374': attribute type 4 has an invalid length. [ 1516.164961][ T2613] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5374'. [ 1516.367215][ T28] audit: type=1400 audit(2000000014.370:10406): avc: denied { read } for pid=2616 comm="syz.9.5371" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1517.298631][ T28] audit: type=1400 audit(2000000014.370:10407): avc: denied { open } for pid=2616 comm="syz.9.5371" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1517.433783][ T2631] 9pnet_fd: Insufficient options for proto=fd [ 1517.480223][ T28] audit: type=1400 audit(2000000014.370:10408): avc: denied { ioctl } for pid=2616 comm="syz.9.5371" path="/dev/loop-control" dev="devtmpfs" ino=117 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1519.236381][ T2652] overlayfs: failed to clone upperpath [ 1523.270933][ T2717] loop9: detected capacity change from 0 to 40427 [ 1523.300763][ T2717] F2FS-fs (loop9): invalid crc value [ 1523.333387][ T2717] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1523.378281][ T2721] overlayfs: failed to clone upperpath [ 1523.435260][ T2717] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1523.737371][ T28] audit: type=1400 audit(2000000021.680:10409): avc: denied { ioctl } for pid=2716 comm="syz.9.5406" path="/38/bus/bus" dev="loop9" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1523.949308][ T2742] netlink: 9052 bytes leftover after parsing attributes in process `syz.6.5412'. [ 1524.027119][ T28] audit: type=1400 audit(2000000021.680:10410): avc: denied { setattr } for pid=2716 comm="syz.9.5406" name="bus" dev="loop9" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1524.458606][ T2260] syz-executor: attempt to access beyond end of device [ 1524.458606][ T2260] loop9: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 1524.779920][ T2765] loop9: detected capacity change from 0 to 33280 [ 1524.789380][ T2765] EXT4-fs: Ignoring removed nobh option [ 1524.883874][ T2765] EXT4-fs error (device loop9): ext4_ext_check_inode:520: inode #2: comm syz.9.5421: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 6401, max 4(4), depth 0(0) [ 1524.936668][ T2758] overlayfs: failed to clone upperpath [ 1525.179514][ T2765] EXT4-fs (loop9): Remounting filesystem read-only [ 1525.294972][ T2765] EXT4-fs (loop9): get root inode failed [ 1525.375649][ T2765] EXT4-fs (loop9): mount failed [ 1526.498251][ T2765] loop9: detected capacity change from 0 to 131072 [ 1526.507381][ T2765] F2FS-fs (loop9): invalid crc value [ 1526.513126][ T2765] F2FS-fs (loop9): invalid crc value [ 1526.518505][ T2765] F2FS-fs (loop9): Failed to get valid F2FS checkpoint [ 1529.765922][ T2833] overlayfs: failed to clone upperpath [ 1530.760415][ T2848] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5448'. [ 1530.799497][ T2850] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5449'. [ 1531.997772][ T2867] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5457'. [ 1532.008355][ T2867] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5457'. [ 1532.018914][ T2867] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5457'. [ 1533.244696][ T2879] loop9: detected capacity change from 0 to 40427 [ 1533.410715][ T2879] F2FS-fs (loop9): invalid crc value [ 1533.560167][ T2879] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1534.311040][ T2879] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1536.715644][ T2937] loop9: detected capacity change from 0 to 2048 [ 1537.290286][ T103] loop9: p1 < > p4 [ 1537.295123][ T103] loop9: p4 size 722688 extends beyond EOD, truncated [ 1540.436419][ T28] audit: type=1400 audit(2000000001.160:10411): avc: denied { getopt } for pid=2972 comm="syz.7.5489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1540.659750][ T2984] overlayfs: unrecognized mount option "\pperdir=upper" or missing value [ 1540.737901][ T2988] netlink: 200 bytes leftover after parsing attributes in process `syz.7.5495'. [ 1543.369702][ T3003] ip_tables: iptables: counters copy to user failed while replacing table [ 1544.989816][ T3033] incfs: Error accessing: ./file1. [ 1545.016434][ T3033] incfs: mount failed -2 [ 1545.067159][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1545.627717][ T3044] ip_tables: iptables: counters copy to user failed while replacing table [ 1545.652391][ T3044] loop9: detected capacity change from 0 to 256 [ 1545.660774][ T3044] exfat: Unknown parameter '' [ 1548.318415][ T3020] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1548.501124][ T3075] overlayfs: failed to clone upperpath [ 1551.288788][ T3082] loop9: detected capacity change from 0 to 40427 [ 1551.316905][ T3082] F2FS-fs (loop9): invalid crc value [ 1551.419144][ T3082] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1551.600373][ T3082] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1552.308240][ T3124] netlink: 'syz.1.5543': attribute type 1 has an invalid length. [ 1552.316079][ T3124] netlink: 604 bytes leftover after parsing attributes in process `syz.1.5543'. [ 1552.666560][ T3132] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5548'. [ 1552.789433][ T3132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5548'. [ 1553.556754][ T3165] loop9: detected capacity change from 0 to 33280 [ 1553.576480][ T3165] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1553.599302][ T3165] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1553.612852][ T3165] EXT4-fs (loop9): 1 truncate cleaned up [ 1553.618805][ T3165] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1555.262137][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1556.336073][ T3199] loop9: detected capacity change from 0 to 2048 [ 1556.988634][ T3199] loop9: p1 < > p4 [ 1556.993347][ T3199] loop9: p4 size 722688 extends beyond EOD, truncated [ 1557.836157][ T3217] overlayfs: failed to clone upperpath [ 1563.000371][ T3246] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5584'. [ 1564.451217][ T3272] loop9: detected capacity change from 0 to 256 [ 1564.477004][ T3272] exfat: Deprecated parameter 'utf8' [ 1564.502964][ T3272] exfat: Deprecated parameter 'utf8' [ 1564.536237][ T3272] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1566.206366][ T3289] netlink: 'syz.9.5596': attribute type 1 has an invalid length. [ 1566.238622][ T3292] incfs: Error accessing: w5T)`)YFnA@T<3ڂ$rcnHwC" -8/. [ 1566.250296][ T3292] incfs: mount failed -2 [ 1566.346928][ T28] audit: type=1400 audit(2000000015.930:10412): avc: denied { append } for pid=3301 comm="syz.9.5601" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1566.474133][ T3298] overlayfs: failed to clone upperpath [ 1568.441411][ T3355] netlink: 'syz.6.5622': attribute type 3 has an invalid length. [ 1568.520474][ T3358] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5624'. [ 1569.629679][ T3376] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5631'. [ 1569.640356][ T3376] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5631'. [ 1569.649939][ T3376] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5631'. [ 1569.660534][ T3376] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5631'. [ 1571.208352][ T3408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5640'. [ 1571.238800][ T3408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5640'. [ 1573.486223][ T3451] loop9: detected capacity change from 0 to 256 [ 1573.500010][ T3451] exfat: Deprecated parameter 'utf8' [ 1573.505569][ T3451] exfat: Deprecated parameter 'utf8' [ 1573.514816][ T3451] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1577.192292][ T3485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5663'. [ 1577.323219][ T3499] loop9: detected capacity change from 0 to 256 [ 1577.332927][ T3499] exfat: Deprecated parameter 'utf8' [ 1577.343287][ T3499] exfat: Deprecated parameter 'utf8' [ 1577.351552][ T3499] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1580.218191][ T3553] loop9: detected capacity change from 0 to 256 [ 1580.224864][ T3553] exfat: Deprecated parameter 'utf8' [ 1580.232153][ T3553] exfat: Deprecated parameter 'utf8' [ 1580.243625][ T3553] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1581.936708][ T3605] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5705'. [ 1582.866601][ T3621] loop9: detected capacity change from 0 to 33280 [ 1582.884160][ T3621] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1582.913346][ T3621] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1582.986400][ T3621] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1583.032164][ T3621] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.5712: bg 0: block 248: padding at end of block bitmap is not set [ 1583.047613][ T3621] Quota error (device loop9): write_blk: dquota write failed [ 1583.055058][ T3621] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1583.087143][ T3621] EXT4-fs error (device loop9): ext4_acquire_dquot:6828: comm syz.9.5712: Failed to acquire dquot type 1 [ 1583.107788][ T3621] EXT4-fs (loop9): 1 truncate cleaned up [ 1583.113499][ T3621] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1583.240802][ T3643] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5721'. [ 1583.250253][ T3643] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5721'. [ 1583.388284][ T28] audit: type=1400 audit(2000000000.000:10413): avc: denied { create } for pid=3619 comm="syz.9.5712" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1584.280653][ T1496] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 1584.297671][ T1496] EXT4-fs error (device loop9): ext4_release_dquot:6864: comm kworker/u4:8: Failed to release dquot type 1 [ 1584.317606][ T3650] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 1584.368762][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1584.404672][ T3661] loop9: detected capacity change from 0 to 256 [ 1584.432874][ T3661] exfat: Deprecated parameter 'utf8' [ 1584.453727][ T3661] exfat: Deprecated parameter 'utf8' [ 1584.462075][ T3661] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1586.832058][ T3731] loop9: detected capacity change from 0 to 2048 [ 1586.877847][ T3731] loop9: p1 < > p4 [ 1586.882664][ T3731] loop9: p4 size 722688 extends beyond EOD, truncated [ 1587.333923][ T28] audit: type=1400 audit(2000000003.960:10414): avc: denied { mounton } for pid=3726 comm="syz.9.5752" path="/dev/loop9p1" dev="devtmpfs" ino=799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1587.343909][ T103] loop9: p1 < > p4 [ 1587.370717][ T103] loop9: p4 size 722688 extends beyond EOD, truncated [ 1587.852402][ T3764] netlink: 'syz.6.5765': attribute type 3 has an invalid length. [ 1587.879815][ T3764] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5765'. [ 1588.002867][ T3778] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5770'. [ 1588.028239][ T28] audit: type=1400 audit(2000000004.660:10415): avc: denied { read } for pid=3779 comm="syz.9.5771" name="ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1588.065875][ T3778] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5770'. [ 1588.095085][ T3778] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5770'. [ 1588.108500][ T28] audit: type=1400 audit(2000000004.680:10416): avc: denied { open } for pid=3779 comm="syz.9.5771" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1588.142079][ T3778] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5770'. [ 1588.170596][ T3784] netlink: 'syz.9.5773': attribute type 1 has an invalid length. [ 1588.232805][ T28] audit: type=1400 audit(2000000004.680:10417): avc: denied { ioctl } for pid=3779 comm="syz.9.5771" path="/dev/ashmem" dev="devtmpfs" ino=269 ioctlcmd=0x7701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1588.556417][ T3805] loop9: detected capacity change from 0 to 2048 [ 1588.617764][ T3805] loop9: p1 < > p4 [ 1588.623907][ T3805] loop9: p4 size 722688 extends beyond EOD, truncated [ 1588.834341][ T3816] ip_tables: iptables: counters copy to user failed while replacing table [ 1590.381221][ T3839] overlayfs: failed to clone upperpath [ 1590.874331][ T3849] loop9: detected capacity change from 0 to 256 [ 1591.476043][ T3851] overlayfs: failed to clone upperpath [ 1591.495957][ T3849] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 1591.537161][ T28] audit: type=1400 audit(2000000008.140:10418): avc: denied { rmdir } for pid=3848 comm="syz.9.5796" name="file0" dev="loop9" ino=1048804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1591.650709][ T3859] loop9: detected capacity change from 0 to 256 [ 1591.683706][ T3859] exfat: Deprecated parameter 'utf8' [ 1591.708613][ T3859] exfat: Deprecated parameter 'utf8' [ 1591.733281][ T3859] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1593.315976][ T3882] overlayfs: missing 'lowerdir' [ 1593.935566][ T3890] ip_tables: iptables: counters copy to user failed while replacing table [ 1594.903862][ T28] audit: type=1400 audit(2000000011.530:10419): avc: denied { append } for pid=3903 comm="syz.9.5817" name="ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1594.980194][ T3911] loop9: detected capacity change from 0 to 33280 [ 1595.029227][ T3911] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1595.104187][ T3911] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1595.224976][ T3911] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1595.253109][ T3911] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.5819: bg 0: block 248: padding at end of block bitmap is not set [ 1595.278051][ T3911] Quota error (device loop9): write_blk: dquota write failed [ 1595.285669][ T3911] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1595.295711][ T3911] EXT4-fs error (device loop9): ext4_acquire_dquot:6828: comm syz.9.5819: Failed to acquire dquot type 1 [ 1595.311196][ T3911] EXT4-fs (loop9): 1 truncate cleaned up [ 1595.316953][ T3911] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1595.372757][ T3923] overlayfs: failed to clone upperpath [ 1595.677137][ T3930] tipc: Trying to set illegal importance in message [ 1595.705915][ T3932] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5824'. [ 1595.779062][ T1498] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 1595.794915][ T1498] EXT4-fs error (device loop9): ext4_release_dquot:6864: comm kworker/u4:14: Failed to release dquot type 1 [ 1595.809815][ T3933] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 1596.314157][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1600.818122][ T28] audit: type=1400 audit(2000000005.100:10420): avc: denied { ioctl } for pid=4016 comm="syz.6.5853" path="socket:[74892]" dev="sockfs" ino=74892 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1600.905649][ T4025] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5857'. [ 1600.925822][ T4025] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5857'. [ 1600.948458][ T4025] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5857'. [ 1606.220804][ T4108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5885'. [ 1606.230306][ T4108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5885'. [ 1606.239250][ T4108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5885'. [ 1606.345209][ T4117] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5891'. [ 1606.356825][ T4117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5891'. [ 1606.507760][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1607.103172][ T4136] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5895'. [ 1607.184934][ T4141] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5897'. [ 1607.286288][ T4147] loop9: detected capacity change from 0 to 33280 [ 1607.313134][ T4147] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1607.376891][ T4147] EXT4-fs (loop9): 1 truncate cleaned up [ 1607.385892][ T4147] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1609.034504][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1610.154432][ T4189] loop9: detected capacity change from 0 to 33280 [ 1610.498667][ T4189] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1610.528763][ T4189] EXT4-fs (loop9): 1 truncate cleaned up [ 1610.535950][ T4189] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1611.949852][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1613.908049][ T4252] x_tables: duplicate entry at hook 2 [ 1613.925644][ T4255] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5934'. [ 1613.934997][ T4255] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5934'. [ 1615.670417][ T4299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5953'. [ 1615.998700][ T4333] ip_tables: iptables: counters copy to user failed while replacing table [ 1617.845089][ T4356] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5975'. [ 1617.855377][ T4356] netlink: 'syz.8.5975': attribute type 2 has an invalid length. [ 1620.761326][ T4429] loop9: detected capacity change from 0 to 2048 [ 1620.901636][ T4429] loop9: p1 < > p4 [ 1620.908295][ T4429] loop9: p4 size 722688 extends beyond EOD, truncated [ 1620.920296][ T4429] overlayfs: './file0' not a directory [ 1623.991454][ T4465] ip_tables: iptables: counters copy to user failed while replacing table [ 1624.002379][ T4465] loop9: detected capacity change from 0 to 256 [ 1624.009053][ T4465] exfat: Unknown parameter '' [ 1624.521722][ T4481] overlayfs: failed to clone upperpath [ 1624.945424][ T4490] loop9: detected capacity change from 0 to 256 [ 1625.076344][ T4490] exfat: Deprecated parameter 'utf8' [ 1625.288714][ T4490] exfat: Deprecated parameter 'utf8' [ 1625.319522][ T4490] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1628.142999][ T4529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6033'. [ 1628.160863][ T4530] loop9: detected capacity change from 0 to 256 [ 1628.175078][ T4530] exfat: Deprecated parameter 'utf8' [ 1628.198282][ T4530] exfat: Deprecated parameter 'utf8' [ 1628.239542][ T4530] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1629.158597][ T4549] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1629.197365][ T4549] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1629.223069][ T4549] overlayfs: missing 'lowerdir' [ 1629.508250][ T4562] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6047'. [ 1629.524050][ T4562] netlink: 43 bytes leftover after parsing attributes in process `syz.9.6047'. [ 1629.542811][ T4562] netlink: 'syz.9.6047': attribute type 5 has an invalid length. [ 1629.558850][ T4562] netlink: 43 bytes leftover after parsing attributes in process `syz.9.6047'. [ 1630.840570][ T4586] ip_tables: iptables: counters copy to user failed while replacing table [ 1630.857264][ T4587] loop9: detected capacity change from 0 to 2048 [ 1632.475433][ T4610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6061'. [ 1633.701946][ T4637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6069'. [ 1638.380589][ T4701] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6091'. [ 1638.469452][ T4708] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6094'. [ 1638.481064][ T4710] loop9: detected capacity change from 0 to 33280 [ 1638.503251][ T4713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6097'. [ 1638.514680][ T4708] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6094'. [ 1638.528639][ T4710] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1638.578365][ T4722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6101'. [ 1638.597619][ T4710] EXT4-fs (loop9): 1 truncate cleaned up [ 1638.604858][ T4710] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1638.693557][ T4738] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6108'. [ 1638.703081][ T4738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6108'. [ 1638.712493][ T4738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6108'. [ 1638.783188][ T4751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6113'. [ 1638.801380][ T4751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6113'. [ 1638.812392][ T4751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6113'. [ 1638.832592][ T4751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6113'. [ 1640.546325][ T4777] overlayfs: failed to clone upperpath [ 1643.517083][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1644.764179][ T4859] loop9: detected capacity change from 0 to 256 [ 1644.803252][ T4861] netlink: 324 bytes leftover after parsing attributes in process `syz.6.6148'. [ 1645.820485][ T4914] loop9: detected capacity change from 0 to 33280 [ 1645.830107][ T4914] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1645.919517][ T4914] EXT4-fs (loop9): 1 truncate cleaned up [ 1645.932368][ T4914] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1649.643374][ T4966] overlayfs: conflicting options: nfs_export=on,index=off [ 1653.367860][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1653.967991][ T4994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6196'. [ 1657.748579][ T28] audit: type=1400 audit(2000000003.640:10421): avc: denied { write } for pid=5032 comm="syz.9.6215" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1658.208587][ T5047] overlayfs: failed to clone upperpath [ 1658.217476][T20649] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1658.409418][T20649] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.454618][T20649] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1658.542192][T20649] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1658.624955][T20649] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.007401][T20649] usb 10-1: Product: syz [ 1659.011723][T20649] usb 10-1: Manufacturer: syz [ 1659.016424][T20649] usb 10-1: SerialNumber: syz [ 1659.270815][T20649] usb 10-1: 0:2 : does not exist [ 1659.289198][T20649] usb 10-1: unit 9 not found! [ 1659.303815][T20649] usb 10-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1659.335785][T20649] usb 10-1: USB disconnect, device number 2 [ 1659.857584][ T5061] netlink: 248 bytes leftover after parsing attributes in process `syz.9.6224'. [ 1661.296346][ T5101] loop9: detected capacity change from 0 to 33280 [ 1661.303751][ T5101] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1661.312781][ T5101] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1661.498646][ T5101] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1661.549613][ T5101] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.6238: bg 0: block 248: padding at end of block bitmap is not set [ 1661.573480][ T5101] Quota error (device loop9): write_blk: dquota write failed [ 1661.581164][ T5101] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1661.592060][ T5101] EXT4-fs error (device loop9): ext4_acquire_dquot:6828: comm syz.9.6238: Failed to acquire dquot type 1 [ 1661.604152][ T5101] EXT4-fs (loop9): 1 truncate cleaned up [ 1661.609924][ T5101] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1661.830134][ T1498] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 1661.845707][ T1498] EXT4-fs error (device loop9): ext4_release_dquot:6864: comm kworker/u4:14: Failed to release dquot type 1 [ 1661.882346][ T5116] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 1662.260371][ T5122] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6244'. [ 1662.279650][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6244'. [ 1663.289084][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1664.799210][ T5158] overlayfs: failed to clone upperpath [ 1665.844010][ T5161] loop9: detected capacity change from 0 to 40427 [ 1665.852268][ T5161] F2FS-fs (loop9): invalid crc value [ 1665.891983][ T5161] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1666.003390][ T5161] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1666.146770][ T2260] syz-executor: attempt to access beyond end of device [ 1666.146770][ T2260] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1668.279099][ T5200] netlink: 140 bytes leftover after parsing attributes in process `syz.8.6269'. [ 1668.288405][ T5200] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6269'. [ 1668.621724][ T5214] overlayfs: failed to clone upperpath [ 1669.122547][ T28] audit: type=1400 audit(2000000004.320:10422): avc: denied { getopt } for pid=5217 comm="syz.9.6275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1670.191923][ T5237] loop9: detected capacity change from 0 to 256 [ 1670.216620][ T5237] exfat: Deprecated parameter 'utf8' [ 1670.226782][ T5237] exfat: Deprecated parameter 'utf8' [ 1670.241264][ T5237] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1670.456955][ T28] audit: type=1400 audit(2000000005.650:10423): avc: denied { mount } for pid=5236 comm="syz.9.6280" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1670.532935][ T5247] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6282'. [ 1674.199910][ T5322] ip_tables: iptables: counters copy to user failed while replacing table [ 1675.657873][ T5336] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6311'. [ 1676.825090][ T5364] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6321'. [ 1676.844691][ T5364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6321'. [ 1676.864040][ T5364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6321'. [ 1676.883347][ T5364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6321'. [ 1677.021860][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6317'. [ 1677.125936][ T5374] ip_tables: iptables: counters copy to user failed while replacing table [ 1679.415283][ T5388] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6330'. [ 1679.424569][ T5388] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6330'. [ 1679.433698][ T5388] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6330'. [ 1679.443202][ T5388] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6330'. [ 1679.517505][ T5394] loop9: detected capacity change from 0 to 33280 [ 1679.532249][ T5394] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1679.820116][ T5394] EXT4-fs (loop9): 1 truncate cleaned up [ 1679.839927][ T5394] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1681.899790][ T5420] ip_tables: iptables: counters copy to user failed while replacing table [ 1681.922625][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1683.398338][ T5439] __nla_validate_parse: 2 callbacks suppressed [ 1683.398395][ T5439] netlink: 228 bytes leftover after parsing attributes in process `syz.6.6345'. [ 1683.432323][ T5441] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6346'. [ 1683.658374][ T5455] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1683.682310][ T5455] overlayfs: missing 'lowerdir' [ 1686.849525][ T5502] overlayfs: failed to clone upperpath [ 1687.796038][ T5529] loop9: detected capacity change from 0 to 33280 [ 1687.815303][ T5529] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1687.860347][ T5529] EXT4-fs (loop9): 1 truncate cleaned up [ 1687.876323][ T5529] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1687.908315][ T28] audit: type=1400 audit(2000000005.610:10424): avc: denied { nlmsg_write } for pid=5544 comm="syz.7.6389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1689.356830][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1689.457907][ T5572] fuse: Invalid rootmode [ 1689.496338][ T28] audit: type=1400 audit(2000000007.190:10425): avc: denied { ioctl } for pid=5574 comm="syz.9.6400" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1689.587275][ T28] audit: type=1400 audit(2000000007.290:10426): avc: denied { write } for pid=5578 comm="syz.9.6402" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1690.524796][ T5597] loop9: detected capacity change from 0 to 33280 [ 1690.558868][ T5597] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1690.585079][ T5597] EXT4-fs (loop9): 1 truncate cleaned up [ 1690.593184][ T5597] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1692.316134][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1694.635696][ T5659] loop9: detected capacity change from 0 to 2048 [ 1695.604458][ T5661] overlayfs: failed to clone upperpath [ 1695.690410][ T5659] loop9: p1 < > p4 [ 1695.889902][ T5659] loop9: p4 size 722688 extends beyond EOD, truncated [ 1696.022829][ T5534] udevd[5534]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1696.043823][ T5666] udevd[5666]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 1698.390581][ T5706] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6451'. [ 1698.412567][ T5706] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6451'. [ 1698.440626][ T5706] netlink: 'syz.6.6451': attribute type 2 has an invalid length. [ 1698.479003][ T28] audit: type=1400 audit(2000000016.180:10427): avc: denied { setopt } for pid=5710 comm="syz.9.6453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1698.685701][ T5715] overlayfs: failed to clone upperpath [ 1699.586659][ T5735] overlayfs: failed to clone upperpath [ 1700.684554][ T5755] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6471'. [ 1700.707066][ T5755] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6471'. [ 1700.728075][ T5755] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6471'. [ 1700.798578][ T5747] loop9: detected capacity change from 0 to 131072 [ 1700.807553][ T5747] F2FS-fs (loop9): invalid crc value [ 1700.813104][ T5747] F2FS-fs (loop9): invalid crc value [ 1700.818478][ T5747] F2FS-fs (loop9): Failed to get valid F2FS checkpoint [ 1701.483249][ T5765] I/O error, dev loop9, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1702.628758][ T5784] overlayfs: failed to clone upperpath [ 1702.960232][ T5786] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6481'. [ 1705.323618][ T5846] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6505'. [ 1705.333607][ T5846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6505'. [ 1707.048474][ T5878] loop9: detected capacity change from 0 to 2048 [ 1707.564695][ T5878] loop9: p1 < > p4 [ 1707.573214][ T5878] loop9: p4 size 722688 extends beyond EOD, truncated [ 1708.568591][ T5916] overlayfs: failed to clone upperpath [ 1709.909223][ T5934] overlayfs: unrecognized mount option "\" or missing value [ 1709.953852][ T5939] netlink: 'syz.1.6535': attribute type 1 has an invalid length. [ 1709.983687][ T5939] netlink: 'syz.1.6535': attribute type 3 has an invalid length. [ 1710.017052][T31183] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1710.198220][T31183] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1710.212362][T31183] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1710.221950][T31183] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.259913][T31183] usb 10-1: config 0 descriptor?? [ 1710.269866][T31183] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1710.637136][T31183] usb 10-1: USB disconnect, device number 3 [ 1714.031852][ T5998] loop9: detected capacity change from 0 to 2048 [ 1714.160051][ T5998] loop9: p1 < > p4 [ 1714.167432][ T5998] loop9: p4 size 722688 extends beyond EOD, truncated [ 1714.203073][ T5998] overlayfs: './file0' not a directory [ 1714.229094][ T103] loop9: p1 < > p4 [ 1714.276094][ T103] loop9: p4 size 722688 extends beyond EOD, truncated [ 1715.968597][ T6025] loop9: detected capacity change from 0 to 2048 [ 1717.233650][ T6052] loop9: detected capacity change from 0 to 32896 [ 1717.252976][ T6052] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 1718.724882][ T6091] loop9: detected capacity change from 0 to 2048 [ 1718.798584][ T6091] loop9: p1 < > p4 [ 1718.807071][ T6091] loop9: p4 size 722688 extends beyond EOD, truncated [ 1719.613710][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6586'. [ 1720.170331][ T6129] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 1721.343171][ T6137] device syz_tun entered promiscuous mode [ 1721.493718][ T6141] overlayfs: failed to clone upperpath [ 1721.651595][ T6164] loop9: detected capacity change from 0 to 2048 [ 1721.728812][ T6164] loop9: p1 < > p4 [ 1721.740582][ T6164] loop9: p4 size 722688 extends beyond EOD, truncated [ 1721.998371][ T6170] 9pnet_fd: p9_fd_create_tcp (6170): problem binding to privport [ 1722.632409][ T6180] netlink: 176 bytes leftover after parsing attributes in process `syz.7.6617'. [ 1724.238123][ T6197] overlayfs: failed to clone upperpath [ 1726.900122][ T6240] loop9: detected capacity change from 0 to 2048 [ 1727.048510][ T6240] loop9: p1 < > p4 [ 1727.053102][ T6240] loop9: p4 size 722688 extends beyond EOD, truncated [ 1727.063844][ T6240] overlayfs: './file0' not a directory [ 1727.787562][ T2260] __loop_clr_fd: partition scan of loop9 failed (rc=-16) [ 1727.802836][ T6003] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1727.812502][ T5999] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1727.852587][ T5999] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1727.862215][ T6003] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1727.872326][ T6003] Buffer I/O error on dev loop9p1, logical block 0, async page read [ 1727.880498][ T5999] Buffer I/O error on dev loop9p4, logical block 1, async page read [ 1727.937202][ T6003] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1727.948236][ T6003] Buffer I/O error on dev loop9p1, logical block 0, async page read [ 1727.956728][ T6003] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1727.971760][ T6003] Buffer I/O error on dev loop9p1, logical block 0, async page read [ 1729.291905][ T6003] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1729.302802][ T6003] Buffer I/O error on dev loop9p1, logical block 0, async page read [ 1729.311101][ T6003] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1729.320377][ T6003] Buffer I/O error on dev loop9p1, logical block 0, async page read [ 1732.088051][ T6315] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6658'. [ 1732.242347][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6660'. [ 1732.251659][ T6324] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6660'. [ 1732.397556][ T6344] loop9: detected capacity change from 0 to 33280 [ 1732.416054][ T6344] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1732.436630][ T6344] EXT4-fs (loop9): 1 truncate cleaned up [ 1732.443036][ T6344] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1734.597586][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1736.449879][ T6388] overlayfs: failed to clone upperpath [ 1737.510423][ T6421] netlink: 2 bytes leftover after parsing attributes in process `syz.7.6703'. [ 1737.623374][ T6381] loop9: detected capacity change from 0 to 2048 [ 1737.688789][ T6381] loop9: p1 < > p4 [ 1737.699725][ T6381] loop9: p4 size 722688 extends beyond EOD, truncated [ 1738.751327][ T6440] overlayfs: failed to clone lowerpath [ 1738.951492][ T6444] overlayfs: failed to clone upperpath [ 1739.263861][ T6450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6713'. [ 1739.408274][ T28] audit: type=1400 audit(2000000000.220:10428): avc: denied { shutdown } for pid=6461 comm="syz.1.6719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1740.360705][ T28] audit: type=1400 audit(2000000001.170:10429): avc: denied { setopt } for pid=6492 comm="syz.8.6732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1740.591014][ T6501] loop9: detected capacity change from 0 to 2048 [ 1740.669428][ T6501] loop9: p1 < > p4 [ 1740.677320][ T6501] loop9: p4 size 722688 extends beyond EOD, truncated [ 1741.853752][ T6536] loop9: detected capacity change from 0 to 256 [ 1743.013622][ T6533] overlayfs: failed to clone upperpath [ 1743.950179][ T6547] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6754'. [ 1744.152003][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6774'. [ 1744.473388][ T6609] tmpfs: Unknown parameter 'nr_ino' [ 1745.837841][ T6627] tipc: Enabling of bearer rejected, media not registered [ 1747.274894][ T6658] tmpfs: Unknown parameter 'nr_ino' [ 1747.843031][ T6678] overlayfs: failed to clone upperpath [ 1749.829934][ T6697] loop9: detected capacity change from 0 to 33280 [ 1749.854311][ T6697] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1749.967858][ T6697] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1750.007840][ T6697] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1750.206633][ T6708] tmpfs: Unknown parameter 'nr_ino' [ 1750.352069][ T6697] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.6809: bg 0: block 248: padding at end of block bitmap is not set [ 1750.482583][ T6697] Quota error (device loop9): write_blk: dquota write failed [ 1750.549830][ T6697] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1750.661234][ T6697] EXT4-fs error (device loop9): ext4_acquire_dquot:6828: comm syz.9.6809: Failed to acquire dquot type 1 [ 1750.865889][ T6697] EXT4-fs (loop9): 1 truncate cleaned up [ 1750.877069][ T6697] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1751.288433][ T1499] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 1751.300762][ T1499] EXT4-fs error (device loop9): ext4_release_dquot:6864: comm kworker/u4:17: Failed to release dquot type 1 [ 1751.318832][ T6727] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 1751.936770][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1754.398813][ T6770] loop9: detected capacity change from 0 to 33280 [ 1754.427191][ T6770] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1754.435956][ T6770] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1754.452364][ T6775] xt_hashlimit: size too large, truncated to 1048576 [ 1754.496337][ T6770] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1754.550841][ T6770] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.6837: bg 0: block 248: padding at end of block bitmap is not set [ 1754.565546][ T6770] Quota error (device loop9): write_blk: dquota write failed [ 1754.573032][ T6770] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1754.583062][ T6770] EXT4-fs error (device loop9): ext4_acquire_dquot:6828: comm syz.9.6837: Failed to acquire dquot type 1 [ 1754.595477][ T6770] EXT4-fs (loop9): 1 truncate cleaned up [ 1754.601322][ T6770] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1755.637118][ T1500] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 1755.649771][ T1500] EXT4-fs error (device loop9): ext4_release_dquot:6864: comm kworker/u4:18: Failed to release dquot type 1 [ 1755.662190][ T6790] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 1755.717592][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1759.239926][ T6876] loop9: detected capacity change from 0 to 33280 [ 1759.250082][ T6876] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1759.295137][ T6876] EXT4-fs (loop9): 1 truncate cleaned up [ 1759.302566][ T6876] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1759.429407][ T6904] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6884'. [ 1760.775086][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1761.893547][ T6947] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6896'. [ 1762.678584][ T6933] loop9: detected capacity change from 0 to 40427 [ 1762.724032][ T6933] F2FS-fs (loop9): Invalid segment/section count (24 != 24 * 3) [ 1762.743622][ T6933] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1762.752276][ T6933] F2FS-fs (loop9): heap/no_heap options were deprecated [ 1762.760411][ T6933] F2FS-fs (loop9): fault_injection options not supported [ 1762.767584][ T6933] F2FS-fs (loop9): heap/no_heap options were deprecated [ 1762.774574][ T6933] F2FS-fs (loop9): fault_type options not supported [ 1762.781814][ T6933] F2FS-fs (loop9): Image doesn't support compression [ 1762.789517][ T6933] F2FS-fs (loop9): heap/no_heap options were deprecated [ 1762.797160][ T6933] F2FS-fs (loop9): invalid crc value [ 1762.817727][ T6933] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1762.890484][ T6933] F2FS-fs (loop9): Start checkpoint disabled! [ 1762.899874][ T6969] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6900'. [ 1762.908858][ T6933] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0 [ 1762.927295][ T6933] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1762.934394][ T6933] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1763.072321][ T6984] loop9: detected capacity change from 0 to 33280 [ 1763.082941][ T6984] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1763.107375][ T6984] EXT4-fs (loop9): 1 truncate cleaned up [ 1763.114068][ T6984] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1765.005180][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1765.183642][ T7016] netlink: 'syz.6.6920': attribute type 2 has an invalid length. [ 1765.318416][ T7020] loop9: detected capacity change from 0 to 2048 [ 1765.428155][ T7020] loop9: p1 < > p4 [ 1765.437029][ T7020] loop9: p4 size 722688 extends beyond EOD, truncated [ 1765.463685][ T7020] tmpfs: Bad value for 'nr_inodes' [ 1765.544820][ T28] audit: type=1107 audit(2000000001.710:10430): pid=7022 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 1766.253603][ T7051] netlink: 'syz.8.6933': attribute type 29 has an invalid length. [ 1766.281636][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6934'. [ 1766.291818][ T7054] bridge0: port 1(syz_tun) entered disabled state [ 1766.422830][ T7073] netlink: 224 bytes leftover after parsing attributes in process `syz.8.6943'. [ 1767.692526][ T7108] ip_tables: iptables: counters copy to user failed while replacing table [ 1768.223887][ T7126] binder: BINDER_SET_CONTEXT_MGR already set [ 1768.237266][ T7126] binder: 7124:7126 ioctl 40046207 0 returned -16 [ 1768.315153][ T7134] xt_hashlimit: size too large, truncated to 1048576 [ 1768.469646][ T7149] ip_tables: iptables: counters copy to user failed while replacing table [ 1768.526709][ T7157] xt_hashlimit: size too large, truncated to 1048576 [ 1768.626214][ T7162] xt_hashlimit: size too large, truncated to 1048576 [ 1769.163288][ T7198] ip_tables: iptables: counters copy to user failed while replacing table [ 1769.192332][ T7203] device dummy0 entered promiscuous mode [ 1769.198142][ T7203] device macsec0 entered promiscuous mode [ 1769.778437][ T7217] xt_hashlimit: size too large, truncated to 1048576 [ 1769.805094][ T7224] netlink: 'syz.9.7005': attribute type 2 has an invalid length. [ 1770.597276][ T7242] loop9: detected capacity change from 0 to 2048 [ 1770.627655][ T7242] loop9: p1 < > p4 [ 1770.632106][ T7242] loop9: p4 size 722688 extends beyond EOD, truncated [ 1770.657265][ T103] loop9: p1 < > p4 [ 1770.661737][ T103] loop9: p4 size 722688 extends beyond EOD, truncated [ 1774.142205][ T7304] loop9: detected capacity change from 0 to 33280 [ 1774.215251][ T7304] EXT4-fs: Ignoring removed nobh option [ 1774.251332][ T7304] EXT4-fs error (device loop9): ext4_ext_check_inode:520: inode #2: comm syz.9.7029: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 6401, max 4(4), depth 0(0) [ 1774.270315][ T7304] EXT4-fs (loop9): Remounting filesystem read-only [ 1774.277756][ T7304] EXT4-fs (loop9): get root inode failed [ 1774.284223][ T7304] EXT4-fs (loop9): mount failed [ 1775.186020][ T7333] ip_tables: iptables: counters copy to user failed while replacing table [ 1775.253871][ T7337] netlink: 96 bytes leftover after parsing attributes in process `syz.7.7040'. [ 1775.350612][ T7355] lo: Caught tx_queue_len zero misconfig [ 1775.982266][ T7304] loop9: detected capacity change from 0 to 131072 [ 1775.998079][ T7304] F2FS-fs (loop9): invalid crc value [ 1776.008757][ T7304] F2FS-fs (loop9): invalid crc value [ 1776.014129][ T7304] F2FS-fs (loop9): Failed to get valid F2FS checkpoint [ 1777.430745][ T7397] overlayfs: failed to clone upperpath [ 1777.770052][ T7412] loop9: detected capacity change from 0 to 33280 [ 1777.777781][ T7412] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1777.786506][ T7412] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1777.837392][ T7412] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1777.860798][ T7412] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.7071: bg 0: block 248: padding at end of block bitmap is not set [ 1777.879192][ T7412] Quota error (device loop9): write_blk: dquota write failed [ 1777.886866][ T7412] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1777.898105][ T7412] EXT4-fs error (device loop9): ext4_acquire_dquot:6828: comm syz.9.7071: Failed to acquire dquot type 1 [ 1777.910387][ T7412] EXT4-fs (loop9): 1 truncate cleaned up [ 1777.916070][ T7412] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1778.194185][ T6728] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 1778.206831][ T6728] EXT4-fs error (device loop9): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 1 [ 1778.220620][ T7429] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 1779.194937][ T7441] ip_tables: iptables: counters copy to user failed while replacing table [ 1779.222828][ T7451] tipc: Enabled bearer , priority 10 [ 1779.634086][ T7469] overlayfs: failed to clone upperpath [ 1780.337003][T31183] tipc: Node number set to 1 [ 1781.844088][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1781.943741][ T7509] loop9: detected capacity change from 0 to 33280 [ 1781.975167][ T7509] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1782.017666][ T7509] EXT4-fs (loop9): 1 truncate cleaned up [ 1782.023493][ T7509] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1782.055924][ T28] audit: type=1400 audit(2000000003.910:10431): avc: denied { read write } for pid=7508 comm="syz.9.7106" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1782.245207][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1782.255192][ T28] audit: type=1400 audit(2000000003.960:10432): avc: denied { open } for pid=7508 comm="syz.9.7106" path="/394/file0/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1782.482523][ T7523] tmpfs: Unknown parameter 'nr_ino' [ 1782.492789][ T7523] overlayfs: failed to clone upperpath [ 1783.259456][ T7533] tipc: Enabled bearer , priority 10 [ 1783.616060][ T7551] tmpfs: Unknown parameter 'nr_ino' [ 1784.284922][ T7559] usb usb1: usbfs: process 7559 (syz.9.7124) did not claim interface 0 before use [ 1784.635543][ T7576] loop9: detected capacity change from 0 to 2048 [ 1784.669242][ T7576] loop9: p1 < > p4 [ 1784.698817][ T7576] loop9: p4 size 722688 extends beyond EOD, truncated [ 1784.725483][ T7576] tmpfs: Unknown parameter 'nr_ino' [ 1784.736063][ T7576] overlayfs: './file0' not a directory [ 1785.747036][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7147'. [ 1786.007069][T31183] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1786.198701][T31183] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1786.209582][T31183] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1786.225826][T31183] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1786.236254][T31183] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.279460][T31183] usb 10-1: Product: syz [ 1786.294441][T31183] usb 10-1: Manufacturer: syz [ 1786.310863][T31183] usb 10-1: SerialNumber: syz [ 1786.343673][T31183] cdc_ncm 10-1:1.0: skipping garbage [ 1787.380968][ T7646] tmpfs: Bad value for 'nr_inodes' [ 1787.392282][ T7646] overlayfs: failed to clone upperpath [ 1787.405039][T31183] cdc_ncm 10-1:1.0: bind() failure [ 1787.489796][T31183] usb 10-1: USB disconnect, device number 4 [ 1789.430540][ T7699] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1789.959649][ T7702] loop9: detected capacity change from 0 to 128 [ 1790.038964][ T7704] loop9: detected capacity change from 0 to 32896 [ 1790.099426][ T7704] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1790.117901][ T7704] ext4 filesystem being mounted at /409/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1790.266464][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1790.318136][ T7715] loop9: detected capacity change from 0 to 128 [ 1790.623203][ T7715] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1791.032580][ T1499] FAT-fs (loop9): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1791.237754][ T7721] loop9: detected capacity change from 0 to 34816 [ 1791.318837][ T7721] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1791.339551][ T7721] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1791.460500][ T7729] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.7183: bg 0: block 345: padding at end of block bitmap is not set [ 1791.495982][ T7729] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 2 with error 117 [ 1791.534777][ T7729] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1791.534777][ T7729] [ 1791.552506][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1791.562946][ T482] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 1791.587163][ T482] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1791.587163][ T482] [ 1791.599105][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1791.602846][ T482] EXT4-fs (loop9): Total free blocks count 0 [ 1791.621675][ T482] EXT4-fs (loop9): Free/Dirty block details [ 1791.634169][ T482] EXT4-fs (loop9): free_blocks=0 [ 1791.642522][ T7735] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 1791.643638][ T482] EXT4-fs (loop9): dirty_blocks=624 [ 1791.657648][T31183] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1791.667120][ T482] EXT4-fs (loop9): Block reservation details [ 1791.696124][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1791.703641][T31183] ip6_tunnel:  xmit: Local address not yet configured! [ 1791.711073][ T1496] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1791.788742][ T7738] loop9: detected capacity change from 0 to 128 [ 1791.799072][ T7738] FAT-fs (loop9): Directory bread(block 524322) failed [ 1791.809405][ T7738] FAT-fs (loop9): Directory bread(block 524323) failed [ 1791.816336][ T7738] FAT-fs (loop9): Directory bread(block 524324) failed [ 1791.824659][ T7738] FAT-fs (loop9): Directory bread(block 524325) failed [ 1791.831732][ T7738] FAT-fs (loop9): Directory bread(block 524326) failed [ 1791.838686][ T7738] FAT-fs (loop9): Directory bread(block 524327) failed [ 1791.845669][ T7738] FAT-fs (loop9): Directory bread(block 524328) failed [ 1791.854516][ T7738] FAT-fs (loop9): Directory bread(block 524329) failed [ 1791.869472][ T7738] FAT-fs (loop9): Directory bread(block 524322) failed [ 1791.876582][ T7738] FAT-fs (loop9): Directory bread(block 524323) failed [ 1792.289510][ T7770] loop9: detected capacity change from 0 to 2048 [ 1793.283287][T31183] ip6_tunnel:  xmit: Local address not yet configured! [ 1793.307308][T31183] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1793.416719][ T7764] tmpfs: Bad value for 'nr_inodes' [ 1793.508958][ T7770] loop9: p1 < > p4 [ 1793.513663][ T7770] loop9: p4 size 722688 extends beyond EOD, truncated [ 1793.884381][ T7503] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1793.907158][ T7647] udevd[7647]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 1793.919272][ T7503] udevd[7503]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1793.932564][ T7787] veth0: Caught tx_queue_len zero misconfig [ 1794.063687][ T7812] team_slave_1: Caught tx_queue_len zero misconfig [ 1794.609557][ T7861] FAULT_INJECTION: forcing a failure. [ 1794.609557][ T7861] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1794.675932][ T7861] CPU: 1 PID: 7861 Comm: syz.9.7232 Tainted: G W syzkaller #0 [ 1794.684881][ T7861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1794.694974][ T7861] Call Trace: [ 1794.698309][ T7861] [ 1794.701271][ T7861] __dump_stack+0x21/0x24 [ 1794.705641][ T7861] dump_stack_lvl+0x110/0x170 [ 1794.710354][ T7861] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1794.715691][ T7861] dump_stack+0x15/0x24 [ 1794.719885][ T7861] should_fail_ex+0x3bf/0x510 [ 1794.724676][ T7861] should_fail+0xb/0x10 [ 1794.728957][ T7861] get_futex_key+0x143/0xb10 [ 1794.734082][ T7861] ? __cfi_get_futex_key+0x10/0x10 [ 1794.739374][ T7861] futex_wake+0x150/0x8e0 [ 1794.743949][ T7861] ? slab_free_freelist_hook+0xc2/0x190 [ 1794.749541][ T7861] ? proc_pid_attr_write+0x2d3/0x2e0 [ 1794.755093][ T7861] ? __cfi_futex_wake+0x10/0x10 [ 1794.760010][ T7861] ? kfree+0x6f/0xf0 [ 1794.763966][ T7861] ? vfs_write+0xa51/0xd00 [ 1794.768535][ T7861] do_futex+0x2bf/0x430 [ 1794.772733][ T7861] ? __cfi_do_futex+0x10/0x10 [ 1794.777704][ T7861] ? __kasan_check_write+0x14/0x20 [ 1794.782856][ T7861] ? mutex_unlock+0x8f/0x230 [ 1794.787486][ T7861] __se_sys_futex+0x136/0x310 [ 1794.792208][ T7861] ? __x64_sys_futex+0x100/0x100 [ 1794.797190][ T7861] ? xfd_validate_state+0x70/0x150 [ 1794.802339][ T7861] ? __kasan_check_write+0x14/0x20 [ 1794.807571][ T7861] __x64_sys_futex+0xe5/0x100 [ 1794.812306][ T7861] x64_sys_call+0x7ec/0x9a0 [ 1794.816860][ T7861] do_syscall_64+0x4c/0xa0 [ 1794.821322][ T7861] ? clear_bhb_loop+0x30/0x80 [ 1794.826130][ T7861] ? clear_bhb_loop+0x30/0x80 [ 1794.830851][ T7861] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1794.836867][ T7861] RIP: 0033:0x7fb064fa94d9 [ 1794.841308][ T7861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1794.861341][ T7861] RSP: 002b:00007fb065e2e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1794.869792][ T7861] RAX: ffffffffffffffda RBX: 00007fb065225fa8 RCX: 00007fb064fa94d9 [ 1794.877808][ T7861] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb065225fac [ 1794.885824][ T7861] RBP: 00007fb065225fa0 R08: 0021a8f212553d34 R09: 0000000000000000 [ 1794.893835][ T7861] R10: 000000000000001d R11: 0000000000000246 R12: 0000000000000000 [ 1794.901841][ T7861] R13: 00007fb065226038 R14: 00007ffe066153a0 R15: 00007ffe06615488 [ 1794.909850][ T7861] [ 1795.637052][ T7884] tmpfs: Bad value for 'nr_inodes' [ 1796.357299][ T7891] device-mapper: table: 252:0: writecache: unknown target type [ 1796.383241][ T7891] device-mapper: ioctl: error adding target to table [ 1797.492176][ T7942] tmpfs: Bad value for 'nr_inodes' [ 1798.382250][ T7949] loop9: detected capacity change from 0 to 2048 [ 1798.618171][ T7949] loop9: p1 < > p4 [ 1798.641219][ T7954] tmpfs: Bad value for 'nr_inodes' [ 1798.663798][ T7949] loop9: p4 size 722688 extends beyond EOD, truncated [ 1799.322731][ T7984] loop9: detected capacity change from 0 to 33280 [ 1799.331449][ T7984] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1799.353652][ T7984] EXT4-fs (loop9): 1 truncate cleaned up [ 1799.360040][ T7984] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1799.381871][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7277'. [ 1799.646918][ T8011] tmpfs: Bad value for 'nr_inodes' [ 1799.652996][ T8011] overlayfs: failed to clone upperpath [ 1799.843221][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1802.367011][T30501] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1802.526617][ T8064] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1802.579910][T30501] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1802.593299][T30501] usb 10-1: not running at top speed; connect to a high speed hub [ 1802.619224][T30501] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 1802.645058][T30501] usb 10-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1802.654762][T30501] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.894060][ T8074] netlink: 104 bytes leftover after parsing attributes in process `syz.8.7311'. [ 1803.897914][ T8084] overlayfs: failed to clone upperpath [ 1804.287062][T30501] usb 10-1: Product: syz [ 1804.291390][T30501] usb 10-1: Manufacturer: syz [ 1804.296105][T30501] usb 10-1: SerialNumber: syz [ 1804.778649][T30501] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1804.786030][T30501] usb 10-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1804.795270][T30501] usb 10-1: found format II with max.bitrate = 4, frame size=7372 [ 1804.805492][T30501] usb 10-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1804.827902][T30501] usb 10-1: USB disconnect, device number 5 [ 1804.856417][ T8111] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7322'. [ 1805.067530][ T8099] udevd[8099]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1805.521119][ T8141] overlayfs: failed to clone upperpath [ 1805.925019][ T8148] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7334'. [ 1806.234268][ T8152] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7337'. [ 1806.315764][ T8156] overlayfs: failed to clone upperpath [ 1806.692168][ T8184] netlink: 64 bytes leftover after parsing attributes in process `syz.9.7352'. [ 1806.703799][ T8182] ip_tables: iptables: counters copy to user failed while replacing table [ 1806.953029][ T8198] loop9: detected capacity change from 0 to 2048 [ 1807.175456][ T8199] overlayfs: workdir and upperdir must reside under the same mount [ 1807.240061][ T8198] loop9: p1 < > p4 [ 1807.338462][ T8198] loop9: p4 size 722688 extends beyond EOD, truncated [ 1807.804920][ T8214] ./dev/sda1: Can't open blockdev [ 1807.981014][ T8230] loop9: detected capacity change from 0 to 33280 [ 1808.008523][ T8230] EXT4-fs: Ignoring removed nobh option [ 1808.060252][ T8230] EXT4-fs error (device loop9): ext4_ext_check_inode:520: inode #2: comm syz.9.7368: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 6401, max 4(4), depth 0(0) [ 1808.118865][ T8230] EXT4-fs (loop9): Remounting filesystem read-only [ 1808.125497][ T8230] EXT4-fs (loop9): get root inode failed [ 1808.147051][ T8230] EXT4-fs (loop9): mount failed [ 1808.645803][ T8230] loop9: detected capacity change from 0 to 131072 [ 1808.654052][ T8230] F2FS-fs (loop9): invalid crc value [ 1808.659683][ T8230] F2FS-fs (loop9): invalid crc value [ 1808.665014][ T8230] F2FS-fs (loop9): Failed to get valid F2FS checkpoint [ 1808.777340][ T8099] I/O error, dev loop9, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1808.927435][ T8268] ./dev/sda1: Can't open blockdev [ 1808.998794][ T8259] overlayfs: failed to clone upperpath [ 1809.221073][ T8287] loop9: detected capacity change from 0 to 33792 [ 1809.307484][ T8287] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c802c018, mo2=0003] [ 1809.348324][ T8287] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1809.433158][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1809.664289][ T28] audit: type=1400 audit(2000000006.930:10433): avc: denied { read } for pid=8315 comm="syz.9.7398" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1809.711632][ T28] audit: type=1400 audit(2000000006.960:10434): avc: denied { open } for pid=8315 comm="syz.9.7398" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1809.772844][ T8323] overlayfs: failed to clone upperpath [ 1810.410026][ T8349] device bridge0 entered promiscuous mode [ 1810.475661][ T8357] overlayfs: failed to clone upperpath [ 1811.700799][ T8370] loop9: detected capacity change from 0 to 2048 [ 1811.750719][ T8370] loop9: p1 < > p4 [ 1811.763875][ T8370] loop9: p4 size 722688 extends beyond EOD, truncated [ 1811.810165][ T8370] overlayfs: './file0' not a directory [ 1812.243900][ T103] loop9: p1 < > p4 [ 1812.248363][ T103] loop9: p4 size 722688 extends beyond EOD, truncated [ 1814.071986][ T8400] tipc: Failed to remove unknown binding: 66,0,0/1:2067828271/2067828272 [ 1814.101709][ T8407] loop9: detected capacity change from 0 to 33280 [ 1814.123734][ T8407] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1814.179391][ T8407] EXT4-fs (loop9): 1 truncate cleaned up [ 1814.185124][ T8407] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1815.559636][ T8426] overlayfs: failed to clone upperpath [ 1816.071671][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1816.127842][ T28] audit: type=1400 audit(2000000013.400:10435): avc: denied { create } for pid=8429 comm="syz.1.7439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1816.268684][ T28] audit: type=1400 audit(2000000013.540:10436): avc: denied { remount } for pid=8434 comm="syz.1.7441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 1816.629491][ T8466] loop9: detected capacity change from 0 to 33280 [ 1816.674123][ T8466] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1816.718746][ T8466] EXT4-fs (loop9): 1 truncate cleaned up [ 1816.738876][ T8466] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1817.871400][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1818.079852][ T8485] loop9: detected capacity change from 0 to 256 [ 1818.240798][ T8486] overlayfs: failed to clone upperpath [ 1819.273201][ T8508] loop9: detected capacity change from 0 to 256 [ 1819.325425][ T8508] exfat: Bad value for 'uid' [ 1819.400973][ T8099] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1819.417320][ T8508] xt_hashlimit: size too large, truncated to 1048576 [ 1819.659819][ T8512] overlayfs: failed to clone upperpath [ 1820.936548][ T8539] overlayfs: failed to clone upperpath [ 1820.980882][ T28] audit: type=1400 audit(2000000018.250:10437): avc: denied { watch } for pid=8550 comm="syz.8.7482" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1822.550930][ T8572] ./dev/sda1: Can't open blockdev [ 1822.658464][ T8560] overlayfs: failed to clone upperpath [ 1822.936598][ T8584] overlayfs: failed to clone upperpath [ 1823.140050][ T28] audit: type=1400 audit(2000000020.410:10438): avc: denied { rename } for pid=8586 comm="syz.7.7495" name="file0" dev="tmpfs" ino=8319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1823.973028][ T8610] loop9: detected capacity change from 0 to 33280 [ 1823.999027][ T8610] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1824.048297][ T8610] EXT4-fs (loop9): 1 truncate cleaned up [ 1824.055160][ T8610] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1824.835521][ T8620] overlayfs: failed to clone upperpath [ 1825.165267][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1825.339415][ T8635] ./dev/sda1: Can't open blockdev [ 1825.900918][ T8682] overlayfs: failed to clone upperpath [ 1826.620673][ T8687] 9pnet_fd: p9_fd_create_unix (8687): problem connecting socket: ./proc: -111 [ 1826.803220][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7537'. [ 1828.289242][ T8714] loop9: detected capacity change from 0 to 33280 [ 1828.481453][ T8714] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1828.500882][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7544'. [ 1828.537862][ T8714] EXT4-fs (loop9): 1 truncate cleaned up [ 1828.559940][ T8714] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1829.050195][ T8739] overlayfs: failed to clone upperpath [ 1829.403435][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1830.929122][ T8816] overlayfs: failed to clone upperpath [ 1831.976490][ T28] audit: type=1400 audit(2000000029.241:10439): avc: denied { mounton } for pid=8871 comm="syz.7.7598" path="/1580/file0" dev="tmpfs" ino=8469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1832.008675][ T8875] xt_hashlimit: size too large, truncated to 1048576 [ 1832.065494][ T28] audit: type=1400 audit(2000000029.251:10440): avc: denied { setattr } for pid=8871 comm="syz.7.7598" name="file0" dev="tmpfs" ino=8469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1832.121898][ T28] audit: type=1400 audit(2000000029.251:10441): avc: denied { write } for pid=8871 comm="syz.7.7598" name="file0" dev="tmpfs" ino=8469 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1832.345029][ T8881] overlayfs: failed to clone upperpath [ 1833.369855][ T8917] futex_wake_op: syz.6.7617 tries to shift op by -1; fix this program [ 1833.512424][ T8929] sock: sock_timestamping_bind_phc: sock not bind to device [ 1833.663986][ T8938] loop9: detected capacity change from 0 to 2048 [ 1833.723488][ T8938] loop9: p1 < > p4 [ 1833.730709][ T8938] loop9: p4 size 722688 extends beyond EOD, truncated [ 1833.764568][ T8938] overlayfs: './file0' not a directory [ 1834.401918][ T8941] ./dev/sda1: Can't open blockdev [ 1834.950772][ T28] audit: type=1400 audit(2000000032.221:10442): avc: denied { write } for pid=8964 comm="syz.9.7633" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1835.802491][ T9015] ./dev/sda1: Can't open blockdev [ 1835.902515][ T9018] loop9: detected capacity change from 0 to 8192 [ 1835.921181][ T9018] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1836.952598][ T9041] syz.9.7665 (9041) used obsolete PPPIOCDETACH ioctl [ 1840.723727][ T9075] loop9: detected capacity change from 0 to 33280 [ 1840.742722][ T9075] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1841.065604][ T9075] EXT4-fs (loop9): 1 truncate cleaned up [ 1841.086482][ T9075] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1842.129498][ T9089] ./dev/sda1: Can't open blockdev [ 1842.198437][ T9098] overlayfs: failed to clone lowerpath [ 1842.490065][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1843.918924][ T9143] loop9: detected capacity change from 0 to 33280 [ 1844.291958][ T9143] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1844.316476][ T9076] udevd[9076]: symlink '../../loop9' '/dev/disk/by-diskseq/362.tmp-b7:9' failed: Read-only file system [ 1844.320151][ T9143] EXT4-fs (loop9): 1 truncate cleaned up [ 1844.361112][ T9143] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1844.394804][ T9076] udevd[9076]: symlink '../../loop9' '/dev/disk/by-diskseq/362.tmp-b7:9' failed: Read-only file system [ 1844.490201][ T9153] ip_tables: iptables: counters copy to user failed while replacing table [ 1844.515308][ T9153] tipc: Enabling of bearer rejected, failed to enable media [ 1845.265857][ T9162] netlink: 7 bytes leftover after parsing attributes in process `syz.8.7707'. [ 1845.715056][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1845.728247][ T9076] udevd[9076]: symlink '../../loop9' '/dev/disk/by-diskseq/362.tmp-b7:9' failed: Read-only file system [ 1845.749652][ T9076] udevd[9076]: symlink '../../loop9' '/dev/disk/by-diskseq/362.tmp-b7:9' failed: Read-only file system [ 1845.843070][ T9189] overlayfs: failed to clone upperpath [ 1846.641574][ T9230] loop9: detected capacity change from 0 to 33280 [ 1846.653688][ T9230] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1846.662711][ T9230] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1846.678239][ T9076] udevd[9076]: symlink '../../loop9' '/dev/disk/by-diskseq/364.tmp-b7:9' failed: Read-only file system [ 1846.693504][ T9076] udevd[9076]: symlink '../../loop9' '/dev/disk/by-uuid/00000000-0000-0000-0008-000000000000.tmp-b7:9' failed: Read-only file system [ 1846.735531][ T9076] udevd[9076]: symlink '../../loop9' '/dev/disk/by-diskseq/364.tmp-b7:9' failed: Read-only file system [ 1846.750189][ T9230] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1846.769240][ T9230] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.7733: bg 0: block 248: padding at end of block bitmap is not set [ 1846.775934][ T9076] udevd[9076]: symlink '../../loop9' '/dev/disk/by-uuid/00000000-0000-0000-0008-000000000000.tmp-b7:9' failed: Read-only file system [ 1846.800437][ T9230] Quota error (device loop9): write_blk: dquota write failed [ 1846.807998][ T9230] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1846.817944][ T9230] EXT4-fs error (device loop9): ext4_acquire_dquot:6828: comm syz.9.7733: Failed to acquire dquot type 1 [ 1846.830330][ T9230] EXT4-fs (loop9): 1 truncate cleaned up [ 1846.836174][ T9230] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1846.866837][ T9076] udevd[9076]: symlink '../../loop9' '/dev/disk/by-diskseq/364.tmp-b7:9' failed: Read-only file system [ 1846.879442][ T9076] udevd[9076]: symlink '../../loop9' '/dev/disk/by-uuid/00000000-0000-0000-0008-000000000000.tmp-b7:9' failed: Read-only file system [ 1847.907355][ T482] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 1847.916425][ T482] EXT4-fs error (device loop9): ext4_release_dquot:6864: comm kworker/u4:11: Failed to release dquot type 1 [ 1847.937640][ T9254] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 1847.995969][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1848.094204][ T9269] loop9: detected capacity change from 0 to 33280 [ 1848.110628][ T9269] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1848.142269][ T9269] EXT4-fs (loop9): 1 truncate cleaned up [ 1848.156580][ T9269] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1848.244276][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1849.804303][ T9333] xt_hashlimit: size too large, truncated to 1048576 [ 1850.587777][ T28] audit: type=1326 audit(2000000003.530:10443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9357 comm="syz.9.7776" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb064fa94d9 code=0x7fc00000 [ 1850.829084][ T28] audit: type=1400 audit(2000000003.770:10444): avc: denied { getopt } for pid=9384 comm="syz.7.7785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1851.192852][ T9389] overlayfs: missing 'lowerdir' [ 1851.436418][ T28] audit: type=1326 audit(2000000004.370:10445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9357 comm="syz.9.7776" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb064fa94d9 code=0x7fc00000 [ 1851.936644][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7793'. [ 1852.426719][ T9423] overlayfs: missing 'lowerdir' [ 1854.504128][ T9462] loop9: detected capacity change from 0 to 2048 [ 1854.541883][ T9446] overlayfs: missing 'lowerdir' [ 1854.779295][ T9466] overlayfs: missing 'lowerdir' [ 1855.126901][ T9462] loop9: p1 < > p4 [ 1855.133926][ T9462] loop9: p4 size 722688 extends beyond EOD, truncated [ 1855.196533][ T9403] udevd[9403]: symlink '../../loop9' '/dev/disk/by-diskseq/368.tmp-b7:9' failed: Read-only file system [ 1855.349930][ T9403] udevd[9403]: symlink '../../loop9' '/dev/disk/by-diskseq/368.tmp-b7:9' failed: Read-only file system [ 1855.375492][ T9403] udevd[9403]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1855.420683][ T9471] udevd[9471]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 1855.574054][ T28] audit: type=1400 audit(2000000008.510:10446): avc: denied { watch } for pid=9476 comm="syz.7.7814" path="/1627/cgroup" dev="tmpfs" ino=8714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 1855.609471][ T9403] udevd[9403]: symlink '../../loop9' '/dev/disk/by-diskseq/368.tmp-b7:9' failed: Read-only file system [ 1855.689985][ T9403] udevd[9403]: symlink '../../loop9' '/dev/disk/by-diskseq/368.tmp-b7:9' failed: Read-only file system [ 1855.754082][ T9488] loop9: detected capacity change from 0 to 33280 [ 1855.800168][ T9403] udevd[9403]: symlink '../../loop9' '/dev/disk/by-diskseq/370.tmp-b7:9' failed: Read-only file system [ 1855.823766][ T9499] netlink: 140 bytes leftover after parsing attributes in process `syz.7.7822'. [ 1855.835103][ T9488] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1855.849442][ T9488] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1855.904645][ T9403] udevd[9403]: symlink '../../loop9' '/dev/disk/by-diskseq/370.tmp-b7:9' failed: Read-only file system [ 1855.931543][ T9488] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1855.958154][ T9504] overlayfs: failed to clone upperpath [ 1856.017286][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1856.493836][ T9403] udevd[9403]: symlink '../../loop9' '/dev/disk/by-diskseq/370.tmp-b7:9' failed: Read-only file system [ 1856.632875][ T9403] udevd[9403]: symlink '../../loop9' '/dev/disk/by-diskseq/370.tmp-b7:9' failed: Read-only file system [ 1856.745957][ T28] audit: type=1400 audit(2000000009.680:10447): avc: denied { read } for pid=9523 comm="syz.7.7834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1856.802617][ T9539] netlink: 224 bytes leftover after parsing attributes in process `syz.7.7834'. [ 1856.943811][ T9549] loop9: detected capacity change from 0 to 33280 [ 1856.995801][ T9549] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1857.059820][ T9549] EXT4-fs (loop9): 1 truncate cleaned up [ 1857.065542][ T9549] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1857.220194][ T9560] xt_hashlimit: size too large, truncated to 1048576 [ 1857.231979][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7847'. [ 1857.387034][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1858.180435][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1858.450879][ T9579] loop9: detected capacity change from 0 to 2048 [ 1858.558054][ T9579] loop9: p1 < > p4 [ 1858.564992][ T9579] loop9: p4 size 722688 extends beyond EOD, truncated [ 1858.594528][ T9579] overlayfs: missing 'lowerdir' [ 1861.076574][ T9644] loop9: detected capacity change from 0 to 2048 [ 1861.138492][ T9644] loop9: p1 < > p4 [ 1861.145208][ T9644] loop9: p4 size 722688 extends beyond EOD, truncated [ 1861.183681][ T9644] overlayfs: missing 'lowerdir' [ 1861.265274][ T9403] udevd[9403]: symlink '../../loop9' '/dev/disk/by-diskseq/376.tmp-b7:9' failed: Read-only file system [ 1861.611950][ T9403] udevd[9403]: symlink '../../loop9' '/dev/disk/by-diskseq/376.tmp-b7:9' failed: Read-only file system [ 1861.886992][ T9471] udevd[9471]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 1861.918068][ T9403] udevd[9403]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1862.300410][ T9403] udevd[9403]: symlink '../../loop9' '/dev/disk/by-diskseq/376.tmp-b7:9' failed: Read-only file system [ 1862.301601][ T9658] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7882'. [ 1862.728441][ T9403] udevd[9403]: symlink '../../loop9' '/dev/disk/by-diskseq/376.tmp-b7:9' failed: Read-only file system [ 1862.829639][ T9661] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1863.264470][ T9686] loop9: detected capacity change from 0 to 2048 [ 1863.309146][ T9686] loop9: p1 < > p4 [ 1863.316437][ T9686] loop9: p4 size 722688 extends beyond EOD, truncated [ 1863.347160][ T9686] overlayfs: missing 'lowerdir' [ 1863.406206][ T9403] udevd[9403]: symlink '../../loop9' '/dev/disk/by-diskseq/378.tmp-b7:9' failed: Read-only file system [ 1863.735315][ T9403] udevd[9403]: symlink '../../loop9' '/dev/disk/by-diskseq/378.tmp-b7:9' failed: Read-only file system [ 1863.999658][ T9471] udevd[9471]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 1864.011114][ T9403] udevd[9403]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1864.088262][ T9697] overlayfs: failed to clone upperpath [ 1864.125328][ T9697] overlayfs: failed to clone upperpath [ 1865.842440][ T9731] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1865.940178][ T9731] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1865.977056][ T7398] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1866.074084][ T788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1866.281848][ T9740] overlayfs: missing 'lowerdir' [ 1866.567335][ T7398] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1866.941725][ T9762] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7916'. [ 1866.996418][ T9762] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7916'. [ 1867.036017][ T9762] device bridge0 left promiscuous mode [ 1867.057176][ T9762] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7916'. [ 1867.255681][ T9779] netlink: 100 bytes leftover after parsing attributes in process `syz.9.7924'. [ 1867.265266][ T9779] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7924'. [ 1867.274739][ T9779] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7924'. [ 1867.283817][ T9779] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7924'. [ 1867.819693][ T9809] overlayfs: missing 'lowerdir' [ 1869.134947][ T9816] loop9: detected capacity change from 0 to 33280 [ 1869.193217][ T9816] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1869.215248][ T9791] udevd[9791]: symlink '../../loop9' '/dev/disk/by-diskseq/380.tmp-b7:9' failed: Read-only file system [ 1869.254335][ T9816] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1869.284806][ T9791] udevd[9791]: symlink '../../loop9' '/dev/disk/by-uuid/00000000-0000-0000-0008-000000000000.tmp-b7:9' failed: Read-only file system [ 1869.323620][ T9816] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1869.447274][ T9816] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.7937: bg 0: block 248: padding at end of block bitmap is not set [ 1870.130027][ T9833] tipc: Enabled bearer , priority 0 [ 1870.215079][ T9816] Quota error (device loop9): write_blk: dquota write failed [ 1870.243968][ T9833] tipc: New replicast peer: 255.255.255.255 [ 1870.254187][ T9816] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1870.267243][ T9833] tipc: Enabled bearer , priority 10 [ 1870.273787][ T9816] EXT4-fs error (device loop9): ext4_acquire_dquot:6828: comm syz.9.7937: Failed to acquire dquot type 1 [ 1870.293932][ T9816] EXT4-fs (loop9): 1 truncate cleaned up [ 1870.307509][ T9816] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1870.377991][ T9791] udevd[9791]: symlink '../../loop9' '/dev/disk/by-diskseq/380.tmp-b7:9' failed: Read-only file system [ 1870.417819][ T9791] udevd[9791]: symlink '../../loop9' '/dev/disk/by-uuid/00000000-0000-0000-0008-000000000000.tmp-b7:9' failed: Read-only file system [ 1871.339109][ T1498] Quota error (device loop9): do_check_range: Getting block 0 out of range 1-5 [ 1871.368462][ T1498] EXT4-fs error (device loop9): ext4_release_dquot:6864: comm kworker/u4:14: Failed to release dquot type 1 [ 1871.426063][ T9850] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 1871.481115][ T2260] EXT4-fs (loop9): unmounting filesystem. [ 1871.499259][ T9791] udevd[9791]: symlink '../../loop9' '/dev/disk/by-diskseq/380.tmp-b7:9' failed: Read-only file system [ 1871.520074][ T9847] syz.6.7948 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1871.529780][ T9847] CPU: 1 PID: 9847 Comm: syz.6.7948 Tainted: G W syzkaller #0 [ 1871.538674][ T9847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1871.548773][ T9847] Call Trace: [ 1871.552091][ T9847] [ 1871.555058][ T9847] __dump_stack+0x21/0x24 [ 1871.559437][ T9847] dump_stack_lvl+0x110/0x170 [ 1871.564165][ T9847] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1871.569233][ T9847] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1871.571272][ T9791] udevd[9791]: symlink '../../loop9' '/dev/disk/by-diskseq/380.tmp-b7:9' failed: Read-only file system [ 1871.575087][ T9847] ? ___ratelimit+0x40a/0x590 [ 1871.590864][ T9847] dump_stack+0x15/0x24 [ 1871.595070][ T9847] dump_header+0xdb/0x660 [ 1871.599527][ T9847] ? __cfi_gfp_zone+0x10/0x10 [ 1871.604253][ T9847] oom_kill_process+0x32a/0x410 [ 1871.609248][ T9847] ? kvm_sched_clock_read+0x18/0x40 [ 1871.614504][ T9847] out_of_memory+0x630/0x930 [ 1871.619142][ T9847] ? __cfi_out_of_memory+0x10/0x10 [ 1871.624302][ T9847] mem_cgroup_out_of_memory+0x2be/0x390 [ 1871.628030][ T9852] ip_tables: iptables: counters copy to user failed while replacing table [ 1871.629960][ T9847] ? __kasan_check_write+0x14/0x20 [ 1871.643644][ T9847] ? mem_cgroup_oom_trylock+0x360/0x360 [ 1871.649251][ T9847] try_charge_memcg+0xb8a/0x1650 [ 1871.654353][ T9847] ? enqueue_task_fair+0x18d8/0x1d70 [ 1871.659682][ T9847] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 1871.665108][ T9847] ? __alloc_pages+0x610/0x610 [ 1871.670040][ T9847] ? __cfi_gfp_zone+0x10/0x10 [ 1871.674828][ T9847] ? cgroup_rstat_updated+0xf0/0x360 [ 1871.680240][ T9847] ? __alloc_pages+0x1fa/0x610 [ 1871.685066][ T9847] charge_memcg+0x81/0x1f0 [ 1871.689534][ T9847] __mem_cgroup_charge+0x93/0x290 [ 1871.694623][ T9847] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 1871.700328][ T9847] handle_mm_fault+0x1a12/0x26b0 [ 1871.705398][ T9847] ? __cfi_handle_mm_fault+0x10/0x10 [ 1871.710732][ T9847] ? lock_mm_and_find_vma+0x9e/0x320 [ 1871.716077][ T9847] do_user_addr_fault+0x61e/0x1030 [ 1871.721251][ T9847] exc_page_fault+0x51/0xb0 [ 1871.723411][ T9856] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7950'. [ 1871.725800][ T9847] asm_exc_page_fault+0x27/0x30 [ 1871.739615][ T9847] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 1871.746261][ T9847] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 1871.766103][ T9847] RSP: 0018:ffffc9000adc7b00 EFLAGS: 00050246 [ 1871.772221][ T9847] RAX: ffffffff82677e01 RBX: 0000000000000040 RCX: 0000000000000040 [ 1871.780239][ T9847] RDX: 0000000000000040 RSI: ffffc9000adc7d20 RDI: 0000200000c2c000 [ 1871.788258][ T9847] RBP: ffffc9000adc7b30 R08: ffffc9000adc7d5f R09: 1ffff920015b8fab [ 1871.796318][ T9847] R10: dffffc0000000000 R11: fffff520015b8fac R12: 00007fffffffefc0 [ 1871.804337][ T9847] R13: 0000000000000000 R14: 0000200000c2c000 R15: ffffc9000adc7d20 [ 1871.812365][ T9847] ? copyout+0x61/0xa0 [ 1871.816525][ T9847] ? copyout+0x82/0xa0 [ 1871.820677][ T9847] _copy_to_iter+0x3ce/0xe60 [ 1871.825327][ T9847] ? __cfi__copy_to_iter+0x10/0x10 [ 1871.830502][ T9847] ? get_random_bytes_user+0x180/0x3b0 [ 1871.836087][ T9847] get_random_bytes_user+0x1cd/0x3b0 [ 1871.841415][ T9847] ? mix_interrupt_randomness+0x270/0x270 [ 1871.847207][ T9847] ? import_single_range+0xce/0x280 [ 1871.852450][ T9847] __x64_sys_getrandom+0x1a2/0x2a0 [ 1871.857601][ T9847] ? __cfi___x64_sys_getrandom+0x10/0x10 [ 1871.863295][ T9847] ? xfd_validate_state+0x70/0x150 [ 1871.868443][ T9847] ? __kasan_check_write+0x14/0x20 [ 1871.873590][ T9847] ? fpregs_restore_userregs+0x128/0x260 [ 1871.879271][ T9847] ? switch_fpu_return+0xe/0x10 [ 1871.884164][ T9847] x64_sys_call+0x25f/0x9a0 [ 1871.888717][ T9847] do_syscall_64+0x4c/0xa0 [ 1871.893170][ T9847] ? clear_bhb_loop+0x30/0x80 [ 1871.897886][ T9847] ? clear_bhb_loop+0x30/0x80 [ 1871.902631][ T9847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1871.908992][ T9847] RIP: 0033:0x7f868c1a94d9 [ 1871.914427][ T9847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1871.934335][ T9847] RSP: 002b:00007f868cfdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1871.942783][ T9847] RAX: ffffffffffffffda RBX: 00007f868c425fa0 RCX: 00007f868c1a94d9 [ 1871.950804][ T9847] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000a80 [ 1871.958793][ T9847] RBP: 00007f868c23804e R08: 0000000000000000 R09: 0000000000000000 [ 1871.966785][ T9847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1871.974775][ T9847] R13: 00007f868c426038 R14: 00007f868c425fa0 R15: 00007ffd1f7231b8 [ 1871.982774][ T9847] [ 1871.985948][ T9847] memory: usage 302536kB, limit 307200kB, failcnt 10523 [ 1871.992975][ T9847] memory+swap: usage 364140kB, limit 9007199254740988kB, failcnt 0 [ 1872.000957][ T9847] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1872.007999][ T9847] Memory cgroup stats for /syz6: [ 1872.008189][ T9847] anon 12972032 [ 1872.008189][ T9847] file 247128064 [ 1872.008189][ T9847] kernel 0 [ 1872.008189][ T9847] kernel_stack 0 [ 1872.008189][ T9847] pagetables 0 [ 1872.008189][ T9847] sec_pagetables 0 [ 1872.008189][ T9847] percpu 0 [ 1872.008189][ T9847] sock 0 [ 1872.008189][ T9847] vmalloc 0 [ 1872.008189][ T9847] shmem 247128064 [ 1872.008189][ T9847] file_mapped 4096 [ 1872.008189][ T9847] file_dirty 0 [ 1872.008189][ T9847] file_writeback 42496000 [ 1872.008189][ T9847] swapcached 49696768 [ 1872.008189][ T9847] anon_thp 0 [ 1872.008189][ T9847] file_thp 0 [ 1872.008189][ T9847] shmem_thp 0 [ 1872.008189][ T9847] inactive_anon 94986240 [ 1872.008189][ T9847] active_anon 214810624 [ 1872.008189][ T9847] inactive_file 0 [ 1872.008189][ T9847] active_file 0 [ 1872.008189][ T9847] unevictable 0 [ 1872.008189][ T9847] slab_reclaimable 0 [ 1872.008189][ T9847] slab_unreclaimable 0 [ 1872.008189][ T9847] slab 0 [ 1872.008189][ T9847] workingset_refault_anon 24 [ 1872.102533][ T9847] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.7948,pid=9844,uid=0 [ 1872.117477][ T9847] Memory cgroup out of memory: Killed process 9844 (syz.6.7948) total-vm:194440kB, anon-rss:13836kB, file-rss:21656kB, shmem-rss:4kB, UID:0 pgtables:152kB oom_score_adj:0 [ 1872.450952][ T9896] loop9: detected capacity change from 0 to 33792 [ 1872.539397][ T9896] EXT4-fs: Ignoring removed bh option [ 1872.789270][ T9896] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1872.933540][ T9791] udevd[9791]: symlink '../../loop9' '/dev/disk/by-diskseq/382.tmp-b7:9' failed: Read-only file system [ 1872.969831][ T28] audit: type=1400 audit(2000000000.450:10448): avc: denied { mounton } for pid=9895 comm="syz.9.7969" path="/550/file1/bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1873.047878][ T9896] Trying to write to read-only block-device loop9 [ 1873.283410][ T9791] udevd[9791]: symlink '../../loop9' '/dev/disk/by-uuid/00000000-0000-0000-0000-001000000000.tmp-b7:9' failed: Read-only file system [ 1873.307329][ T9896] Trying to write to read-only block-device loop9 [ 1873.380624][ T2629] Trying to write to read-only block-device loop9 [ 1873.387359][ T2629] Trying to write to read-only block-device loop9 [ 1873.393832][ T2629] Trying to write to read-only block-device loop9 [ 1873.400363][ T2629] Trying to write to read-only block-device loop9 [ 1873.406824][ T2629] Trying to write to read-only block-device loop9 [ 1873.413329][ T2629] Trying to write to read-only block-device loop9 [ 1873.419817][ T2629] Trying to write to read-only block-device loop9 [ 1873.426281][ T2629] Trying to write to read-only block-device loop9 [ 1873.434622][ T2629] EXT4-fs (loop9): unmounting filesystem. [ 1873.477845][ T9791] udevd[9791]: symlink '../../loop9' '/dev/disk/by-diskseq/382.tmp-b7:9' failed: Read-only file system [ 1873.540791][ T9791] udevd[9791]: symlink '../../loop9' '/dev/disk/by-uuid/00000000-0000-0000-0000-001000000000.tmp-b7:9' failed: Read-only file system [ 1876.365703][ T9951] overlayfs: missing 'lowerdir' [ 1877.471283][ T9935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1877.499963][ T9935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1877.527517][ T9935] device bridge_slave_0 entered promiscuous mode [ 1877.547638][ T9935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1877.554748][ T9935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1877.592499][ T9935] device bridge_slave_1 entered promiscuous mode [ 1877.617665][ T1498] device bridge_slave_1 left promiscuous mode [ 1877.623956][ T1498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1877.642099][ T1498] device bridge_slave_0 left promiscuous mode [ 1877.651760][ T1498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1877.677110][ T1498] device veth1_macvtap left promiscuous mode [ 1877.687326][ T1498] device veth0_vlan left promiscuous mode [ 1878.031808][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7998'. [ 1880.573958][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1880.587180][T10011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10011 comm=syz.7.8011 [ 1880.600652][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1880.614986][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1880.623912][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1880.632600][ T482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1880.639712][ T482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1880.677182][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1880.694197][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1880.712722][ T482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1880.719855][ T482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1880.747468][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1880.758772][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1880.776724][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1880.786352][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1880.795381][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1880.810687][ T9935] device veth0_vlan entered promiscuous mode [ 1880.822581][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1880.837982][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1880.848454][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1880.856619][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1880.882810][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1880.890562][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1880.911052][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1880.931251][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1880.942312][ T9935] device veth1_macvtap entered promiscuous mode [ 1880.954220][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1881.024476][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1881.033704][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1881.062184][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1881.080254][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1883.876707][T10157] overlayfs: missing 'workdir' [ 1886.059411][T10198] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1886.068672][T10198] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1886.808403][T10213] device syzkaller1 entered promiscuous mode [ 1887.117689][T10230] overlayfs: failed to clone upperpath [ 1887.196075][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8085'. [ 1887.470732][T10270] overlayfs: failed to clone upperpath [ 1887.575469][ T28] audit: type=1326 audit(2000000004.940:10449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.6.8073" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c1a94d9 code=0x7fc00000 [ 1888.850592][T10325] overlayfs: failed to clone upperpath [ 1889.104314][T10341] netlink: 6 bytes leftover after parsing attributes in process `syz.0.8131'. [ 1891.612847][T10369] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1891.621730][T10369] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1894.171728][ T28] audit: type=1400 audit(2000000011.540:10450): avc: denied { mount } for pid=10419 comm="syz.1.8159" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1894.578211][T10433] netlink: 'syz.6.8165': attribute type 4 has an invalid length. [ 1894.627878][T10433] netlink: 'syz.6.8165': attribute type 4 has an invalid length. [ 1895.842483][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8181'. [ 1896.010382][T10497] netlink: 'syz.1.8184': attribute type 30 has an invalid length. [ 1896.924610][T10530] xt_hashlimit: size too large, truncated to 1048576 [ 1897.314994][T10535] netlink: 'syz.1.8197': attribute type 11 has an invalid length. [ 1899.716645][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8218'. [ 1901.118590][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8228'. [ 1902.134838][T10655] bpf getsockopt: ignoring program buffer with optlen=809329267 (max_optlen=4096) [ 1902.363111][T10664] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8245'. [ 1902.496303][T10685] ip_tables: iptables: counters copy to user failed while replacing table [ 1903.726693][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8261'. [ 1904.667422][T31183] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1905.077332][T31183] usb 1-1: device descriptor read/64, error -71 [ 1905.367215][T31183] usb 1-1: device descriptor read/64, error -71 [ 1905.997199][T31183] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1907.597384][T10798] ./dev/sda1: Can't open blockdev [ 1907.778296][ T28] audit: type=1400 audit(2000000025.150:10451): avc: denied { open } for pid=10820 comm="syz.1.8297" path="/1716/file0" dev="tmpfs" ino=9215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1909.118112][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8315'. [ 1909.495106][T10913] netlink: 'syz.0.8328': attribute type 1 has an invalid length. [ 1909.777295][T31183] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1909.997055][T31183] usb 1-1: Using ep0 maxpacket: 32 [ 1910.026746][T31183] usb 1-1: New USB device found, idVendor=2040, idProduct=b701, bcdDevice=46.e3 [ 1910.139810][T31183] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.242250][T31183] usb 1-1: Product: syz [ 1910.297287][T31183] usb 1-1: Manufacturer: syz [ 1910.475475][T31183] usb 1-1: SerialNumber: syz [ 1910.493849][T31183] usb 1-1: config 0 descriptor?? [ 1910.723316][T31183] usb 1-1: USB disconnect, device number 5 [ 1911.185370][T10944] mmap: syz.6.8338 (10944): VmData 167616512 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1911.689966][T10958] bridge0: port 1(syz_tun) entered blocking state [ 1911.732699][T10958] bridge0: port 1(syz_tun) entered disabled state [ 1911.929822][T10958] device syz_tun entered promiscuous mode [ 1912.197863][T10958] bridge0: port 1(syz_tun) entered blocking state [ 1912.204489][T10958] bridge0: port 1(syz_tun) entered forwarding state [ 1914.958655][T10995] tipc: Failed to remove unknown binding: 66,0,0/7:3073746714/3073746715 [ 1914.968051][T10995] tipc: Failed to remove unknown binding: 66,0,0/7:3073746714/3073746715 [ 1914.983379][ T7398] kernel read not supported for file [userfaultfd] (pid: 7398 comm: kworker/1:3) [ 1914.992694][ T28] audit: type=1400 audit(2000000032.350:10452): avc: denied { read } for pid=7398 comm="kworker/1:3" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=90535 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1916.124605][ T28] audit: type=1326 audit(2000000033.490:10453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.6.8357" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c1a94d9 code=0x7fc00000 [ 1916.470056][T11034] overlayfs: './file0' not a directory [ 1916.722479][T10891] syz.7.8313 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1916.765035][T10891] CPU: 1 PID: 10891 Comm: syz.7.8313 Tainted: G W syzkaller #0 [ 1916.774042][T10891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1916.784145][T10891] Call Trace: [ 1916.787470][T10891] [ 1916.790437][T10891] __dump_stack+0x21/0x24 [ 1916.794837][T10891] dump_stack_lvl+0x110/0x170 [ 1916.799560][T10891] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1916.804627][T10891] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1916.810476][T10891] ? ___ratelimit+0x40a/0x590 [ 1916.815212][T10891] dump_stack+0x15/0x24 [ 1916.819416][T10891] dump_header+0xdb/0x660 [ 1916.823793][T10891] ? __cfi_gfp_zone+0x10/0x10 [ 1916.828516][T10891] oom_kill_process+0x32a/0x410 [ 1916.833422][T10891] ? kvm_sched_clock_read+0x18/0x40 [ 1916.838674][T10891] out_of_memory+0x630/0x930 [ 1916.843319][T10891] ? __cfi_out_of_memory+0x10/0x10 [ 1916.848482][T10891] mem_cgroup_out_of_memory+0x2be/0x390 [ 1916.854069][T10891] ? __kasan_check_write+0x14/0x20 [ 1916.859232][T10891] ? mem_cgroup_oom_trylock+0x360/0x360 [ 1916.864837][T10891] try_charge_memcg+0xb8a/0x1650 [ 1916.869852][T10891] ? mem_cgroup_swap_full+0x1a0/0x1a0 [ 1916.875284][T10891] ? __asan_set_shadow_00+0xe/0x10 [ 1916.880452][T10891] ? shmem_alloc_and_acct_folio+0x848/0x8c0 [ 1916.886483][T10891] charge_memcg+0x81/0x1f0 [ 1916.890947][T10891] __mem_cgroup_charge+0x93/0x290 [ 1916.896016][T10891] ? xas_start+0x31d/0x3e0 [ 1916.900481][T10891] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 1916.906166][T10891] ? xas_load+0x3a2/0x3c0 [ 1916.910679][T10891] shmem_add_to_page_cache+0x5b1/0xae0 [ 1916.916193][T10891] ? put_page+0xb0/0xb0 [ 1916.920480][T10891] ? __asan_set_shadow_00+0xe/0x10 [ 1916.925637][T10891] shmem_get_folio_gfp+0xef9/0x20f0 [ 1916.930901][T10891] ? xas_find+0x6ec/0x820 [ 1916.935312][T10891] shmem_fault+0x1ab/0x670 [ 1916.939790][T10891] ? __cfi_shmem_fault+0x10/0x10 [ 1916.944792][T10891] ? __kasan_check_write+0x14/0x20 [ 1916.949947][T10891] ? vma_data_pages+0xfc/0x130 [ 1916.954778][T10891] do_fault+0x19de/0x1e30 [ 1916.959233][T10891] ? pte_marker_clear+0x220/0x220 [ 1916.964332][T10891] ? copy_page_from_iter_atomic+0xa1a/0x1240 [ 1916.970354][T10891] ? __cfi_memmove+0x1/0x10 [ 1916.974904][T10891] handle_mm_fault+0x1363/0x26b0 [ 1916.979870][T10891] ? __cfi_handle_mm_fault+0x10/0x10 [ 1916.985228][T10891] __get_user_pages+0x34b/0xdb0 [ 1916.990126][T10891] ? populate_vma_page_range+0x120/0x120 [ 1916.995800][T10891] get_dump_page+0x169/0x640 [ 1917.000433][T10891] ? __cfi_get_dump_page+0x10/0x10 [ 1917.005679][T10891] dump_user_range+0x123/0x630 [ 1917.010584][T10891] ? __cfi_dump_user_range+0x10/0x10 [ 1917.015959][T10891] ? dump_align+0xfe/0x120 [ 1917.020432][T10891] ? dump_emit+0xa8/0xc0 [ 1917.024715][T10891] elf_core_dump+0x2b60/0x30b0 [ 1917.029610][T10891] ? __cfi_elf_core_dump+0x10/0x10 [ 1917.034777][T10891] ? dump_interrupted+0xd0/0xd0 [ 1917.039659][T10891] ? filp_open+0x195/0x1e0 [ 1917.044116][T10891] ? 0xffffffffff600000 [ 1917.048302][T10891] do_coredump+0x160e/0x23a0 [ 1917.052929][T10891] ? __cfi_do_coredump+0x10/0x10 [ 1917.057932][T10891] ? kmem_cache_free+0x12d/0x300 [ 1917.062920][T10891] ? ____kasan_slab_free+0x13d/0x180 [ 1917.068250][T10891] ? get_signal+0xac2/0x1700 [ 1917.072897][T10891] ? kmem_cache_free+0x12d/0x300 [ 1917.078013][T10891] get_signal+0x157d/0x1700 [ 1917.082580][T10891] ? __cfi_get_signal+0x10/0x10 [ 1917.087512][T10891] arch_do_signal_or_restart+0xd1/0x11c0 [ 1917.093198][T10891] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 1917.099097][T10891] ? force_sig_fault+0xd9/0x130 [ 1917.104182][T10891] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1917.110470][T10891] ? page_fault_oops+0x8b0/0x8b0 [ 1917.115457][T10891] ? __bad_area_nosemaphore+0x303/0x630 [ 1917.121039][T10891] exit_to_user_mode_loop+0x7a/0xb0 [ 1917.126275][T10891] exit_to_user_mode_prepare+0x87/0xd0 [ 1917.131766][T10891] irqentry_exit_to_user_mode+0x9/0x10 [ 1917.137263][T10891] irqentry_exit+0x12/0x40 [ 1917.141739][T10891] exc_page_fault+0x5e/0xb0 [ 1917.146276][T10891] asm_exc_page_fault+0x27/0x30 [ 1917.151163][T10891] RIP: 0033:0x7f787c054db7 [ 1917.155614][T10891] Code: e8 fe f9 ff ff 89 f2 48 8d 3d ad 5d 1b 00 48 8d 35 a2 28 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 1917.175257][T10891] RSP: 002b:00007f787cf92120 EFLAGS: 00010202 [ 1917.181360][T10891] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f787c1a94d9 [ 1917.189362][T10891] RDX: 00007f787cf92140 RSI: 00007f787cf92270 RDI: 000000000000000b [ 1917.197390][T10891] RBP: 00007f787c23804e R08: 0000000000000000 R09: 0000000000000000 [ 1917.205385][T10891] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1917.213388][T10891] R13: 00007f787c426128 R14: 00007f787c426090 R15: 00007ffe109d5178 [ 1917.221395][T10891] [ 1917.237967][ T28] audit: type=1326 audit(2000000034.600:10454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.6.8357" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f868c1a3257 code=0x7fc00000 [ 1917.364676][T10891] memory: usage 304820kB, limit 307200kB, failcnt 4604 [ 1917.371822][T10891] memory+swap: usage 320528kB, limit 9007199254740988kB, failcnt 0 [ 1917.382466][ T28] audit: type=1326 audit(2000000034.600:10455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.6.8357" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f868c141719 code=0x7fc00000 [ 1917.384339][T10891] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1917.502039][T10891] Memory cgroup stats for /syz7: [ 1917.502648][T10891] anon 27926528 [ 1917.502648][T10891] file 278732800 [ 1917.502648][T10891] kernel 0 [ 1917.502648][T10891] kernel_stack 0 [ 1917.502648][T10891] pagetables 0 [ 1917.502648][T10891] sec_pagetables 0 [ 1917.502648][T10891] percpu 0 [ 1917.502648][T10891] sock 0 [ 1917.502648][T10891] vmalloc 0 [ 1917.502648][T10891] shmem 278732800 [ 1917.502648][T10891] file_mapped 104579072 [ 1917.502648][T10891] file_dirty 0 [ 1917.502648][T10891] file_writeback 0 [ 1917.502648][T10891] swapcached 622592 [ 1917.502648][T10891] anon_thp 0 [ 1917.502648][T10891] file_thp 0 [ 1917.502648][T10891] shmem_thp 0 [ 1917.502648][T10891] inactive_anon 174686208 [ 1917.502648][T10891] active_anon 132657152 [ 1917.502648][T10891] inactive_file 0 [ 1917.502648][T10891] active_file 0 [ 1917.502648][T10891] unevictable 0 [ 1917.502648][T10891] slab_reclaimable 0 [ 1917.502648][T10891] slab_unreclaimable 0 [ 1917.502648][T10891] slab 0 [ 1917.502648][T10891] workingset_refault_anon 857 [ 1917.538831][ T28] audit: type=1326 audit(2000000034.600:10456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.6.8357" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f868c1417dd code=0x7fc00000 [ 1917.810736][T10891] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.8313,pid=10891,uid=0 [ 1917.825784][T10891] Memory cgroup out of memory: Killed process 10891 (syz.7.8313) total-vm:194572kB, anon-rss:1568kB, file-rss:20608kB, shmem-rss:102036kB, UID:0 pgtables:300kB oom_score_adj:0 [ 1917.946477][ T28] audit: type=1326 audit(2000000034.600:10457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11000 comm="syz.6.8357" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f868c1a94d9 code=0x7fc00000 [ 1920.058498][T11089] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1924.203980][T11176] xt_hashlimit: size too large, truncated to 1048576 [ 1924.643708][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8423'. [ 1925.520321][T11226] netlink: 'syz.6.8434': attribute type 5 has an invalid length. [ 1925.606991][ T7398] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1925.798152][ T7398] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1925.808384][ T7398] usb 1-1: config 0 has no interfaces? [ 1925.813933][ T7398] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1925.823519][ T7398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.832608][ T7398] usb 1-1: config 0 descriptor?? [ 1926.785407][T31183] usb 1-1: USB disconnect, device number 6 [ 1927.552870][T11306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8466'. [ 1927.564283][T11306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8466'. [ 1927.688362][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8467'. [ 1929.023655][T11336] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8473'. [ 1930.779138][T11370] futex_wake_op: syz.6.8485 tries to shift op by 144; fix this program [ 1933.081494][T11413] 9pnet: p9_errstr2errno: server reported unknown error #\,7 [ 1934.005461][T11440] xt_hashlimit: size too large, truncated to 1048576 [ 1934.776383][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8523'. [ 1938.465136][ T28] audit: type=1400 audit(2000000013.990:10458): avc: denied { checkpoint_restore } for pid=11557 comm="syz.0.8546" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1940.697415][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8559'. [ 1940.771516][T11606] ip_tables: iptables: counters copy to user failed while replacing table [ 1941.107929][T11631] device syzkaller0 entered promiscuous mode [ 1944.468560][T11686] ip_tables: iptables: counters copy to user failed while replacing table [ 1944.610439][T11704] futex_wake_op: syz.6.8599 tries to shift op by 144; fix this program [ 1945.762110][T11717] futex_wake_op: syz.0.8603 tries to shift op by 144; fix this program [ 1945.975788][T11736] overlayfs: empty lowerdir [ 1946.280785][ T28] audit: type=1400 audit(2000000021.800:10459): avc: denied { unmount } for pid=11751 comm="syz.7.8614" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 1946.306309][T11755] bridge0: port 2(dummy0) entered blocking state [ 1946.313493][T11755] bridge0: port 2(dummy0) entered disabled state [ 1946.999157][T11762] futex_wake_op: syz.8.8617 tries to shift op by 144; fix this program [ 1947.293267][ T28] audit: type=1400 audit(2000000022.830:10460): avc: denied { remount } for pid=11769 comm="syz.6.8619" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1948.847386][ T28] audit: type=1400 audit(2000000024.390:10461): avc: denied { mounton } for pid=11788 comm="syz.0.8624" path="/proc/325/task" dev="proc" ino=93668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1950.210131][T11862] ip_tables: iptables: counters copy to user failed while replacing table [ 1950.384976][T11870] ip_tables: iptables: counters copy to user failed while replacing table [ 1951.625895][T11881] tipc: New replicast peer: 255.255.255.255 [ 1951.648882][T11881] tipc: Enabled bearer , priority 10 [ 1951.757597][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8654'. [ 1951.956183][T11886] futex_wake_op: syz.0.8656 tries to shift op by 144; fix this program [ 1953.157388][T11891] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1953.190890][T11891] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 1959.220012][T12003] futex_wake_op: syz.7.8697 tries to shift op by 144; fix this program [ 1959.969942][T12016] futex_wake_op: syz.6.8699 tries to shift op by 144; fix this program [ 1960.451966][T12032] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12032 comm=syz.8.8708 [ 1960.466330][T12032] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12032 comm=syz.8.8708 [ 1962.301888][ T28] audit: type=1326 audit(2000000003.620:10462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12052 comm="syz.7.8714" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f787c1a94d9 code=0x0 [ 1962.645410][T12062] overlayfs: failed to clone upperpath [ 1962.677370][ T28] audit: type=1326 audit(2000000004.000:10463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12052 comm="syz.7.8714" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f787c1a94d9 code=0x0 [ 1963.876967][T12064] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8715'. [ 1965.745236][T12085] tipc: New replicast peer: 255.255.255.255 [ 1965.843619][T12083] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1965.917268][T12083] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1965.929078][T12083] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1967.324795][T12108] tipc: Enabling of bearer rejected, failed to enable media [ 1967.843751][T12115] tipc: Enabling of bearer rejected, already enabled [ 1967.856581][T12115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8733'. [ 1971.537206][ T28] audit: type=1326 audit(2000000012.800:10464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12142 comm="syz.6.8743" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c1a94d9 code=0x7ffc0000 [ 1971.770542][ T28] audit: type=1326 audit(2000000012.800:10465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12142 comm="syz.6.8743" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c1a94d9 code=0x7ffc0000 [ 1971.795776][ T28] audit: type=1326 audit(2000000012.800:10466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12142 comm="syz.6.8743" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f868c1a94d9 code=0x7ffc0000 [ 1971.837175][ T28] audit: type=1326 audit(2000000012.800:10467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12142 comm="syz.6.8743" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c1a94d9 code=0x7ffc0000 [ 1971.867611][T12145] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8744'. [ 1971.886934][T12145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8744'. [ 1971.921679][ T28] audit: type=1326 audit(2000000012.800:10468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12142 comm="syz.6.8743" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c1a94d9 code=0x7ffc0000 [ 1972.247293][T12157] futex_wake_op: syz.1.8748 tries to shift op by 144; fix this program [ 1973.920136][T12168] ip_tables: iptables: counters copy to user failed while replacing table [ 1973.971485][T12173] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8754'. [ 1973.988066][T12173] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8754'. [ 1974.316648][ T28] audit: type=1400 audit(2000000015.630:10469): avc: denied { create } for pid=12174 comm="syz.0.8755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1976.228504][T12223] bridge0: port 1(veth1_macvtap) entered blocking state [ 1976.235639][T12223] bridge0: port 1(veth1_macvtap) entered disabled state [ 1976.247055][T12223] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 1976.568123][T12222] futex_wake_op: syz.0.8764 tries to shift op by 144; fix this program [ 1976.621581][T12228] tipc: New replicast peer: 255.255.255.255 [ 1976.628089][T12228] tipc: Enabled bearer , priority 10 [ 1976.635332][T12228] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8769'. [ 1978.308630][ T28] audit: type=1326 audit(2000000019.630:10470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.6.8774" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c1a94d9 code=0x7fc00000 [ 1979.506974][ T28] audit: type=1326 audit(2000000020.800:10471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12244 comm="syz.6.8774" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868c1a94d9 code=0x7fc00000 [ 1980.808389][T12276] device veth1_macvtap left promiscuous mode [ 1981.550399][T12289] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8788'. [ 1987.947552][ T28] audit: type=1326 audit(2000000029.230:10472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12357 comm="syz.7.8810" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1988.154413][ T28] audit: type=1326 audit(2000000029.230:10473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12357 comm="syz.7.8810" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1988.180003][ T28] audit: type=1326 audit(2000000029.230:10474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12357 comm="syz.7.8810" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1988.205146][ T28] audit: type=1326 audit(2000000029.230:10475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12357 comm="syz.7.8810" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1988.242093][ T28] audit: type=1326 audit(2000000029.230:10476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12357 comm="syz.7.8810" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1988.267149][ T28] audit: type=1326 audit(2000000029.230:10477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12357 comm="syz.7.8810" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1988.293906][ T28] audit: type=1326 audit(2000000029.230:10478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12357 comm="syz.7.8810" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1988.319265][ T28] audit: type=1326 audit(2000000029.230:10479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12357 comm="syz.7.8810" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1988.344965][ T28] audit: type=1326 audit(2000000029.240:10480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12357 comm="syz.7.8810" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1988.378226][ T28] audit: type=1326 audit(2000000029.240:10481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12357 comm="syz.7.8810" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787c1a94d9 code=0x7ffc0000 [ 1988.432299][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8814'. [ 1989.087144][T12383] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8815'. [ 1989.105287][T10089] tipc: Subscription rejected, illegal request [ 1989.190298][T12383] netlink: 'syz.7.8815': attribute type 27 has an invalid length. [ 1989.276644][T12383] device lo entered promiscuous mode [ 1989.282136][T12383] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1989.296065][T12383] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1989.331285][T12383] device tunl0 entered promiscuous mode [ 1989.353080][T12383] device gre0 entered promiscuous mode [ 1989.363756][T12383] device erspan0 entered promiscuous mode [ 1989.386125][T12383] device ip_vti0 entered promiscuous mode [ 1989.422924][T12383] device ip6_vti0 entered promiscuous mode [ 1989.429365][T12383] device sit0 entered promiscuous mode [ 1989.445530][T12383] device ip6tnl0 entered promiscuous mode [ 1989.455572][T12383] device ip6gre0 entered promiscuous mode [ 1989.476109][T12383] device ip6gretap0 entered promiscuous mode [ 1989.483766][T12383] device veth0 entered promiscuous mode [ 1989.497465][T12383] device veth1 entered promiscuous mode [ 1989.513657][T12383] device wg1 entered promiscuous mode [ 1989.523741][T12383] device wg2 entered promiscuous mode [ 1989.533872][T12383] device veth0_to_bridge entered promiscuous mode [ 1989.547313][T12383] device bridge_slave_0 entered promiscuous mode [ 1989.577672][T12383] device veth1_to_bridge entered promiscuous mode [ 1989.598697][T12383] device veth1_to_bond entered promiscuous mode [ 1989.608738][T12383] device bond_slave_1 entered promiscuous mode [ 1989.622845][T12383] device veth0_to_team entered promiscuous mode [ 1989.637708][T12383] device team_slave_0 entered promiscuous mode [ 1989.652004][T12383] device veth1_to_team entered promiscuous mode [ 1989.727377][T12383] device veth0_to_batadv entered promiscuous mode [ 1989.734259][T12383] device batadv_slave_0 entered promiscuous mode [ 1989.753250][T12383] device veth1_to_batadv entered promiscuous mode [ 1989.789092][T12383] device batadv_slave_1 entered promiscuous mode [ 1989.860640][T12383] device xfrm0 entered promiscuous mode [ 1989.980306][T12383] device veth0_to_hsr entered promiscuous mode [ 1990.061337][T12383] device hsr_slave_0 entered promiscuous mode [ 1990.100646][T12403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8823'. [ 1990.136530][T12383] device veth1_to_hsr entered promiscuous mode [ 1990.205512][T12383] device hsr_slave_1 entered promiscuous mode [ 1990.268085][T12383] device veth1_virt_wifi entered promiscuous mode [ 1990.333724][T12383] device veth0_virt_wifi entered promiscuous mode [ 1991.094301][T12383] device veth1_vlan entered promiscuous mode [ 1991.165459][T12383] device vlan1 entered promiscuous mode [ 1991.274107][T12383] device ip6erspan0 entered promiscuous mode [ 1991.293781][T12383] device vlan2 entered promiscuous mode [ 1991.306552][T12383] device bridge1 entered promiscuous mode [ 1991.319980][T12383] device vlan3 entered promiscuous mode [ 1991.332475][T12383] device syztnl0 entered promiscuous mode [ 1991.345014][T12383] device erspan0.1 entered promiscuous mode [ 1991.353149][T12383] device veth0_vlan.4093 entered promiscuous mode [ 1991.361546][T12383] device ip6gre1 entered promiscuous mode [ 1991.367950][T12383] device bridge0 entered promiscuous mode [ 1991.374053][T12383] device veth2 entered promiscuous mode [ 1991.380229][T12383] device veth3 entered promiscuous mode [ 1991.387792][T12383] device veth4 entered promiscuous mode [ 1991.393854][T12383] device veth5 entered promiscuous mode [ 1991.404135][T12383] device macsec1 entered promiscuous mode [ 1991.415386][T12383] device bridge2 entered promiscuous mode [ 1991.427955][T12383] device bridge3 entered promiscuous mode [ 1991.437948][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1991.448607][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1991.462008][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1993.916995][ T9043] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1995.629805][ T9043] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1995.639528][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 1995.639583][ T28] audit: type=1400 audit(2000000036.960:10497): avc: denied { read } for pid=12464 comm="syz.6.8841" name="file0" dev="tmpfs" ino=9650 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1995.669628][ T9043] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1995.689796][ T9043] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1995.716447][ T9043] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1995.743270][ T9043] usb 1-1: Product: syz [ 1995.756730][ T9043] usb 1-1: Manufacturer: syz [ 1995.772646][ T9043] usb 1-1: SerialNumber: syz [ 1997.294094][ T9043] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1997.305805][ T9043] usb 1-1: USB disconnect, device number 7 [ 1997.857491][T12447] udevd[12447]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1999.598807][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8860'. [ 2003.256207][T11411] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 2003.526933][T11411] usb 1-1: Using ep0 maxpacket: 16 [ 2003.533343][T11411] usb 1-1: config 1 has an invalid interface number: 113 but max is 0 [ 2003.970369][T11411] usb 1-1: config 1 has no interface number 0 [ 2004.000824][T11411] usb 1-1: config 1 interface 113 altsetting 2 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2004.120979][T11411] usb 1-1: config 1 interface 113 has no altsetting 0 [ 2004.148660][T11411] usb 1-1: New USB device found, idVendor=18cd, idProduct=cafe, bcdDevice=97.a1 [ 2004.491824][T11411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2004.577746][T11411] usb 1-1: Found UVC 0.00 device (18cd:cafe) [ 2004.654290][T11411] usb 1-1: No valid video chain found. [ 2004.798122][T11411] usb 1-1: USB disconnect, device number 8 [ 2008.265312][T12612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8884'. [ 2010.760838][ T28] audit: type=1400 audit(2000000052.060:10498): avc: denied { mounton } for pid=12634 comm="syz.0.8891" path="/157/proc_mnt/sys/net/ipv4/conf/lo/forwarding" dev="proc" ino=100436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 2011.087449][ T28] audit: type=1326 audit(2000000052.410:10499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12636 comm="syz.1.8892" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5971a94d9 code=0x7ffc0000 [ 2011.130842][ T28] audit: type=1326 audit(2000000052.410:10500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12636 comm="syz.1.8892" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5971a94d9 code=0x7ffc0000 [ 2011.160006][ T28] audit: type=1326 audit(2000000052.410:10501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12636 comm="syz.1.8892" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff5971a94d9 code=0x7ffc0000 [ 2011.186970][ T28] audit: type=1326 audit(2000000052.410:10502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12636 comm="syz.1.8892" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5971a94d9 code=0x7ffc0000 [ 2011.214247][ T28] audit: type=1326 audit(2000000052.410:10503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12636 comm="syz.1.8892" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5971a94d9 code=0x7ffc0000 [ 2011.287961][ T28] audit: type=1326 audit(2000000052.410:10504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12636 comm="syz.1.8892" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff597169d0e code=0x7ffc0000 [ 2011.336912][ T28] audit: type=1326 audit(2000000052.410:10505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12636 comm="syz.1.8892" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5971a94d9 code=0x7ffc0000 [ 2011.386898][ T28] audit: type=1326 audit(2000000052.410:10506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12636 comm="syz.1.8892" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5971a94d9 code=0x7ffc0000 [ 2017.283163][ T28] audit: type=1400 audit(2000000057.240:10507): avc: denied { write } for pid=9043 comm="kworker/0:4" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=99806 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 2019.150124][T12718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2020.880409][T12735] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 2021.790915][ T28] audit: type=1326 audit(2000000062.940:10508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12749 comm="syz.7.8921" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f787c1a94d9 code=0x0 [ 2023.339925][T12773] 9pnet_fd: Insufficient options for proto=fd [ 2023.728806][T12778] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8930'. [ 2025.419057][T12804] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12804 comm=syz.1.8939 [ 2025.661334][T12807] bridge0: port 1(erspan0) entered blocking state [ 2025.667862][T12807] bridge0: port 1(erspan0) entered disabled state [ 2025.674817][T12807] device erspan0 entered promiscuous mode [ 2025.683114][T12807] device erspan0 left promiscuous mode [ 2025.688819][T12807] bridge0: port 1(erspan0) entered disabled state [ 2027.949564][T12823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8945'. [ 2030.004012][T12856] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 2030.147912][T12859] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 2031.750389][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8954'. [ 2038.427997][T12935] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2038.436929][T12935] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 2038.445332][T12935] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2040.454761][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8978'. [ 2044.617558][T13004] : renamed from bond_slave_0 [ 2045.257565][T13011] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2046.956583][T13027] netlink: 68 bytes leftover after parsing attributes in process `syz.8.8992'. [ 2048.058674][ T28] audit: type=1400 audit(2000000002.080:10509): avc: denied { bind } for pid=13040 comm="syz.0.8996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2050.995515][T13067] ip_tables: iptables: counters copy to user failed while replacing table [ 2051.316923][ T28] audit: type=1400 audit(2000000004.980:10510): avc: denied { write } for pid=13063 comm="syz.0.9002" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2051.761137][T13077] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 2052.539386][T13092] netlink: 1 bytes leftover after parsing attributes in process `syz.1.9008'. [ 2053.731784][T13098] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2053.907301][ T28] audit: type=1400 audit(2000000007.930:10511): avc: denied { accept } for pid=13069 comm="syz.6.9003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 2057.661349][T13129] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9016'. [ 2058.859114][ T28] audit: type=1400 audit(2000000003.360:10512): avc: denied { create } for pid=13137 comm="syz.0.9020" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 2060.194448][T13144] ip_tables: iptables: counters copy to user failed while replacing table [ 2066.795013][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9031'. [ 2070.247203][T13227] ./dev/sda1: Can't open blockdev [ 2070.549698][T13234] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2076.355249][T13277] xt_hashlimit: size too large, truncated to 1048576 [ 2077.099099][T13284] 9pnet_fd: Insufficient options for proto=fd [ 2078.929992][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 2079.046735][T13297] device veth0_vlan left promiscuous mode [ 2079.057992][T13297] device veth0_vlan entered promiscuous mode [ 2079.117111][ T9043] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2079.157670][T13297] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 2079.197592][ T9043] ip6_tunnel:  xmit: Local address not yet configured! [ 2079.228714][ T1861] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2079.236587][ T1861] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2079.257096][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2079.265002][ T9043] ip6_tunnel:  xmit: Local address not yet configured! [ 2079.274228][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2079.290752][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2079.299948][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2079.308755][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2079.317587][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2079.326264][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): 30: link becomes ready [ 2079.334491][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2079.343725][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): c@0: link becomes ready [ 2079.361790][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2079.376784][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2079.499383][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2079.710209][ T9043] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2079.725603][ T9043] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2079.737639][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2079.746777][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2079.755767][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2079.764206][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2079.773017][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2079.781818][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2079.790665][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2079.805943][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2079.814980][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2079.824080][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2079.832784][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan.4: link becomes ready [ 2079.842481][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2079.851645][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2079.863428][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2080.489689][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 2080.568609][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2080.577118][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 2080.585207][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 2080.592992][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 2080.600861][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 2080.608715][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 2080.616359][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 2082.222291][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 2082.230618][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 2082.238600][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 2082.246419][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 2082.289312][ T1861] ip6_tunnel:  xmit: Local address not yet configured! [ 2082.296412][ T1861] ip6_tunnel:  xmit: Local address not yet configured! [ 2083.278712][ T1861] ip6_tunnel:  xmit: Local address not yet configured! [ 2086.383511][T13343] device lo left promiscuous mode [ 2086.389307][T13343] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2086.398197][T13343] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2086.407378][T13343] device tunl0 left promiscuous mode [ 2086.414273][T13343] device gre0 left promiscuous mode [ 2086.427061][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 2086.427072][T13343] device ip_vti0 left promiscuous mode [ 2086.427081][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 2086.447140][T13343] device ip6_vti0 left promiscuous mode [ 2086.454093][T13343] device sit0 left promiscuous mode [ 2086.460968][T13343] device ip6tnl0 left promiscuous mode [ 2086.467678][T13343] device ip6gre0 left promiscuous mode [ 2086.476122][T13343] device ip6gretap0 left promiscuous mode [ 2086.494839][T13343] device veth0 left promiscuous mode [ 2086.501866][T13343] device veth1 left promiscuous mode [ 2086.508640][T13343] device wg1 left promiscuous mode [ 2086.515139][T13343] device wg2 left promiscuous mode [ 2086.521602][T13343] device veth0_to_bridge left promiscuous mode [ 2086.529266][T13343] device bridge_slave_0 left promiscuous mode [ 2086.536580][T13343] device veth1_to_bridge left promiscuous mode [ 2086.545214][T13343] device veth1_to_bond left promiscuous mode [ 2086.551759][T13343] device bond_slave_1 left promiscuous mode [ 2086.558166][T13343] device veth0_to_team left promiscuous mode [ 2086.564685][T13343] device team_slave_0 left promiscuous mode [ 2086.682683][T13343] device veth1_to_team left promiscuous mode [ 2086.689268][T13343] device veth1_to_batadv left promiscuous mode [ 2086.696534][T13343] device xfrm0 left promiscuous mode [ 2086.709987][T13343] device veth0_to_hsr left promiscuous mode [ 2086.716412][T13343] device hsr_slave_0 left promiscuous mode [ 2086.724136][T13343] device veth1_to_hsr left promiscuous mode [ 2086.731700][T13343] device hsr_slave_1 left promiscuous mode [ 2086.739194][T13343] device veth1_virt_wifi left promiscuous mode [ 2086.747811][T13343] device veth0_virt_wifi left promiscuous mode [ 2087.915087][T13343] device veth1_vlan left promiscuous mode [ 2087.925514][T13343] device vlan1 left promiscuous mode [ 2087.932670][T13343] device ip6erspan0 left promiscuous mode [ 2087.939716][T13343] device vlan2 left promiscuous mode [ 2087.946873][T13343] device bridge1 left promiscuous mode [ 2087.953922][T13343] device vlan3 left promiscuous mode [ 2087.973250][T13365] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2087.985003][T13343] device syztnl0 left promiscuous mode [ 2087.993832][T13343] device erspan0.1 left promiscuous mode [ 2087.999656][T13343] device erspan0 left promiscuous mode [ 2088.007141][T13343] device veth0_vlan.4093 left promiscuous mode [ 2088.710715][T13343] device ip6gre1 left promiscuous mode [ 2088.717450][T13343] device bridge0 left promiscuous mode [ 2088.724126][T13343] device veth2 left promiscuous mode [ 2088.730681][T13343] device veth3 left promiscuous mode [ 2088.736980][T13343] device veth4 left promiscuous mode [ 2088.743336][T13343] device veth5 left promiscuous mode [ 2088.749705][T13343] device macsec0 left promiscuous mode [ 2088.756714][T13343] device macsec1 left promiscuous mode [ 2088.763710][T13343] device bridge2 left promiscuous mode [ 2088.770376][T13343] device bridge3 left promiscuous mode [ 2088.985630][ T2772] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2089.025412][ T2772] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2089.055005][ T2772] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2089.752825][ T2772] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2089.854871][ T2772] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2091.387355][T13381] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9072'. [ 2091.396535][T13381] tunl0: Caught tx_queue_len zero misconfig [ 2091.627031][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2093.146914][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2094.826997][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 2095.283037][T13400] x_tables: duplicate underflow at hook 2 [ 2098.566800][ T1861] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2099.319086][T13430] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2099.741457][T13430] overlayfs: failed to clone lowerpath [ 2100.288011][ T9043] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2101.227293][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2101.235079][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2102.262873][T13452] futex_wake_op: syz.1.9090 tries to shift op by 144; fix this program [ 2102.714382][T13457] bridge0: port 1(bridge_slave_0) entered blocking state [ 2102.721704][T13457] bridge0: port 1(bridge_slave_0) entered disabled state [ 2102.731463][T13457] device bridge_slave_0 entered promiscuous mode [ 2102.741505][T13457] bridge0: port 2(bridge_slave_1) entered blocking state [ 2102.748857][T13457] bridge0: port 2(bridge_slave_1) entered disabled state [ 2102.758663][T13457] device bridge_slave_1 entered promiscuous mode [ 2104.798902][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2104.845526][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2104.885436][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2105.303522][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2105.311897][T11722] bridge0: port 1(bridge_slave_0) entered blocking state [ 2105.318993][T11722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2106.287544][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2106.296050][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2106.320574][T11722] bridge0: port 2(bridge_slave_1) entered blocking state [ 2106.327754][T11722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2106.348162][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2106.362175][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2106.377970][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2106.393573][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2106.433173][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2106.454131][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2106.472022][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2106.549086][T13457] device veth0_vlan entered promiscuous mode [ 2106.563353][T13457] device veth1_macvtap entered promiscuous mode [ 2106.598222][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2106.606702][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2106.615455][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2106.624163][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2106.633049][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2108.145705][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2108.154834][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2108.164170][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2108.173539][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2108.267158][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2108.283169][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2108.290859][T11722] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2111.044001][T13511] ip_tables: iptables: counters copy to user failed while replacing table [ 2111.467030][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 2113.292214][T13535] netlink: 'syz.1.9109': attribute type 2 has an invalid length. [ 2117.073579][ T1496] device bridge_slave_1 left promiscuous mode [ 2117.153275][ T1496] bridge0: port 2(bridge_slave_1) entered disabled state [ 2117.195822][ T1496] device bridge_slave_0 left promiscuous mode [ 2117.202162][ T1496] bridge0: port 1(bridge_slave_0) entered disabled state [ 2117.211126][ T1496] device veth1_macvtap left promiscuous mode [ 2117.217279][ T1496] device veth0_vlan left promiscuous mode [ 2117.226914][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2117.612437][ T28] audit: type=1400 audit(2000000281.614:10513): avc: denied { write } for pid=13577 comm="syz.4.9124" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2117.867275][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2118.847460][ T28] audit: type=1400 audit(2000000282.844:10514): avc: denied { ioctl } for pid=13577 comm="syz.4.9124" path="/dev/ptp0" dev="devtmpfs" ino=264 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2119.018089][T13574] netlink: 3544 bytes leftover after parsing attributes in process `syz.1.9119'. [ 2119.136069][T13604] loop4: detected capacity change from 0 to 33280 [ 2119.165320][T13604] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2119.240002][T13604] EXT4-fs (loop4): 1 truncate cleaned up [ 2119.246854][T13604] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2120.799937][T13457] EXT4-fs (loop4): unmounting filesystem. [ 2120.896028][T13634] loop4: detected capacity change from 0 to 33280 [ 2120.999606][T13634] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2121.020379][T13634] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2121.106069][T13457] EXT4-fs (loop4): unmounting filesystem. [ 2121.168160][ T28] audit: type=1400 audit(2000000285.174:10515): avc: denied { ioctl } for pid=13672 comm="syz.4.9157" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2122.070236][T13694] IPv6: NLM_F_REPLACE set, but no existing node found! [ 2122.211962][ T28] audit: type=1326 audit(2000000286.214:10516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13709 comm="syz.4.9178" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba43a94d9 code=0x7ffc0000 [ 2122.274829][ T28] audit: type=1326 audit(2000000286.244:10517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13709 comm="syz.4.9178" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba43a94d9 code=0x7ffc0000 [ 2122.333090][ T28] audit: type=1326 audit(2000000286.244:10518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13709 comm="syz.4.9178" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f4ba43a94d9 code=0x7ffc0000 [ 2122.402415][ T28] audit: type=1326 audit(2000000286.314:10519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13709 comm="syz.4.9178" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba43a94d9 code=0x7ffc0000 [ 2122.458226][ T28] audit: type=1326 audit(2000000286.314:10520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13709 comm="syz.4.9178" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba43a94d9 code=0x7ffc0000 [ 2122.537649][T13728] loop4: detected capacity change from 0 to 33280 [ 2122.555193][T13728] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2122.607798][T13730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9187'. [ 2122.638032][T13728] EXT4-fs (loop4): 1 truncate cleaned up [ 2122.643745][T13728] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2122.797907][T13737] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9189'. [ 2123.714479][T13457] EXT4-fs (loop4): unmounting filesystem. [ 2124.312807][T13773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9206'. [ 2124.384120][T13763] loop4: detected capacity change from 0 to 49152 [ 2124.434512][T13763] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 2124.450389][T13785] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9212'. [ 2124.568416][T13763] EXT4-fs (loop4): mounted filesystem with ordered data mode. Quota mode: none. [ 2124.585079][T13763] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2125.317039][ T28] audit: type=1400 audit(2000000001.590:10521): avc: denied { link } for pid=13762 comm="syz.4.9200" name="file1" dev="loop4" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2125.674041][T13457] EXT4-fs (loop4): unmounting filesystem. [ 2125.904469][T13821] loop4: detected capacity change from 0 to 256 [ 2126.165893][T13821] FAT-fs (loop4): Directory bread(block 64) failed [ 2126.221831][T13821] FAT-fs (loop4): Directory bread(block 65) failed [ 2126.228771][T13821] FAT-fs (loop4): Directory bread(block 66) failed [ 2126.235346][T13821] FAT-fs (loop4): Directory bread(block 67) failed [ 2126.242260][T13821] FAT-fs (loop4): Directory bread(block 68) failed [ 2126.253117][T13828] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9225'. [ 2126.267088][T13821] FAT-fs (loop4): Directory bread(block 69) failed [ 2126.268200][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9225'. [ 2126.282508][T13821] FAT-fs (loop4): Directory bread(block 70) failed [ 2126.282547][T13821] FAT-fs (loop4): Directory bread(block 71) failed [ 2126.289860][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9225'. [ 2126.304809][T13821] FAT-fs (loop4): Directory bread(block 72) failed [ 2126.311540][T13821] FAT-fs (loop4): Directory bread(block 73) failed [ 2126.340600][T13832] netlink: 'syz.1.9228': attribute type 1 has an invalid length. [ 2126.348753][T13832] netlink: 'syz.1.9228': attribute type 3 has an invalid length. [ 2127.770704][T13869] ip_tables: iptables: counters copy to user failed while replacing table [ 2127.818425][T13882] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2127.836881][T13565] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 2130.300747][T13565] usb 5-1: unable to read config index 0 descriptor/all [ 2130.326165][T13565] usb 5-1: can't read configurations, error -71 [ 2131.412729][T13963] tipc: Enabling of bearer rejected, failed to enable media [ 2131.868684][T13989] loop4: detected capacity change from 0 to 256 [ 2131.917404][T13994] xt_hashlimit: size too large, truncated to 1048576 [ 2131.974916][T14001] device bridge0 entered promiscuous mode [ 2132.301753][ T9043] sony 0005:054C:03D5.0002: UNIQ does not contain a MAC address; duplicate check skipped [ 2132.325199][ T9043] input: syz0 as /devices/virtual/misc/uhid/0005:054C:03D5.0002/input/input9 [ 2132.354950][ T9043] sony 0005:054C:03D5.0002: input,hidraw0: BLUETOOTH HID v0.00 Joystick [syz0] on syz0 [ 2132.433165][T14018] fido_id[14018]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2132.546602][T14021] loop4: detected capacity change from 0 to 49152 [ 2132.593503][T14021] EXT4-fs (loop4): mounted filesystem with writeback data mode. Quota mode: none. [ 2132.616760][ T28] audit: type=1400 audit(2000000001.020:10522): avc: denied { unlink } for pid=14020 comm="syz.4.9307" name="fc_a" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 2132.648968][T13457] EXT4-fs (loop4): unmounting filesystem. [ 2132.966883][ T2276] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2133.158085][ T2276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2133.169167][ T2276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2133.178981][ T2276] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2133.191853][ T2276] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2133.201173][ T2276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2133.210503][ T2276] usb 5-1: config 0 descriptor?? [ 2133.446016][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9328'. [ 2133.618650][ T2276] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 2133.626350][ T2276] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 2133.638435][ T2276] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 2133.646648][ T2276] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 2133.654282][ T2276] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 2133.662106][ T2276] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 2133.669582][ T2276] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 2135.302355][ T2276] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 2135.315604][ T2276] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 2135.324533][ T2276] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 2136.281430][ T2276] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2136.302560][ T2276] usb 5-1: USB disconnect, device number 4 [ 2136.346373][T14091] fido_id[14091]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2136.462585][T14116] device bridge5 entered promiscuous mode [ 2136.687895][ T2276] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2136.867816][ T28] audit: type=1400 audit(2000000005.280:10523): avc: denied { getopt } for pid=14136 comm="syz.4.9360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2136.873469][T14137] loop4: detected capacity change from 0 to 256 [ 2136.901624][T14137] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 2136.914953][ T2276] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2136.934403][ T28] audit: type=1400 audit(2000000005.340:10524): avc: denied { unmount } for pid=13457 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2136.964537][T14139] netlink: 'syz.4.9361': attribute type 3 has an invalid length. [ 2137.009184][T14145] bridge0: port 1(bridge_slave_0) entered blocking state [ 2137.016410][T14145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2137.501791][ T2276] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2137.857117][ T9043] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2137.912214][ T2276] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2139.097122][T14216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9393'. [ 2139.147148][ T9043] usb 5-1: Using ep0 maxpacket: 32 [ 2140.293744][ T1861] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2140.315874][ T9043] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 2140.441187][ T9043] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2140.448272][ T9043] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 2140.458978][ T9043] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2140.473763][ T9043] usb 5-1: config 0 descriptor?? [ 2140.606647][ T9043] usbhid 5-1:0.0: can't add hid device: -71 [ 2140.616118][ T9043] usbhid: probe of 5-1:0.0 failed with error -71 [ 2140.629624][ T9043] usb 5-1: USB disconnect, device number 5 [ 2141.497521][ T1861] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2141.547106][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2141.781522][T14306] tipc: Resetting bearer [ 2141.794559][T14306] bridge0: port 1(syz_tun) entered disabled state [ 2141.958553][ T28] audit: type=1400 audit(2000000010.370:10525): avc: denied { write } for pid=14318 comm="syz.4.9436" name="kmsg" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 2142.144064][T14336] ./dev/sda1: Can't open blockdev [ 2143.466953][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2144.107059][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 2144.107061][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2144.122169][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2210.667110][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 2210.674327][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2210.682279][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2338.667077][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 2343.787028][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2343.794743][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!