last executing test programs: 29.550519666s ago: executing program 1 (id=2): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000005c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000600)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r1, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000001300)="b9fa030711a5f32e019e14f088a847e0ffff00124000", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 27.483540116s ago: executing program 1 (id=10): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1000800, &(0x7f0000000200)=ANY=[@ANYRES64=0x0], 0x2, 0x552f, &(0x7f0000005bc0)="$eJzs3L1vG2UYAPDHSdOmH5QIMbD1pAopkWqrTj8EW4FWfIhWUYGBCRzbsdzavih2nJCJgREx8J8gkJgY+RsYmNkQA4gNCeS7c2kKqVDixKT5/ST7uXvv9XPPa0UnPXeRAzixFpLffy3FxTgbEbMRcSEi2y5FxNx40q08vBQRlyJi5rFXqRh/NHA6Is5FxMVR8jxnqTj05ZXh5Ru/vPPbdz+cOXX+q29/nN6qgWl7OSK66/n2VjePaSuPD4rx2rCdxe71YRHzA92HxX6ax63mapZhqzaeV8vitVY+P13f7I/iWqdWH8VWey0bX+/lJ+wPW+M82Qce1Day/UZzNYvtfprF1k5e1/ZOfm3b6Q/yPI0i3ydZ+hgMxjEfb2438/WsP8xivTcoxvO8aaO5PYrDIhani3raaWR1rB7km/5/e7fd29xOhs2NfjvtJTcq1Vcq1Zvl6kbaaA6a18u1buPm9WSx1RlNKw+ate6tVpq2Os1KPe0uJYuter1crSaLt5ur7VovqVYr1ypXyzeWiq0ryZv3Pkg6jWRxFF9v9zYH7U4/WUs3kvwTS8ly5dqrS8nlavLe3ZVk5f6dO3dX3v/o9of3Xrv79hvFpH+UlSwuX11eLlevlperSydo/Z8VRU9w/XAgpWkXAHD8PK3/f3RZ1f8D+3NmrwN79v+jC9CB+v+N+xGH3/+H/n8ijlX/u8/+/2ktyv7WPx/Haf1waPT/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn1k9zX7+VbSzk++eL8eeKoReK/VJEzETEn/9iNk7vyjlb5JnbY/7cEzV8X4osw+gcZ4rXuYi4Vbz+eP6wvwUAAAB4dn3z6aUv8m49f1uYdkEcpfymzcyFjyeUbz4i5hZ+nlC2mdHbixNKlv19n4rtCWXLbmDNTyhZfsvt1KSy/Sezu8L8Y6GUh5kjLQcAADgSuzuBo+1CAAAAOEqfT7sApqMU40eZ42fB2X/e//1A8OyuPQAAAOAYKk27AAAAAGDinnyOn/X/fv8PAAAAnm357/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xc7d5C4NhHEAflv+BfyKxLj3Ku7gGB7BpUvDAbwEB3CBV3DnijPgziMYamhHBO0C02lrzPMkZeik/fGWwGJmkgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBIX6v95tP7Vx/65pzqe32JiD978zwNAAAA0OVY7TfNm1V7/iT1P0tdL9J5ERFl58i9rmcxv8mcpZzq1/Ufr6+vfqvhc0STcP6MRToeR8TrdHx/PvS3AAAAAP+vw3a3bkfr7ctq6oIYUztpUz59kymviIhq9S1TWnnOe5kjaZ5+3w/xLkdcmtiKZaawdsrtIVfaXZq/+2XWbnnVFG1Tdt52KTLbswMAACOa3TTjjkIAAAAY09upCyC3+5bnivi5lHlZClzc3P/ob9IAAACAf1ExdQEAAADA4Jrx/0j7/9X2/wMAAIBptPv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKRjtd8ctrt135xT3U93atG3LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAf7M/LCYRAGITB3vV9k8k/WGlQMAMvVSB8/I2HAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF/rykQAgEQRTMGf876fsfVhL0DCJEQMOjilo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFzv37xk3FAQB/ts9XWkAcAd0QhEBigIVer6WlG2IARQz8CUhRei2hV360GWhVIW5hQ5m7IBgRQgKFrf9D51bKErYMNwSJGeSznXN+SBwQ2Zfk85Ge39fOye/7bCnK1885AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNH53GifZppPHcXHs8c79lax/sq/PPFzfXMxaFkd1Jn08vFzdibrNJQIAAMCJNqruJGV9H0LYSjeWsj7uTOr/tPxMVvN//2wel/X8/rq/7MvaP2u//br94u5AnXyc7KTXV4eDCwfzah35TI+J5/7h5/mFifJnL8nkhsQfjF4Yp5PrGX376NF77Ul4po5sAYD/4nzZF0H591DW95tMDIBTo1UpvMv6P+k0mxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAHcaj8HQZRyGExdY0zjzZub9yWP9wfXOxbFcePFgPX0/PmZ0iDSFcXx0OLtQ6m/l25+69m8vD4eB2/cErIYSmRn+nmP7Nj2b4cAiNXB/BEQVxcbPnJZ/jETT4SwkAgBMpLVpW12+lG0vZsWghhL9+2Fv/v16Jw4z1//bHVx5Xx6rW//3aZjj/emu3Pu/duXvvzdVbyzcGNwafvnWx/3b/0tXLl6/2Js9Kep6YAAAA8P+0i1at/+OFg+v/5ypxmLH+/+K7/lfVsRL1/6Gmi35NZwIAAHC6Pf/qn39EhxyP2u3w5fLa2u1+vt3dv5hvG0j1XztTtGr9nyw0nRUAAABQh/Eo2rP+f60ShxnX/5/58aWfq+dMQghni/X/8yufDa/VN525Vse/Ezc9RwAAAJp1tmjV9f908v5/vPvKQxxCeOO1PC6+BnCm+j95/5ufqmNV3/+/VN8U51Lcza/HpO+G0Oo2nREAAAAn2VNFy4r939ONpU9+Ofdh2/v/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHX7OwAA//+zHzrj") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0/file2\x00', 0x0) 26.755659314s ago: executing program 1 (id=13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syslog(0x4, &(0x7f0000000080)=""/19, 0xb12288e90d7c8384) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000140)=0xcb) 26.304190185s ago: executing program 1 (id=19): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x50, r2, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x24, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x50}}, 0x0) 26.249659557s ago: executing program 32 (id=19): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x50, r2, 0x1, 0x0, 0x300, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x24, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x50}}, 0x0) 10.330631977s ago: executing program 5 (id=20): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r1, 0x20, &(0x7f0000000240)={&(0x7f0000000280)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000a40)=0xffffffffffffffff) 8.470554063s ago: executing program 5 (id=20): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r1, 0x20, &(0x7f0000000240)={&(0x7f0000000280)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000a40)=0xffffffffffffffff) 6.434906682s ago: executing program 5 (id=20): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r1, 0x20, &(0x7f0000000240)={&(0x7f0000000280)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000a40)=0xffffffffffffffff) 4.571856508s ago: executing program 4 (id=154): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x200000, &(0x7f0000000580)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002280)="$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") timer_create(0x2, 0x0, &(0x7f0000000180)) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000200)=0x0) timer_settime(r0, 0x1, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r0) 4.47807306s ago: executing program 4 (id=156): syz_emit_ethernet(0x1ae, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@private=0xa010101, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newsa={0x150, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e24, 0xfffd, 0x2, 0x20, 0x20, 0x6}, {@in=@loopback=0x7f0000c1, 0x4d4, 0x32}, @in=@multicast1, {0x40000000, 0x2, 0x5, 0x80000000000010, 0xffffffffffffffff, 0x0, 0x20000000007}, {0x9, 0x3ff, 0x4, 0x400}, {0x400000f6, 0x0, 0x7}, 0x70bd26, 0x0, 0xa, 0x4, 0x9, 0x110}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x60, "dc73e4d5fde1c6f1f6bb2d68a5da2a0f8c3304"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80c0}, 0x41410) 4.455913581s ago: executing program 5 (id=20): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r1, 0x20, &(0x7f0000000240)={&(0x7f0000000280)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000a40)=0xffffffffffffffff) 2.43854496s ago: executing program 2 (id=158): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./proc\x00', 0x800, &(0x7f0000000180)=ANY=[], 0x1, 0x1528, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r0 = memfd_create(&(0x7f00000017c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\x04\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x17Q\x00\x00\x00\x00\x00\x00\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r0, &(0x7f0000001880)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r0, &(0x7f0000001900)='\x00', 0x0, 0x0, 0x1000) chdir(0x0) 2.4375883s ago: executing program 3 (id=159): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.437296891s ago: executing program 4 (id=160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)=@x86={0xf6, 0x5, 0xe, 0x0, 0x3, 0xb, 0x80, 0x3, 0x0, 0x1d, 0x6, 0x3, 0x0, 0x2, 0x0, 0x1, 0x7, 0x5, 0x6, '\x00', 0x3, 0x1000}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x63, 0x0, 0x0) 2.409638391s ago: executing program 3 (id=161): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 2.370942722s ago: executing program 3 (id=162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000000bf00), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f000000c080)={0x1, 0x0, [{0x40000072, 0x0, 0x100000001}]}) 2.303847743s ago: executing program 0 (id=163): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(0x0, 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x23, @any, 0x0, 0x1}, 0xe) 2.266319844s ago: executing program 2 (id=164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x6}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 2.265942554s ago: executing program 4 (id=165): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000000c0), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x90000005}) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0xfffeffff, 0x0, 0x0) close(r0) 2.210051286s ago: executing program 5 (id=20): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r1, 0x20, &(0x7f0000000240)={&(0x7f0000000280)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000a40)=0xffffffffffffffff) 159.073926ms ago: executing program 0 (id=166): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x70}}, 0x0) r0 = syz_io_uring_setup(0x141f, &(0x7f0000000080)={0x0, 0x91c1, 0x400, 0x1, 0x14a}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f00000003c0)=@ublk_get_features_sqe={0x2e, 0x69, 0x0, 0xffffffffffffffff, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbb1, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 158.874396ms ago: executing program 2 (id=167): unshare(0x22020600) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0), 0x4) 158.594906ms ago: executing program 3 (id=168): r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) 158.418996ms ago: executing program 4 (id=169): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = inotify_init() readv(r1, &(0x7f0000000540)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setstatus(r1, 0x4, 0x42800) 120.529567ms ago: executing program 2 (id=170): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000000)='\x00', 0x1, 0xc891, 0x0, 0x0) shutdown(r0, 0x1) recvfrom$inet(r0, &(0x7f0000000180)=""/8, 0x8, 0x2, 0x0, 0x0) 118.863137ms ago: executing program 0 (id=171): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 114.010547ms ago: executing program 3 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x0) mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000200)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0xa0000, 0x14) ioctl$FS_IOC_GETFSMAP(r0, 0x40106614, &(0x7f0000000b40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x400000cd, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x8001}]}) 89.268468ms ago: executing program 0 (id=173): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 69.923228ms ago: executing program 2 (id=174): r0 = socket(0x1, 0x5, 0x0) close(r0) userfaultfd(0x80801) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x80002017}) 68.649838ms ago: executing program 3 (id=175): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000100000000000001040000002000"], 0x0, 0x3c}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000040)={[0xd000, 0xa000, 0x26000, 0xc000], 0x5, 0x54, 0xffffffffffffff80}) 53.732029ms ago: executing program 4 (id=176): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000006c0)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x200, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000780)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 50.255189ms ago: executing program 0 (id=177): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4db}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 26.494859ms ago: executing program 0 (id=178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x9, 0xfffffffffffffffb, 0x0, 0x5, 0x85d6, 0x4, 0xc9, 0x5, 0x82, 0x6, 0x401, 0x7, 0x76, 0xeb, 0x8, 0x3], 0x1ffe, 0x240986}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.1863ms ago: executing program 2 (id=179): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc084}, 0x20801) r0 = io_uring_setup(0x792b, &(0x7f0000000480)={0x0, 0x7b0c, 0x10, 0x1, 0x4}) exit(0x1ff) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000000500), 0x2) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000000540)=[{0x0, 0x0, 0x0}], 0x1) 0s ago: executing program 5 (id=20): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r1, 0x20, &(0x7f0000000240)={&(0x7f0000000280)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000a40)=0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.246' (ED25519) to the list of known hosts. [ 20.574551][ T28] audit: type=1400 audit(1792610005.771:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.575664][ T279] cgroup: Unknown subsys name 'net' [ 20.597181][ T28] audit: type=1400 audit(1792610005.771:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.624447][ T28] audit: type=1400 audit(1792610005.811:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.624574][ T279] cgroup: Unknown subsys name 'devices' [ 20.769405][ T279] cgroup: Unknown subsys name 'hugetlb' [ 20.774978][ T279] cgroup: Unknown subsys name 'rlimit' [ 20.876586][ T28] audit: type=1400 audit(1792610006.071:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.899719][ T28] audit: type=1400 audit(1792610006.071:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.912296][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.924520][ T28] audit: type=1400 audit(1792610006.071:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 20.956033][ T28] audit: type=1400 audit(1792610006.141:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.963793][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.981563][ T28] audit: type=1400 audit(1792610006.141:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.015663][ T28] audit: type=1400 audit(1792610006.161:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.041221][ T28] audit: type=1400 audit(1792610006.161:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.765069][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.772153][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.779636][ T288] device bridge_slave_0 entered promiscuous mode [ 21.787467][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.794548][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.801888][ T288] device bridge_slave_1 entered promiscuous mode [ 21.903994][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.911076][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.918404][ T287] device bridge_slave_0 entered promiscuous mode [ 21.925169][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.932318][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.939726][ T287] device bridge_slave_1 entered promiscuous mode [ 21.951749][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.958860][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.966097][ T289] device bridge_slave_0 entered promiscuous mode [ 21.975630][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.982696][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.990097][ T289] device bridge_slave_1 entered promiscuous mode [ 22.027606][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.034665][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.042226][ T291] device bridge_slave_0 entered promiscuous mode [ 22.051692][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.058755][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.066120][ T291] device bridge_slave_1 entered promiscuous mode [ 22.128797][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.135847][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.143234][ T290] device bridge_slave_0 entered promiscuous mode [ 22.150023][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.157038][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.164533][ T290] device bridge_slave_1 entered promiscuous mode [ 22.296891][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.303948][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.311238][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.318265][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.335794][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.342834][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.350094][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.357105][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.365478][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.372523][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.379789][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.386801][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.400127][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.407149][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.414442][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.421468][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.456662][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.463927][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.471283][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.478650][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.485785][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.492920][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.500094][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.507172][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.514790][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.522153][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.551386][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.558851][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.566569][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.574560][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.583005][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.591217][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.598287][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.605774][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.614080][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.622289][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.629311][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.636682][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.644805][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.651837][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.659202][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.667273][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.674285][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.681635][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.689825][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.696822][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.704120][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.712186][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.719219][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.726500][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.734641][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.741667][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.748979][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.757038][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.764050][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.771583][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.780047][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.788111][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.808373][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.816406][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.824426][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.832906][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.840948][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.848386][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.855728][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.864003][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.872074][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.879104][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.902408][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.910413][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.918668][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.926618][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.934972][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.943239][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.951533][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.959563][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.967555][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.975809][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.983895][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.990915][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.998324][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.006084][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.014086][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.021523][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.037950][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.046070][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.054053][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.062700][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.070786][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.078845][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.086674][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.094701][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.103156][ T287] device veth0_vlan entered promiscuous mode [ 23.119072][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.127380][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.137306][ T289] device veth0_vlan entered promiscuous mode [ 23.153114][ T291] device veth0_vlan entered promiscuous mode [ 23.164576][ T287] device veth1_macvtap entered promiscuous mode [ 23.171449][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.179773][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.187596][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.195530][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.203170][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.211365][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.219279][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.227135][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.235515][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.243845][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.252219][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.260110][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.268124][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.276158][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.283683][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.291148][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.298667][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.307341][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.315750][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.325027][ T289] device veth1_macvtap entered promiscuous mode [ 23.332694][ T290] device veth0_vlan entered promiscuous mode [ 23.342332][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.350356][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.368454][ T288] device veth0_vlan entered promiscuous mode [ 23.376240][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.384457][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.391972][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.399411][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.407508][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.415899][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.424274][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.432710][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.440891][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.449659][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.458217][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.467234][ T291] device veth1_macvtap entered promiscuous mode [ 23.485985][ T288] device veth1_macvtap entered promiscuous mode [ 23.493486][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 23.505341][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.514572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.522821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.530731][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.539136][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.547326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.555596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.582238][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.590327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.598681][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.606919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.615367][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.625897][ T290] device veth1_macvtap entered promiscuous mode [ 23.644664][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.663014][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.664661][ T319] FAULT_INJECTION: forcing a failure. [ 23.664661][ T319] name failslab, interval 1, probability 0, space 0, times 1 [ 23.685612][ T319] CPU: 1 PID: 319 Comm: syz.2.3 Not tainted syzkaller #0 [ 23.692654][ T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 23.702709][ T319] Call Trace: [ 23.705968][ T319] [ 23.708875][ T319] __dump_stack+0x21/0x24 [ 23.713196][ T319] dump_stack_lvl+0x110/0x170 [ 23.717858][ T319] ? __cfi_dump_stack_lvl+0x8/0x8 [ 23.722854][ T319] ? _raw_spin_lock+0x94/0xf0 [ 23.727536][ T319] ? __cfi__raw_spin_lock+0x10/0x10 [ 23.732710][ T319] dump_stack+0x15/0x24 [ 23.736877][ T319] should_fail_ex+0x3bf/0x510 [ 23.741553][ T319] ? __alloc_file+0x28/0x2a0 [ 23.746133][ T319] __should_failslab+0xac/0xf0 [ 23.750891][ T319] should_failslab+0x9/0x20 [ 23.755398][ T319] kmem_cache_alloc+0x3b/0x320 [ 23.760170][ T319] ? __cfi__raw_spin_lock+0x10/0x10 [ 23.765377][ T319] __alloc_file+0x28/0x2a0 [ 23.769798][ T319] alloc_empty_file+0x97/0x180 [ 23.774571][ T319] alloc_file+0x59/0x600 [ 23.778823][ T319] ? _raw_spin_unlock+0x4c/0x70 [ 23.783718][ T319] alloc_file_pseudo+0x180/0x200 [ 23.788662][ T319] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 23.794148][ T319] ? _raw_spin_lock+0x94/0xf0 [ 23.798831][ T319] ? __cfi__raw_spin_lock+0x10/0x10 [ 23.804029][ T319] ? security_inode_alloc+0xd1/0x120 [ 23.809325][ T319] sock_alloc_file+0xba/0x270 [ 23.814007][ T319] do_accept+0x3bc/0x6c0 [ 23.818252][ T319] ? replace_fd+0x180/0x180 [ 23.822755][ T319] ? __cfi_do_accept+0x10/0x10 [ 23.827565][ T319] __sys_accept4+0xa7/0x120 [ 23.832072][ T319] __x64_sys_accept+0x7d/0x90 [ 23.836752][ T319] x64_sys_call+0x8cc/0x9a0 [ 23.841269][ T319] do_syscall_64+0x4c/0xa0 [ 23.845681][ T319] ? clear_bhb_loop+0x30/0x80 [ 23.850362][ T319] ? clear_bhb_loop+0x30/0x80 [ 23.855040][ T319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 23.860935][ T319] RIP: 0033:0x7f4626b9f559 [ 23.865352][ T319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 23.884953][ T319] RSP: 002b:00007f46279ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 23.893363][ T319] RAX: ffffffffffffffda RBX: 00007f4626e25fa0 RCX: 00007f4626b9f559 [ 23.901343][ T319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 23.909307][ T319] RBP: 00007f4626c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 23.917271][ T319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 23.917684][ T295] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 23.925234][ T319] R13: 00007f4626e26038 R14: 00007f4626e25fa0 R15: 00007ffe9a1c9108 [ 23.925254][ T319] [ 23.944632][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.954306][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.687639][ C1] sched: RT throttling activated [ 25.750258][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 25.750271][ T28] audit: type=1400 audit(1792610010.951:114): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 25.833146][ T28] audit: type=1400 audit(1792610010.981:115): avc: denied { create } for pid=328 comm="syz.0.8" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.895684][ T28] audit: type=1400 audit(1792610010.981:116): avc: denied { map } for pid=328 comm="syz.0.8" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.897680][ T295] usb 4-1: Using ep0 maxpacket: 32 [ 25.957510][ T295] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.967669][ T28] audit: type=1400 audit(1792610010.981:117): avc: denied { read write } for pid=328 comm="syz.0.8" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 25.989141][ T295] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 26.024964][ T28] audit: type=1400 audit(1792610011.011:118): avc: denied { map } for pid=328 comm="syz.0.8" path="socket:[15173]" dev="sockfs" ino=15173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 26.035083][ T295] usb 4-1: config 0 interface 0 has no altsetting 0 [ 26.091540][ T331] loop1: detected capacity change from 0 to 40427 [ 26.092031][ T28] audit: type=1400 audit(1792610011.291:119): avc: denied { write } for pid=330 comm="syz.1.10" name="loop1" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.098261][ T295] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 26.148518][ T331] F2FS-fs (loop1): invalid crc value [ 26.166003][ T333] loop2: detected capacity change from 0 to 40427 [ 26.181213][ T333] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 26.184510][ T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.195090][ T333] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 26.203880][ T331] F2FS-fs (loop1): Found nat_bits in checkpoint [ 26.213596][ T333] F2FS-fs (loop2): invalid crc value [ 26.233103][ T295] usb 4-1: config 0 descriptor?? [ 26.252245][ T333] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 26.313304][ T331] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 26.327089][ T333] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 26.338527][ T333] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 26.346163][ T28] audit: type=1400 audit(1792610011.541:120): avc: denied { mount } for pid=330 comm="syz.1.10" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.410761][ T28] audit: type=1400 audit(1792610011.611:121): avc: denied { write } for pid=332 comm="syz.2.9" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.439529][ T333] syz.2.9 (333) used greatest stack depth: 22952 bytes left [ 26.461822][ T28] audit: type=1400 audit(1792610011.631:122): avc: denied { add_name } for pid=330 comm="syz.1.10" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.473918][ T288] syz-executor: attempt to access beyond end of device [ 26.473918][ T288] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 26.496793][ T291] syz-executor: attempt to access beyond end of device [ 26.496793][ T291] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 26.504190][ T28] audit: type=1400 audit(1792610011.631:123): avc: denied { create } for pid=330 comm="syz.1.10" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 26.548287][ T288] syz-executor: attempt to access beyond end of device [ 26.548287][ T288] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 26.631778][ T41] kworker/u4:2: attempt to access beyond end of device [ 26.631778][ T41] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 26.659367][ T295] input: HID 1b1c:1b34 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:1B1C:1B34.0001/input/input4 [ 26.688789][ T295] hid-generic 0003:1B1C:1B34.0001: input,hidraw0: USB HID v80.00 Joystick [HID 1b1c:1b34] on usb-dummy_hcd.3-1/input0 [ 26.736291][ T340] loop4: detected capacity change from 0 to 131072 [ 26.758202][ T340] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945) [ 26.812501][ T340] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 26.875556][ T340] F2FS-fs (loop4): invalid crc value [ 26.883320][ T288] syz-executor (288) used greatest stack depth: 21536 bytes left [ 26.908894][ T363] loop2: detected capacity change from 0 to 8192 [ 26.929528][ T340] F2FS-fs (loop4): Found nat_bits in checkpoint [ 26.970835][ T327] usb 4-1: USB disconnect, device number 2 [ 26.984725][ T340] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 26.992962][ T340] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 27.070668][ T384] FAULT_INJECTION: forcing a failure. [ 27.070668][ T384] name failslab, interval 1, probability 0, space 0, times 0 [ 27.083311][ T384] CPU: 1 PID: 384 Comm: syz.2.23 Not tainted syzkaller #0 [ 27.090422][ T384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 27.100484][ T384] Call Trace: [ 27.103764][ T384] [ 27.106692][ T384] __dump_stack+0x21/0x24 [ 27.111025][ T384] dump_stack_lvl+0x110/0x170 [ 27.115702][ T384] ? __cfi_dump_stack_lvl+0x8/0x8 [ 27.120734][ T384] ? debug_smp_processor_id+0x17/0x20 [ 27.126128][ T384] ? get_random_u32+0x309/0x520 [ 27.130991][ T384] dump_stack+0x15/0x24 [ 27.132931][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.135153][ T384] should_fail_ex+0x3bf/0x510 [ 27.135180][ T384] ? inet_bind_bucket_create+0x2f/0x290 [ 27.142344][ T385] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.146873][ T384] __should_failslab+0xac/0xf0 [ 27.146900][ T384] should_failslab+0x9/0x20 [ 27.146920][ T384] kmem_cache_alloc+0x3b/0x320 [ 27.146946][ T384] inet_bind_bucket_create+0x2f/0x290 [ 27.146966][ T384] inet_csk_get_port+0xc41/0x16f0 [ 27.153786][ T385] device bridge_slave_0 entered promiscuous mode [ 27.159489][ T384] ? __cfi_inet_csk_get_port+0x10/0x10 [ 27.159516][ T384] inet_csk_listen_start+0x130/0x330 [ 27.159541][ T384] inet_listen+0x2e9/0x6e0 [ 27.165212][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.168761][ T384] ? __cfi_inet_listen+0x10/0x10 [ 27.168790][ T384] ? __fget_files+0x2d1/0x330 [ 27.173682][ T385] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.178904][ T384] ? security_socket_listen+0x8a/0xb0 [ 27.178931][ T384] __x64_sys_listen+0x210/0x290 [ 27.184767][ T385] device bridge_slave_1 entered promiscuous mode [ 27.190247][ T384] x64_sys_call+0x1fd/0x9a0 [ 27.190271][ T384] do_syscall_64+0x4c/0xa0 [ 27.254230][ T384] ? clear_bhb_loop+0x30/0x80 [ 27.258897][ T384] ? clear_bhb_loop+0x30/0x80 [ 27.263559][ T384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 27.269438][ T384] RIP: 0033:0x7f4626b9f559 [ 27.273833][ T384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.293416][ T384] RSP: 002b:00007f46279ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 27.301812][ T384] RAX: ffffffffffffffda RBX: 00007f4626e25fa0 RCX: 00007f4626b9f559 [ 27.309773][ T384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 27.317725][ T384] RBP: 00007f4626c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 27.325681][ T384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 27.333632][ T384] R13: 00007f4626e26038 R14: 00007f4626e25fa0 R15: 00007ffe9a1c9108 [ 27.341587][ T384] [ 27.369273][ T391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.26'. [ 27.398916][ T393] loop2: detected capacity change from 0 to 2048 [ 27.413425][ T385] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.420468][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.425643][ T393] EXT4-fs: Ignoring removed oldalloc option [ 27.427742][ T385] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.440580][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.458854][ T41] device bridge_slave_1 left promiscuous mode [ 27.465846][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.485720][ T393] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 27.494455][ T41] device bridge_slave_0 left promiscuous mode [ 27.510687][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.528668][ T393] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 27.553448][ T41] device veth1_macvtap left promiscuous mode [ 27.568913][ T41] device veth0_vlan left promiscuous mode [ 27.570315][ T395] loop0: detected capacity change from 0 to 40427 [ 27.581935][ T395] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 27.632971][ T395] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 27.645681][ T291] EXT4-fs (loop2): unmounting filesystem. [ 27.654443][ T395] F2FS-fs (loop0): invalid crc value [ 27.684665][ T395] F2FS-fs (loop0): Found nat_bits in checkpoint [ 27.718067][ T395] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 27.725103][ T395] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 27.824756][ T415] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.844207][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.864566][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.877895][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.885339][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.903563][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.912292][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.920752][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.927801][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.935531][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.944252][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.952411][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.959441][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.971895][ T426] Illegal XDP return value 2190948234 on prog (id 3) dev syz_tun, expect packet loss! [ 27.979031][ T429] loop4: detected capacity change from 0 to 16 [ 27.997174][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.997627][ T429] erofs: (device loop4): mounted with root inode @ nid 36. [ 28.014043][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.032838][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.040943][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.057815][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.080209][ T437] ======================================================= [ 28.080209][ T437] WARNING: The mand mount option has been deprecated and [ 28.080209][ T437] and is ignored by this kernel. Remove the mand [ 28.080209][ T437] option from the mount to silence this warning. [ 28.080209][ T437] ======================================================= [ 28.083867][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.126602][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.134686][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.142902][ T385] device veth0_vlan entered promiscuous mode [ 28.150009][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.158521][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.187283][ T385] device veth1_macvtap entered promiscuous mode [ 28.200716][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.211245][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.220540][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.249536][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.261364][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.263201][ T461] loop0: detected capacity change from 0 to 1024 [ 28.283615][ T355] udevd[355]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 28.285155][ T461] EXT4-fs: Ignoring removed oldalloc option [ 28.292603][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.311320][ T355] udevd[355]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 28.328853][ T365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.361564][ T461] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 28.377267][ T461] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.426126][ T461] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.47: bg 0: block 112: padding at end of block bitmap is not set [ 28.476408][ T464] loop4: detected capacity change from 0 to 40427 [ 28.484747][ T355] udevd[355]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 28.494066][ T464] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 28.502160][ T359] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm kworker/u4:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 28.502466][ T464] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 28.515917][ T359] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 28.526880][ T464] F2FS-fs (loop4): invalid crc value [ 28.539963][ T359] EXT4-fs (loop0): This should not happen!! Data will be lost [ 28.539963][ T359] [ 28.553659][ T289] EXT4-fs (loop0): unmounting filesystem. [ 28.563978][ T355] udevd[355]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 28.575825][ T464] F2FS-fs (loop4): Found nat_bits in checkpoint [ 28.589537][ T355] udevd[355]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 28.621304][ T464] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 28.628462][ T464] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 28.703940][ T355] udevd[355]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 28.728497][ T355] udevd[355]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 28.978514][ T365] device bridge_slave_1 left promiscuous mode [ 28.984620][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.992016][ T365] device bridge_slave_0 left promiscuous mode [ 28.998213][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.005890][ T365] device veth1_macvtap left promiscuous mode [ 29.011964][ T365] device veth0_vlan left promiscuous mode [ 32.220656][ T502] loop4: detected capacity change from 0 to 128 [ 32.247049][ T509] udevd[509]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 32.249755][ T502] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 58) [ 32.270608][ T502] FAT-fs (loop4): Filesystem has been set read-only [ 32.296844][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 32.296854][ T28] audit: type=1400 audit(1792610017.491:214): avc: denied { name_bind } for pid=513 comm="syz.0.58" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 32.343398][ T509] udevd[509]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 32.371160][ T509] udevd[509]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 32.513236][ T525] ip_tables: iptables: counters copy to user failed while replacing table [ 33.394416][ T28] audit: type=1400 audit(1792610018.591:215): avc: denied { mount } for pid=532 comm="syz.3.65" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 33.394574][ T533] tipc: Started in network mode [ 33.418299][ T534] WARNING! power/level is deprecated; use power/control instead [ 33.451836][ T533] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 33.455744][ T28] audit: type=1400 audit(1792610018.621:216): avc: denied { wake_alarm } for pid=532 comm="syz.3.65" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.480306][ T28] audit: type=1400 audit(1792610018.671:217): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 33.495576][ T533] tipc: Enabled bearer , priority 0 [ 33.513025][ T28] audit: type=1400 audit(1792610018.711:218): avc: denied { name_bind } for pid=539 comm="syz.3.68" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 33.538001][ T541] ------------[ cut here ]------------ [ 33.543472][ T541] WARNING: CPU: 0 PID: 541 at arch/x86/kvm/x86.c:11263 kvm_arch_vcpu_ioctl_run+0x1a32/0x1f60 [ 33.553671][ T541] Modules linked in: [ 33.557560][ T541] CPU: 0 PID: 541 Comm: syz.4.67 Not tainted syzkaller #0 [ 33.564689][ T541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 33.574773][ T541] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1a32/0x1f60 [ 33.575177][ T28] audit: type=1400 audit(1792610018.711:219): avc: denied { node_bind } for pid=539 comm="syz.3.68" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 33.581209][ T541] Code: e8 f3 ca a6 00 e9 c8 f2 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 2e e9 ff ff 4c 89 ff e8 78 ca a6 00 e9 21 e9 ff ff e8 2e 31 61 00 <0f> 0b e9 99 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 3c ef [ 33.581226][ T541] RSP: 0018:ffffc90000797c30 EFLAGS: 00010283 [ 33.627186][ T541] RAX: ffffffff81103da2 RBX: ffff88811055a4c0 RCX: 0000000000080000 [ 33.635250][ T541] RDX: ffffc900032d1000 RSI: 000000000000003f RDI: 0000000000000040 [ 33.643249][ T541] RBP: ffffc90000797cb0 R08: ffff888126c29447 R09: 1ffff11024d85288 [ 33.644406][ T28] audit: type=1400 audit(1792610018.851:220): avc: denied { ioctl } for pid=551 comm="syz.3.71" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17722 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.651252][ T541] R10: dffffc0000000000 R11: ffffed1024d85289 R12: ffff888133f02000 [ 33.684829][ T541] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811055a538 [ 33.692815][ T541] FS: 00007f22e6fe86c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.701765][ T541] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.708364][ T541] CR2: 0000001b2f01dff8 CR3: 00000001355f1000 CR4: 00000000003526b0 [ 33.716326][ T541] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.724325][ T541] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.732315][ T541] Call Trace: [ 33.735588][ T541] [ 33.738545][ T541] kvm_vcpu_ioctl+0x8ed/0xc00 [ 33.743236][ T541] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 33.748459][ T541] ? selinux_file_ioctl+0x3ad/0x4c0 [ 33.753674][ T541] ? __cfi_do_futex+0x10/0x10 [ 33.758369][ T541] ? kvm_uevent_notify_change+0x30b/0x3b0 [ 33.764091][ T541] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 33.769646][ T541] ? __fget_files+0x2d1/0x330 [ 33.774334][ T541] ? security_file_ioctl+0x95/0xc0 [ 33.777672][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.779445][ T541] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 33.792056][ T541] __se_sys_ioctl+0x12f/0x1b0 [ 33.796716][ T541] __x64_sys_ioctl+0x7b/0x90 [ 33.801306][ T541] x64_sys_call+0x58b/0x9a0 [ 33.805809][ T541] do_syscall_64+0x4c/0xa0 [ 33.810223][ T541] ? clear_bhb_loop+0x30/0x80 [ 33.814898][ T541] ? clear_bhb_loop+0x30/0x80 [ 33.819587][ T541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.825499][ T541] RIP: 0033:0x7f22e619f559 [ 33.829911][ T541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.849524][ T541] RSP: 002b:00007f22e6fe8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 33.858159][ T541] RAX: ffffffffffffffda RBX: 00007f22e6425fa0 RCX: 00007f22e619f559 [ 33.866118][ T541] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 33.874090][ T541] RBP: 00007f22e6236b20 R08: 0000000000000000 R09: 0000000000000000 [ 33.882082][ T541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.890054][ T541] R13: 00007f22e6426038 R14: 00007f22e6425fa0 R15: 00007ffd5efea608 [ 33.898036][ T541] [ 33.901035][ T541] ---[ end trace 0000000000000000 ]--- [ 33.969007][ T39] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 33.977021][ T39] usb 1-1: config 1 has no interface number 0 [ 33.984387][ T39] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 33.993477][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.001472][ T39] usb 1-1: Product: syz [ 34.005662][ T39] usb 1-1: Manufacturer: syz [ 34.010280][ T39] usb 1-1: SerialNumber: syz [ 34.230618][ T39] usb 1-1: cannot find UAC_HEADER [ 34.236803][ T39] snd-usb-audio: probe of 1-1:1.3 failed with error -22 [ 34.245850][ T39] usb 1-1: USB disconnect, device number 2 [ 34.457914][ T509] udevd[509]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.3/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 34.607665][ T39] tipc: Node number set to 43690 [ 35.004422][ T28] audit: type=1400 audit(1792610020.201:221): avc: denied { read } for pid=568 comm="syz.0.78" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.043467][ T28] audit: type=1400 audit(1792610020.201:222): avc: denied { open } for pid=568 comm="syz.0.78" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.092047][ T575] ICMPv6: NA: 01:80:c2:00:00:03 advertised our address fe80::aa on syz_tun! [ 35.117678][ T28] audit: type=1400 audit(1792610020.291:223): avc: denied { bind } for pid=574 comm="syz.3.79" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.324971][ T594] bridge0: port 3(syz_tun) entered blocking state [ 36.337662][ T594] bridge0: port 3(syz_tun) entered disabled state [ 36.344525][ T594] device syz_tun entered promiscuous mode [ 36.367907][ T594] bridge0: port 3(syz_tun) entered blocking state [ 36.374330][ T594] bridge0: port 3(syz_tun) entered forwarding state [ 36.431024][ T603] loop0: detected capacity change from 0 to 512 [ 36.440156][ T603] EXT4-fs (loop0): Test dummy encryption mode enabled [ 36.440796][ T509] udevd[509]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 36.457344][ T603] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.90: inode #1: comm syz.0.90: iget: illegal inode # [ 36.472569][ T603] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.90: error while reading EA inode 1 err=-117 [ 36.484741][ T603] EXT4-fs (loop0): 1 orphan inode deleted [ 36.490559][ T603] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 36.503176][ T603] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #13: comm syz.0.90: corrupted inode contents [ 36.515121][ T603] EXT4-fs error (device loop0): ext4_dirty_inode:6158: inode #13: comm syz.0.90: mark_inode_dirty error [ 36.526519][ T603] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.90: invalid indirect mapped block 234881024 (level 0) [ 36.540306][ T603] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #13: comm syz.0.90: corrupted inode contents [ 36.552144][ T603] EXT4-fs error (device loop0): ext4_truncate:4327: inode #13: comm syz.0.90: mark_inode_dirty error [ 36.563556][ T603] EXT4-fs error (device loop0) in ext4_setattr:5697: Corrupt filesystem [ 36.572418][ T608] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #13: comm syz.0.90: corrupted inode contents [ 36.584344][ T608] EXT4-fs error (device loop0): ext4_rename:3994: inode #13: comm syz.0.90: mark_inode_dirty error [ 36.600142][ T603] EXT4-fs error (device loop0): ext4_do_update_inode:5281: inode #13: comm syz.0.90: corrupted inode contents [ 36.611976][ T603] EXT4-fs error (device loop0): ext4_rename:3994: inode #13: comm syz.0.90: mark_inode_dirty error [ 36.625184][ T603] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 36.637376][ T289] EXT4-fs (loop0): unmounting filesystem. [ 36.645164][ T509] udevd[509]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 36.654600][ T509] udevd[509]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 36.667691][ T65] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 36.848735][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.859673][ T65] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.869410][ T65] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.882337][ T65] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.891380][ T65] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.899816][ T65] usb 5-1: config 0 descriptor?? [ 37.307583][ T65] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 37.316321][ T65] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 37.347101][ T611] udevd[611]: open /dev/null failed: Not a directory [ 37.709808][ T615] loop0: detected capacity change from 0 to 2048 [ 37.727475][ T509] udevd[509]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 37.741095][ T621] loop2: detected capacity change from 0 to 4096 [ 37.749026][ T509] udevd[509]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 37.764088][ T615] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 37.772818][ T621] EXT4-fs (loop2): Test dummy encryption mode enabled [ 37.782760][ T615] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.799425][ T621] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 37.806406][ T630] input: syz1 as /devices/virtual/input/input5 [ 37.808331][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 37.808341][ T28] audit: type=1400 audit(1792610023.001:246): avc: denied { read write } for pid=629 comm="syz.3.97" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.816060][ T615] fs-verity: sha512 using implementation "sha512-avx2" [ 37.830754][ T28] audit: type=1400 audit(1792610023.001:247): avc: denied { open } for pid=629 comm="syz.3.97" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.905088][ T28] audit: type=1400 audit(1792610023.001:248): avc: denied { ioctl } for pid=629 comm="syz.3.97" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.931132][ T291] EXT4-fs (loop2): unmounting filesystem. [ 37.931148][ T289] EXT4-fs (loop0): unmounting filesystem. [ 37.944461][ T509] udevd[509]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 37.954405][ T512] udevd[512]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 37.955325][ T509] udevd[509]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 39.220250][ T28] audit: type=1400 audit(1792610024.421:249): avc: denied { read } for pid=648 comm="syz.3.100" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.244454][ T28] audit: type=1400 audit(1792610024.421:250): avc: denied { open } for pid=648 comm="syz.3.100" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.283533][ T28] audit: type=1400 audit(1792610024.451:251): avc: denied { ioctl } for pid=648 comm="syz.3.100" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.427663][ T28] audit: type=1326 audit(1792610024.621:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=664 comm="syz.3.107" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d5e59f559 code=0x0 [ 39.452197][ T65] usb 5-1: USB disconnect, device number 2 [ 40.887419][ T679] loop3: detected capacity change from 0 to 128 [ 40.896203][ T509] udevd[509]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 40.906818][ T679] FAT-fs (loop3): Invalid FSINFO signature: 0x04615252, 0x61417272 (sector = 1) [ 40.936886][ T681] loop2: detected capacity change from 0 to 1024 [ 40.968093][ T509] udevd[509]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 40.977659][ T681] EXT4-fs: Ignoring removed bh option [ 40.989748][ T688] xt_hashlimit: size too large, truncated to 1048576 [ 41.002416][ T679] syz.3.110: attempt to access beyond end of device [ 41.002416][ T679] loop3: rw=0, sector=97, nr_sectors = 128 limit=128 [ 41.026256][ T681] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 41.060297][ T361] FAT-fs (loop3): Invalid FSINFO signature: 0x04615252, 0x61417272 (sector = 1) [ 41.070710][ T291] EXT4-fs (loop2): unmounting filesystem. [ 41.077729][ T361] kworker/u4:5: attempt to access beyond end of device [ 41.077729][ T361] loop3: rw=1, sector=225, nr_sectors = 816 limit=128 [ 41.095525][ T509] udevd[509]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 41.123124][ T512] udevd[512]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 41.141694][ T509] udevd[509]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 41.161047][ T512] udevd[512]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 42.848411][ T28] audit: type=1400 audit(1792610028.051:253): avc: denied { write } for pid=725 comm="syz.0.129" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 43.023757][ T718] loop2: detected capacity change from 0 to 40427 [ 43.031003][ T718] F2FS-fs (loop2): invalid crc value [ 43.031427][ T509] udevd[509]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 43.045792][ T718] F2FS-fs (loop2): Found nat_bits in checkpoint [ 43.080915][ T718] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 43.111956][ T718] syz.2.126: attempt to access beyond end of device [ 43.111956][ T718] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 43.166098][ T509] udevd[509]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 43.188781][ T509] udevd[509]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 43.201885][ T711] loop4: detected capacity change from 0 to 131072 [ 43.210306][ T509] udevd[509]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 43.219778][ T711] F2FS-fs (loop4): Test dummy encryption mode enabled [ 43.226911][ T711] F2FS-fs (loop4): invalid crc value [ 43.233328][ T711] F2FS-fs (loop4): Found nat_bits in checkpoint [ 43.255550][ T711] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 43.275895][ T28] audit: type=1400 audit(1792610028.471:254): avc: denied { setattr } for pid=710 comm="syz.4.124" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.615160][ T28] audit: type=1400 audit(1792610029.821:255): avc: denied { read write } for pid=744 comm="syz.3.134" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 44.693451][ T28] audit: type=1400 audit(1792610029.821:256): avc: denied { ioctl } for pid=743 comm="syz.0.132" path="socket:[18169]" dev="sockfs" ino=18169 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.768117][ T28] audit: type=1400 audit(1792610029.821:257): avc: denied { bind } for pid=743 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.839007][ T28] audit: type=1400 audit(1792610029.821:258): avc: denied { write } for pid=743 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.907722][ T28] audit: type=1400 audit(1792610029.841:259): avc: denied { open } for pid=744 comm="syz.3.134" path="/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 44.948549][ T28] audit: type=1400 audit(1792610029.841:260): avc: denied { ioctl } for pid=744 comm="syz.3.134" path="/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 44.996360][ T748] loop2: detected capacity change from 0 to 131072 [ 45.003429][ T748] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 45.012903][ T748] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 45.021450][ T748] F2FS-fs (loop2): invalid crc value [ 45.029450][ T748] F2FS-fs (loop2): Found nat_bits in checkpoint [ 45.055751][ T748] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 45.062846][ T748] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 45.085592][ T748] F2FS-fs (loop2): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix. [ 45.096227][ T748] F2FS-fs (loop2): checksum invalid, nid = 7, ino_of_node = 7, 32dd6215 vs. 1de10dc4 [ 46.627114][ T28] audit: type=1400 audit(1792610031.821:261): avc: denied { read } for pid=765 comm="syz.0.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.676729][ T28] audit: type=1400 audit(1792610031.871:262): avc: denied { getopt } for pid=772 comm="syz.0.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.717013][ T782] loop0: detected capacity change from 0 to 2048 [ 46.737486][ T509] udevd[509]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 46.763334][ T782] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 46.845828][ T289] EXT4-fs (loop0): unmounting filesystem. [ 46.863696][ T509] udevd[509]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 46.873190][ T509] udevd[509]: inotify_add_watch(7, /dev/loop0, 10) failed: Not a directory [ 47.017682][ T295] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 47.198463][ T295] usb 4-1: not running at top speed; connect to a high speed hub [ 47.206879][ T295] usb 4-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config [ 47.217076][ T295] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 47.226151][ T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.235746][ T295] usb 4-1: Found UVC 1.00 device (046d:0825) [ 47.437618][ T295] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 47.447504][ T295] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 47.456314][ T295] uvcvideo 4-1:1.1: Failed to initialize the device (-5). [ 47.464911][ T295] usb 4-1: USB disconnect, device number 3 [ 48.687410][ T802] loop4: detected capacity change from 0 to 4096 [ 48.697082][ T512] udevd[512]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 48.722670][ T802] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.735207][ T811] loop3: detected capacity change from 0 to 1024 [ 48.760277][ T290] EXT4-fs (loop4): unmounting filesystem. [ 48.766016][ T811] EXT4-fs: Ignoring removed bh option [ 48.767770][ T509] udevd[509]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 48.782746][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 48.782757][ T28] audit: type=1400 audit(1792610033.981:265): avc: denied { block_suspend } for pid=803 comm="syz.0.151" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.783642][ T512] udevd[512]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 48.820554][ T811] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 48.839918][ T509] udevd[509]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 48.853237][ T811] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 48.906718][ T287] EXT4-fs (loop3): unmounting filesystem. [ 48.914692][ T509] udevd[509]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 48.924300][ T509] udevd[509]: inotify_add_watch(7, /dev/loop3, 10) failed: Not a directory [ 50.804728][ T828] loop2: detected capacity change from 0 to 256 [ 50.833783][ T509] udevd[509]: inotify_add_watch(7, /dev/loop2, 10) failed: Not a directory [ 50.838532][ T828] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 50.891903][ T828] process 'syz.2.158' launched '/dev/fd/4' with NULL argv: empty string added [ 50.911152][ T28] audit: type=1400 audit(1792610036.111:266): avc: denied { execute } for pid=826 comm="syz.2.158" dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.941452][ T28] audit: type=1400 audit(1792610036.141:267): avc: denied { execute_no_trans } for pid=826 comm="syz.2.158" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.978710][ T28] audit: type=1400 audit(1792610036.141:268): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 51.000972][ T28] audit: type=1400 audit(1792610036.211:269): avc: denied { create } for pid=840 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.020926][ T28] audit: type=1400 audit(1792610036.211:270): avc: denied { bind } for pid=840 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.088923][ T852] futex_wake_op: syz.3.168 tries to shift op by 144; fix this program [ 53.100576][ T852] futex_wake_op: syz.3.168 tries to shift op by 144; fix this program [ 53.128874][ T28] audit: type=1400 audit(1792610038.331:271): avc: denied { setopt } for pid=859 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 SYZFAIL: mount(dev) failed (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: tun: can't open /dev/net/tun (errno 20: Not a directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=5 req=20 state=3 status=67 (errno 9: Bad file descriptor) [ 53.280762][ T28] audit: type=1400 audit(1792610038.481:272): avc: denied { write } for pid=279 comm="syz-executor" path="pipe:[14485]" dev="pipefs" ino=14485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 53.402318][ T885] bridge0: port 3(syz_tun) entered disabled state [ 53.409424][ T885] device syz_tun left promiscuous mode [ 53.414896][ T885] bridge0: port 3(syz_tun) entered disabled state [ 53.453292][ T880] tipc: Resetting bearer [ 53.465425][ T880] tipc: Disabling bearer [ 53.900353][ T359] tipc: Left network mode [ 54.358368][ T359] device bridge_slave_1 left promiscuous mode [ 54.364470][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.371933][ T359] device bridge_slave_0 left promiscuous mode [ 54.378170][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.385876][ T359] device bridge_slave_1 left promiscuous mode [ 54.392025][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.399428][ T359] device bridge_slave_0 left promiscuous mode [ 54.405510][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.413244][ T359] device bridge_slave_1 left promiscuous mode [ 54.419365][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.426717][ T359] device bridge_slave_0 left promiscuous mode [ 54.432837][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.440572][ T359] device bridge_slave_1 left promiscuous mode [ 54.446641][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.454029][ T359] device bridge_slave_0 left promiscuous mode [ 54.460162][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.468333][ T359] device veth1_macvtap left promiscuous mode [ 54.474334][ T359] device veth0_vlan left promiscuous mode [ 54.480397][ T359] device veth1_macvtap left promiscuous mode [ 54.486376][ T359] device veth0_vlan left promiscuous mode [ 54.492379][ T359] device veth1_macvtap left promiscuous mode [ 54.498404][ T359] device veth0_vlan left promiscuous mode [ 54.504354][ T359] device veth1_macvtap left promiscuous mode [ 54.510522][ T359] device veth0_vlan left promiscuous mode