last executing test programs: 49.239991493s ago: executing program 3 (id=4): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$erofs(&(0x7f0000000900), &(0x7f0000000940)='./file0\x00', 0x20400a, &(0x7f0000000980)=ANY=[@ANYRES64=r1, @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB="8c53bab0232c512502286773e51165e0f3c7c37ba8c9755c0af1398ffe6bd124ad8f9dd168f38a31f809e453409ed9cca6adb7b17256e63ab71dc38d53c6f0fc09949dd93241cd5be403f5c019c1c7cd4515a2a531d7178d7c06f75d721d4a536ce6db8fee1540e47e17a0f8d9144778e43542707a94757271823576f7be28aabd313daa80dc4387c81f67d13f6175356185ae439af5dad005305fee416d20376db7a032a47630bbafdc1bb75d63f067310880ee687e3af9592bdd76efad7c5ab1ea3c8bef4dc09af00a68dccfd2d82ad28c74ffe61df3fb978d67e273b5dc53bc355a"], 0x1, 0x1fb, &(0x7f0000000cc0)="$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") getdents64(r2, &(0x7f0000000ec0)=""/181, 0xb5) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0xf88ce2e0571bc7ea}, "0000000000000208", "5171bb74cd3660da00", "d8a024e5", "000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000080)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x1, 0x0, @remote, 0x3}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000880)=[@text32={0x20, 0x0}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000008c0)={0x1, 0x0, [{0x488, 0x0, 0x8000000000000000}]}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2a0471a, &(0x7f00000001c0)={[{@dioread_nolock}]}, 0x82, 0x48f, &(0x7f0000000200)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000700)='2', 0x1, 0x8000c61) lseek(r6, 0x595e, 0x3) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000740)='\x00', 0x89901) r9 = fspick(r8, &(0x7f0000000780)='.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000007c0)='fscontext', &(0x7f0000000800)='measure', 0x0) setsockopt$inet6_buf(r7, 0x29, 0x23, &(0x7f0000000c00)="aa835c9a318e45f7428e878328938b31ed7268a98cd2475b92bd3dedfc013761464928423ccea776ccd50744a1057e782548ecf81628fe7c22a5fff8e6ef8307280171b83246a906b4d6917b037d4da8cc8f40270bc97a5a29392b9e18d991a93af7c94cd0311dcbe30d26034af8e7db6c33ca085d0870fc56d85ca8d3c2593e6eebf17591dcf47ca62b5b649eff5915e9fb79387341b7de52d52aa07fa4cd586ce412328c6e3445", 0xa8) 47.732922066s ago: executing program 3 (id=6): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) preadv(r4, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0, 0x4d}, {&(0x7f0000000400)=""/134, 0x69}], 0x10, 0x6, 0xfffffffd) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r6, 0x1, 0x78bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c800}, 0x20000000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000200)={[{@noblock_validity}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@sysvgroups}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@auto_da_alloc_val}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@errors_remount}], [], 0x2c}, 0x81, 0x475, &(0x7f0000000600)="$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") mount$incfs(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x80, 0x0) eventfd(0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000c80)={0x0, 0xfffffffffffffee8, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x6c, r10, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xfffffffffffffdcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x2e, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) ioctl$sock_SIOCDELDLCI(r9, 0x8981, &(0x7f0000000d80)={'ip6_vti0\x00', 0x3}) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) 47.450681484s ago: executing program 3 (id=9): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x3, 0x1, 0x7fff0001}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000140)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x20004000) flistxattr(r0, 0x0, 0xdeff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=ANY=[@ANYBLOB="800000001000ffff28bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8144000009060000580012800b000100697036746e6c00004800028005000900040000001400030020010000000000000000000000000002060012004e2300000400130014000200fc000000000000000000000000000000050006007f00000008000400ff0002"], 0x80}}, 0x40014) 47.217580218s ago: executing program 3 (id=12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000080)={0x3, 0x2f0ecb95, 0x1, 0x0, 0x0, [{{r1}}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x7, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x5813, 0x10001, 0x4000000}, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000003c0)={0x2, 0x1000, "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"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0xffff, 0x25dfdbfa, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x20000800) ioctl$KVM_RUN(r2, 0xae80, 0x0) 47.152138794s ago: executing program 32 (id=12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000080)={0x3, 0x2f0ecb95, 0x1, 0x0, 0x0, [{{r1}}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x7, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x5813, 0x10001, 0x4000000}, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000003c0)={0x2, 0x1000, "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"}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0xffff, 0x25dfdbfa, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x20000800) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.753388918s ago: executing program 4 (id=297): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10) capset(&(0x7f0000000180)={0x20071026}, &(0x7f00000001c0)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)='+', 0x1, 0x4000800, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00000827bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1100000b0804070006000000"], 0x24}, 0x1, 0xba01, 0x0, 0x48094}, 0x20000040) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x209d, 0x56, 0x0, 0x7ffffff9}, 0x10) write(r2, &(0x7f00000003c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) prctl$PR_SET_SECUREBITS(0x1c, 0x0) openat(0xffffffffffffff9c, &(0x7f00000008c0)='./bus\x00', 0x800c4, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./bus\x00', 0x5c9003, 0x100) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000000280)=[{&(0x7f0000000500)=""/156, 0x9c}], 0x1, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/116, 0x20001c34}], 0x1, 0x0) r5 = syz_io_uring_setup(0x3ddf, &(0x7f0000000bc0)={0x0, 0xad50, 0x400, 0x1, 0x1}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000b80)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000380)=[0x1, 0x7790], 0x2) write(r3, &(0x7f0000000940)='\x00', 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000240)={0x2, 0x0, [{0x40000092}, {0x9b8, 0x0, 0x3eb}]}) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f00000004c0)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000c40)=@newtfilter={0xc28, 0x2c, 0x601, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0xffffffff, {0xb}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xbf8, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0xffff}}, @TCA_BASIC_ACT={0x44c, 0x3, [@m_skbmod={0xe4, 0x15, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0xe, 0x8, 0x5}, 0x4}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}]}, {0x4d, 0x6, "3a0ffc93ae130ba71da25fe63f1a9c162f0836d424a19744533b06531bcdd4363a10f25602205856f194e79966144d821c074120bceb4d1c8a27c7d7289003e2f93be18cf335f7f4be"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ct={0xac, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x5}, @TCA_CT_MARK={0x8}, @TCA_CT_ZONE={0x6, 0x4, 0x8e42}]}, {0x69, 0x6, "6b373e4f0859942fe1a46836cfd5a08b3fbd442f856cb3de17847f417909a1ffc6bb2c94d44f34ee9096c7dfc2fac52b8cacb08ee193b7ac06658834488cdb65f3c50122fd83295e7c58056062f8f7be9269fe20a15ff7c9bd427e99d6475fd53a2c2d53c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0xec, 0x9, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x8}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x6, 0x2, 0x28000000, 0x9}}]}, {0x97, 0x6, "ef17c00be6c4e934056d47ee505f92f78dcfcbc9edfff806728582683823e0ffa81d5e8acc89a8e03ffb9878213e14522e5282a108261ee21d602d40c464bf305e568f29de27a9e1245d43c22a4ecae64d6eee553ea8ce5d04c0bad4d576a2ad93644fd38792b3b4f72a694748cc8b7a6b4863e1202f986f2da764f7c7d2e1ec5f0d1acb31a9a7eb0601092df18ea5bdb1e5c1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0x48, 0xa, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x10001, 0x8, 0x35, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x7c, 0xb, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0x3fc}, @TCA_CT_MARK={0x8, 0x5, 0x1}]}, {0x44, 0x6, "e740c8da4ad7e913d0a81623297c04385033bb46b899fce4844f987714085c3c4b2eaa7dec06acbfdd11433a4ab4b624f086e8a289b26ce8f45c5946ee1a72fa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x108, 0x1f, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "599ee63b5fa8f776c257f337ea55a619"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "7b42526e47b72f6427e8f7d99125e849"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x35e8}, @TCA_CT_ZONE={0x6}]}, {0x89, 0x6, "b6f7901e511567f60af5e1a1ac4efe8b0bba836fc22e0695e5f465825aac63c047cefeaa7467e10cfc597ad2df1d4922c5a965eb29f7e67af6c9f2dba90f27b9e9da385cb731bb7cac4e5401283a542afa89fd2953671d67e5e8f3ddf3b6f7707b05a95abb57e788b8f02b62eeb664b1f0e0c44b59328aa946adb1c052b29088aa725b7ade"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BASIC_ACT={0x550, 0x3, [@m_ctinfo={0x124, 0x1d, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x20000000}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}]}, {0xd6, 0x6, "28d85ffc97159f3d89ecba2b1cf56e057fab96e38786c3f6a551e00d3adcf73d6ee0539567cc388abd92e01566626f59b9dfdbe91eb230208542755be8a6d1f14f7b2057589ff7c92acae54aca42573b4dbb071c41815dd9df61e3bffc4db40c00e49f80438cf19c24229eb57e1343f4587ebf73cdff2070eb587e94bb83f68e2e670de5f5194800118d60e05ec94219c6bd5147ff6d536f42b26e2c71baf09e50598fc9151c1dd46ef51143e99794923ed5d4793860676674773951e2b26b2ffd3f825db6fe32614dd11b77eee46d6fc715"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0x150, 0xa, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xa027, 0xffffffffffffffff, 0x0, 0x4}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xbcc, 0xffffffffffffffff, 0x7}, 0x1}}]}, {0xe1, 0x6, "35b703eb5036d8e26374755c30448cba72c86864dc7606a6735545e123ee7c87052046aae2bb504eaec7a744990de7721f382f004515bae8ecdb36c540a3b9f7beaeb294179822f12488a6e3daa584273a0b5be051997fb5b6046bccd7246737908a95b30ccc7984a23cdd823a905c0565340d2301f5308efbcf7cb1090b759f086be3300e7923a0241abd262b9b204e2f3ee0db7df49ad8e72598939003a6bbb4f8fdd03895b9c372f7baca5ca9def0ccf7705c78c56ef7dbcc732566ded2d4222a0a93ef17ce524e2cf7299da4cd97b9c769dbe3e9121b22b4664928"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x1d0, 0x10, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xfa, 0x2, 0x8695, 0x2}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xfffe0000, 0x1, 0x2, 0x3}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x10, 0x2, 0x7}, 0x8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10001, 0x8001, 0x4, 0x130, 0x7}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0xffffffffffffffff, 0x1, 0xfa2}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x1, 0x1, 0x4}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x1, 0x4, 0x6}, 0x3}}]}, {0xc3, 0x6, "185ebed3ef0fae69684fd3bc74d1b02cbb045357162b4208689e5d866116aa67970eadc484affa654b3b604b7fd562b0a0728eeda3a3301e571bcf6bc3a6a0d724733435ab2af8dee166f8834d897a703949efd2d6826639bd403c233cc6a0bbe9542472a180756f27ab673b3d20832fd13e9ce2883c1bdc07d5f10d1c43ff2be96528380e05623718fce3b4ab399a8788bee283bc685ebcb7e5915f76352d8b7dae5cf006935a1c240da263b6b73c2823662dbe5abcec7b3dcb07c7ec0bd1"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0x108, 0xf, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x803, 0x9c8, 0x20000000, 0x7, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffff9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf}]}, {0x81, 0x6, "78da0594f74b18e8ddae9b05a7dd3dc4f1e0e134639fedd44b8e4ca18128ac918acc95b157ad21ec172b9dce5a8ad9007eac485881f073822cf15f51174922f072bedd62424d943db18c06cbf4ee777ef54ed8061225f31a9ae7b29d56ffeefb225c25725717ab84e7fabe4cba45e68692ac739ef3d01aed5e0e51cbda"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_EMATCHES={0x230, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7ff, 0x3, 0x4}, {0x3, 0x1, 0x8, 0xe}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x70, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xe00, 0x1, 0x5}, {0x1ff, 0x75, 0x1, 0x3, 0x0, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0xfff9, 0x8, 0x6}, {0x2, 0x6, 0x2}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xe, 0x3, 0x4e}, {0x9, 0x8, 0x6d, 0x9}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x6}, {0x9, 0x9, 0x4, 0x2, 0x2, 0x1, 0x1}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5, 0x8, 0x6}, {0x4, 0x5, 0x4}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x8}, {0x3, 0x4000080, 0x81, 0x2, 0xa, 0x2, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x3}, {0xc9, 0x5, 0x2, "7d96f66f07"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x4, 0x3, 0x1}, {0x3, 0x1, 0x4, 0x10000}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x5}, {0xffff, 0x6, 0xfffffffc, 0x7}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x11c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x3ff, 0x2, 0x4}, {0x0, 0x3, 0x1, "c5da5a"}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x1000, 0x2, 0x1}, {0x1, 0x2, 0x3, "c9b7"}}}, @TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0xffff, 0x4, 0xef}}}, @TCF_EM_CONTAINER={0x9c, 0x2, 0x0, 0x0, {{0x0, 0x0, 0x81}, "1e3714e911e5bc38b94c25b07efc811b935ee94e47671300330f806a7e8e8757f96e2d8a0f5d78a4cea2007778e3bd4e45660cde00cb2431c661f6b7e8d8dcc5fb5a2b7a00e1b7751c3c5434e24f037b8b3bfff0a523b63de63e396f271027bb7f6c4aa38627e0fa4576cc11140f1da75208fac4f9471cfab1aeeb4d450cb3d744b2bcc3e521f01251b0e4ee62"}}, @TCF_EM_META={0x48, 0x2, 0x0, 0x0, {{0x5, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="000000004d6a4a9c7d05"]}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="bf1f5e59efc99c70", @TCF_META_TYPE_VAR="ecdb764c71b31b51", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="a3df85c98a1a37", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="2fa46c6fbf43"]}]}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xe}}, @TCA_BASIC_POLICE={0x18, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0xac}]}]}}]}, 0xc28}}, 0x0) truncate(&(0x7f0000000980)='./bus\x00', 0x9471) 5.635811549s ago: executing program 2 (id=298): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183f000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) wait4(r0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x350, 0x10000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000040)="65486d795fe250efdeed7ddb72fc866561511574b9ff9be37786fe66e431205f2e3a", 0x22) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) ptrace$pokeuser(0x6, r0, 0x388, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183f000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) wait4(r0, 0x0, 0x0, 0x0) (async) ptrace$pokeuser(0x6, r0, 0x350, 0x10000) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing/dynamic_events\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000040)="65486d795fe250efdeed7ddb72fc866561511574b9ff9be37786fe66e431205f2e3a", 0x22) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000080)) (async) ptrace$pokeuser(0x6, r0, 0x388, 0x8) (async) 5.163960707s ago: executing program 4 (id=300): mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', 0x1c0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x80080, &(0x7f0000000080)={[{@noquota}, {@abort}, {@bh}, {@delalloc}, {@jqfmt_vfsold}, {@noquota}]}, 0x0, 0x4ab, &(0x7f0000000300)="$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") (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x80000008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x8) (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x74, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x1, 0x1, {0x0, 0x7}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xfffffded, 0x1, {0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x81}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_BROADCAST]}, 0x74}}, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000880)=0x5) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r2, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f0000000980), 0x318, 0x0) (rerun: 32) recvmmsg(r2, &(0x7f0000000bc0), 0x10106, 0x2, 0x0) ptrace$cont(0x18, r1, 0x0, 0x7) (async, rerun: 32) sched_setaffinity(r1, 0x8, &(0x7f0000000c00)=0x2) (rerun: 32) pread64(0xffffffffffffffff, &(0x7f0000000c80)=""/102400, 0x19000, 0x1000000300) (async) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) io_setup(0x4fe, &(0x7f0000019c80)) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0x181) (async, rerun: 64) syz_mount_image$fuse(0x0, &(0x7f0000000a40)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async, rerun: 32) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) (rerun: 32) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000200)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x19, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000019cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file7\x00', 0x8920a0, 0x0, 0x1, 0x0, 0x0) (rerun: 32) 4.305842104s ago: executing program 2 (id=301): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty, @local, @private1, 0x9, 0x91, 0x5, 0x0, 0x3, 0x1020090}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50fd8, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 4.139872011s ago: executing program 2 (id=303): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x1002, 0x4) syz_emit_ethernet(0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb28f6ee412b8f86dd60ffff00002d2f00fc020000000000000000000000000000fe8000000000000000000000000000aa242088a80000000007ff0001000008000006000086dd"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f0000000180)="1e524f25fd14fa820699a187939b35d62a5a7e8b237175e090718ad4d6c1461f8f33b26452d8849531ea0ce1ff0137c13b2d39732515b6883bb061e169871d5f09dbfdc552d8291a7ed85e9e9b92d88e784a4282cdeb353902897c27c7f421fbb40956e12803c5cc6c5b8d145a3749aa14c1aa9ac7ba38bc386b25dafcea8dc88d596e2284bc4c", &(0x7f0000000240)=""/8}, 0x20) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000042) syz_mount_image$ext4(&(0x7f0000000d40)='ext4\x00', &(0x7f0000000d80)='./file1\x00', 0x2200000, &(0x7f0000000dc0)={[{@discard}, {@nodelalloc}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f0000001140)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000016c0)='./file1\x00', 0x80342, 0xcc) pwrite64(r2, &(0x7f0000001700)='2', 0xfdef, 0xfecc) 4.127582292s ago: executing program 1 (id=304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f00000003c0)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f00000003c0)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000000)=0xc, 0x4) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x18, &(0x7f0000000000)=0xc, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x0, 0x8000000000005, 0x800040068], 0xffffffff, 0x547d1}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x0, 0x8000000000005, 0x800040068], 0xffffffff, 0x547d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.039641361s ago: executing program 2 (id=306): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x8c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x34, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2df8d080}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r0 = socket(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) prctl$PR_SET_MM_EXE_FILE(0x3a, 0xd, 0xffffffffffffffff) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (rerun: 64) syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async, rerun: 32) write$binfmt_script(r3, &(0x7f00000006c0), 0x208e24b) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000740)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000800)=[@text16={0x10, &(0x7f0000000840)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_tables_matches\x00') (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000940)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000480)={@dev={0xfe, 0x80, '\x00', 0x41}, 0x800, 0x0, 0x3, 0x1}, 0x20) (async, rerun: 32) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000004c0)=0x5, 0x4) (rerun: 32) sendmsg$inet6(r5, &(0x7f00000002c0)={&(0x7f0000000540)={0xa, 0x4e1e, 0x80000, @mcast1, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYRES64=r2], 0x18}, 0x8004) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) 4.033201652s ago: executing program 1 (id=307): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = getpgid(0xffffffffffffffff) ptrace$getregs(0xffffffffffffffff, r0, 0x8, &(0x7f0000000340)=""/4096) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) setpriority(0x0, 0x0, 0x2a14b58) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) (async) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) getpgid(0xffffffffffffffff) (async) ptrace$getregs(0xffffffffffffffff, r0, 0x8, &(0x7f0000000340)=""/4096) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) 3.969931078s ago: executing program 1 (id=309): inotify_init1(0xeaff) io_setup(0x3, &(0x7f0000000000)=0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xc, r1, 0x0, 0x0, 0x6}]) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x200, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x400000000008d}, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f00000001c0)=ANY=[@ANYBLOB="22010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000dffff00012700006cdc0201011124020101020502cb000002000009"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = fsmount(0xffffffffffffffff, 0x1, 0xa8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000400), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000440), 0x33f2844, 0x2, 0x0) setresgid(0x0, 0xee01, 0x0) move_mount(r3, &(0x7f0000000480)='./file0\x00', 0xffffffffffffffff, &(0x7f00000004c0)='\x00', 0x10) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500), 0x140, 0x0) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f0000000540)={0x2b, 0x1e, 0x0, 0x10, 0x8, 0x63, 0x5, 0x2, 0x1}) 3.731656202s ago: executing program 4 (id=310): socket$packet(0x11, 0x2, 0x300) setpriority(0x0, 0x0, 0x2a14b58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getpeername$packet(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) mkdir(&(0x7f0000000200)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./mysys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000b40)='1', 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x2008000, &(0x7f0000000c00)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x101}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}, 0x32}]}, 0x9a, 0x4ed, &(0x7f0000000e80)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2c004040}, 0x804) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="f00000000001010400000000000000000a0000004c0001802c00018014000300fe8000000000000000000000000000bb14000400fe8000000000000000000000000000aa1c0002800500010006000000060002004e220000060003004e2200004c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000bb1c0002800500010006000000060002004e220000060003004e22000008000700000003e8200004801c000180050001"], 0xf0}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) remap_file_pages(&(0x7f0000603000/0x3000)=nil, 0x3000, 0x0, 0x4, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000004) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000000)='bpf_lsm_sb_set_mnt_opts\x00') socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000080)=0x2, 0x4) 3.55576121s ago: executing program 4 (id=311): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020f0000050000000000004b00000000030006103e4b860002000000e00000e6ff00040000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000240)='syzkaller\x00', 0x1, 0xa6, &(0x7f0000000940)=""/166, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1200000001000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a\x00\x00\x00\x00\x00'], 0x10) futex(0x0, 0x3, 0x0, &(0x7f0000000a80), 0x0, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r5, &(0x7f0000000b00), &(0x7f0000000b40)=@tcp6=r3}, 0x20) write$binfmt_misc(r2, &(0x7f0000000b80), 0xfffffecc) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x200000714f, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000c00)='./file0\x00', 0x8052, &(0x7f0000000380)={[{@noauto_da_alloc}, {@test_dummy_encryption_v1}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x43, 0x4f7, &(0x7f0000000cc0)="$eJzs3U9sFNUfAPDvbP/z50d//PihIGoRjY3EFgoKBxOD0cSDJkZM1GPTFoIUatqSCEGzJAaPhsS78ejVg1f1QownE694NDEkxHABTIxrZndmu7vdLXTZdsF+Psl235vZmffevnmzb97bnQawYY2kf5JK+FpEbIuIQuMLRipPt29enLpz8+JUFEul438k5c1upfFMtpvYnEVGCxGFT5OlFTUWzl84PTk7OzOfxccXz3w4vnD+wvOnBrMlR48ePnTwyIsTL6y+UE3SS8t1a/cnc3t2vf7+lTenevPleWq15eiUkRhplpWyZzqdWJdtrQknvV3MCKuSHv9pdfWV2/+26ImVKq+4jjkD1lqpVCoNtF5dLDW6tGwJ8NBKots5ALoj/6BPr3/zR7OOQP/adD+67saxygVQWu7b2SPiyfLCfBykr+H6tpNGIuK94p9fpo9Yo3EIAIBa3x/Le4IN/b/hyszIX+euvpw+/yebQxmOiP9GxPaI+F9E7IiI/0fEzoh4JCIebdh/T0SUVki/cbS5mn51EqpwvUNFbSrt/72UzW0t9f/qMjDck8W2RuQd5pkD2XsyGn0DJ07NzhxcIY0fXv3l81bravt/6SNNP+8LZvm43tswQDc9uTjZdoEb3LgUsbu3sfxJb0RSrZskInZFxO5V7He4Jnzqua/3VCN99a+7e/nLSk3n0Towz1T6KuLZSv0Xo67+l1JM6uYnz0yenDk5c3aiOj85PhizMwfG06PgQNM0fvr58lut0r9r+b/9rXGT1458dzxrWfcvrf9NkRRrj/3N1VKXDScRSXW+dmH1aVz+9bOW1zTtHv/9yTvlcH5d+tHk4uL8wYj+5I3lyyeWts3j6XMUK+Uf3de8/W/PtknficciIj2IH4+IJ6JyhZjmfW9EPBUR+1Yo/4+vPP1B++VfW2n5pxvOf5War6v/ynx9f8zMLx0I9YEkmxusLBmqXdVzeu+1Oy1OHvdW/4fLodFsyfLzX5rDpO4UsTyDlUD+aZcu+bsj7yAAAAA8+AoRsaVmLGlLFApjY5UxoB2xqTA7t7C4/8TcubPT6bqI4egr5CNdlfHgviQf/xyuiU80xA9l48Zf9AyV42NTc7PTXS05sLnc5pPCWMS7PTXtP/V7Z4aYgQeZ32vBxrVS+0878TuvrGNmgHV175//Vz9e04wA666m/bf6hX+xje99AQ8B1//A0tfz736jH+cMePiVtGXY0FbV/ve7CSD8m/TG29Vwoas5Adab/j9sSK1+zt+ZQGmg+arBWP7iGFx5hz3RXjaGmqTVlUDas+pK6kPtbJXfTaHla6Kwuh0ORGfq9MR9vhvF+YWTOzt+8Jey78q3t3m0vGPFN+vSTpsFas8SI63+jQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAD758AAAD//y283iw=") socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x86100) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x275a, 0x0) r9 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="002218000000050c150825ff0904a10109"], 0x0}, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000500)={r8, 0x803, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fc2b7fb0a010000000000000000030000000000000000000000000000040000050000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000900000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r10 = syz_open_dev$loop(&(0x7f0000000640), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000680)={r7, 0x0, {0x2a12, 0x80010000, 0x0, 0xffff, 0x4, 0x0, 0x1, 0xe, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xde, 0x8000]}}) setsockopt$inet6_int(r6, 0x29, 0x42, &(0x7f00000000c0)=0xffff7b6e, 0x4) setsockopt$inet6_int(r6, 0x29, 0x2, &(0x7f0000000100)=0x7, 0x4) getsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000000140)=""/19, &(0x7f0000000180)=0x13) 3.410869555s ago: executing program 2 (id=312): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000400), 0x10}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x60bc2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x10, &(0x7f0000000580), 0x0, 0x48f, &(0x7f00000005c0)="$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") r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtaction={0x1c, 0x76, 0x1, 0x0, 0x4000, {}, [{0x4}, {0x4}]}, 0x1c}}, 0x0) bind$inet6(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x12b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000b80)=0x7, 0x4) getsockopt$inet6_mreq(r2, 0x29, 0x1c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000c80)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = syz_open_dev$evdev(&(0x7f0000000cc0), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000d00)=ANY=[], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x0, 0xf, 0x0, &(0x7f0000000e00)="1c736e4a79b04aa00a3c6ffda2e386", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x77) 3.16414404s ago: executing program 0 (id=313): syz_mount_image$vfat(&(0x7f0000000c00), &(0x7f0000000480)='./file2\x00', 0x8410, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES8, @ANYRESDEC, @ANYRES8=0x0], 0xdf, 0x2a0, &(0x7f00000001c0)="$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") (async, rerun: 64) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x21, &(0x7f0000000080)) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async, rerun: 64) wait4(r0, 0x0, 0x8, 0x0) (async, rerun: 64) ptrace$poke(0x4, r0, &(0x7f0000000100), 0xfffffffffffffffe) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = syz_io_uring_setup(0x7c5b, &(0x7f0000000140)={0x0, 0xeb2c, 0x20, 0x1, 0x159}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'vxcan1\x00', 0x0}) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000d40)='/proc/cpuinfo\x00', 0x0, 0x0) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000d80)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000dc0)='.\x00', &(0x7f0000000e00), 0x8080, &(0x7f0000000e40)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1, 0xc, &(0x7f0000000fc0)=ANY=[], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000010c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001100)={0x0, 0x7c80, 0x10}, 0xc) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001140)={0xffffffffffffffff, 0xf34b, 0x8}, 0xc) (async) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) (async, rerun: 64) r12 = syz_open_dev$mouse(&(0x7f0000001240), 0x2, 0x620140) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001300)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000a40)=@raw=[@generic={0x10, 0x5, 0x1, 0x6, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xeeec}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @alu={0x4, 0x0, 0x5, 0x0, 0x3, 0xffffffffffffffff, 0x1}], &(0x7f0000000b40)='syzkaller\x00', 0x6, 0x91, &(0x7f0000000c40)=""/145, 0x41100, 0x1, '\x00', r4, 0x0, r6, 0x8, &(0x7f0000000e80)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000ec0)={0x1, 0xd, 0x10000, 0x80000000}, 0x10, 0x3d9f, r7, 0x3, &(0x7f0000001280)=[r8, r9, r10, r11, r12], &(0x7f00000012c0)=[{0x3, 0x1, 0xb, 0x5}, {0x4, 0x1, 0x0, 0x1}, {0x3, 0x5, 0x6, 0x4}], 0x10, 0xcbc}, 0x94) (async) syz_io_uring_setup(0x48b, &(0x7f0000000580)={0x0, 0xd435, 0x4, 0x2, 0x4, 0x0, r3}, &(0x7f0000000600), &(0x7f0000000680), &(0x7f00000006c0)) (async) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="d40100004000000018000000000000000000000000000000950000000000000038722c013653e84c584fdd38a1990000dfe83640d72226cbc0c89b926a"], &(0x7f0000000800)='GPL\x00', 0x5, 0x9c, &(0x7f0000000840)=""/156}, 0x80) r13 = dup(r2) write$FUSE_BMAP(r13, &(0x7f0000000240)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r13, &(0x7f0000000380)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async, rerun: 32) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (rerun: 32) 2.191658358s ago: executing program 0 (id=314): r0 = getpid() syz_pidfd_open(r0, 0x0) (async) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) (async) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x900, &(0x7f0000001dc0)={0x8a, 0x77, 0x80000}, 0x20) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x36, 0x32, 0x39, 0x37, 0x30, 0x64, 0x66, 0x36, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000200)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r4) (async) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x36, 0x32, 0x39, 0x37, 0x30, 0x64, 0x66, 0x36, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000200)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r4) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r4) (async) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r4) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc2}, &(0x7f0000000380)={0x0, "56f6ec73384b466c22430d10ffd1797475c6639685e829e340a2194bde2314c7d5df320fa3d58208993f3a7e2343d2e858c0ef4a03fbe2da5bdbe4aa1497a013", 0x1e}, 0x48, r4) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @auto=[0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x64, 0x30, 0x30, 0x49b9b7e4dbfa7a3a, 0x30, 0x66, 0x30, 0x30, 0x63]}, &(0x7f0000000480)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r4) add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x32, 0x30, 0x32, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r4) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x35, 0x30, 0x30, 0x35]}, &(0x7f0000000680)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r4) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000780)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x34}, 0x48, r4) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r4) (async) add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000880)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r4) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x33, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000980)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1f}, 0x48, r4) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc1}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff001122ddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x2c}, 0x48, r4) (async) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc1}, &(0x7f0000000a80)={0x0, "00112233445566778899aabbccddeeff001122ddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x2c}, 0x48, r4) add_key$keyring(&(0x7f0000000b00), &(0x7f0000000b40)={'syz', 0x0}, 0x0, 0x0, r4) add_key$fscrypt_v1(&(0x7f0000000b80), &(0x7f0000000bc0)={'fscrypt:', @auto=[0x33, 0x5a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000c00)={0x0, "0011223344552233445566778899aabbccddeefb00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r4) (async) add_key$fscrypt_v1(&(0x7f0000000b80), &(0x7f0000000bc0)={'fscrypt:', @auto=[0x33, 0x5a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000c00)={0x0, "0011223344552233445566778899aabbccddeefb00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r4) add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f0000000cc0)={'fscrypt:', @desc3}, &(0x7f0000000d00)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r4) add_key$keyring(&(0x7f0000000d80), &(0x7f0000000dc0)={'syz', 0x2}, 0x0, 0x0, r4) add_key$fscrypt_v1(&(0x7f0000000e00), &(0x7f0000000e40)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000e80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r4) (async) add_key$fscrypt_v1(&(0x7f0000000e00), &(0x7f0000000e40)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000e80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r4) r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f0000001140)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x88400, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) (async) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f0000001140)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x88400, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) r7 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000001280), 0x88841, 0x0) ioctl$DM_TABLE_LOAD(r7, 0xc138fd09, &(0x7f00000012c0)={0x4, 0x0, 0x0, 0x298, 0x138, 0x1, 0x0, 0x25411, 0x0, 0x0, @by_dev={r6}, [@verity={0x0, 0xc48, 0x0, 0x160, 'verity\x00', {'1', 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '4096', 0x20, 0x200000000061, 0x20, 0xfa, 0x20, 'sha512', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, @hex=@hex16=[0x34, 0x66, 0x38, 0x33, 0x39, 0x38, 0x38, 0x35, 0x37, 0x33, 0x37, 0x33, 0x33, 0x34, 0x0, 0x63, 0x31, 0x37, 0x61, 0x35, 0x66, 0x61, 0x37, 0x30, 0x63, 0x63, 0x33, 0x36, 0x38, 0x32, 0x65, 0x66], ' 2 ignore_zero_blocks check_at_most_once'}}]}) add_key$fscrypt_v1(&(0x7f0000000f00), &(0x7f0000000f40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000f80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r4) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000001080)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r4) keyctl$unlink(0x9, r3, r4) syz_pidfd_open(r2, 0x0) (async) syz_pidfd_open(r2, 0x0) 2.191322518s ago: executing program 5 (id=315): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x8000) 1.929085355s ago: executing program 5 (id=316): syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r0 = inotify_init1(0x800) r1 = fsopen(&(0x7f00000002c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) inotify_add_watch(r0, &(0x7f0000000300)='.\x00', 0x2000775) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0, 0x6c) getdents(r3, &(0x7f0000001f80)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='atkbd', 0x5) fstat(r4, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000001300), 0x4, 0xbbf, &(0x7f00000013c0)="$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") syz_kvm_setup_syzos_vm$x86(r2, &(0x7f000027a000/0x400000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f00000011c0)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000001200)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000001240)='./bus\x00', 0x0, 0x194) getdents(r5, 0xfffffffffffffffd, 0xbb) 1.841736684s ago: executing program 0 (id=317): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000000000000791048000000000071000a000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 32) r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_tx_ring(r3, 0x107, 0x5, 0x0, 0x0) (async, rerun: 32) pipe(0x0) (rerun: 32) pselect6(0x65, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x300, 0x0, 0x4, 0x2}, 0x0, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) (async) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e0a, 0xb, @mcast1, 0xf}, 0x1c) (async) sendmmsg$inet6(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x20004840) add_key$keyring(&(0x7f0000002500), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = gettid() timer_create(0x1, &(0x7f0000002540)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000002580)) (async, rerun: 32) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000025c0)={0x0, 0x2, 0x3ed4, 0x5}) (rerun: 32) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(0x0, 0x1, &(0x7f0000002600), 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) keyctl$setperm(0x5, 0x0, 0x4221030) (async) keyctl$get_security(0x11, 0x0, 0x0, 0x0) (async) getgroups(0x2, &(0x7f0000002640)=[0xee01, 0xffffffffffffffff]) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000400)="0f20e06635000040000f22e0c4c2bdde490abaf80c66b8b480258666efbafc0cb80800ef66b8010000000f01c166b9800000c00f326635001000000f30660f388298e9cbea003850006526640fc75d4f26650f7821f366640fa4240f", 0x5c}], 0x1, 0x0, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0x692, 0x7d, 0x7fffffffffffffff, 0x4000000010000e51, 0x102, 0x547a, 0x9, 0x200000000006, 0xfffffffffffffffd, 0x3aa, 0x2, 0x1, 0x5, 0x40000000009, 0x378, 0xfffffffffffff802], 0xdddd1000, 0x194110}) (async, rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f00000024c0)='./file1\x00', 0x103a42, 0x32) 1.571429261s ago: executing program 5 (id=318): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) mount$bind(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x2108cff, 0x0) setrlimit(0x5, &(0x7f0000000180)={0x40, 0x6}) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="814f04000000000024001280080001006772650018000280050013000100000005000a0002000000040012"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x24020000) syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000680)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x8) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) 886.939621ms ago: executing program 0 (id=319): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x2, 0x50000) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0x208e24b) (async) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000240)=0x3) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) chdir(&(0x7f00000001c0)='./file1\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 812.277318ms ago: executing program 0 (id=320): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) (async) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000340)=0x100, 0x4) (async) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e27, 0x40000000, @mcast2, 0x4}, 0x1c) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) io_setup(0x239f, &(0x7f0000000000)) (rerun: 32) io_submit(0x0, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) recvfrom(r1, 0x0, 0x0, 0x140, &(0x7f0000000440)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x80) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000007c0)="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", 0x101}], 0x1}}], 0x1, 0x4001c00) (async) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000180)={0x200000, 0x200082, 0x6, 0x0, 0x5, 0x4}) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000500)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(&(0x7f0000000000), &(0x7f0000000040)='.\x00', &(0x7f0000000080)='binfmt_misc\x00', 0x2200892, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000700)=""/174, 0xff56) 685.961511ms ago: executing program 5 (id=321): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c666c7573682c726f6469722c726f6469722c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c001762a07a915c8f6c3378b924fc250bdae45cd22bb33f29d72cf1c8410df88b83b9710b49374a748455718cc4af5f3ced9aa10632d595e9c8c3a89f41b650b9ebd4886ae65bf02b7c8ea4e76ef2cc241ac9f89f2753df98db0ba9558c753363f296424ec60e703fac2db7e9f31283852e115cf6acb8d77b3e5d68", @ANYRESDEC, @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000340)="$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") (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000680), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) ioctl$NILFS_IOCTL_RESIZE(r0, 0x40086e8b, &(0x7f00000008c0)=0x2) (async) write(0xffffffffffffffff, &(0x7f00000006c0)="bae2", 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000980)='./dev\x00', &(0x7f0000000740)='omfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000007c0)={0x1, 0x0, 0x98, &(0x7f0000000800)={0x2000, 0x2400c, 0x1}}) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x3, 0xff) (async) syz_emit_ethernet(0x3e, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5786dd6c370c8900082b0000000000000000000023000000000000fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40000322, 0x0) ftruncate(r0, 0x4a8e) 614.347428ms ago: executing program 1 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x203, 0x40) write(r0, &(0x7f0000000100)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setxattr$incfs_id(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280), &(0x7f00000002c0)={'0000000000000000000000000000000', 0x33}, 0x20, 0x3) r1 = socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r2, &(0x7f0000000b00), 0x1000000000000354, 0x9) (async) vmsplice(r2, &(0x7f0000000b00), 0x1000000000000354, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000b00)=""/17) (async) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000b00)=""/17) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000940)={'veth0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000940)={'veth0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000980)=0x19ca, 0x4) (async) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000980)=0x19ca, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000009c0)=0xf3f, 0x4) sendto$packet(r3, &(0x7f0000000a00)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000a80)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}]}, 0x10) getresuid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)) (async) getresuid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)=0x0) syz_mount_image$ext4(&(0x7f0000001240)='ext4\x00', &(0x7f0000001280)='./bus\x00', 0x8080, &(0x7f00000012c0)={[{@errors_remount}, {@resuid={'resuid', 0x3d, r5}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x488, &(0x7f0000000300)="$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") r6 = accept$nfc_llcp(r0, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000200)={0x6, 'pim6reg\x00', {0x5}, 0x8000}) 559.981094ms ago: executing program 0 (id=323): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f00000008c0)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000900)={0x18, 0x2, {0x1234, @loopback}}, 0x1e) bind$pptp(r0, &(0x7f0000000940)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000980)={0x18, 0x2, {0x5678, @loopback}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000009c0), 0x101002, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000a00)=0x1) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000a40)=0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc0001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x4000, &(0x7f0000000680)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}}, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000780)={[{@all, 0x3d}]}) mount$9p_fd(0x0, &(0x7f00000007c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000800)) umount2(0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pselect6(0x40, &(0x7f0000000180)={0x0, 0xfffffffffefffffe, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000001c0)={0x10, 0x0, 0xfffffffffffffffc, 0x9, 0xffffffffffffffff, 0x6661, 0x7fffffff, 0xf67}, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f0000000200)={0x2, 0x4e20}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000000)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="b405000000000000e4b6229507f0820000000000000000000000000000000000000000762994e7dafb06d0db0e32a59ee11bfbfcb657484e523fa2468e0f9d0645eed183b67c581cc50596a5f85af23dcc4882b5207b7f7f560491c0d521834bb691d2c5407cfb4e6eafa4d7e580e46648672b85bdfd041e50dd2f1e48135d1351058c566af13b89998ed5a0fd07ceebe83b03c7132f39eeccabe42e7412a07270edf08e3df305e29221e2f0fa28efd3087956bf3ff429e40be2d5e975d5685afdce3e50ea0f1b1f55f0ea7e839d4fac2254efc5a9003eb24da7af4dfab7984f58df2a"], &(0x7f0000000340)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000480), 0x22e, 0x10, &(0x7f00000004c0), 0x1dd}, 0x48) 447.934825ms ago: executing program 4 (id=324): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300090468fe0700000000000000ff3f04000000484100100000000004e438d2fd00000000004a7b72000000000000000000f90000", 0x39}], 0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="4dff000013001118680907070000000f0000ff3f04000000170a00170000000004001400100003002e302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000300)) lseek(r1, 0x7, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300090468fe0700000000000000ff3f04000000484100100000000004e438d2fd00000000004a7b72000000000000000000f90000", 0x39}], 0x1) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="4dff000013001118680907070000000f0000ff3f04000000170a00170000000004001400100003002e302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f0000000300)) (async) lseek(r1, 0x7, 0x0) (async) 447.573425ms ago: executing program 5 (id=325): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0) 294.65243ms ago: executing program 4 (id=326): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000480), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0x80002c1, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000500)='./file1/file0\x00', 0xf000010, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x180) getsockopt$SO_NETNS_COOKIE(0xffffffffffffffff, 0x1, 0x47, &(0x7f0000000600), &(0x7f0000000640)=0x8) syz_mount_image$vfat(&(0x7f0000000680), &(0x7f00000006c0)='./file0\x00', 0x800000, &(0x7f0000000700)=ANY=[@ANYBLOB="003b5ccbef96e2910d1d3d3c64430bf7a5ad37c9b06cf2d4db2baf1e9a4ac220d025df06a66f3fc72dee10c256b593128c43061baeb57734a71592d367d34583be1740dd9270a63f706d88a4f4eba6a639970cd0b69ba55d35a215c52dc3cfefcf7411477de5a0c80e287f8e0544de55401e3978a32b74f10d48962c0e9481842c95f7b7dee55e64d351650369b65a81ef058ce4a964557268cdaa81ddb70858307cb5e36f583befaae3c436e34a8bfaa7bab87ded833e2b49d91dc3983543c754a2216bb0892a5ac953048c0f657fb94af59371d41a7ce2c8d3955291e1b189878c3b026920547f00"], 0x5, 0x385, &(0x7f00000018c0)="$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") inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000001c80)='./file1\x00', 0x42, 0x40) fallocate(r2, 0x0, 0x8e14, 0x8ffff) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x4000010, r0, 0xf5a36000) copy_file_range(r2, 0x0, r2, &(0x7f0000001cc0)=0xffff, 0x9, 0x0) tgkill(0x0, 0x0, 0x1d) umount2(&(0x7f0000001d00)='.\x00', 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000e8"], &(0x7f0000000180)=""/174, 0x32, 0xae, 0x1}, 0x28) syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000b40)='./file0\x00', 0x280440e, &(0x7f00000000c0), 0x1, 0xbe3, &(0x7f0000000c40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000001880)='./file1\x00', 0x64042, 0x49) write$P9_RREADLINK(r3, 0x0, 0xfffffd87) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x6, 0x0, 0x0, 0x0, 0x0) ioctl$FITHAW(r1, 0xc0045878) pipe2$9p(&(0x7f0000000040), 0x800) 205.65599ms ago: executing program 5 (id=327): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x552d, &(0x7f0000002540)="$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") lseek(r2, 0x87d, 0x2) r3 = creat(&(0x7f0000007a80)='./bus\x00', 0x180) fallocate(r3, 0x0, 0x0, 0x401) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000023c0)={'sit0\x00', &(0x7f0000002400)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x3, 0x9, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @local, @rand_addr=0x64010102}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000024c0)={'syztnl0\x00', &(0x7f0000002500)={'tunl0\x00', 0x0, 0x8, 0x10, 0x3ae, 0xfffffffe, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x66, 0x0, 0xc, 0x4, 0x0, @empty, @private=0xa010102}}}}) 171.000143ms ago: executing program 33 (id=327): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x552d, &(0x7f0000002540)="$eJzs3M1rI2UYAPAn7Xa7X65FPHjbgUVoYRM23Q/0VnUXP7BLWfXgSdMkDdlNMqVJ09qTB4/iwf9EFDx59G/w4NmbeFC8CUpmJrpdFVybtN3294PJM/PmnWeeN5TCMxMSwKm1kPz6cykux/mImI2ISxHZfqnYMit5eCEirkTEzCNbqRj/c+BsRFyIiMtxbnx6qXjr82vDq7d+euuXb76bP3Pxi6+/P5IFA8fCixHR3cz3d7p5TFt5fFCM14btLHZvDouYv9F9WBynedxprmcZdmrjebUs3mjl89PN7f4obnRq9VFstTey8c1efsH+sDXOk53woLaVHTea61ls99Mstvbyunb38v+Xe/1BnqdR5PsoSx+DwTjm483dZr6ezYdZrPcGxXieN200d0dxWMTiclFPO42sjvWDfNLH29vt3vZuMmxu9dtpL7lVqb5Uqd4uV7fSRnPQvFmudRu3byaLrc5oWnnQrHVXWmna6jQr9bS7lCy26vVytZos3mmut2u9pFqt3KhcL99aKvauJa/fey/pNJLFUXy13dsetDv9ZCPdSvIzlpLlyo2Xl5Kr1eSd1bVk7f7du6tr735w5/17r6y++Vox6W9lJYvL15eXy9Xr5eXq0ila/ydF0RNcPxxI6cmmz0+rDoCnyBT7/4iFPKf+H3jc9Pr/rfsR0+//Q/8/EU9V/3va+/8prB8O5An7fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATo4f5r58I9tZyI8vFuPPFEPPFceliJiJiN//wWyc3Zdztsgz9y/z5x6r4dtSZBlG15gvtgsRsVJsvz077U8BAAAATq6vPr7yWd6t5y8LR10Qhym/aTNz6cMJ5StFxNzCjxPKNjN6eX5CybK/7zOxO6Fs2Q2scxNKlt9yOzOpbP/J7L5w7pFQysPMoZYDAAAciv2dwOF2IQAAABymT4+6AI5GKcaPMsfPgrNv3v/1QPD8viMAAADgKM3/v9NKk64DAAAAOHay/t/v/wEAAMDJlv/+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAHO3eUozQQxwH435YKikZifDTxKPoGx/AIPvpoOICX4Ah4BS/AGfDNIxjY0OmSZcNudtNp2d18X9IO0ww/Zgg8zEwyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQp7/1evH75+dfXXN2+27yjAYAAAA4Z1uvF82LWapP2+fv2kcf2noREWVEnJu7V/HqJLOKiE8RUd/Rvr7Vhz8RTcLhM8bt9SYivrbX//d9fwsAAADwcm2Wq3marafb7NIdYkhp0aZ8+y1TXhER9exfprTykPcxU1jz+x7Fj0xpzQLWJFNYWnIb5Up7kObvfly1m9woilSU978/29gBAIABVSfFsLMQAAAAhvT9cPty6V7QXfW45kVcb2UetwLHqWi3916f1AAAAIBnqLh0BwAAAIDeNfP/vs7/mzr/DwAAAJ6EdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfdrW68VmuZp3zdntu8kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAK/bnHQVCIAzCYO/6zmTuf1hp0NTUpAqEj78xGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC42J/fDIhhKIqjd2Yy/75V9r/YuqS6hCrnEH7yJDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABu5H/EY50zXo0tyUjybLx7PZN8Omp8O2r8+mCuD8e8cCMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY2bmf1ziqOADgb2Z2tmlVXKPkEBELHvRi021t7U08KMGDf4IQ0m2N3fqjzcGWIuTiTXLuRfQoIijx1v+h5xZ6qbcecqjguTK/kpc04KpkZtP9fODN+84wmfd9sxDynTdZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYY/v93TgrNoMqTutj9x7fWi36+/v6wp3NB4tFK+KkzaSPhtfinWQh2plrPxkAAABmQ9bU9yGEh/nWctGng7L+z5tzipr/hxequKnn99f9Td/U/kX7/bdHr+wMNKjGKS56aW08Ov10Kr3Dm+V0e/Efz+iVd7589pKVH0j60cbL23l5P5Pv7t79oF+Gx9rIFgD4L041fR00fw8V/bDLxACYGb2o8G7q/2zQbU4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbdjeCM81cRJCWOztxoX7j2+tHtTf2Xyw2LTzt29vxtcsLpGHEC6tjUenw1yLs5lu12/cvLIyHo+utR+8HkLoavT36ulf+WSCk0M4pDROdnTnZyxI6w97WvI5GkGHv5QAAHgm5XUr6vqH+dZycSyZD+HJj3vr/zejOExY/z/69Py9eKy4/h+2NsPpt7R+9cul6zduvr12deXy6PLo83fODN8dnr1w7tyFpfJZSbXtOk0AAACOsH7d4vo/nX96/f9EFIcJ6/+vvh9+E4+Vqf8PtLvo13UmAAAAs+2lk3/9mRxwPOn3w9cr6+vXhtV2Z/9Mte0g1X/tWN3i+j+b7zorAAAAoA3bG8me9f+LURwmXP9//qdXf4mvmYUQjtfr/6dWvxhfbG86U+1//Idw6E34413PEQAAgHY92fciw/G6xev/efn+f7pzZhpCeOuNKq6/BnCi+j/78Nuf47Hi9//PHvI8p126UN2Psl8IobfQdUYAAAA8y+bKNijr/z/yreXPfj3xcd/7/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABt+zsAAP//RP895g==") lseek(r2, 0x87d, 0x2) r3 = creat(&(0x7f0000007a80)='./bus\x00', 0x180) fallocate(r3, 0x0, 0x0, 0x401) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000023c0)={'sit0\x00', &(0x7f0000002400)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x3, 0x9, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @local, @rand_addr=0x64010102}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000024c0)={'syztnl0\x00', &(0x7f0000002500)={'tunl0\x00', 0x0, 0x8, 0x10, 0x3ae, 0xfffffffe, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x66, 0x0, 0xc, 0x4, 0x0, @empty, @private=0xa010102}}}}) 105.034ms ago: executing program 1 (id=329): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x4, 0x7ffc0001}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) time(0x0) syz_init_net_socket$bt_hci(0x1f, 0x7, 0x1) 43.579806ms ago: executing program 2 (id=330): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x3, &(0x7f0000000000)=[{0x3, 0x2, 0x2, 0x2}, {0x6, 0x1c, 0xf2, 0x5}, {0x6, 0x0, 0x6, 0x5}]}, 0x10) (async) r1 = add_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000380)="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", 0x559, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000900)={r2, 0x1f}, &(0x7f0000000940)={'enc=', 'pkcs1', ' hash=', {'sha512\x00'}}, 0x0, 0x0) (async) syz_emit_ethernet(0xbe, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c20000020180c20000000800451000b0000000000011"], 0x0) 0s ago: executing program 1 (id=331): r0 = socket(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2, 0x0, 0x2}}, 0x2e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10000, &(0x7f0000000200)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRESDEC], 0x1, 0x1f5, &(0x7f00000003c0)="$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") setreuid(0xffffffffffffffff, 0xee00) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x21081e, &(0x7f0000000640)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000680)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x42, 0x0) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x1) accept$inet6(r4, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000c00)=0x1c) fallocate(r4, 0x0, 0x0, 0x90001) openat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x42402, 0x14a) getsockopt(r1, 0x111, 0x1, 0x0, &(0x7f0000000080)) write(r0, &(0x7f0000000000)="1300000043001f00036ffd2ca83b48ad131747", 0x13) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts. [ 23.513925][ T30] audit: type=1400 audit(1794197281.802:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.517588][ T277] cgroup: Unknown subsys name 'net' [ 23.536699][ T30] audit: type=1400 audit(1794197281.802:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.564129][ T30] audit: type=1400 audit(1794197281.832:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.564580][ T277] cgroup: Unknown subsys name 'devices' [ 23.707885][ T277] cgroup: Unknown subsys name 'hugetlb' [ 23.713529][ T277] cgroup: Unknown subsys name 'rlimit' [ 23.853324][ T30] audit: type=1400 audit(1794197282.142:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.876884][ T30] audit: type=1400 audit(1794197282.142:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.901666][ T30] audit: type=1400 audit(1794197282.142:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.929905][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.938810][ T30] audit: type=1400 audit(1794197282.232:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.964214][ T30] audit: type=1400 audit(1794197282.232:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.024114][ T30] audit: type=1400 audit(1794197282.312:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.025409][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.049736][ T30] audit: type=1400 audit(1794197282.312:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.675341][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.682479][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.690102][ T286] device bridge_slave_0 entered promiscuous mode [ 24.698221][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.705402][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.712953][ T286] device bridge_slave_1 entered promiscuous mode [ 24.784387][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.791591][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.799085][ T289] device bridge_slave_0 entered promiscuous mode [ 24.808930][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.816270][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.823774][ T289] device bridge_slave_1 entered promiscuous mode [ 24.830571][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.837724][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.845128][ T285] device bridge_slave_0 entered promiscuous mode [ 24.867879][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.874978][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.882669][ T285] device bridge_slave_1 entered promiscuous mode [ 24.904984][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.912136][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.919645][ T287] device bridge_slave_0 entered promiscuous mode [ 24.926592][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.933646][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.941135][ T287] device bridge_slave_1 entered promiscuous mode [ 25.013846][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.021192][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.028749][ T288] device bridge_slave_0 entered promiscuous mode [ 25.050618][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.057737][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.065124][ T288] device bridge_slave_1 entered promiscuous mode [ 25.100963][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.108083][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.131950][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.139139][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.146455][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.153502][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.202714][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.209831][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.217163][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.224211][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.242403][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.249733][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.257344][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.264891][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.272166][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.279564][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.319724][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.328004][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.335036][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.342604][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.350800][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.357869][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.365268][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.372848][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.380387][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.388660][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.396864][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.403900][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.411374][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.419666][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.426758][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.458689][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.467576][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.475519][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.487291][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.506527][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.514586][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.522934][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.530048][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.543671][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.575691][ T289] device veth0_vlan entered promiscuous mode [ 25.582276][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.592039][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.600407][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.608639][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.616254][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.623682][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.632078][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.639158][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.646566][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.654501][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.677446][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.685703][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.693759][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.704842][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.713245][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.720328][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.727871][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.736101][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.743141][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.750554][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.765501][ T285] device veth0_vlan entered promiscuous mode [ 25.772580][ T286] device veth0_vlan entered promiscuous mode [ 25.783579][ T289] device veth1_macvtap entered promiscuous mode [ 25.790304][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.798482][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.807090][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.815432][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.823513][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.832033][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.839904][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.847620][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.856050][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.864293][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.872320][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.880590][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.889357][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.896992][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.919477][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.927994][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.936382][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.943432][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.951079][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.959459][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.967752][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.974782][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.982312][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.990658][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.998777][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.006917][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.014911][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.029581][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.038067][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.046802][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.055031][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.066631][ T286] device veth1_macvtap entered promiscuous mode [ 26.076445][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.084694][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.093408][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.101323][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.109728][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.118112][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.126676][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.138682][ T288] device veth0_vlan entered promiscuous mode [ 26.147852][ T285] device veth1_macvtap entered promiscuous mode [ 26.164531][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.172436][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.180637][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.188998][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.197505][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.206092][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.214412][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.222957][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.231313][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.239713][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.247782][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.263585][ T288] device veth1_macvtap entered promiscuous mode [ 26.270730][ T287] device veth0_vlan entered promiscuous mode [ 26.277550][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.285075][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.292842][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.300592][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.308282][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.316741][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.325114][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.333491][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.342135][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.350498][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.358771][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.380140][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.388825][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.397713][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.406987][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.407267][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 26.436617][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.446558][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.467278][ T287] device veth1_macvtap entered promiscuous mode [ 26.492725][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.501041][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.511107][ T314] loop3: detected capacity change from 0 to 16 [ 26.526410][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.571153][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.583865][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.696012][ T314] erofs: (device loop3): mounted with root inode @ nid 36. [ 26.706923][ T312] loop4: detected capacity change from 0 to 512 [ 26.749671][ T314] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.095944][ T39] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 27.549082][ T314] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=86 [ 27.707773][ T314] SELinux: security_context_str_to_sid(measure) failed for (dev ?, type ?) errno=-22 [ 27.955851][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.022019][ T312] EXT4-fs (loop4): Test dummy encryption mode enabled [ 28.044725][ T331] loop3: detected capacity change from 0 to 512 [ 28.056126][ T312] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.5: inode has both inline data and extents flags [ 28.070332][ T331] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.087348][ T312] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.5: couldn't read orphan inode 15 (err -117) [ 28.100874][ T312] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 28.115254][ T331] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 28.123708][ T331] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.6: invalid indirect mapped block 2683928664 (level 1) [ 28.146467][ T331] EXT4-fs (loop3): Remounting filesystem read-only [ 28.154359][ T331] EXT4-fs (loop3): 1 truncate cleaned up [ 28.162752][ T331] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,init_itable=0x0000000000000b8f,sysvgroups,inlinecrypt,usrjquota=.auto_da_alloc=0x0000000000000000,jqfmt=vfsold,jqfmt=vfsv0,acl,debug_want_extra_isize=0x0000000000000008,errors=remount-ro,,. Quota mode: writeback. [ 28.191980][ T312] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 28.215283][ T336] ip_tables: iptables: counters copy to user failed while replacing table [ 28.227247][ T331] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6'. [ 28.242610][ T331] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.6: Invalid block bitmap block 3 in block_group 0 [ 28.256753][ T331] EXT4-fs (loop3): Remounting filesystem read-only [ 28.274205][ T288] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 28.294363][ T331] syz.3.6 (331) used greatest stack depth: 22056 bytes left [ 28.294959][ T288] EXT4-fs (loop3): Remounting filesystem read-only [ 28.319667][ T338] loop0: detected capacity change from 0 to 512 [ 28.327865][ T288] EXT4-fs error (device loop3): ext4_iget_extra_inode:4604: inode #15: comm syz-executor: corrupted in-inode xattr [ 28.348145][ T288] EXT4-fs (loop3): Remounting filesystem read-only [ 28.354911][ T288] EXT4-fs error (device loop3): ext4_iget_extra_inode:4604: inode #15: comm syz-executor: corrupted in-inode xattr [ 28.367385][ T288] EXT4-fs (loop3): Remounting filesystem read-only [ 28.385957][ T20] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.398236][ T20] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 28.427269][ T20] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 28.440838][ T20] usb 2-1: config 0 interface 0 has no altsetting 0 [ 28.449484][ T20] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 28.460955][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.474756][ T20] usb 2-1: config 0 descriptor?? [ 28.487430][ T288] syz-executor (288) used greatest stack depth: 21992 bytes left [ 28.499341][ T316] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 28.521364][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 28.521380][ T30] audit: type=1400 audit(1794197286.812:153): avc: denied { create } for pid=344 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.550398][ T345] Zero length message leads to an empty skb [ 28.573092][ T30] audit: type=1400 audit(1794197286.852:154): avc: denied { write } for pid=344 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 28.621786][ T345] loop0: detected capacity change from 0 to 8192 [ 28.665947][ T345] ======================================================= [ 28.665947][ T345] WARNING: The mand mount option has been deprecated and [ 28.665947][ T345] and is ignored by this kernel. Remove the mand [ 28.665947][ T345] option from the mount to silence this warning. [ 28.665947][ T345] ======================================================= [ 28.740666][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.745670][ T30] audit: type=1400 audit(1794197287.032:155): avc: denied { mount } for pid=344 comm="syz.0.11" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.750719][ T348] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.777088][ T348] device bridge_slave_0 entered promiscuous mode [ 28.784280][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.786956][ T345] attempt to access beyond end of device [ 28.786956][ T345] loop0: rw=0, want=57848, limit=8192 [ 28.791516][ T348] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.810509][ T348] device bridge_slave_1 entered promiscuous mode [ 28.816965][ T345] Buffer I/O error on dev loop0, logical block 57847, async page read [ 28.836393][ T352] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 28.844259][ T352] FAT-fs (loop0): Filesystem has been set read-only [ 28.870619][ T345] bridge0: port 3(veth1) entered blocking state [ 28.877120][ T345] bridge0: port 3(veth1) entered disabled state [ 28.883779][ T345] device veth1 entered promiscuous mode [ 28.889669][ T345] bridge0: port 3(veth1) entered blocking state [ 28.895981][ T345] bridge0: port 3(veth1) entered forwarding state [ 28.906785][ T345] device veth1 left promiscuous mode [ 28.912165][ T345] bridge0: port 3(veth1) entered disabled state [ 28.933762][ T30] audit: type=1400 audit(1794197287.222:156): avc: denied { mount } for pid=353 comm="syz.4.14" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 28.954750][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.961937][ T316] loop1: detected capacity change from 0 to 128 [ 28.962861][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.976353][ T348] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.983407][ T348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.007439][ T30] audit: type=1400 audit(1794197287.272:157): avc: denied { read } for pid=353 comm="syz.4.14" name="trigger" dev="tracefs" ino=2550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 29.054892][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.058060][ T30] audit: type=1400 audit(1794197287.342:158): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 29.082534][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.097480][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.112842][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.128947][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.136097][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.160629][ T360] netlink: 'syz.0.15': attribute type 1 has an invalid length. [ 29.169760][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.181543][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.188665][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.218988][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.233523][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.261229][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.283108][ T348] device veth0_vlan entered promiscuous mode [ 29.296624][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.308171][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.323408][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.346667][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.365239][ T348] device veth1_macvtap entered promiscuous mode [ 29.386409][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.403504][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.558618][ T360] loop0: detected capacity change from 0 to 512 [ 29.730469][ T316] attempt to access beyond end of device [ 29.730469][ T316] loop1: rw=2049, want=1041, limit=128 [ 29.748263][ T30] audit: type=1400 audit(1794197288.042:159): avc: denied { create } for pid=363 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.761802][ T316] process 'syz.1.2' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 29.779758][ T30] audit: type=1400 audit(1794197288.042:160): avc: denied { setopt } for pid=363 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 29.824253][ T315] attempt to access beyond end of device [ 29.824253][ T315] loop1: rw=524288, want=369, limit=128 [ 29.836678][ T30] audit: type=1400 audit(1794197288.042:161): avc: denied { map_create } for pid=363 comm="syz.2.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.856249][ T315] attempt to access beyond end of device [ 29.856249][ T315] loop1: rw=0, want=225, limit=128 [ 29.867428][ T30] audit: type=1400 audit(1794197288.102:162): avc: denied { create } for pid=366 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.894795][ T315] attempt to access beyond end of device [ 29.894795][ T315] loop1: rw=0, want=225, limit=128 [ 29.908879][ T315] attempt to access beyond end of device [ 29.908879][ T315] loop1: rw=0, want=225, limit=128 [ 29.920242][ T315] attempt to access beyond end of device [ 29.920242][ T315] loop1: rw=0, want=225, limit=128 [ 29.932105][ T315] attempt to access beyond end of device [ 29.932105][ T315] loop1: rw=0, want=225, limit=128 [ 29.943381][ T315] attempt to access beyond end of device [ 29.943381][ T315] loop1: rw=0, want=225, limit=128 [ 29.954841][ T316] attempt to access beyond end of device [ 29.954841][ T316] loop1: rw=0, want=225, limit=128 [ 29.990842][ T372] loop0: detected capacity change from 0 to 256 [ 30.040922][ T362] loop5: detected capacity change from 0 to 40427 [ 30.046757][ T372] exfat: Deprecated parameter 'utf8' [ 30.053909][ T372] exfat: Bad value for 'time_offset' [ 30.088337][ T362] SELinux: security_context_str_to_sid(sysadm) failed for (dev ?, type ?) errno=-22 [ 30.109388][ T362] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(4) [ 30.139674][ T362] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 30.161213][ T362] F2FS-fs (loop5): invalid crc value [ 30.187336][ T362] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 30.206500][ T382] loop0: detected capacity change from 0 to 512 [ 30.258725][ T362] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 30.275845][ T362] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 30.283447][ T362] SELinux: security_context_str_to_sid(sysadm) failed for (dev loop5, type f2fs) errno=-22 [ 31.015841][ T290] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 31.089999][ T396] FAT-fs (loop0): Unrecognized mount option "" or missing value [ 31.125842][ T20] usbhid 2-1:0.0: can't add hid device: -71 [ 31.133582][ T20] usbhid: probe of 2-1:0.0 failed with error -71 [ 31.154163][ T377] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 31.174821][ T377] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 31.185459][ T20] usb 2-1: USB disconnect, device number 2 [ 31.200980][ T377] F2FS-fs (loop2): invalid crc value [ 31.230812][ T377] F2FS-fs (loop2): Found nat_bits in checkpoint [ 31.238681][ T400] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 31.263416][ T409] fuse: Bad value for 'fd' [ 31.275824][ T290] usb 6-1: Using ep0 maxpacket: 16 [ 31.281750][ T409] cgroup: Unexpected value for 'all' [ 31.308800][ T377] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 31.315974][ T377] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 31.400921][ T414] capability: warning: `syz.0.27' uses 32-bit capabilities (legacy support in use) [ 31.425870][ T290] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.443940][ T290] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.525888][ T290] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 31.545176][ T290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 31.553273][ T290] usb 6-1: SerialNumber: syz [ 31.609878][ T417] F2FS-fs (loop2): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 31.612099][ T290] usb 6-1: 0:2 : does not exist [ 31.631723][ T417] F2FS-fs (loop2): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 31.696044][ T308] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.724799][ T417] syz.2.20 uses obsolete (PF_INET,SOCK_PACKET) [ 32.010500][ T423] 9pnet: Insufficient options for proto=fd [ 32.055909][ T308] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.074365][ T308] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 32.265963][ T308] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 32.278861][ T429] set_capacity_and_notify: 3 callbacks suppressed [ 32.278879][ T429] loop1: detected capacity change from 0 to 256 [ 32.285382][ T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.285445][ T308] usb 5-1: Product: syz [ 32.285458][ T308] usb 5-1: Manufacturer: syz [ 32.285472][ T308] usb 5-1: SerialNumber: syz [ 32.320116][ T429] exfat: Deprecated parameter 'utf8' [ 32.334943][ T429] exfat: Deprecated parameter 'utf8' [ 32.345943][ T290] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 32.358309][ T429] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 32.367874][ T308] usb-storage 5-1:1.0: USB Mass Storage device detected [ 32.396278][ T308] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 32.513947][ T308] scsi host1: usb-storage 5-1:1.0 [ 32.521623][ T435] netlink: 68 bytes leftover after parsing attributes in process `syz.2.31'. [ 32.586009][ T290] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5) [ 32.635680][ T290] usb 6-1: USB disconnect, device number 2 [ 32.943919][ T438] FAULT_INJECTION: forcing a failure. [ 32.943919][ T438] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 33.056519][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.546385][ T438] CPU: 1 PID: 438 Comm: syz.2.31 Not tainted syzkaller #0 [ 33.553567][ T438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 33.563671][ T438] Call Trace: [ 33.566974][ T438] [ 33.569932][ T438] __dump_stack+0x21/0x30 [ 33.574309][ T438] dump_stack_lvl+0x110/0x170 [ 33.579040][ T438] ? show_regs_print_info+0x20/0x20 [ 33.584269][ T438] dump_stack+0x15/0x20 [ 33.588449][ T438] should_fail+0x3ab/0x500 [ 33.592893][ T438] should_fail_alloc_page+0x55/0x80 [ 33.598120][ T438] prepare_alloc_pages+0x13f/0x590 [ 33.603262][ T438] ? __alloc_pages_bulk+0xab0/0xab0 [ 33.608494][ T438] ? __alloc_pages_bulk+0x492/0xab0 [ 33.613722][ T438] __alloc_pages+0x11d/0x460 [ 33.618333][ T438] ? zone_watermark_fast+0x250/0x250 [ 33.623646][ T438] ? __vmalloc_node_range+0x384/0xad0 [ 33.629060][ T438] __vmalloc_node_range+0x507/0xad0 [ 33.634323][ T438] bpf_map_area_alloc+0xd5/0xe0 [ 33.639238][ T438] ? bpf_ringbuf_alloc+0x36/0x470 [ 33.644293][ T438] bpf_ringbuf_alloc+0x36/0x470 [ 33.649166][ T438] ? ringbuf_map_alloc+0x191/0x310 [ 33.654307][ T438] ? bpf_map_init_from_attr+0x146/0x350 [ 33.659884][ T438] ringbuf_map_alloc+0x1e5/0x310 [ 33.664847][ T438] map_create+0x3f4/0x1fa0 [ 33.669296][ T438] __sys_bpf+0x2ff/0x7d0 [ 33.673563][ T438] ? bpf_link_show_fdinfo+0x330/0x330 [ 33.678965][ T438] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 33.684634][ T438] __x64_sys_bpf+0x7c/0x90 [ 33.689081][ T438] x64_sys_call+0x4b9/0x9a0 [ 33.693611][ T438] do_syscall_64+0x4c/0xa0 [ 33.698051][ T438] ? clear_bhb_loop+0x50/0xa0 [ 33.702775][ T438] ? clear_bhb_loop+0x50/0xa0 [ 33.707484][ T438] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.713411][ T438] RIP: 0033:0x7f74d857eb19 [ 33.717858][ T438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.737495][ T438] RSP: 002b:00007f74d6fb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 33.745964][ T438] RAX: ffffffffffffffda RBX: 00007f74d8805090 RCX: 00007f74d857eb19 [ 33.753963][ T438] RDX: 0000000000000050 RSI: 0000200000003380 RDI: 0000000000000000 [ 33.761989][ T438] RBP: 00007f74d8616b70 R08: 0000000000000000 R09: 0000000000000000 [ 33.769990][ T438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.777991][ T438] R13: 00007f74d8805128 R14: 00007f74d8805090 R15: 00007ffe77feaf48 [ 33.786079][ T438] [ 33.836058][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 33.836074][ T30] audit: type=1400 audit(1794197292.132:212): avc: denied { read } for pid=412 comm="syz.4.29" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 33.905848][ T30] audit: type=1400 audit(1794197292.162:213): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 33.926391][ T30] audit: type=1400 audit(1794197292.162:214): avc: denied { open } for pid=412 comm="syz.4.29" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.107490][ T445] loop4: detected capacity change from 0 to 2048 [ 34.203077][ T445] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,discard,nombcache,. Quota mode: writeback. [ 34.219941][ T445] binder: 412:445 ioctl c018620c 0 returned -14 [ 34.226308][ T30] audit: type=1400 audit(1794197292.512:215): avc: denied { ioctl } for pid=412 comm="syz.4.29" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 34.365167][ T442] loop5: detected capacity change from 0 to 40427 [ 34.467562][ T442] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 34.489955][ T442] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 34.524603][ T442] F2FS-fs (loop5): invalid crc value [ 34.564660][ T442] F2FS-fs (loop5): Found nat_bits in checkpoint [ 34.675080][ T442] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 34.691064][ T442] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 34.716665][ T463] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 34.792037][ T442] handle_bad_sector: 15291 callbacks suppressed [ 34.792059][ T442] attempt to access beyond end of device [ 34.792059][ T442] loop5: rw=2049, want=45104, limit=40427 [ 34.866096][ T30] audit: type=1326 audit(1794197293.162:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=441 comm="syz.5.34" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5038edab19 code=0x0 [ 34.922998][ T30] audit: type=1400 audit(1794197293.192:217): avc: denied { associate } for pid=465 comm="syz.2.40" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.035356][ T444] loop1: detected capacity change from 0 to 131072 [ 35.058444][ T444] F2FS-fs (loop1): invalid crc value [ 35.107745][ T444] F2FS-fs (loop1): Found nat_bits in checkpoint [ 35.152003][ T444] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 35.160440][ T444] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 35.233661][ T348] attempt to access beyond end of device [ 35.233661][ T348] loop5: rw=2049, want=45112, limit=40427 [ 35.260772][ T30] audit: type=1400 audit(1794197293.552:218): avc: denied { write } for pid=443 comm="syz.1.35" laddr=fe80::13 lport=60 faddr=fe80::d fport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.648512][ T30] audit: type=1400 audit(1794197293.942:219): avc: denied { remount } for pid=484 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.708238][ T30] audit: type=1400 audit(1794197293.982:220): avc: denied { create } for pid=488 comm="syz.5.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.790611][ T30] audit: type=1400 audit(1794197293.982:221): avc: denied { ioctl } for pid=488 comm="syz.5.44" path="socket:[16382]" dev="sockfs" ino=16382 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 36.635000][ T290] usb 5-1: USB disconnect, device number 2 [ 36.749586][ T514] syz.4.50[514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.749679][ T514] syz.4.50[514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.962860][ T527] loop4: detected capacity change from 0 to 256 [ 36.966034][ T307] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 36.989516][ T523] loop1: detected capacity change from 0 to 512 [ 37.000541][ T527] exfat: Deprecated parameter 'utf8' [ 37.007457][ T527] exfat: Deprecated parameter 'utf8' [ 37.049155][ T527] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 37.265900][ T307] usb 3-1: Using ep0 maxpacket: 16 [ 37.426393][ T307] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.508292][ T307] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.652743][ T533] netlink: 68 bytes leftover after parsing attributes in process `syz.1.57'. [ 37.686162][ T307] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 37.724657][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 38.202968][ T307] usb 3-1: SerialNumber: syz [ 38.215773][ C0] sched: RT throttling activated [ 38.247081][ T307] usb 3-1: 0:2 : does not exist [ 38.271785][ T533] FAULT_INJECTION: forcing a failure. [ 38.271785][ T533] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 38.285370][ T533] CPU: 1 PID: 533 Comm: syz.1.57 Not tainted syzkaller #0 [ 38.292614][ T533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 38.302794][ T533] Call Trace: [ 38.306099][ T533] [ 38.309060][ T533] __dump_stack+0x21/0x30 [ 38.313427][ T533] dump_stack_lvl+0x110/0x170 [ 38.318128][ T533] ? show_regs_print_info+0x20/0x20 [ 38.323381][ T533] dump_stack+0x15/0x20 [ 38.327568][ T533] should_fail+0x3ab/0x500 [ 38.332018][ T533] should_fail_alloc_page+0x55/0x80 [ 38.337249][ T533] prepare_alloc_pages+0x13f/0x590 [ 38.342400][ T533] ? __alloc_pages_bulk+0xab0/0xab0 [ 38.347633][ T533] ? __alloc_pages_bulk+0x492/0xab0 [ 38.352860][ T533] __alloc_pages+0x11d/0x460 [ 38.357568][ T533] ? zone_watermark_fast+0x250/0x250 [ 38.362895][ T533] ? __vmalloc_node_range+0x384/0xad0 [ 38.368437][ T533] __vmalloc_node_range+0x507/0xad0 [ 38.373673][ T533] bpf_map_area_alloc+0xd5/0xe0 [ 38.378557][ T533] ? bpf_ringbuf_alloc+0x36/0x470 [ 38.383620][ T533] bpf_ringbuf_alloc+0x36/0x470 [ 38.388498][ T533] ? ringbuf_map_alloc+0x191/0x310 [ 38.393638][ T533] ? bpf_map_init_from_attr+0x146/0x350 [ 38.399211][ T533] ringbuf_map_alloc+0x1e5/0x310 [ 38.404188][ T533] map_create+0x3f4/0x1fa0 [ 38.408640][ T533] __sys_bpf+0x2ff/0x7d0 [ 38.412916][ T533] ? bpf_link_show_fdinfo+0x330/0x330 [ 38.418315][ T533] ? __kasan_check_write+0x14/0x20 [ 38.423456][ T533] ? switch_fpu_return+0x15d/0x2c0 [ 38.428624][ T533] __x64_sys_bpf+0x7c/0x90 [ 38.433071][ T533] x64_sys_call+0x4b9/0x9a0 [ 38.437609][ T533] do_syscall_64+0x4c/0xa0 [ 38.442102][ T533] ? clear_bhb_loop+0x50/0xa0 [ 38.446810][ T533] ? clear_bhb_loop+0x50/0xa0 [ 38.451516][ T533] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.457474][ T533] RIP: 0033:0x7f4a794e8b19 [ 38.461916][ T533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.481552][ T533] RSP: 002b:00007f4a77f40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 38.490003][ T533] RAX: ffffffffffffffda RBX: 00007f4a7976efa0 RCX: 00007f4a794e8b19 [ 38.498008][ T533] RDX: 0000000000000050 RSI: 0000200000003380 RDI: 0000000000000000 [ 38.506014][ T533] RBP: 00007f4a79580b70 R08: 0000000000000000 R09: 0000000000000000 [ 38.514010][ T533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 38.522007][ T533] R13: 00007f4a7976f038 R14: 00007f4a7976efa0 R15: 00007ffc33cf7c48 [ 38.530019][ T533] [ 38.803520][ T512] 9pnet: Insufficient options for proto=fd [ 39.529749][ T544] loop4: detected capacity change from 0 to 131072 [ 39.589444][ T544] F2FS-fs (loop4): invalid crc value [ 39.630438][ T544] F2FS-fs (loop4): Found nat_bits in checkpoint [ 39.749870][ T544] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 39.761475][ T561] syz.1.62[561] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.761567][ T561] syz.1.62[561] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.778621][ T544] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 39.984170][ T542] loop5: detected capacity change from 0 to 131072 [ 40.038339][ T542] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 40.046247][ T307] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 40.049495][ T542] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 40.071890][ T542] F2FS-fs (loop5): Unrecognized mount option "cgroup2" or missing value [ 40.114888][ T568] fuse: Bad value for 'fd' [ 40.128467][ T568] cgroup: Unexpected value for 'all' [ 40.200541][ T544] syz.4.58 (544) used greatest stack depth: 21536 bytes left [ 40.245863][ T307] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 40.274328][ T307] usb 3-1: USB disconnect, device number 3 [ 40.375828][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 40.475228][ T576] loop5: detected capacity change from 0 to 512 [ 40.553284][ T576] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 40.564670][ T576] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.615823][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 40.645962][ T582] loop4: detected capacity change from 0 to 512 [ 40.728346][ T587] loop5: detected capacity change from 0 to 256 [ 40.745890][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.747530][ T587] exfat: Deprecated parameter 'utf8' [ 40.756380][ T26] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.774946][ T587] exfat: Deprecated parameter 'utf8' [ 40.799080][ T587] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 40.868822][ T26] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 40.878016][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 40.886346][ T26] usb 2-1: SerialNumber: syz [ 40.936602][ T26] usb 2-1: 0:2 : does not exist [ 41.337058][ T597] netlink: 68 bytes leftover after parsing attributes in process `syz.4.71'. [ 42.028627][ T599] 9pnet: Insufficient options for proto=fd [ 42.352048][ T609] loop2: detected capacity change from 0 to 40427 [ 42.361802][ T609] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 42.369877][ T609] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 42.388977][ T609] F2FS-fs (loop2): invalid crc value [ 42.397160][ T609] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.717358][ T609] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 42.735511][ T609] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 43.429572][ T609] attempt to access beyond end of device [ 43.429572][ T609] loop2: rw=2049, want=45104, limit=40427 [ 43.457901][ T625] loop4: detected capacity change from 0 to 256 [ 43.530559][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 43.530574][ T30] audit: type=1326 audit(1794197301.822:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=608 comm="syz.2.72" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74d857eb19 code=0x0 [ 43.576776][ T625] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 43.635868][ T26] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 43.647037][ T628] loop1: detected capacity change from 0 to 4096 [ 43.712655][ T628] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 43.895891][ T26] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 43.910627][ T287] attempt to access beyond end of device [ 43.910627][ T287] loop2: rw=2049, want=45112, limit=40427 [ 43.924338][ T26] usb 2-1: USB disconnect, device number 3 [ 44.011343][ T644] fuse: Bad value for 'fd' [ 44.020019][ T644] cgroup: Unexpected value for 'all' [ 44.485894][ T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 44.855873][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.872972][ T26] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 45.057088][ T26] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 45.070518][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.088050][ T26] usb 2-1: Product: syz [ 45.092270][ T26] usb 2-1: Manufacturer: syz [ 45.114727][ T26] usb 2-1: SerialNumber: syz [ 45.166529][ T26] usb-storage 2-1:1.0: USB Mass Storage device detected [ 45.193967][ T26] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 45.225674][ T26] scsi host1: usb-storage 2-1:1.0 [ 45.251481][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 45.294394][ T671] loop2: detected capacity change from 0 to 128 [ 45.358278][ T671] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 45.392984][ T671] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,nolazytime,mblk_io_submit,init_itable,abort,,errors=continue. Quota mode: none. [ 45.410327][ T658] loop5: detected capacity change from 0 to 131072 [ 45.418228][ T673] 9pnet: Insufficient options for proto=fd [ 45.420594][ T671] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.425969][ T658] F2FS-fs (loop5): Invalid segment/section count (458783, 24 x 150994945) [ 45.485961][ T658] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 45.497490][ T658] F2FS-fs (loop5): invalid crc value [ 45.567144][ T671] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 34: comm syz.2.101: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 45.586113][ T671] EXT4-fs error (device loop2) in do_split:2097: Corrupt filesystem [ 45.595426][ T671] EXT4-fs error (device loop2): dx_make_map:1328: inode #2: block 34: comm syz.2.101: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 45.621646][ T671] EXT4-fs error (device loop2) in do_split:2097: Corrupt filesystem [ 45.636367][ T658] F2FS-fs (loop5): Found nat_bits in checkpoint [ 45.679479][ T658] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 45.686672][ T658] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 45.752705][ T681] loop1: detected capacity change from 0 to 2048 [ 45.822599][ T681] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,errors=remount-ro,discard,nombcache,. Quota mode: writeback. [ 45.839077][ T681] binder: 645:681 ioctl c018620c 0 returned -14 [ 45.917927][ T688] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 45.925685][ T688] netlink: 36 bytes leftover after parsing attributes in process `syz.2.103'. [ 45.926938][ T30] audit: type=1400 audit(1794197304.222:231): avc: denied { name_bind } for pid=686 comm="syz.2.103" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 46.044876][ T698] loop2: detected capacity change from 0 to 256 [ 46.084557][ T698] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 46.147003][ T683] F2FS-fs (loop5): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 46.163112][ T683] F2FS-fs (loop5): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 46.276537][ T706] fuse: Bad value for 'fd' [ 46.325663][ T710] netlink: 36 bytes leftover after parsing attributes in process `syz.4.98'. [ 46.344650][ T712] netlink: 88 bytes leftover after parsing attributes in process `syz.0.99'. [ 46.376946][ T712] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 46.511695][ T30] audit: type=1400 audit(1794197304.802:232): avc: denied { read } for pid=716 comm="syz.0.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.709974][ T30] audit: type=1400 audit(1794197305.002:233): avc: denied { mount } for pid=725 comm="syz.2.105" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 47.064657][ T734] ip_tables: iptables: counters copy to user failed while replacing table [ 47.243196][ T739] device macsec1 entered promiscuous mode [ 47.260581][ T741] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 47.407470][ T747] loop5: detected capacity change from 0 to 2048 [ 47.443250][ T749] ip_tables: iptables: counters copy to user failed while replacing table [ 47.660908][ T319] usb 2-1: USB disconnect, device number 4 [ 47.752357][ T754] loop1: detected capacity change from 0 to 2048 [ 47.804015][ T30] audit: type=1400 audit(1794197306.092:234): avc: denied { setopt } for pid=757 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 47.858442][ T754] loop1: unable to read partition table [ 47.872132][ T754] loop1: partition table beyond EOD, truncated [ 47.878534][ T754] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 47.889658][ T765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.118'. [ 47.944885][ T30] audit: type=1400 audit(1794197306.232:235): avc: denied { mounton } for pid=753 comm="syz.1.113" path="/proc/50/task" dev="proc" ino=17788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 47.990706][ T779] netlink: 'syz.4.120': attribute type 1 has an invalid length. [ 48.003706][ T101] loop1: unable to read partition table [ 48.016149][ T101] loop1: partition table beyond EOD, truncated [ 48.038498][ T781] netlink: 36 bytes leftover after parsing attributes in process `syz.1.121'. [ 48.135935][ T752] loop5: detected capacity change from 0 to 131072 [ 48.199552][ T752] F2FS-fs (loop5): invalid crc value [ 48.230949][ T752] F2FS-fs (loop5): Found nat_bits in checkpoint [ 48.265566][ T784] bridge0: port 3(veth1) entered blocking state [ 48.274547][ T784] bridge0: port 3(veth1) entered disabled state [ 48.281827][ T784] device veth1 entered promiscuous mode [ 48.287795][ T784] bridge0: port 3(veth1) entered blocking state [ 48.294079][ T784] bridge0: port 3(veth1) entered forwarding state [ 48.304141][ T784] device veth1 left promiscuous mode [ 48.309674][ T784] bridge0: port 3(veth1) entered disabled state [ 48.338688][ T752] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 48.355965][ T752] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 48.416784][ T30] audit: type=1400 audit(1794197306.712:236): avc: denied { write } for pid=751 comm="syz.5.112" name="file2" dev="loop5" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.441305][ T30] audit: type=1400 audit(1794197306.732:237): avc: denied { map } for pid=751 comm="syz.5.112" path="/18/file1/file2" dev="loop5" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.467963][ T793] fuse: Bad value for 'fd' [ 48.472671][ T793] cgroup: Unexpected value for 'all' [ 48.809303][ T800] tipc: Started in network mode [ 48.814364][ T800] tipc: Node identity fec00000000040590100000000000001, cluster identity 4711 [ 48.823657][ T800] tipc: Enabling of bearer rejected, failed to enable media [ 48.858720][ T804] netlink: 88 bytes leftover after parsing attributes in process `syz.0.128'. [ 48.953015][ T30] audit: type=1400 audit(1794197307.242:238): avc: denied { read } for pid=810 comm="syz.1.131" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.029079][ T30] audit: type=1400 audit(1794197307.322:239): avc: denied { write } for pid=817 comm="syz.5.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.048452][ T30] audit: type=1400 audit(1794197307.332:240): avc: denied { bind } for pid=817 comm="syz.5.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.067797][ T30] audit: type=1400 audit(1794197307.332:241): avc: denied { setopt } for pid=817 comm="syz.5.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 49.290246][ T824] fuse: Bad value for 'fd' [ 49.337813][ T828] netlink: 88 bytes leftover after parsing attributes in process `syz.2.139'. [ 49.355918][ T20] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 49.364139][ T828] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 49.396459][ T30] audit: type=1400 audit(1794197307.692:242): avc: denied { create } for pid=830 comm="syz.2.140" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.417422][ T30] audit: type=1400 audit(1794197307.712:243): avc: denied { mounton } for pid=830 comm="syz.2.140" path="/28/file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.420964][ T831] netlink: 56 bytes leftover after parsing attributes in process `syz.2.140'. [ 49.440973][ T30] audit: type=1400 audit(1794197307.712:244): avc: denied { append } for pid=830 comm="syz.2.140" name="file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.472838][ T30] audit: type=1400 audit(1794197307.712:245): avc: denied { open } for pid=830 comm="syz.2.140" path="/28/file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 50.469586][ T838] tipc: Enabling of bearer rejected, media not registered [ 50.577987][ T840] netlink: 36 bytes leftover after parsing attributes in process `syz.4.142'. [ 50.695862][ T30] audit: type=1400 audit(1794197308.982:246): avc: denied { unlink } for pid=287 comm="syz-executor" name="file0" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 50.746173][ T842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 50.766514][ T30] audit: type=1400 audit(1794197309.052:247): avc: denied { write } for pid=847 comm="syz.2.144" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 50.799793][ T852] loop1: detected capacity change from 0 to 1024 [ 50.921136][ T852] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 51.007286][ T852] EXT4-fs (loop1): invalid journal inode [ 51.041108][ T852] EXT4-fs (loop1): can't get journal size [ 51.088626][ T852] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e12c, mo2=0002] [ 51.115476][ T852] System zones: 0-1, 4-36, 102-102 [ 51.136059][ T852] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,nobarrier,norecovery,errors=remount-ro,max_dir_size_kb=0x0000000000000008,. Quota mode: writeback. [ 51.325937][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.340407][ T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.351701][ T20] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 51.361625][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.371390][ T20] usb 6-1: config 0 descriptor?? [ 51.424283][ T867] fuse: Bad value for 'fd' [ 51.429085][ T867] cgroup: Unexpected value for 'all' [ 51.636359][ T860] loop1: detected capacity change from 0 to 131072 [ 51.716978][ T860] F2FS-fs (loop1): invalid crc value [ 51.725651][ T860] F2FS-fs (loop1): Found nat_bits in checkpoint [ 51.758231][ T860] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 51.807446][ T875] device ip6gre1 entered promiscuous mode [ 51.857131][ T20] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 51.871377][ T20] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 51.892837][ T20] hid-thrustmaster 0003:044F:B65D.0001: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 51.905946][ T20] hid-thrustmaster 0003:044F:B65D.0001: Wrong number of endpoints? [ 52.024582][ T883] netem: change failed [ 52.058986][ T20] usb 6-1: USB disconnect, device number 3 [ 52.065799][ C0] hid-thrustmaster 0003:044F:B65D.0001: URB to get model id failed with error -71 [ 52.288912][ T887] device batadv_slave_1 entered promiscuous mode [ 52.300752][ T887] device batadv_slave_1 left promiscuous mode [ 52.425947][ T885] loop1: detected capacity change from 0 to 131072 [ 52.443177][ T885] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945) [ 52.462553][ T885] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 52.471913][ T885] F2FS-fs (loop1): invalid crc value [ 52.479251][ T885] F2FS-fs (loop1): Found nat_bits in checkpoint [ 52.518433][ T885] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 52.525523][ T885] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 52.558666][ T897] netlink: 36 bytes leftover after parsing attributes in process `syz.0.158'. [ 52.855833][ T20] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 52.982980][ T900] F2FS-fs (loop1): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 53.011560][ T900] F2FS-fs (loop1): sanity_check_inode: inode (ino=4, mode=16877) should not have inline_data, run fsck to fix [ 53.114329][ T891] futex_wake_op: syz.4.157 tries to shift op by 144; fix this program [ 53.122932][ T891] futex_wake_op: syz.4.157 tries to shift op by 144; fix this program [ 53.149229][ T904] futex_wake_op: syz.4.157 tries to shift op by 144; fix this program [ 53.225902][ T20] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 53.251286][ T20] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 53.278068][ T20] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.362986][ T20] usb 6-1: config 0 interface 0 has no altsetting 0 [ 53.375818][ T20] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 53.385050][ T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.409413][ T20] usb 6-1: config 0 descriptor?? [ 53.425870][ T899] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 53.692603][ T921] fuse: Bad value for 'fd' [ 53.705594][ T921] cgroup: Unexpected value for 'all' [ 53.801554][ T925] netlink: 88 bytes leftover after parsing attributes in process `syz.1.162'. [ 53.812049][ T925] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 53.868105][ T899] loop5: detected capacity change from 0 to 128 [ 53.974568][ T929] loop1: detected capacity change from 0 to 512 [ 54.233068][ T936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.171'. [ 54.247327][ T936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 54.297142][ T941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 54.310561][ T899] attempt to access beyond end of device [ 54.310561][ T899] loop5: rw=2049, want=1041, limit=128 [ 54.344581][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 54.344596][ T30] audit: type=1400 audit(1794197312.632:256): avc: denied { accept } for pid=942 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 54.348640][ T898] attempt to access beyond end of device [ 54.348640][ T898] loop5: rw=524288, want=369, limit=128 [ 54.381242][ T898] attempt to access beyond end of device [ 54.381242][ T898] loop5: rw=0, want=225, limit=128 [ 54.392440][ T898] attempt to access beyond end of device [ 54.392440][ T898] loop5: rw=0, want=225, limit=128 [ 54.403812][ T898] attempt to access beyond end of device [ 54.403812][ T898] loop5: rw=0, want=225, limit=128 [ 54.414727][ T898] attempt to access beyond end of device [ 54.414727][ T898] loop5: rw=0, want=225, limit=128 [ 54.425819][ T898] attempt to access beyond end of device [ 54.425819][ T898] loop5: rw=0, want=225, limit=128 [ 54.436691][ T898] attempt to access beyond end of device [ 54.436691][ T898] loop5: rw=0, want=225, limit=128 [ 54.447667][ T899] attempt to access beyond end of device [ 54.447667][ T899] loop5: rw=0, want=225, limit=128 [ 54.458700][ T899] attempt to access beyond end of device [ 54.458700][ T899] loop5: rw=0, want=225, limit=128 [ 54.526218][ T30] audit: type=1400 audit(1794197312.812:257): avc: denied { create } for pid=948 comm="syz.4.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 54.594647][ T962] netlink: 36 bytes leftover after parsing attributes in process `syz.1.175'. [ 54.679563][ T964] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1561 sclass=netlink_xfrm_socket pid=964 comm=syz.4.186 [ 54.707336][ T30] audit: type=1400 audit(1794197313.002:258): avc: denied { nlmsg_read } for pid=963 comm="syz.4.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.062394][ T933] netlink: 16 bytes leftover after parsing attributes in process `syz.0.170'. [ 55.105969][ T971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.170'. [ 55.320439][ T979] netlink: 88 bytes leftover after parsing attributes in process `syz.4.180'. [ 55.355604][ T979] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 55.513954][ T982] netlink: 196 bytes leftover after parsing attributes in process `syz.2.179'. [ 55.536883][ T30] audit: type=1400 audit(1794197313.832:259): avc: denied { create } for pid=985 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.602608][ T30] audit: type=1400 audit(1794197313.892:260): avc: denied { unmount } for pid=348 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 55.644313][ T988] ip_tables: iptables: counters copy to user failed while replacing table [ 55.653026][ T20] usbhid 6-1:0.0: can't add hid device: -71 [ 55.662593][ T30] audit: type=1400 audit(1794197313.932:261): avc: denied { lock } for pid=985 comm="syz.1.183" path="socket:[18144]" dev="sockfs" ino=18144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 55.686669][ T20] usbhid: probe of 6-1:0.0 failed with error -71 [ 55.703986][ T20] usb 6-1: USB disconnect, device number 4 [ 56.065837][ T20] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 56.459576][ T30] audit: type=1400 audit(1794197314.752:262): avc: denied { remount } for pid=1009 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.607302][ T1015] tipc: Enabling of bearer rejected, media not registered [ 56.656779][ T1021] loop1: detected capacity change from 0 to 512 [ 56.684998][ T1021] FAT-fs (loop1): Directory bread(block 2080) failed [ 56.691952][ T1021] FAT-fs (loop1): Directory bread(block 2081) failed [ 56.699378][ T1021] FAT-fs (loop1): Directory bread(block 2082) failed [ 56.707071][ T30] audit: type=1400 audit(1794197315.002:263): avc: denied { listen } for pid=1016 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 56.727861][ T1021] FAT-fs (loop1): Directory bread(block 2083) failed [ 56.737934][ T1021] FAT-fs (loop1): Directory bread(block 2084) failed [ 56.744756][ T1021] FAT-fs (loop1): Directory bread(block 2085) failed [ 56.751772][ T20] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 56.760932][ T1021] FAT-fs (loop1): Directory bread(block 2086) failed [ 56.767910][ T20] usb 6-1: config 1 has no interface number 0 [ 56.774072][ T1021] FAT-fs (loop1): Directory bread(block 2087) failed [ 56.781258][ T20] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 56.790633][ T20] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 56.804372][ T20] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 110, changing to 7 [ 56.976151][ T20] usb 6-1: New USB device found, idVendor=0582, idProduct=015b, bcdDevice= 0.40 [ 57.003147][ T1046] 9pnet: Insufficient options for proto=fd [ 57.013740][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.022470][ T30] audit: type=1400 audit(1794197315.312:264): avc: denied { map } for pid=1043 comm="syz.1.198" path="socket:[18372]" dev="sockfs" ino=18372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.056404][ T20] usb 6-1: Product: syz [ 57.069937][ T20] usb 6-1: Manufacturer: syz [ 57.080864][ T20] usb 6-1: SerialNumber: syz [ 57.098339][ T30] audit: type=1400 audit(1794197315.342:265): avc: denied { accept } for pid=1043 comm="syz.1.198" path="socket:[18372]" dev="sockfs" ino=18372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 57.163221][ T1050] loop1: detected capacity change from 0 to 4096 [ 57.191425][ T1050] EXT4-fs (loop1): Unrecognized mount option "smackfsfloor=ext4" or missing value [ 57.319372][ T1050] loop1: detected capacity change from 0 to 1024 [ 57.369798][ T1050] EXT4-fs (loop1): Ignoring removed oldalloc option [ 57.386368][ T1050] EXT4-fs (loop1): Ignoring removed orlov option [ 57.433173][ T1050] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,oldalloc,orlov,dioread_lock,,errors=continue. Quota mode: none. [ 57.447489][ T1050] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.459939][ T1050] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.200: Freeing blocks not in datazone - block = 0, count = 16 [ 57.475162][ T1050] overlayfs: failed to resolve './bus': -117 [ 57.745884][ T319] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 57.890503][ T1066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=1066 comm=syz.4.202 [ 58.155890][ T319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 58.195868][ T319] usb 2-1: not running at top speed; connect to a high speed hub [ 58.223784][ T1071] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 58.275871][ T319] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 58.429703][ T1071] 9p: Unknown Cache mode  [ 58.434937][ T1071] __nla_validate_parse: 1 callbacks suppressed [ 58.434948][ T1071] netlink: 32 bytes leftover after parsing attributes in process `syz.2.203'. [ 58.455944][ T319] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 58.465037][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.473113][ T319] usb 2-1: Product: syz [ 58.477358][ T319] usb 2-1: Manufacturer: syz [ 58.481986][ T319] usb 2-1: SerialNumber: syz [ 58.681343][ T1077] device gretap0 entered promiscuous mode [ 58.689073][ T1077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'. [ 58.698003][ T1077] device gretap0 left promiscuous mode [ 58.746654][ T319] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 58.964904][ T1093] loop5: detected capacity change from 0 to 2048 [ 58.968188][ T319] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 58.980867][ T319] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 58.988994][ T319] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 58.998685][ T319] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 59.007425][ T319] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 59.015425][ T319] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 59.021448][ T1093] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 59.895478][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 59.895494][ T30] audit: type=1400 audit(1794197318.182:273): avc: denied { mount } for pid=1103 comm="syz.4.212" name="/" dev="configfs" ino=13261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 59.936254][ T319] usb 2-1: USB disconnect, device number 5 [ 59.953074][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.965986][ T30] audit: type=1400 audit(1794197318.252:274): avc: denied { getopt } for pid=1105 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.987743][ T1113] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 60.022784][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.076371][ T20] usb 6-1: 1:0 : does not exist [ 60.081521][ T20] usb 6-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 60.104578][ T1120] loop5: detected capacity change from 0 to 1024 [ 60.111410][ T20] usb 6-1: 1:3 : does not exist [ 60.116570][ T20] usb 6-1: incorrect wMaxPacketSize 0x210 for BADD profile [ 60.127047][ T1120] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 60.138720][ T20] snd-usb-audio: probe of 6-1:1.1 failed with error -22 [ 60.154852][ T20] usb 6-1: USB disconnect, device number 5 [ 60.166442][ T1120] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 60.176594][ T1120] EXT4-fs (loop5): invalid journal inode [ 60.182354][ T1120] EXT4-fs (loop5): can't get journal size [ 60.188729][ T1120] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 60.195365][ T1120] EXT4-fs (loop5): mount failed [ 60.274549][ T1120] loop5: detected capacity change from 0 to 512 [ 60.328125][ T1120] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.360201][ T1120] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 60.375578][ T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 60.419960][ T1120] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.215: bg 0: block 248: padding at end of block bitmap is not set [ 60.443122][ T1120] Quota error (device loop5): write_blk: dquota write failed [ 60.454948][ T1129] loop1: detected capacity change from 0 to 512 [ 60.461474][ T1120] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 60.471533][ T1120] EXT4-fs error (device loop5): ext4_acquire_dquot:6227: comm syz.5.215: Failed to acquire dquot type 1 [ 60.496354][ T1120] EXT4-fs (loop5): 1 truncate cleaned up [ 60.502047][ T1120] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 60.521371][ T1120] syz.5.215 (1120) used greatest stack depth: 21032 bytes left [ 60.529926][ T1129] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 60.538057][ T1129] System zones: 1-12 [ 60.542927][ T1129] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.219: missing EA_INODE flag [ 60.554622][ T1129] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.219: error while reading EA inode 12 err=-117 [ 60.567369][ T1129] EXT4-fs (loop1): 1 orphan inode deleted [ 60.573138][ T1129] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 60.589349][ T30] audit: type=1400 audit(1794197318.882:275): avc: denied { setattr } for pid=1128 comm="syz.1.219" name=".pending_reads" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.653057][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 60.663293][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.677953][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 60.693044][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.701694][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.713307][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.722384][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.730973][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.155397][ T1151] xt_hashlimit: size too large, truncated to 1048576 [ 61.190769][ T1149] netlink: 40 bytes leftover after parsing attributes in process `syz.4.225'. [ 61.202058][ T30] audit: type=1326 audit(1794197575.495:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.0.226" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b734b19 code=0x7ffc0000 [ 61.232019][ T1147] loop5: detected capacity change from 0 to 8192 [ 61.260917][ T30] audit: type=1326 audit(1794197575.495:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.0.226" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b734b19 code=0x7ffc0000 [ 61.318859][ T1157] netlink: 88 bytes leftover after parsing attributes in process `syz.5.228'. [ 61.338024][ T1157] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 61.353621][ T30] audit: type=1326 audit(1794197575.525:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.0.226" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f261b734b19 code=0x7ffc0000 [ 61.383399][ T1159] fuse: Bad value for 'user_id' [ 61.404314][ T30] audit: type=1326 audit(1794197575.525:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.0.226" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b734b19 code=0x7ffc0000 [ 61.465834][ T30] audit: type=1326 audit(1794197575.525:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.0.226" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f261b734b19 code=0x7ffc0000 [ 61.658941][ T1178] loop5: detected capacity change from 0 to 512 [ 61.693627][ T1184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.737604][ T1178] EXT4-fs (loop5): Test dummy encryption mode enabled [ 61.777638][ T1178] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #2: comm syz.5.234: missing EA_INODE flag [ 61.795929][ T1178] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.234: error while reading EA inode 2 err=-117 [ 61.826034][ T1178] EXT4-fs (loop5): 1 orphan inode deleted [ 61.831820][ T1178] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue. Quota mode: writeback. [ 61.855815][ T1194] capability: warning: `syz.1.239' uses deprecated v2 capabilities in a way that may be insecure [ 62.045402][ T1200] loop5: detected capacity change from 0 to 1024 [ 62.122307][ T1200] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 62.132428][ T1200] EXT4-fs error (device loop5): ext4_get_journal_inode:5178: inode #32: comm syz.5.242: iget: special inode unallocated [ 62.145459][ T1200] EXT4-fs (loop5): no journal found [ 62.150786][ T1200] EXT4-fs (loop5): can't get journal size [ 62.186273][ T1200] EXT4-fs (loop5): filesystem is read-only [ 62.197518][ T1200] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 62.218006][ T1200] EXT4-fs (loop5): shut down requested (2) [ 64.166740][ T1237] loop5: detected capacity change from 0 to 256 [ 64.585838][ T1225] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 64.655821][ T307] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 64.855818][ T1225] usb 6-1: device descriptor read/64, error -71 [ 65.015872][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.026957][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.037408][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 65.048446][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 65.058843][ T307] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.068387][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.079733][ T307] usb 2-1: config 0 descriptor?? [ 65.283486][ T1225] usb 6-1: device descriptor read/64, error -71 [ 65.298601][ T1262] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 65.555865][ T1225] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 65.566982][ T307] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 65.574801][ T307] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 65.582570][ T307] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 65.590282][ T307] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 65.598302][ T307] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 65.608813][ T307] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 65.836953][ T1241] input: syz0 as /devices/virtual/input/input5 [ 65.854368][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 65.854387][ T30] audit: type=1400 audit(1794197580.135:341): avc: denied { read } for pid=1240 comm="syz.1.255" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.883692][ T30] audit: type=1400 audit(1794197580.135:342): avc: denied { ioctl } for pid=1240 comm="syz.1.255" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 65.914465][ T1273] plantronics 0003:047F:FFFF.0002: usb_submit_urb(out) failed: -90 [ 65.935093][ T30] audit: type=1400 audit(1794197580.205:343): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=707 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.961216][ T1279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 65.975158][ T56] usb 2-1: USB disconnect, device number 6 [ 65.995428][ T1279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'. [ 66.006709][ T30] audit: type=1400 audit(1794197580.205:344): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=707 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.057290][ T30] audit: type=1400 audit(1794197580.205:345): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=707 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.092720][ T30] audit: type=1326 audit(1794197580.325:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.2.267" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d857eb19 code=0x7ffc0000 [ 66.117945][ T30] audit: type=1326 audit(1794197580.325:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.2.267" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f74d857eb19 code=0x7ffc0000 [ 66.145306][ T30] audit: type=1326 audit(1794197580.325:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.2.267" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d857eb19 code=0x7ffc0000 [ 66.171486][ T30] audit: type=1326 audit(1794197580.325:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.2.267" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f74d857eb19 code=0x7ffc0000 [ 66.196714][ T30] audit: type=1326 audit(1794197580.325:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1278 comm="syz.2.267" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74d857eb19 code=0x7ffc0000 [ 66.470249][ T1225] usb 6-1: device descriptor read/64, error -71 [ 66.520419][ T1289] fuse: Bad value for 'fd' [ 66.525155][ T1289] cgroup: Unexpected value for 'all' [ 66.607167][ T1298] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 66.615082][ T1298] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 66.633383][ T1304] SELinux: security_context_str_to_sid(Eá…) failed for (dev ?, type ?) errno=-22 [ 66.643736][ T1303] SELinux: security_context_str_to_sid(Eá…) failed for (dev proc, type proc) errno=-22 [ 66.772276][ T1316] netlink: 36 bytes leftover after parsing attributes in process `syz.4.278'. [ 66.805833][ T319] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 66.895813][ T1225] usb 6-1: device descriptor read/64, error -71 [ 67.015995][ T1225] usb usb6-port1: attempt power cycle [ 67.125851][ T319] usb 2-1: not running at top speed; connect to a high speed hub [ 67.205868][ T319] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.216153][ T319] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 67.225095][ T319] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 67.234438][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.295276][ T1323] netlink: 'syz.2.280': attribute type 16 has an invalid length. [ 67.305677][ T1325] loop5: detected capacity change from 0 to 1024 [ 67.338873][ T1325] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 67.348678][ T1325] EXT4-fs (loop5): invalid journal inode [ 67.354434][ T1325] EXT4-fs (loop5): can't get journal size [ 67.363334][ T1325] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,sysvgroups,norecovery,abort,nombcache,,errors=continue. Quota mode: writeback. [ 67.426443][ T1331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1331 comm=syz.5.283 [ 67.446240][ T1331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1331 comm=syz.5.283 [ 67.462655][ T1331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1331 comm=syz.5.283 [ 67.478723][ T1331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1331 comm=syz.5.283 [ 67.501887][ T1331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1331 comm=syz.5.283 [ 67.514686][ T1331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1331 comm=syz.5.283 [ 67.527464][ T1331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1331 comm=syz.5.283 [ 67.540342][ T1331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1331 comm=syz.5.283 [ 67.566338][ T1331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1331 comm=syz.5.283 [ 67.580340][ T1331] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1331 comm=syz.5.283 [ 67.882192][ T1344] fuse: Bad value for 'fd' [ 68.666130][ T1359] netlink: 20 bytes leftover after parsing attributes in process `syz.0.287'. [ 69.179187][ T1373] loop5: detected capacity change from 0 to 512 [ 69.241696][ T1375] fuse: Bad value for 'fd' [ 69.257957][ T1375] cgroup: Unexpected value for 'all' [ 69.357091][ T1379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.293'. [ 69.633387][ T1386] netlink: 36 bytes leftover after parsing attributes in process `syz.0.295'. [ 69.760082][ T1388] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 69.767725][ T1388] loop5: detected capacity change from 0 to 128 [ 69.864996][ T1388] loop5: detected capacity change from 0 to 8192 [ 69.886136][ T1388] handle_bad_sector: 19420 callbacks suppressed [ 69.886155][ T1388] attempt to access beyond end of device [ 69.886155][ T1388] loop5: rw=0, want=57848, limit=8192 [ 69.918271][ T1388] Buffer I/O error on dev loop5, logical block 57847, async page read [ 69.926979][ T1388] attempt to access beyond end of device [ 69.926979][ T1388] loop5: rw=0, want=57848, limit=8192 [ 69.939255][ T1388] Buffer I/O error on dev loop5, logical block 57847, async page read [ 69.947883][ T1388] attempt to access beyond end of device [ 69.947883][ T1388] loop5: rw=0, want=57848, limit=8192 [ 69.959183][ T1388] Buffer I/O error on dev loop5, logical block 57847, async page read [ 69.967854][ T1388] attempt to access beyond end of device [ 69.967854][ T1388] loop5: rw=0, want=57848, limit=8192 [ 69.979314][ T1388] Buffer I/O error on dev loop5, logical block 57847, async page read [ 69.988698][ T1388] attempt to access beyond end of device [ 69.988698][ T1388] loop5: rw=0, want=57848, limit=8192 [ 70.002350][ T1388] Buffer I/O error on dev loop5, logical block 57847, async page read [ 70.012195][ T1388] attempt to access beyond end of device [ 70.012195][ T1388] loop5: rw=0, want=57848, limit=8192 [ 70.029515][ T1388] Buffer I/O error on dev loop5, logical block 57847, async page read [ 70.038357][ T1388] attempt to access beyond end of device [ 70.038357][ T1388] loop5: rw=0, want=57848, limit=8192 [ 70.049604][ T1388] Buffer I/O error on dev loop5, logical block 57847, async page read [ 70.058210][ T1388] attempt to access beyond end of device [ 70.058210][ T1388] loop5: rw=0, want=57848, limit=8192 [ 70.077168][ T1388] Buffer I/O error on dev loop5, logical block 57847, async page read [ 70.086071][ T1388] attempt to access beyond end of device [ 70.086071][ T1388] loop5: rw=0, want=57848, limit=8192 [ 70.155110][ T20] usb 2-1: USB disconnect, device number 7 [ 70.162123][ T1388] Buffer I/O error on dev loop5, logical block 57847, async page read [ 70.173545][ T1388] attempt to access beyond end of device [ 70.173545][ T1388] loop5: rw=0, want=57848, limit=8192 [ 70.188099][ T1388] Buffer I/O error on dev loop5, logical block 57847, async page read [ 70.400288][ T1411] loop1: detected capacity change from 0 to 512 [ 70.984710][ T1421] overlayfs: failed to clone upperpath [ 71.123437][ T1421] overlayfs: failed to clone upperpath [ 71.129426][ T1421] overlayfs: failed to clone upperpath [ 71.135357][ T1421] overlayfs: failed to clone upperpath [ 71.141219][ T1421] overlayfs: failed to clone upperpath [ 71.147108][ T1421] overlayfs: failed to clone upperpath [ 71.152909][ T1421] overlayfs: failed to clone upperpath [ 71.158722][ T1421] overlayfs: failed to clone upperpath [ 71.164551][ T1421] overlayfs: failed to clone upperpath [ 71.170392][ T1421] overlayfs: failed to clone upperpath [ 71.176238][ T1421] overlayfs: failed to clone upperpath [ 71.182068][ T1421] overlayfs: failed to clone upperpath [ 71.187873][ T1421] overlayfs: failed to clone upperpath [ 71.193696][ T1421] overlayfs: failed to clone upperpath [ 71.199555][ T1421] overlayfs: failed to clone upperpath [ 71.205346][ T1421] overlayfs: failed to clone upperpath [ 71.211160][ T1421] overlayfs: failed to clone upperpath [ 71.217205][ T1421] overlayfs: failed to clone upperpath [ 71.223070][ T1421] overlayfs: failed to clone upperpath [ 71.228921][ T1421] overlayfs: failed to clone upperpath [ 71.234729][ T1421] overlayfs: failed to clone upperpath [ 71.240547][ T1421] overlayfs: failed to clone upperpath [ 71.246386][ T1421] overlayfs: failed to clone upperpath [ 71.252159][ T1421] overlayfs: failed to clone upperpath [ 71.258173][ T1421] overlayfs: failed to clone upperpath [ 71.263973][ T1421] overlayfs: failed to clone upperpath [ 71.269791][ T1421] overlayfs: failed to clone upperpath [ 71.275628][ T1421] overlayfs: failed to clone upperpath [ 71.281634][ T1421] overlayfs: failed to clone upperpath [ 71.287488][ T1421] overlayfs: failed to clone upperpath [ 71.293307][ T1421] overlayfs: failed to clone upperpath [ 71.299751][ T1421] overlayfs: failed to clone upperpath [ 71.305568][ T1421] overlayfs: failed to clone upperpath [ 71.548546][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 71.548563][ T30] audit: type=1400 audit(1794197585.845:358): avc: denied { append } for pid=1425 comm="syz.1.302" name="001" dev="devtmpfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.698532][ T1442] fuse: Bad value for 'fd' [ 71.703286][ T1442] cgroup: Unexpected value for 'all' [ 71.800568][ T1438] netlink: 'syz.2.306': attribute type 12 has an invalid length. [ 71.818890][ T1438] netlink: 'syz.2.306': attribute type 29 has an invalid length. [ 71.836398][ T1438] netlink: 148 bytes leftover after parsing attributes in process `syz.2.306'. [ 71.868306][ T1438] netlink: 59 bytes leftover after parsing attributes in process `syz.2.306'. [ 71.925809][ T20] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 72.085796][ T720] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 72.105152][ T1455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.310'. [ 72.115943][ T1455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.310'. [ 72.129545][ T1455] mmap: syz.4.310 (1455) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 72.165795][ T20] usb 6-1: Using ep0 maxpacket: 8 [ 72.326044][ T20] usb 6-1: unable to get BOS descriptor or descriptor too short [ 72.435877][ T720] usb 2-1: not running at top speed; connect to a high speed hub [ 72.515901][ T720] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.526467][ T720] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 72.535418][ T720] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 72.544691][ T720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.565859][ T20] usb 6-1: New USB device found, idVendor=0e41, idProduct=4244, bcdDevice= 0.40 [ 72.579400][ T20] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.595147][ T20] usb 6-1: Product: syz [ 72.602918][ T20] usb 6-1: Manufacturer: syz [ 72.609051][ T20] usb 6-1: SerialNumber: syz [ 72.629287][ T1487] netlink: 'syz.2.312': attribute type 1 has an invalid length. [ 73.554428][ T30] audit: type=1400 audit(1794197587.845:359): avc: denied { relabelfrom } for pid=1491 comm="syz.5.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 73.587105][ T1492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.315'. [ 73.653958][ T30] audit: type=1400 audit(1794197587.865:360): avc: denied { relabelto } for pid=1491 comm="syz.5.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 73.807091][ T30] audit: type=1400 audit(1794197588.045:361): avc: denied { associate } for pid=1496 comm="syz.0.314" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 73.979312][ T30] audit: type=1400 audit(1794197588.195:362): avc: denied { watch watch_reads } for pid=1498 comm="syz.5.316" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 74.007722][ T30] audit: type=1400 audit(1794197588.205:363): avc: denied { mounton } for pid=1498 comm="syz.5.316" path="/sys" dev="proc" ino=4026531856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_t tclass=dir permissive=1 [ 74.030403][ T20] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 74.037311][ T1499] loop5: detected capacity change from 0 to 4096 [ 74.055907][ T20] usb 6-1: unit 1 not found! [ 74.062758][ T20] usb 6-1: USB disconnect, device number 9 [ 74.145214][ T1511] netlink: 36 bytes leftover after parsing attributes in process `syz.5.318'. [ 74.276193][ T317] udevd[317]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 74.847143][ T1517] overlayfs: failed to clone upperpath [ 74.853222][ T1516] overlayfs: failed to clone upperpath [ 74.998095][ T1523] overlayfs: failed to clone lowerpath [ 75.004841][ T1522] overlayfs: failed to clone lowerpath [ 75.040424][ T1529] loop5: detected capacity change from 0 to 256 [ 75.099241][ T720] usb 2-1: USB disconnect, device number 8 [ 75.117434][ T30] audit: type=1400 audit(1794197589.415:364): avc: denied { mounton } for pid=1528 comm="syz.5.321" path="/49/file0/dev" dev="loop5" ino=1048664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 75.146020][ T1535] fuse: Bad value for 'fd' [ 75.152484][ T1535] cgroup: Unexpected value for 'all' [ 75.161977][ T1538] loop1: detected capacity change from 0 to 512 [ 75.180625][ T1538] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.194020][ T1538] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.210874][ T1544] netlink: 25 bytes leftover after parsing attributes in process `syz.4.324'. [ 75.219023][ T348] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 75.223388][ T1538] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.322: bg 0: block 384: padding at end of block bitmap is not set [ 75.228347][ T348] FAT-fs (loop5): Filesystem has been set read-only [ 75.242348][ T1538] EXT4-fs (loop1): Remounting filesystem read-only [ 75.251282][ T1544] device gretap0 entered promiscuous mode [ 75.255098][ T1538] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 75.263312][ T348] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 75.277856][ T1546] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.324'. [ 75.288976][ T1546] .00ªX¹¦Dö»: renamed from gretap0 [ 75.294586][ T1538] EXT4-fs (loop1): Remounting filesystem read-only [ 75.301826][ T1546] device .00ªX¹¦Dö» left promiscuous mode [ 75.308866][ T1538] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.322: attempt to clear invalid blocks 983260 len 1 [ 75.322391][ T1547] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.324'. [ 75.332107][ T1538] EXT4-fs (loop1): Remounting filesystem read-only [ 75.332116][ T1546] netlink: 25 bytes leftover after parsing attributes in process `syz.4.324'. [ 75.347809][ T1546] device .00ªX¹¦Dö» entered promiscuous mode [ 75.349046][ T1538] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.322: Invalid inode table block 0 in block_group 0 [ 75.367180][ T1538] EXT4-fs (loop1): Remounting filesystem read-only [ 75.373862][ T1538] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 75.383612][ T1538] EXT4-fs (loop1): Remounting filesystem read-only [ 75.390230][ T1538] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 75.399065][ T1538] EXT4-fs (loop1): Remounting filesystem read-only [ 75.405642][ T1538] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.322: Invalid inode table block 0 in block_group 0 [ 75.418559][ T1538] EXT4-fs (loop1): Remounting filesystem read-only [ 75.428494][ T1538] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 75.440001][ T1538] EXT4-fs (loop1): Remounting filesystem read-only [ 75.446811][ T1538] EXT4-fs error (device loop1): ext4_truncate:4317: inode #11: comm syz.1.322: mark_inode_dirty error [ 75.458353][ T1538] EXT4-fs (loop1): Remounting filesystem read-only [ 75.464896][ T1538] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 75.474083][ T1538] EXT4-fs (loop1): Remounting filesystem read-only [ 75.480723][ T1538] EXT4-fs (loop1): 1 truncate cleaned up [ 75.486579][ T1538] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,. Quota mode: none. [ 75.589709][ T30] audit: type=1400 audit(1794197589.885:365): avc: denied { mounton } for pid=1552 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 75.621779][ T30] audit: type=1400 audit(1794197589.885:366): avc: denied { create } for pid=1552 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.694924][ T30] audit: type=1326 audit(1794197589.975:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1554 comm="syz.1.329" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a794e8b19 code=0x7ffc0000 [ 75.781142][ T1564] tipc: Started in network mode [ 75.796020][ C0] ================================================================== [ 75.804171][ C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 75.811582][ C0] Read of size 8 at addr ffff88812959d990 by task ksoftirqd/0/13 [ 75.819319][ C0] [ 75.821660][ C0] CPU: 0 PID: 13 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 75.828954][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 75.839037][ C0] Call Trace: [ 75.842333][ C0] [ 75.845281][ C0] __dump_stack+0x21/0x30 [ 75.849739][ C0] dump_stack_lvl+0x110/0x170 [ 75.854436][ C0] ? show_regs_print_info+0x20/0x20 [ 75.859671][ C0] ? load_image+0x3f0/0x3f0 [ 75.864190][ C0] print_address_description+0x7f/0x2c0 [ 75.869753][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 75.874797][ C0] kasan_report+0x10f/0x150 [ 75.879339][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 75.884377][ C0] __asan_report_load8_noabort+0x14/0x20 [ 75.890026][ C0] rcu_cblist_dequeue+0x6c/0xb0 [ 75.894901][ C0] rcu_do_batch+0x47d/0xbf0 [ 75.899422][ C0] ? local_bh_enable+0x20/0x20 [ 75.904199][ C0] ? __kasan_check_write+0x14/0x20 [ 75.909359][ C0] ? _raw_spin_lock+0xf0/0xf0 [ 75.914057][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 75.919882][ C0] ? rcu_report_qs_rnp+0x2bc/0x390 [ 75.925012][ C0] rcu_core+0x4a3/0xef0 [ 75.929184][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 75.934399][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 75.939986][ C0] ? rcu_softirq_qs+0xd7/0x2f0 [ 75.944768][ C0] ? rcu_get_gp_kthreads_prio+0x10/0x10 [ 75.950329][ C0] ? irqtime_account_irq+0x76/0x390 [ 75.955539][ C0] rcu_core_si+0x9/0x10 [ 75.959713][ C0] handle_softirqs+0x250/0x560 [ 75.964496][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 75.969822][ C0] run_ksoftirqd+0x28/0x40 [ 75.974310][ C0] smpboot_thread_fn+0x446/0x880 [ 75.979288][ C0] kthread+0x3f5/0x4f0 [ 75.983380][ C0] ? cpu_report_death+0x1b0/0x1b0 [ 75.988430][ C0] ? kthread_blkcg+0xd0/0xd0 [ 75.993037][ C0] ret_from_fork+0x1f/0x30 [ 75.997468][ C0] [ 76.000496][ C0] [ 76.002834][ C0] Allocated by task 1562: [ 76.007164][ C0] __kasan_kmalloc+0xd4/0x100 [ 76.011852][ C0] __kmalloc+0x13d/0x2c0 [ 76.016110][ C0] l2tp_session_create+0x39/0xb60 [ 76.021180][ C0] pppol2tp_connect+0xbf5/0x1640 [ 76.026128][ C0] __sys_connect+0x3cb/0x450 [ 76.030731][ C0] __x64_sys_connect+0x7a/0x90 [ 76.035633][ C0] x64_sys_call+0x7c/0x9a0 [ 76.040061][ C0] do_syscall_64+0x4c/0xa0 [ 76.044501][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.050409][ C0] [ 76.052743][ C0] Freed by task 1023: [ 76.056735][ C0] kasan_set_track+0x4a/0x70 [ 76.061339][ C0] kasan_set_free_info+0x23/0x40 [ 76.066287][ C0] ____kasan_slab_free+0x125/0x160 [ 76.071406][ C0] __kasan_slab_free+0x11/0x20 [ 76.076183][ C0] slab_free_freelist_hook+0xc2/0x190 [ 76.081569][ C0] kfree+0xc4/0x270 [ 76.085394][ C0] l2tp_session_put+0xaf/0x1a0 [ 76.090199][ C0] l2tp_session_delete+0x3a9/0x4a0 [ 76.095324][ C0] l2tp_tunnel_del_work+0x180/0x3d0 [ 76.100541][ C0] process_one_work+0x6c8/0xbb0 [ 76.105449][ C0] worker_thread+0xaa0/0x1250 [ 76.110146][ C0] kthread+0x3f5/0x4f0 [ 76.114233][ C0] ret_from_fork+0x1f/0x30 [ 76.118666][ C0] [ 76.120999][ C0] Last potentially related work creation: [ 76.126718][ C0] kasan_save_stack+0x3a/0x60 [ 76.131407][ C0] __kasan_record_aux_stack+0xd2/0x100 [ 76.136889][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 76.142744][ C0] call_rcu+0x10b/0xf60 [ 76.146917][ C0] pppol2tp_release+0x1e3/0x2b0 [ 76.151788][ C0] sock_close+0xb8/0x200 [ 76.156054][ C0] __fput+0x22b/0x900 [ 76.160078][ C0] ____fput+0x15/0x20 [ 76.164095][ C0] task_work_run+0x127/0x190 [ 76.169002][ C0] exit_to_user_mode_loop+0xd0/0xe0 [ 76.174215][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 76.179690][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 76.185162][ C0] do_syscall_64+0x58/0xa0 [ 76.189587][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.195492][ C0] [ 76.197824][ C0] The buggy address belongs to the object at ffff88812959d800 [ 76.197824][ C0] which belongs to the cache kmalloc-512 of size 512 [ 76.211887][ C0] The buggy address is located 400 bytes inside of [ 76.211887][ C0] 512-byte region [ffff88812959d800, ffff88812959da00) [ 76.225204][ C0] The buggy address belongs to the page: [ 76.230968][ C0] page:ffffea0004a56700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12959c [ 76.241219][ C0] head:ffffea0004a56700 order:2 compound_mapcount:0 compound_pincount:0 [ 76.249571][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 76.255677][ C0] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00 [ 76.264360][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 76.272953][ C0] page dumped because: kasan: bad access detected [ 76.279374][ C0] page_owner tracks the page as allocated [ 76.285110][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 289, ts 25240998730, free_ts 0 [ 76.303269][ C0] post_alloc_hook+0x192/0x1b0 [ 76.308051][ C0] prep_new_page+0x1c/0x110 [ 76.312565][ C0] get_page_from_freelist+0x2d42/0x2dd0 [ 76.318138][ C0] __alloc_pages+0x1a2/0x460 [ 76.322738][ C0] new_slab+0xa0/0x4d0 [ 76.326838][ C0] ___slab_alloc+0x3ac/0x840 [ 76.331445][ C0] __slab_alloc+0x49/0x90 [ 76.335786][ C0] __kmalloc+0x16a/0x2c0 [ 76.340037][ C0] fib6_info_alloc+0x34/0xe0 [ 76.344655][ C0] ip6_route_info_create+0x51b/0x14d0 [ 76.350035][ C0] ip6_route_add+0x27/0x130 [ 76.354550][ C0] addrconf_prefix_route+0x233/0x310 [ 76.359850][ C0] inet6_addr_add+0x50b/0x9d0 [ 76.364540][ C0] inet6_rtm_newaddr+0x6e7/0x9c0 [ 76.369768][ C0] rtnetlink_rcv_msg+0x9fd/0xcb0 [ 76.374718][ C0] netlink_rcv_skb+0x1e9/0x430 [ 76.379504][ C0] page_owner free stack trace missing [ 76.384963][ C0] [ 76.387289][ C0] Memory state around the buggy address: [ 76.392922][ C0] ffff88812959d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.401116][ C0] ffff88812959d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.409187][ C0] >ffff88812959d980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 76.417253][ C0] ^ [ 76.421845][ C0] ffff88812959da00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.429920][ C0] ffff88812959da80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.437986][ C0] ================================================================== [ 76.446045][ C0] Disabling lock debugging due to kernel taint [ 76.453683][ T1564] tipc: Node identity facbcc2a474b, cluster identity 4711 [ 76.461038][ T1564] tipc: Enabled bearer , priority 0 [ 76.540849][ T1565] device syzkaller0 entered promiscuous mode [ 76.597879][ T1564] loop1: detected capacity change from 0 to 8192 [ 76.603229][ T1552] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.617866][ T1552] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.632560][ T1552] device bridge_slave_0 entered promiscuous mode [ 76.651226][ T1552] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.660268][ T1552] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.668326][ T1552] device bridge_slave_1 entered promiscuous mode [ 76.766180][ T1563] tipc: Resetting bearer [ 76.784255][ T1563] tipc: Disabling bearer [ 76.792729][ T1552] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.799828][ T1552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.807158][ T1552] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.814207][ T1552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.845203][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.866475][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.873888][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.895661][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.906142][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.913223][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.926836][ T306] device bridge_slave_1 left promiscuous mode [ 76.933056][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.949444][ T306] device bridge_slave_0 left promiscuous mode [ 76.961526][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.970494][ T306] device veth1_macvtap left promiscuous mode [ 76.976710][ T306] device veth0_vlan left promiscuous mode [ 77.057060][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.065358][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.072462][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.080376][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.096480][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.112128][ T1552] device veth0_vlan entered promiscuous mode [ 77.119452][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.129325][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.137851][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.145431][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.161623][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.170514][ T1552] device veth1_macvtap entered promiscuous mode [ 77.182029][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.198233][ T1023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.217611][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 77.217626][ T30] audit: type=1400 audit(1794197591.515:394): avc: denied { mount } for pid=1552 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.246560][ T30] audit: type=1400 audit(1794197591.515:395): avc: denied { mounton } for pid=1552 comm="syz-executor" path="/root/syzkaller.1WScm7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1