last executing test programs: 6.451822845s ago: executing program 4 (id=1763): syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000340)='./debug/split_huge_pages\x00', 0x200841a, &(0x7f0000000580)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0193acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417bb7f527c0bfebec112d57fc69fabb9b31ef97b2147930ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a3332978da70e9050417087c5ae034a735e8b448dd97014043159cbaacebfc912cf05f608e6214c04099fa311b747c37af702d134fb8eec487cfaea91150d1980464ff31cf86e3f3b950b204f6f67810c0826e4e5467c1588de9816bc627fb4662ac5fc8e38f19ec065550e5f9b16f72a91144a2e52ba9f2c6a7e2afbabc533ac731bb7ec51b8c585c2749469da331006ca4d49e136189d21ae50455834b2e75efd81c9d6352e5a814cf002f294475dab27a10d87516e405eff30d107bc4b29750976b73a49268ec296bd86d325bb0eb17871f7b77377e07dd74326303d90048d3fdd0c182cdac271010da972031ccf6e583df85cc3a9d94d0657f4fc102772e46b55c51eab9dac2ece6d3a02b8f20e9df6f3e6f2841e4f730d01589e9ae11265740fa5343fc3e668ae284b600cb5352ba5482c08be363f1d32abb6c5d0fd70ad9f08e3092585fba473be9ad2a052e9b2800d13d1d08bac1f182fa3e000f4aa2ffb513c0b256da51935af036b454ce28bd7924404a98615973b435d140a99ad59f17202766d219d9249d8f81e", @ANYRES8=0x0], 0x1, 0x554f, &(0x7f0000006a40)="$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") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000006180)={0xa, 0x400000000008d}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/split_huge_pages\x00', 0x640041, 0x0) write(r1, &(0x7f0000006200)='1', 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000006280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000062c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000006300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0xbdc06000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000006380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000006400), 0x651, 0x0) recvmmsg(r3, &(0x7f0000006440), 0x4000087, 0x2, 0x0) r5 = socket$inet6(0xa, 0x0, 0xff) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000240)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000280)=0x63ba, 0x4) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f00000001c0)=0x80000a2c, 0x4) sendmmsg$inet6(r5, &(0x7f0000000380)=[{{&(0x7f00000003c0)={0xa, 0x4c62, 0x7, @loopback, 0x9}, 0x1c, 0x0}}], 0x1, 0x60000040) recvmmsg(r0, &(0x7f00000024c0)=[{{&(0x7f0000000400)=@alg, 0x80, &(0x7f0000000500)=[{&(0x7f0000000480)=""/123, 0x7b}], 0x1, &(0x7f0000000c40)=""/115, 0x73}, 0x6599ce97}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000001240)=""/91, 0x5b}, {&(0x7f0000000d40)=""/70, 0x46}, {&(0x7f0000000dc0)=""/88, 0x58}, {&(0x7f0000000e40)=""/144, 0x90}, {&(0x7f0000000f00)=""/172, 0xac}, {&(0x7f0000001300)=""/168, 0xa8}], 0x6, &(0x7f0000001100)=""/23, 0x17}, 0x2376}, {{&(0x7f0000001140)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000011c0), 0x0, &(0x7f0000001200)=""/49, 0x31}, 0x9}, {{&(0x7f0000000fc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002440)=[{&(0x7f00000025c0)=""/4108, 0x100c}, {&(0x7f00000023c0)=""/78, 0x4e}], 0x2, &(0x7f0000002480)=""/49, 0x31}, 0x2}], 0x4, 0x40000140, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000006480)={0x3, &(0x7f00000064c0)=[{0x80}, {0x3, 0x0, 0x3}, {0x6, 0x0, 0xff, 0x7fff0000}]}) r7 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000006500)={0x0, 0x2}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_mount_image$vfat(&(0x7f0000006540), &(0x7f0000006580)='./file0\x00', 0x324a036, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESOCT=r7, @ANYRESDEC, @ANYBLOB="de3631d09a34c16dcba1ffab984911dcdbc1e2658c0e67172ccdcb14208a27a4ff0c1cbd0fa976fdbbaad16f5c6fde7c2c92f2e0ab2344e716564d5a635f805beb1b8f511710cab116bf7d89a29c2663983ab0d1ba440d9b6dad26650c4fcbc378c942f1886742a767c7a16ea03d45863b2d1cb3c0b110fce5adcfb2a8b7eaeb511b156d10fcaff3dc0e49dab7a3f17f23f991b330ebbbe05cf266927dbfaf48e5a94cc269103cc3becda023f5c580b23c1692efe1242191b52e58260985c320a9fe27a1cb3b4d1fa1494038ee8af6168a9d6ec2c35671b71eaac01cf09c1df4cd5cf00ae24e0191a460c21f04f00c70d4", @ANYRES8=r6], 0x1, 0x2d3, &(0x7f00000013c0)="$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") socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x891b, &(0x7f0000006a00)={'wg1\x00', {0x2, 0x4e21, @multicast1}}) creat(&(0x7f0000000200)='./debug/split_huge_pages\x00', 0xecf86c37d53049ec) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 5.102570532s ago: executing program 4 (id=1773): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, 0x0, 0xc) write$vga_arbiter(r0, &(0x7f0000000440)=@unlock_all, 0xb) close(0x3) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x6, 0x0, 0x0, 0x104, 0x4}}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) io_setup(0x2, &(0x7f00000001c0)) read(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000200)={0x9ee470db065ff3a6, 0x0, &(0x7f0000000280), &(0x7f00000002c0), {}, &(0x7f0000000300)=""/90, 0x5a, &(0x7f0000000380)=""/158, 0x0, 0x0, {r1}}, 0xffffffffffffffab) prlimit64(0x0, 0xe, &(0x7f0000001500)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001540)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000015c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000001640)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000016c0), 0x651, 0x0) recvmmsg(r5, &(0x7f0000001700), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 4.402479913s ago: executing program 1 (id=1776): mkdirat(0xffffffffffffff9c, &(0x7f0000001900)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc/sys/net/ipv6/conf/default/disable_ipv6\x00', &(0x7f0000001980)='proc\x00', 0x5004, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000800), 0x366, 0x10, &(0x7f0000000840), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&\x00'], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000940)=ANY=[], 0x10) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/ipv6/conf/default/disable_ipv6\x00', &(0x7f0000000040)={0x6c042, 0x100, 0x24}, 0x18) r3 = openat(r2, &(0x7f00000000c0)='./proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x8cb42, 0x120) write$cgroup_pid(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0x1d}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x30004841}, 0x20000880) 4.348432618s ago: executing program 1 (id=1777): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000680)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f0000000780), 0x318, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000800)=0x100000000e2) r3 = syz_io_uring_setup(0x341c, &(0x7f0000000240)={0x0, 0xddf7, 0x400, 0x3, 0xbd}, &(0x7f00000008c0), &(0x7f0000000040), &(0x7f0000000000)) r4 = io_uring_setup(0x168f, &(0x7f0000000980)={0x0, 0x7fbb, 0x8000, 0x40001, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0x1, 0x3}, 0x20) close(r6) io_uring_enter(r3, 0x4118, 0x9bbf, 0x8, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) sendfile(0xffffffffffffffff, r4, &(0x7f0000000a00)=0x10000008, 0xb6) 3.979288626s ago: executing program 4 (id=1782): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000002c0)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000300)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000340)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @opaque="7758e6a9e3e9f02473"}}}}}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000200)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000f804"], &(0x7f0000000100)=0x520) syz_usb_connect$uac3(0x0, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0xa, 0xf0, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x24, 0x30, 0xed}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xf, 0x8000}, [@selector_unit={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x120, 0x1, 0x9, 0x10, {0xa, 0x25, 0x25, 0x200005, 0x50, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xe2, 0x1, {0xa, 0x25, 0x25, 0x2, 0x0, 0xffff}}}}}}}}]}}, 0x0) 3.486862536s ago: executing program 1 (id=1786): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x2636fdacf55d61c2, &(0x7f0000000240)=ANY=[@ANYBLOB="d75f83e67eb866d18331b26cfbaeb8fc32f6207e4a8ef1049adeb117412f8bd1ae622a51d0621bbe6006e92161c3b36d3eea9968290b74921133f25e0bc64cb65e965c4a97b7bac016a73b643d92f4f56182fc2b4fbbe4de3e0eaef6c4d31c4b3247b3da8fd9849c5656d26fe6241fc3d9ad8c5cef84d935bde2e750ed93b96706dc47b97fee2e06fd903cd03b5aac74f39955f780b6144246fc78ff20579b0642fcb50044", @ANYRES8=r1], 0x1, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000400), 0x10106, 0x2, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x8, 0x0) r5 = open$dir(&(0x7f0000000480)='./file0\x00', 0xca800, 0x45) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000004c0)={0x30000009}) close(r5) mlock(&(0x7f0000383000/0x3000)=nil, 0x3000) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0xf) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000540)={0x7, 0x7, 0xc37b}) socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000580)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000600)={{r3}, "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"}) sendmmsg$inet6(r8, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000600), 0x171}}], 0x400000000000172, 0x4001c00) 3.434799502s ago: executing program 4 (id=1787): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4068, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x2c, r3, 0x105, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x40006) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r5, &(0x7f0000000d00)={0xa, 0x4e24, 0xf, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) write(r5, &(0x7f0000000d40)="89", 0xffe3) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x1, 0x2, 0x800}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = syz_clone3(&(0x7f00000005c0)={0x400, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300), {0x21}, &(0x7f00000003c0)=""/249, 0xf9, &(0x7f00000004c0)=""/181, &(0x7f0000000580)=[0x0, 0xffffffffffffffff], 0x2, {r6}}, 0x58) r8 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000006c0)='user\x00', 0x0, &(0x7f0000001000)="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", 0x59f, r8) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000c80)={'veth0_to_team\x00', &(0x7f0000000cc0)=@ethtool_channels={0x3c, 0x0, 0x6, 0x40000, 0x0, 0x2, 0x1}}) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x4, 0x0, r7}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000240)={0x0, 0x0, 0x20001, 0xfffffffffffffffe}) close_range(r4, 0xffffffffffffffff, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x14000, &(0x7f0000000f40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2e6163636573733d706c69656e742c6b56d4b34885ac6a29cabb2fd9ac5bfa3c086aae9f031ffa23774ffb4f9f0f02db0705fc5d64790d7bb3f08c4c59d3428f83583adfff328c9c45c09b5e3916d771bec27bbaea0ad8c8203aa5a99c9b7e26894493fb139691c608bfae74a2a6760eb4b5ff957271794846674f"]) ioctl$KVM_XEN_HVM_CONFIG(r6, 0x4038ae7a, &(0x7f0000000f00)={0x0, 0x27b, &(0x7f0000000d80)="55fa576911c6287cb42827e7b15d032f9fdd4eb3316bee5df22cd5e793f0b9216002c7598c8f4d0e9f288d1f24c5bb2d87ff235c216bdccd2c744a29d344559a94fd249944222fdacf68793fc2f291a64cabb6465cc0f7f035e28c39ae2bb9623ff959ee7ae2357408aa6f856abe647842b874db28d94f", &(0x7f0000000e00)="241225d98be51317ccacc98efb2f176cfc883ddc531400a3e77897a0ee5c6a7ab9c38d4c70cc396b443994d32aee7e6e0930559d7ecf547ce1d3938d7753592464fe35cc95e9d5f99bfeee1c6ab9fd2f99825252766bab08a385a3a57ae7cbfd81c551ab23b86bbd4d418df164c402dbbf7f5f2394930bcd31fcfcffa7292ffd3513f21963da6ad74184f7dfb12b4ef0ca30b568fc0838435cc40baa9de2f5b80ca6276920f5e08f055046bbae37945ab2efcbaf381739aaf364479a031b246602836094959a460364f92cd61ffa7f8898227601df89abf5cae5f5233cd776f25b61a1", 0x77, 0xe3}) 3.130420592s ago: executing program 4 (id=1789): open(&(0x7f0000000580)='./bus\x00', 0x400141042, 0x2a) syz_clone(0x950ae580, 0x0, 0xffffffffffffff31, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="123fb0b9fd3de3efc29501000000000040d80402f000000000000224000100000000090400080203000000092100000001221800010181030004000000b4806839"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, 0x0, 0x0) sendto$packet(r1, 0x0, 0x0, 0x840, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x14, {[@main=@item_012={0x1, 0x0, 0x9, '_'}, @global=@item_4={0x3, 0x1, 0x0, "73fcff92"}, @global=@item_4={0x3, 0x1, 0x5, "fc78b632"}, @local=@item_4={0x3, 0x2, 0x7, "fe004189"}, @global=@item_012={0x1, 0x1, 0x1, "1a"}, @global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x15) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000140)=0x1, 0x4) sendmsg$inet6(r2, &(0x7f0000000180)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @private1={0xfc, 0x1, '\x00', 0x8}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r2], 0x18}, 0x2000c8d0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000700)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r3, &(0x7f00000007c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, 0x0, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x9]}, 0x8) close(r6) inotify_init1(0x80000) 3.080513267s ago: executing program 2 (id=1793): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, 0x0, 0xc) write$vga_arbiter(r0, &(0x7f0000000440)=@unlock_all, 0xb) close(0x3) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x6, 0x0, 0x0, 0x104, 0x4}}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000200)={0x9ee470db065ff3a6, 0x0, &(0x7f0000000280), &(0x7f00000002c0), {}, &(0x7f0000000300)=""/90, 0x5a, &(0x7f0000000380)=""/158, 0x0, 0x0, {r1}}, 0xffffffffffffffab) prlimit64(0x0, 0xe, &(0x7f0000001500)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001540)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000015c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000001640)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000016c0), 0x651, 0x0) recvmmsg(r5, &(0x7f0000001700), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 2.621971664s ago: executing program 1 (id=1797): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_clone3(&(0x7f0000000000)={0x901400, &(0x7f0000000080), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) pselect6(0x40, &(0x7f0000001c40)={0x4, 0xfffffffffffffff2, 0x8001, 0x5, 0x2, 0xfff, 0x2, 0x94}, &(0x7f0000001c80)={0x38, 0x7, 0x3, 0xc, 0x4, 0x80000001, 0x7fff, 0xcb3}, 0x0, 0x0, 0x0) 2.512667915s ago: executing program 0 (id=1798): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_clone3(&(0x7f0000000000)={0x901400, &(0x7f0000000080), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) pselect6(0x40, &(0x7f0000001c40)={0x4, 0xfffffffffffffff2, 0x8001, 0x5, 0x2, 0xfff, 0x2, 0x94}, &(0x7f0000001c80)={0x38, 0x7, 0x3, 0xc, 0x4, 0x80000001, 0x7fff, 0xcb3}, 0x0, 0x0, 0x0) (fail_nth: 1) 2.504431126s ago: executing program 1 (id=1799): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async, rerun: 32) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) (rerun: 32) write$UHID_INPUT(r0, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x0) 2.504166786s ago: executing program 0 (id=1800): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) sched_getattr(r0, &(0x7f0000000200)={0x38}, 0x38, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r2, 0x0, 0x7, 0x5) write$FUSE_ENTRY(r4, &(0x7f0000000500)={0x90, 0xfffffffffffffffe, 0x0, {0x7, 0x5, 0x5, 0x5, 0xfffffffa, 0x3, {0x5, 0x80f, 0x7fff, 0x7, 0xa, 0x1, 0x8, 0x800, 0x6, 0xa000, 0x80002, 0x0, 0x0, 0x6704, 0x30311810}}}, 0x90) write(r1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x1002}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r6) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', 0x1}) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000200000000000304000018000180130001006574683a73797a6b616c6c65723000007660d0d6c30fd1efb9b28b24c7892b1bde7dfba8fe764798ccfc6af3e277daa8393deafd3e41f78780520fd02400a21dcd71b03bcde1c1068fb35716586ac682638bbf6d72d481666f5c685ce8b8f32611a52d8f2203a5b06596aa155a7eae3d319ca26866800d78ad575320c4a06f98c5fa00b4000000000000000000"], 0x2c}}, 0x0) write(r5, &(0x7f0000000440)="ffffffffffffaabbccddeeff88ca5bf0004c00000000010001020000000200000001000000000000000000000001aabbccddeeff00000000000000000000000000000000000000000102", 0x4a) socket$xdp(0x2c, 0x3, 0x0) syz_clone3(&(0x7f0000000000)={0x901400, &(0x7f0000000080), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) pselect6(0x40, &(0x7f0000000240)={0x4, 0xfffffffffffffff2, 0x8001, 0x54, 0x4, 0x1002, 0x9, 0x9}, &(0x7f0000001c80)={0x38, 0x18245ca0, 0x4, 0x9, 0xe, 0x80000001, 0x7fff, 0x10000}, 0x0, 0x0, 0x0) 1.427594215s ago: executing program 0 (id=1801): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000080), 0x1, 0x57c, &(0x7f0000020240)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000207c0)={0x0, 0x21, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000020800), &(0x7f0000020840)='./file1\x00', 0x180c8, &(0x7f0000000640)=ANY=[@ANYRES8=r1, @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRES64=r0], 0x1, 0x24b, &(0x7f0000020a00)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000020c80)={0x1, &(0x7f0000020cc0)=[{0x6, 0x0, 0x1, 0x7fff7ffc}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000e000000de0500000c00000020000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000240)={[{@discard}, {@dioread_lock}, {@test_dummy_encryption}]}, 0xfe, 0x244, &(0x7f0000000280)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000020d80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000020dc0)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000020e00)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000020e40)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000020e80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000020ec0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000020f40), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000020f80), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000266000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000233000/0x3000)=nil) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000020fc0)='./proc\x00', 0x180) r7 = add_key(&(0x7f0000021000)='asymmetric\x00', 0x0, &(0x7f0000021040)="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", 0x559, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_QUERY(0x18, r7, 0x0, 0x0, &(0x7f0000021600)) setns(r3, 0x24020000) 1.364818902s ago: executing program 2 (id=1802): timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) timer_create(0x5, &(0x7f0000000080)={0x0, 0x16, 0x4, @tid=r1}, &(0x7f0000000100)) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xf, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) 717.496398ms ago: executing program 3 (id=1805): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000006c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000003c0)=0x1a43) shutdown(r2, 0x2) listen(r0, 0x5a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000780)={0xa, 0x4e22, 0xf, @empty}, 0x1c) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sync() sync() sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv4_deladdr={0x50, 0x15, 0x4, 0x70bd2b, 0x25dfdbfc, {0x2, 0x10, 0x4, 0x0, r6}, [@IFA_FLAGS={0x8, 0x8, 0x2}, @IFA_BROADCAST={0x8, 0x4, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x780}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_TARGET_NETNSID={0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000001}, 0x8040) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="296536fefeb4d4c162b72450780e26e161751400596c13946511838d39895c2d6438ea2afac1918de1ab9e36c6d427b18b513b6332fccf23731c318fb015b08ad3ce4ea7bd", 0x45}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000980)="c9c7", 0x2}], 0x1}}], 0x2, 0xc805) close_range(r0, 0xffffffffffffffff, 0x0) 434.164796ms ago: executing program 2 (id=1806): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0x1, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x3, 0x0, 0xffd}}}}}}}, 0x0) 344.441725ms ago: executing program 1 (id=1807): syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x200841a, &(0x7f0000000580)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0193acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417bb7f527c0bfebec112d57fc69fabb9b31ef97b2147930ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a3332978da70e9050417087c5ae034a735e8b448dd97014043159cbaacebfc912cf05f608e6214c04099fa311b747c37af702d134fb8eec487cfaea91150d1980464ff31cf86e3f3b950b204f6f67810c0826e4e5467c1588de9816bc627fb4662ac5fc8e38f19ec065550e5f9b16f72a91144a2e52ba9f2c6a7e2afbabc533ac731bb7ec51b8c585c2749469da331006ca4d49e136189d21ae50455834b2e75efd81c9d6352e5a814cf002f294475dab27a10d87516e405eff30d107bc4b29750976b73a49268ec296bd86d325bb0eb17871f7b77377e07dd74326303d90048d3fdd0c182cdac271010da972031ccf6e583df85cc3a9d94d0657f4fc102772e46b55c51eab9dac2ece6d3a02b8f20e9df6f3e6f2841e4f730d01589e9ae11265740fa5343fc3e668ae284b600cb5352ba5482c08be363f1d32abb6c5d0fd70ad9f08e3092585fba473be9ad2a052e9b2800d13d1d08bac1f182fa3e000f4aa2ffb513c0b256da51935af036b454ce28bd7924404a98615973b435d140a99ad59f17202766d219d9249d8f81e", @ANYRESOCT], 0x1, 0x5540, &(0x7f0000000c40)="$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") r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f00000061c0)='./debug/split_huge_pages\x00', 0x1, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000006240)=ANY=[@ANYBLOB="2f0000000400000000000000000000000200000000000000001000000000000007000000"], 0x2f) sched_setscheduler(0x0, 0x2, &(0x7f0000006280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000062c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000006300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0xbdc06000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000006380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000006400), 0x651, 0x0) recvmmsg(r3, &(0x7f0000006440), 0x4000087, 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000006480)={0x3, &(0x7f00000064c0)=[{0x80}, {0x3, 0x40, 0x3}, {0x6, 0x0, 0xff, 0x7fff0000}]}) sigaltstack(&(0x7f0000006500)={0x0, 0x2}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = syz_mount_image$vfat(&(0x7f0000006540), &(0x7f0000006580)='./file0\x00', 0x324a036, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESOCT, @ANYRESDEC, @ANYBLOB="de3631d09a34c16dcba1ffab984911dcdbc1e2658c0e67172ccdcb14208a27a4ff0c1cbd0fa976fdbbaad16f5c6fde7c2c92f2e0ab2344e716564d5a635f805beb1b8f511710cab116bf7d89a29c2663983ab0d1ba440d9b6dad26650c4fcbc378c942f1886742a767c7a16ea03d45863b2d1cb3c0b110fce5adcfb2a8b7eaeb511b156d10fcaff3dc0e49dab7a3f17f23f991b330ebbbe05cf266927dbfaf48e5a94cc269103cc3becda023f5c580b23c1692efe1242191b52e58260985c320a9fe27a1cb3b4d1fa1494038ee8af6168a9d6ec2c35671b71eaac01cf09c1df4cd5cf00ae24e0191a460c21f04f00c70d4", @ANYRES8=r5], 0x1, 0x2d0, &(0x7f0000006700)="$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") r7 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1800040, &(0x7f00000001c0)={[{@barrier}, {@nodioread_nolock}, {@grpquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@block_validity}, {@nodioread_nolock}, {@nodelalloc}, {@norecovery}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}]}, 0x1, 0x59c, &(0x7f0000006c00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f00000071c0)='./file1\x00', 0x4100, 0x11) ioctl$XFS_IOC_GOINGDOWN(r8, 0x8004587d, &(0x7f0000007200)=0x9) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x891b, &(0x7f0000006a00)={'lo\x00', {0x2, 0x4e21, @broadcast}}) creat(&(0x7f0000006a40)='./file0\x00', 0xecf86c37d53049cc) openat(r6, &(0x7f0000006a80)='./file0\x00', 0x115302, 0xfb) io_setup(0x212, &(0x7f0000006ac0)) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x48, &(0x7f0000006b00)=0x5, 0x4) 343.958856ms ago: executing program 2 (id=1808): r0 = socket(0x2, 0x2, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c00)={0x1, &(0x7f0000000c40)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) chroot(0x0) vmsplice(r2, &(0x7f0000000540)=[{&(0x7f0000000580)='4', 0x1}], 0x1, 0x5) splice(r1, 0x0, r0, 0x0, 0x6, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x2, 0x0) write(r3, &(0x7f0000000bc0)="30313a38303a63323aae838f6b3c58a1f3", 0x11) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/686], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, r3, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000440), 0x10}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x2a0471a, &(0x7f0000000640)={[{@noblock_validity}]}, 0x82, 0x4a8, &(0x7f0000000680)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0x0, 0x71) sendmsg$inet(r5, &(0x7f00000023c0)={&(0x7f0000000c80)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000021c0)=[{&(0x7f0000000cc0)="8c13ffd083ceffd26152d35c40f84edc9da9594547c366d36936fadda4a281cc9d98fb7f967f9640ec6e245104c66c88ea0dbd2a5051cc412e2fd07ad21b2e87002c5bf121aa4892a470198d322c5eb671a78fa5180ae8f090a65efb7a3cdd7464b11a5c4d438511c750fc8d953097c735b24cffb5b07c3983", 0x79}, {&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="bf38c737f4f9bee909b6366c021601f80b5109f55143457ad82cadcce46d1fd298061161388c1d548588bbed367b11671a23962a95268338c10ffac59cf72a563b29cde9f6c5495abee76cd6c1922490611ba7c21d391218c8bccee7450be20a948fe2e167b0c8b2d39447ca05e17263b54081406d378aa055523b86cd12", 0x7e}, {&(0x7f0000001dc0)="850075603e46c009b8c9a0742e440e39c699aef6cc7311c0d56cd02db5e84ea2e8e9320c36586ac556c091f8f231257ebbc28c36566edcef45d4ee982a4e35e563391544ea504ef3495dcdfdaf4c8524ca077afb36def8ef107b72d7ddfc9262bbd4a660d50b589c867eb092494b97f8f6a9da6999c86c54c9674046291a87724dc040597e81e37bd06f8787", 0x8c}, {&(0x7f0000001e80)="7d494cd00a2eb086c1b0f109c09ac19833e951b18ea77bf60e0544fe87828fb57a7656fc47733c6428c33df51c7546b2a04c76a8358392fa33487796ddd8af05a6ca2f2ff39fe66372322e5fb5425d14876202decc91010c057b04685ee776e363aacd4966610942d2d5ffc49a2238260eea769c131b9bc5e1fc79854bbd56f0329aab6372fafdf48493aae19fadd55a3583e6b31246990a1c6a067421e5260cee5d8173bdf62e6cc27506a9e46f81269e7d580d5e0e8f9b1a64da3992e696319db650532746b711f8be934b222e044771c68134f32233fc9951fdff2094a77aa2d4cd5c744844", 0xe7}, {&(0x7f0000001f80)="bddf5b05e2a5dc7590a87b4a370537424b3e5fac7ee28d719eae5ea499e32d9150f012d5", 0x24}, {&(0x7f0000001fc0)="7cd2e955143f7e80c0637daca1af1a3896dfb5b55062302378cb7a58cdf861c78a136597c99bb49fd7a05d432c0a81c2b54897835228bf5303dedf8782576e3e6e012429b189ef1aa99f3176b63a686691585321120cd938b248e8d67dba0ee9750b06d583b68fca8dc3363fac8a5349a4140cc396545dd5dbc2167c76139119ff84a229bc55bbdcf0696c74c33d3776dd4604ed245e62c7ea52", 0x9a}, {&(0x7f0000002080)="f0ba9b", 0x3}, {&(0x7f00000020c0)="2385a8020009400c8b56d336661fbec644e9aee5ee56eba74bb11b22b69e2bb0926e06c1cac25f077a663c3e0e0a7478006634f3d205222ab409e249638c06d993cdb309bfc0b5b5d18c2b61619f02c7feea27264b0b31e469aee16346c786e399aff28d2c8b5f4e9f5f5a404da1f7ce20340d2f8ffc323a5ba83411d50d3d408bc0a9ffb7a1295ec3a464f05771657dff5f35ef7d0617e6865eb47cce83f6a1160536a38fc38a657c2c69d5b88b3f0c52da384ba00cb25fcb384f6d52b742e6fb9c091adf7db1cf6a663335854072527912e8df520783e0ac865e2aa0c04c498f559187a54c729f", 0xe8}], 0x9, &(0x7f0000002280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x40}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x2c, 0xb1, 0x3, 0x6, [{@loopback, 0x7ff}, {@multicast1, 0x80000001}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}, {@private=0xa010101, 0x4}]}, @noop, @rr={0x7, 0x1b, 0xdf, [@empty, @multicast1, @local, @loopback, @private=0xa010102, @private=0xa010102]}, @timestamp_prespec={0x44, 0x44, 0x98, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x95}, {@rand_addr=0x64010101, 0x8}, {@empty, 0xfffffff2}, {@empty}, {@multicast2, 0x7}, {@loopback, 0xfffffffa}, {@multicast2, 0xfffffffa}]}, @rr={0x7, 0xf, 0x5c, [@local, @empty, @broadcast]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010100}}}], 0x120}, 0x44) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r4, 0x2000012, 0x100e, 0x0, &(0x7f0000000500)="63bd998e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 290.336481ms ago: executing program 3 (id=1809): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x22200cdc, &(0x7f0000000240)=ANY=[], 0x1, 0x1526, &(0x7f0000000a40)="$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") 287.011711ms ago: executing program 2 (id=1810): futimesat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', &(0x7f0000000480)={{0x0, 0xea60}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt/trace_pipe\x00', 0x4000, 0x44) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20008, 0x0, 0xff, 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x5db) chown(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = open(&(0x7f0000000900)='.\x00', 0x0, 0x112) getdents(r1, &(0x7f0000000940)=""/184, 0xb8) 214.442258ms ago: executing program 3 (id=1811): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_open_dev$loop(&(0x7f0000000340), 0x7, 0x180861) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/fscaps', 0x2000, 0xa9) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000003c0)={r3, 0x0, {0x0, 0x0, 0x0, 0x8000000007, 0x404000000ff, 0x0, 0x0, 0x19, 0xc, "faf98317e5a114996acc96e3dfd42038bd3fe37d58128b25f5ab60c9e6d680f985881a7beda9d69098c8b534464c5111fd8a0f3500000200", "32d81a17f7061a74df2cfc06c89f3d9e234b30c50997d3bef409cd4a524bd3ffe70c7f2e800b047b6aa54cc50a1fcaed1e831fa79a00000000000000000100", "675237601a8ca5b063cc06000000000000000000000000000000000200", [0x2002, 0x6]}}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000500)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x44}}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x20, r5, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x4000000) mkdirat(r0, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r6 = open(&(0x7f0000000100)='.\x00', 0x8000, 0x0) renameat2(r6, &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f0000000680)='./cfg\x00', 0x2) 180.909232ms ago: executing program 0 (id=1812): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c736681bd83d3", @ANYRESHEX=r2, @ANYBLOB=',k']) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000640)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000023c0)=[{0x0}, {&(0x7f0000002300)="e9cc932bf7", 0x5}], 0x2}, 0x0) 128.463698ms ago: executing program 2 (id=1813): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, 0x0, 0xc) write$vga_arbiter(r0, &(0x7f0000000440)=@unlock_all, 0xb) close(0x3) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffff82048008, 0x0, 0x40, 0x8, 0x6, 0x0, 0x0, 0x104, 0x4}}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000200)={0x9ee470db065ff3a6, 0x0, &(0x7f0000000280), &(0x7f00000002c0), {}, &(0x7f0000000300)=""/90, 0x5a, &(0x7f0000000380)=""/158, 0x0, 0x0, {r1}}, 0xffffffffffffffab) prlimit64(0x0, 0xe, &(0x7f0000001500)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001540)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000015c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000001640)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000016c0), 0x651, 0x0) recvmmsg(r5, &(0x7f0000001700), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 128.143328ms ago: executing program 3 (id=1814): timer_create(0x3, 0x0, &(0x7f00000002c0)=0x0) clock_gettime(0x0, &(0x7f0000000340)) setitimer(0x1, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x11, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000040000000000008006000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdff09007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000ea1addb98500000082000000850000000800000018110000", @ANYBLOB="0000000000000000b702000000010000850000008600000095"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r2, 0x0, 0x10, 0x10, &(0x7f0000000a80)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000ac0)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000040)={{r3, r4+10000000}, {0x77359400}}, &(0x7f0000000080)) 104.63861ms ago: executing program 0 (id=1815): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x24, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000a00)="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", 0x1d8, 0xffffffffffffffff) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800011, &(0x7f0000000180)={[{@nombcache}, {@sysvgroups}, {@norecovery}, {@abort}, {@auto_da_alloc}]}, 0x28, 0x604, &(0x7f00000003c0)="$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") sched_setaffinity(0x0, 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000340)='drivers_probe\x00', 0x80481, 0x0) write(r3, &(0x7f0000000380)='000', 0x3) 97.967371ms ago: executing program 3 (id=1816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x80, 0x0, 0xffffffff}, 0x73) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x70bd29, 0x10080, {}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x2c, r2, 0x100, 0xfffffffc, 0x3, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x2c}}, 0x4) 62.616664ms ago: executing program 3 (id=1817): syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x200841a, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x5540, &(0x7f0000000c40)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9UduOk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r97yPkPJpn/J0XRDzH/ZLLLA//NBwzgoT3Q/4fD9f/n9P/ABE56/x+m2f+PWir9///3v6XJ+/+J+t/j2v+f4PnDRPT/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPrB/mv3wtX1mI2+eL8YvF0DPFdhJCKIUQfv8Hc+H0gZxzRZ75fzl+/m81fJuEPMPoHGeK5VwIYbVYfnv6UV8FAAAAeHx99dHlz2K3Hl8WZl0QRynetCld+GBK+ZIQwvzCj1PKVhq9PDulZPnn+1TYm1K2/AbWU1NKFm+5nZpWtkOZG4ePL94fzCeUxFA60nIAAIAjMXcgHG0XAgAAwFH6dNYFMBtJGD/KHD8Lzr95f//R5tkD+wAAAIATKJl1AQAAAMAjl/f/fv8PAAAAHm/x9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9i5n9vEgSgOwM8GA/tPi1Z731b2BmWkhBxzDBSQJiiBtJAGqIHcUkIEEfYIyRFIkRjHCvo+yeOMHf1mBri8sWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSc7WeP97/e7g0Z7e/TJ7VAAAAAKdsq/W8/mPa9H+k67/SpT+pX0REGRGnavdBjFqZg5RTnfn/6t0cniLqhMMY43R8j4j/6Xj93fWnAAAAANdrs1zNmmq9aaZ9T4jP1GzalD9vMuUVEVFNXzKllYfmb6aw+vc9jLtMafUG1iRTWLPlNjx9b5RrkLZB65RWMlnUX2LdK7sZFwAA6FO7EjhThQAAAHAFbvueAP0ojs3xOeO4OaUHgt9aPQAAAOALKvqeAAAAANC5uv73/j8AAAC4bs37/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjStlrPN8vV7Nz9xQdzdvvL5FsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyxP+8oEAJhEAZ713cmc//DSoOGxiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/fPGUUQBAH+3e3v5AwhjkAsDChIFNMS+hISUUIAsCj4CkuWcg+FCIHFBIgvkBirkOg2CEiEkkOnyHVLHUprQpXBhJGrQ7u06m8Qhp8jsXuzfT5qdt5fVzJu9U+Tn2TMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJXt9+KVpIzT/DA1iqvXbu2sLeX91gN97sbG7dm85XHncRN99+7+Jz/ZXq2fnJipnXzTfDIAAAAcDmlV30fEnWxzIe+TqaL+z6pr8pr/x+dGcVXPP1j3b+2sHS3/abaq///4/e5LuxNNjebJB11eGQ7mH06l+z8tceI9/9grusWdL373khZvSPLh+ovbWXE/O9/fvPl+rwiPNJEtAPAkTlZ9GVQ/D+V9v83EADg0urXCu6r/06l2cwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABowvZ6PFPFnYiY7d6Lc1s7a0t79Tc2bs9W7ez16xv1MfMhsohYXhkOsgbXMumuXL322eJwOLjcfHAiItqbvQw+HuOaiP++pvx4RnureHTQmYw0Wg2S8v2ZlHz2M6g+e/s/ckv/IQEAcGBlZcvr+jvZ5kL+Wmc64p+f7q//36jFMWb9f/eTs7fqc9Xr/35jK5x8c6sXv5i7cvXaWysXFy8MLgw+f/tU/53+6XNnzpyby+/V/NxyJIP5ttMEAADgKdYrW73+T6Yf3v8/XotjzPr/yx/6X9fnStX/e7q36dd2JgAAAIdRbzd64bW//+rscUWn14uvFldXL/dHx93zU6Njo+k+oSNlq9f/6XTbWQEAAABN2F7v3Lf/f74Wx5j7/8/+/PKv9THTiDgWcSkiBieXLg3PN7ecibaP3xlOH/Ul5GKiXtsrBQAAoC3Hylbf/8+K5/+T3Ucekoh48/VRXP2tq3Hq//SDb3+pz1V//v90c0ucSMnM6H4U/UxEd6btjAAAADjIjpYtL/b/zDYXPv3t+Ec9z/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANO3fAAAA//8lCDVC") r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000006180)={0xa, 0x400000000008d}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000061c0)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r1, &(0x7f0000006200)='1', 0x1) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000006240)=ANY=[@ANYBLOB="2f0000000400000000000000000000000200000000000000001000000000000007000000"], 0x2f) sched_setscheduler(0x0, 0x2, &(0x7f0000006280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000062c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000006300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0xbdc06000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000006380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000006400), 0x651, 0x0) recvmmsg(r3, &(0x7f0000006440), 0x4000087, 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000006500)={0x0, 0x2}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_mount_image$vfat(&(0x7f0000006540), &(0x7f0000006580)='./file0\x00', 0x324a036, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r6, @ANYRESDEC, @ANYBLOB="de3631d09a34c16dcba1ffab984911dcdbc1e2658c0e67172ccdcb14208a27a4ff0c1cbd0fa976fdbbaad16f5c6fde7c2c92f2e0ab2344e716564d5a635f805beb1b8f511710cab116bf7d89a29c2663983ab0d1ba440d9b6dad26650c4fcbc378c942f1886742a767c7a16ea03d45863b2d1cb3c0b110fce5adcfb2a8b7eaeb511b156d10fcaff3dc0e49dab7a3f17f23f991b330ebbbe05cf266927dbfaf48e5a94cc269103cc3becda023f5c580b23c1692efe1242191b52e58260985c320a9fe27a1cb3b4d1fa1494038ee8af6168a9d6ec2c35671b71eaac01cf09c1df4cd5cf00ae24e0191a460c21f04f00c70d4", @ANYRES8=r5], 0x1, 0x2d0, &(0x7f0000006700)="$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") r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x891b, &(0x7f0000006a00)={'lo\x00', {0x2, 0x4e21, @broadcast}}) creat(&(0x7f0000006a40)='./file0\x00', 0xecf86c37d53049cc) r8 = openat(0xffffffffffffff9c, &(0x7f0000006a80)='./file0\x00', 0x24c01, 0xb9) io_setup(0x212, &(0x7f0000006ac0)=0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x48, &(0x7f0000006b00)=0x5, 0x4) io_submit(r9, 0x2, &(0x7f0000006b40)=[&(0x7f0000006b80)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r8, &(0x7f0000006bc0)='!', 0xffffff49, 0x3000000000000500}]) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 56.839645ms ago: executing program 4 (id=1818): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3808080, &(0x7f0000000140)=ANY=[@ANYBLOB="756e695f786c6174653d312c757466383d302c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c756d61736b3d30303030303030303030303030303030303030303030372c6901636861727365743d6d616363656c7469632c7507000000000000003d302c726f6469722c73686f72746e616d653d6c6f7765722c65e92372726f72733d636f6e74696e75652c696f636861727365743d6b6f69382d722c756e695f786c6174653d302c6e6f6e756d7461696c3d30"], 0x1, 0x2b7, &(0x7f0000000200)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000600)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fade8499b4dec3644321cada07be1979f535c21a1ffd536457012128131113959b6db945c5a56d0a8d98655fadb01e549058559ae382772b61734edd84180d1f8e1dc4fd1942ac2a88c294bc316ce52bc6c62bc96f6d0700880c749536390a0b9644f886de71ae56ec26e8790f5706a1a5f44bfd0dd71c8c018e391632ddd285fbf9319d8012a3c72f15e5df43d322af4c63dfc402e2ad59f4865466576807cc2d639b7212bd3a529fadfeb0fd6d8819fca8cc2f21ec3", @ANYRESHEX, @ANYRESDEC, @ANYRESHEX], 0x41, 0x2bd, &(0x7f0000000900)="$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") mkdir(0x0, 0x2) r0 = open(&(0x7f00000023c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000002400)=""/163, 0xbb) 0s ago: executing program 0 (id=1819): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000feffffffffffffff00001da9110015", @ANYRES32=r0, @ANYRESHEX], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="c0050000000000007911c00000003fff99141ae474b385c84cd02c2641e900008500003a01bf7504ef4d3e0000000000"], &(0x7f0000001a80)='GPL\x00', 0x5, 0xfe01, &(0x7f0000001ac0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0), 0x0, 0x10, &(0x7f0000001c00), 0x222}, 0x21) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f00000005c0)=0x7f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="1802000000000000000000000000e300850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) futex_waitv(&(0x7f00000013c0)=[{0xf, &(0x7f0000000ac0)=0x8, 0x2}, {0xc, &(0x7f0000000b00)=0x8, 0x73e878ac0c3761c0}, {0x8000000000000000, &(0x7f0000000b40)=0x7, 0x2}, {0x200, &(0x7f0000000b80)=0x9, 0x2}, {0x8, &(0x7f0000000bc0)=0x9, 0x104}, {0x9, &(0x7f0000000c00)=0x5d, 0x2}, {0x6, &(0x7f0000000c40)=0xb, 0x2}, {0x1, &(0x7f0000000c80)=0x8000000000000001}, {0x7fffffffffffffff, &(0x7f0000000cc0)=0xd6, 0x82}, {0x9, &(0x7f0000000d00)=0x9, 0x2}, {0x8, &(0x7f0000000d40)=0xdd, 0x2}, {0xacf, &(0x7f0000000d80)=0x1ae, 0x2}, {0x3, &(0x7f0000000dc0)=0xe, 0x82}, {0xf, &(0x7f0000000e00)=0x8, 0x82}, {0x5, &(0x7f0000000e40)=0x9, 0x82}, {0x1b6, &(0x7f0000000e80)=0xffffffffffffcab5, 0x2}, {0x7, &(0x7f0000000ec0)=0x3, 0x82}, {0x9, &(0x7f0000000f00), 0x427087050f6e9dd9}, {0xc, &(0x7f0000000f40)=0x8, 0x82}, {0x80000001, &(0x7f0000000f80)=0x8, 0x82}, {0x1, &(0x7f0000000fc0)=0x1ff, 0x82}, {0xc, &(0x7f0000001000)=0x6, 0x2}, {0x1, &(0x7f0000001040)=0x5, 0x82}, {0x2dcce562, &(0x7f0000001080)=0x8, 0x2}, {0x8000000000000001, &(0x7f00000010c0)=0x7fffffff, 0x82}, {0x200, &(0x7f0000001100)=0x66f3, 0x82}, {0xe, &(0x7f0000001140)=0x80, 0x2}, {0x1, &(0x7f0000001180)=0x9, 0x82}, {0x81, &(0x7f00000011c0)=0x101, 0x653c1dd2b09b7158}, {0xc, &(0x7f0000001200)=0x9, 0x2}, {0x800, &(0x7f0000001240)=0x9, 0x82}, {0xfffffffffffffff8, &(0x7f0000001280)=0x8, 0x82}, {0x7, &(0x7f00000012c0)=0xffffffffffffffff, 0x2}, {0x8, &(0x7f0000001300)=0x7, 0x2}, {0x9, &(0x7f0000001340)=0x44d0000000000, 0x2}, {0x8, &(0x7f0000001380)=0x1000, 0x82}], 0x24, 0x0, &(0x7f0000001740), 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000a00)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a80)={r6}, 0xc) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="300000001a0001002dbd7000004000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000140002000000000000000000008f1a0001"], 0x30}}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000000a00)) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000000)) r7 = socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmmsg(r8, &(0x7f0000000180)=[{{&(0x7f00000001c0)=@xdp={0x2c, 0x0, r10, 0xfffffffc}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280)='O', 0x1}], 0x1}}], 0x1, 0x0) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000017c0)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001940)={r11, &(0x7f0000001800)="d00eef816ccf55c5eacb53184ff723ce4a58a43f987f96615758b331689b942c2dc02a8f24345b21eaa9ff7a3b1bda8c9d55ee39e3456df805e506bb26b7984db9f95e8046a15a3be28dfaf9c5917876896eabf8e3b80de4394f0b4fb314f9f845ab723f0bf1c7f6d3a8873f7163cc4a8f3b0f52fb06149bb6b975827682a9369637bf97e5a8710aa81e5f1147d92305bf6498359c431fee6da5d1b9e37be408887b7d50070cc3ece250095045356b9d04820f9e945b696efc10a674ddcd85ad73b4db564752798fc69c18422db9deb041e9203dcb53de8bcebcaaba27b7cc8e47a73417cd58fb0238", &(0x7f0000001900)=@udp6=r2, 0x4}, 0x20) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x3, 0x4, 0x1, {0xa, 0x4e20, 0xf, @private0, 0x6916}}}, 0x32) setsockopt(r7, 0x111, 0x5, &(0x7f0000000800)="70bde8c0", 0x4) kernel console output (not intermixed with test programs): T1283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.283'. [ 59.598477][ T1283] loop1: detected capacity change from 0 to 256 [ 59.606854][ T28] audit: type=1400 audit(1700000027.180:502): avc: denied { connect } for pid=1280 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.625530][ T1283] FAT-fs (loop1): Unrecognized mount option "udf8=1" or missing value [ 59.701136][ T28] audit: type=1400 audit(1700000027.180:503): avc: denied { write } for pid=1280 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.740467][ T28] audit: type=1400 audit(1700000027.310:504): avc: denied { unmount } for pid=1282 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.053154][ T28] audit: type=1400 audit(1700000027.700:505): avc: denied { sqpoll } for pid=1306 comm="syz.1.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 60.125589][ T1303] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 60.521687][ T1321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.296'. [ 60.800612][ T1338] ip_tables: iptables: counters copy to user failed while replacing table [ 61.146551][ T28] audit: type=1400 audit(1700000028.800:506): avc: denied { mounton } for pid=1344 comm="syz.2.304" path="/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 61.763626][ T1358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.308'. [ 62.062953][ T1375] raw_sendmsg: syz.2.313 forgot to set AF_INET. Fix it! [ 62.185311][ T1376] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 62.541111][ T1398] netlink: 16 bytes leftover after parsing attributes in process `syz.1.320'. [ 62.736789][ T1412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'. [ 63.294566][ T1423] ./dev/sda1: Can't open blockdev [ 63.647385][ T1445] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 64.915991][ T28] audit: type=1326 audit(1700000032.570:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1466 comm="syz.2.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0821a8fd9 code=0x7ffc0000 [ 65.022340][ T28] audit: type=1326 audit(1700000032.610:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1466 comm="syz.2.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0821a8fd9 code=0x7ffc0000 [ 65.148545][ T28] audit: type=1326 audit(1700000032.610:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1466 comm="syz.2.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0821a8fd9 code=0x7ffc0000 [ 65.210418][ T28] audit: type=1326 audit(1700000032.610:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1466 comm="syz.2.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff0821a8fd9 code=0x7ffc0000 [ 65.250395][ T28] audit: type=1326 audit(1700000032.610:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1466 comm="syz.2.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0821a8fd9 code=0x7ffc0000 [ 65.319445][ T28] audit: type=1326 audit(1700000032.610:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1466 comm="syz.2.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0821a8fd9 code=0x7ffc0000 [ 65.371738][ T28] audit: type=1326 audit(1700000032.610:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1466 comm="syz.2.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0821a8fd9 code=0x7ffc0000 [ 65.430259][ T28] audit: type=1326 audit(1700000032.610:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1466 comm="syz.2.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0821a8fd9 code=0x7ffc0000 [ 65.455345][ T28] audit: type=1326 audit(1700000032.610:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1466 comm="syz.2.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff0821a8fd9 code=0x7ffc0000 [ 65.502013][ T28] audit: type=1326 audit(1700000032.610:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1466 comm="syz.2.342" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0821a8fd9 code=0x7ffc0000 [ 66.179645][ T1508] SELinux: Context system_u:object_r:useradd_exec_t:s0 is not valid (left unmapped). [ 66.531935][ T1519] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.583205][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 66.600211][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.628166][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 66.649636][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.661767][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.674159][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.686387][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.702388][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.898772][ T1537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.970063][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 66.996156][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.020160][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 67.029584][ T1544] 9pnet_fd: Insufficient options for proto=fd [ 67.054465][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.081622][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.103936][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.123031][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.151517][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.479350][ T1557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 67.488880][ T1557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 69.050232][ T1594] netlink: 56 bytes leftover after parsing attributes in process `syz.2.385'. [ 69.069428][ T1595] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 70.993232][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 70.993248][ T28] audit: type=1400 audit(1700000038.650:563): avc: denied { create } for pid=1617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 71.119708][ T1617] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.127188][ T28] audit: type=1400 audit(1700000038.780:564): avc: denied { remount } for pid=1612 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.180419][ T1617] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.188331][ T1617] device bridge_slave_0 entered promiscuous mode [ 71.196872][ T1617] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.231476][ T1617] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.239070][ T1617] device bridge_slave_1 entered promiscuous mode [ 71.398164][ T1617] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.405287][ T1617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.412643][ T1617] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.419703][ T1617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.496713][ T1638] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.503996][ T1638] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.511656][ T1638] device bridge_slave_0 entered promiscuous mode [ 71.519012][ T1638] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.526559][ T1638] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.534164][ T1638] device bridge_slave_1 entered promiscuous mode [ 71.572960][ T1637] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.580194][ T1637] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.588111][ T1637] device bridge_slave_0 entered promiscuous mode [ 71.603835][ T1637] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.610988][ T1637] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.618424][ T1637] device bridge_slave_1 entered promiscuous mode [ 71.696375][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.703890][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.714005][ T1639] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.721381][ T1639] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.728845][ T1639] device bridge_slave_0 entered promiscuous mode [ 71.739164][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.746823][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.761054][ T1639] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.768142][ T1639] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.776474][ T1639] device bridge_slave_1 entered promiscuous mode [ 71.806330][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.814791][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.823252][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.830387][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.864631][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.873583][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.881947][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.888986][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.929629][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.937873][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.967436][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.975915][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.022731][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.031216][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.060379][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.068436][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.076879][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.084643][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.093714][ T1617] device veth0_vlan entered promiscuous mode [ 72.104265][ T43] device bridge_slave_1 left promiscuous mode [ 72.110524][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.130605][ T43] device bridge_slave_0 left promiscuous mode [ 72.136809][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.145642][ T43] device bridge_slave_1 left promiscuous mode [ 72.152007][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.160057][ T43] device bridge_slave_0 left promiscuous mode [ 72.166693][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.175516][ T43] device bridge_slave_1 left promiscuous mode [ 72.181817][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.189503][ T43] device bridge_slave_0 left promiscuous mode [ 72.196064][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.205581][ T43] device veth1_macvtap left promiscuous mode [ 72.205837][ T1651] ip_tables: iptables: counters copy to user failed while replacing table [ 72.211771][ T43] device veth0_vlan left promiscuous mode [ 72.226583][ T43] device veth1_macvtap left promiscuous mode [ 72.232897][ T43] device veth0_vlan left promiscuous mode [ 72.239169][ T43] device veth1_macvtap left promiscuous mode [ 72.245562][ T43] device veth0_vlan left promiscuous mode [ 72.573051][ T1617] device veth1_macvtap entered promiscuous mode [ 72.580746][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.589028][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.599515][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.607659][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.615275][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.623805][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.632321][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.640944][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.648060][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.662807][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.670649][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.678194][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.685848][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.694518][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.703080][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.710171][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.717708][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.726430][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.734828][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.741885][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.750064][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.768109][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.776549][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.784878][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.791981][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.801639][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.810000][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.818454][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.826776][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.836800][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.845185][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.860395][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.869185][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.877874][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.886103][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.907973][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.916744][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.917272][ T28] audit: type=1400 audit(1700000040.570:565): avc: denied { mount } for pid=1617 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 72.927267][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.954143][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.955088][ T28] audit: type=1400 audit(1700000040.600:566): avc: denied { mounton } for pid=1617 comm="syz-executor" path="/root/syzkaller.B5xiel/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 72.964135][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.997172][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.005549][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.012691][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.020426][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.038286][ T1638] device veth0_vlan entered promiscuous mode [ 73.051309][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.059412][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.067811][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.076776][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.085272][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.094025][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.102556][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.110900][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.118922][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.126780][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.143395][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.151618][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.166765][ T1638] device veth1_macvtap entered promiscuous mode [ 73.180130][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.188589][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.197825][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.206606][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.215166][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.237096][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.262415][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.272482][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.283133][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.300917][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.309689][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.318375][ T1677] process 'syz.0.407' launched './file0' with NULL argv: empty string added [ 73.327751][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.335851][ T1675] fuse: Bad value for 'fd' [ 73.340691][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.360036][ T1639] device veth0_vlan entered promiscuous mode [ 73.374786][ T1637] device veth0_vlan entered promiscuous mode [ 73.382531][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.392352][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.401138][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.408785][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.430939][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.439424][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.450210][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.461178][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.469661][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.486566][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.495637][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.504132][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.514796][ T1637] device veth1_macvtap entered promiscuous mode [ 73.523636][ T1639] device veth1_macvtap entered promiscuous mode [ 73.548566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.561517][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.573708][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.582323][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.599678][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.608594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.617150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.627884][ T28] audit: type=1400 audit(1700000041.280:567): avc: denied { execute_no_trans } for pid=1686 comm="syz.3.397" path="/0/file1" dev="tmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.652202][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.660816][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.669234][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.724256][ T28] audit: type=1400 audit(1700000041.380:568): avc: denied { ioctl } for pid=1692 comm="syz.1.398" path="socket:[21397]" dev="sockfs" ino=21397 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.763532][ T1695] loop2: detected capacity change from 0 to 33280 [ 73.788183][ T1695] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 73.803537][ T28] audit: type=1400 audit(1700000041.460:569): avc: denied { mount } for pid=1694 comm="syz.2.411" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 74.375004][ T1460] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 75.238276][ T1711] ip_tables: iptables: counters copy to user failed while replacing table [ 75.584437][ T1460] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 75.610887][ T1460] usb 2-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 75.635235][ T1460] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.656332][ T1460] usb 2-1: Product: syz [ 75.666158][ T1460] usb 2-1: Manufacturer: syz [ 75.676367][ T1460] usb 2-1: SerialNumber: syz [ 75.694567][ T1460] ums-onetouch 2-1:1.0: USB Mass Storage device detected [ 75.811330][ T43] device bridge_slave_1 left promiscuous mode [ 75.818707][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.836374][ T43] device bridge_slave_0 left promiscuous mode [ 75.850466][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.868832][ T43] device veth1_macvtap left promiscuous mode [ 75.882823][ T43] device veth0_vlan left promiscuous mode [ 75.895132][ T28] audit: type=1326 audit(1700000043.550:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1692 comm="syz.1.398" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd865da8fd9 code=0x0 [ 76.024209][ T28] audit: type=1400 audit(1700000043.680:571): avc: denied { ioctl } for pid=1738 comm="syz.2.417" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 76.371826][ T28] audit: type=1400 audit(1700000043.840:572): avc: denied { unmount } for pid=1638 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 76.441682][ T1753] loop3: detected capacity change from 0 to 256 [ 76.583450][ T28] audit: type=1400 audit(1700000043.930:573): avc: denied { map } for pid=1746 comm="syz.4.419" path="/dev/ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.783887][ T1753] netlink: 20 bytes leftover after parsing attributes in process `syz.3.420'. [ 76.940176][ T28] audit: type=1400 audit(1700000044.270:574): avc: denied { mount } for pid=1752 comm="syz.3.420" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 76.990466][ T403] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 76.999324][ T1753] device team_slave_1 entered promiscuous mode [ 77.031016][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.041415][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.061854][ T1460] usb 2-1: USB disconnect, device number 4 [ 77.082411][ T28] audit: type=1400 audit(1700000044.660:575): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 77.194571][ T28] audit: type=1400 audit(1700000044.710:576): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.250429][ T403] usb 4-1: Using ep0 maxpacket: 16 [ 77.256711][ T403] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.303546][ T28] audit: type=1400 audit(1700000044.710:577): avc: denied { read } for pid=142 comm="dhcpcd" name="n32" dev="tmpfs" ino=1595 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.318066][ T403] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 77.335002][ T28] audit: type=1400 audit(1700000044.710:578): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n32" dev="tmpfs" ino=1595 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.384794][ T403] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 77.408580][ T28] audit: type=1400 audit(1700000044.710:579): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n32" dev="tmpfs" ino=1595 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.440564][ T403] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 77.483930][ T28] audit: type=1400 audit(1700000044.950:580): avc: denied { read } for pid=1768 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.492226][ T403] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.559990][ T403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 77.588418][ T403] usb 4-1: SerialNumber: syz [ 77.606185][ T1754] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 77.620434][ T1754] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 77.643915][ T403] hub 4-1:1.0: bad descriptor, ignoring hub [ 77.653211][ T403] hub: probe of 4-1:1.0 failed with error -5 [ 77.748980][ T1786] loop1: detected capacity change from 0 to 16 [ 77.822009][ T1786] erofs: (device loop1): mounted with root inode @ nid 36. [ 77.839495][ T1786] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 77.848606][ T1786] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 77.858447][ T1786] bio_check_eod: 773 callbacks suppressed [ 77.858478][ T1786] syz.1.425: attempt to access beyond end of device [ 77.858478][ T1786] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 77.878728][ T1786] syz.1.425: attempt to access beyond end of device [ 77.878728][ T1786] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 77.963845][ T1753] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 78.127880][ T1753] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 78.260505][ T1460] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.470486][ T1460] usb 3-1: Using ep0 maxpacket: 16 [ 78.554358][ T1460] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.610413][ T1460] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.670385][ T1460] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 78.719501][ T1460] usb 3-1: config 0 interface 0 has no altsetting 0 [ 78.739538][ T403] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 78.760442][ T1460] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 78.810134][ T1460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.869703][ T1460] usb 3-1: config 0 descriptor?? [ 79.049995][ T1796] loop4: detected capacity change from 0 to 40427 [ 79.066227][ T1796] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 79.126794][ T1796] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 79.260787][ T403] usb 4-1: USB disconnect, device number 6 [ 79.275946][ T403] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 79.301449][ T1460] usbhid 3-1:0.0: can't add hid device: -71 [ 79.323016][ T1460] usbhid: probe of 3-1:0.0 failed with error -71 [ 79.384915][ T1796] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.427006][ T1460] usb 3-1: USB disconnect, device number 2 [ 79.576203][ T1796] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 79.584114][ T1796] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 79.943646][ T1796] syz.4.428: attempt to access beyond end of device [ 79.943646][ T1796] loop4: rw=2049, sector=77824, nr_sectors = 408 limit=40427 [ 79.991630][ T1827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.433'. [ 80.012473][ T1827] loop1: detected capacity change from 0 to 256 [ 80.201932][ T1827] FAT-fs (loop1): Unrecognized mount option "udf8=1" or missing value [ 80.403882][ T1834] caif0: tun_chr_ioctl cmd 2148553947 [ 80.779219][ T1855] loop4: detected capacity change from 0 to 33280 [ 81.041524][ T1862] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.048835][ T1862] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.088525][ T1863] loop3: detected capacity change from 0 to 33792 [ 81.150545][ T1863] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.217866][ T1855] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 81.253196][ T1863] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 81.284903][ T1870] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.292184][ T1870] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.359765][ T1864] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.404491][ T1864] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.411636][ T1864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.447995][ T1864] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.455229][ T1864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.472599][ T1875] loop2: detected capacity change from 0 to 33280 [ 81.490516][ T1875] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.508377][ T1875] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.441: invalid indirect mapped block 32768 (level 2) [ 81.522753][ T1875] EXT4-fs (loop2): 1 orphan inode deleted [ 81.528600][ T1875] EXT4-fs (loop2): 1 truncate cleaned up [ 81.534869][ T1875] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 81.555566][ T1864] device veth0_vlan left promiscuous mode [ 81.568756][ T1864] device veth0_vlan entered promiscuous mode [ 81.578592][ T1864] device veth1_macvtap left promiscuous mode [ 81.587852][ T1864] device veth1_macvtap entered promiscuous mode [ 81.594988][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.603411][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.611608][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.620270][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.629004][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.637913][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.647579][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.656718][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.665374][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.674277][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.683072][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.691845][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 81.700121][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.726844][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 81.735173][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.743870][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.752399][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.760805][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.769076][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.787674][ T1873] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.913545][ T1883] loop4: detected capacity change from 0 to 34816 [ 81.954156][ T1873] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.961460][ T1873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.095913][ T1883] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 82.108835][ T1873] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.115950][ T1873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.156600][ T1873] device veth0_vlan left promiscuous mode [ 82.163309][ T1873] device veth0_vlan entered promiscuous mode [ 82.171294][ T1873] device veth1_macvtap left promiscuous mode [ 82.178655][ T1873] device veth1_macvtap entered promiscuous mode [ 82.226157][ T1875] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.233447][ T1875] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.260367][ T308] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.284303][ T1863] netlink: 'syz.3.437': attribute type 4 has an invalid length. [ 82.295380][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.304816][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.313078][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.322182][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.331343][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.339817][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.348797][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.358505][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.367938][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.377004][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.386036][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.394831][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.403939][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.413463][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.422609][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.431908][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 82.460375][ T308] usb 3-1: Using ep0 maxpacket: 16 [ 82.466923][ T308] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.485622][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 82.485913][ T1639] EXT4-fs (loop4): unmounting filesystem. [ 82.512403][ T308] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 82.534877][ T308] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 82.545836][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.556221][ T308] usb 3-1: Product: syz [ 82.560670][ T308] usb 3-1: Manufacturer: syz [ 82.565409][ T308] usb 3-1: SerialNumber: syz [ 82.577909][ T308] usb 3-1: config 0 descriptor?? [ 82.624727][ T1898] 9pnet_fd: Insufficient options for proto=fd [ 82.791030][ T1903] caif0: tun_chr_ioctl cmd 2148553947 [ 83.465852][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 83.465869][ T28] audit: type=1400 audit(1700000051.120:596): avc: denied { wake_alarm } for pid=1918 comm="syz.0.453" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.556061][ T1924] loop4: detected capacity change from 0 to 256 [ 83.573000][ T1924] exfat: Deprecated parameter 'utf8' [ 83.582006][ T1924] exfat: Deprecated parameter 'utf8' [ 83.602737][ T1924] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 83.972715][ T1929] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.980018][ T1929] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.706991][ T1460] usb 3-1: USB disconnect, device number 3 [ 84.788453][ T1617] EXT4-fs (loop2): unmounting filesystem. [ 85.284242][ T1947] loop2: detected capacity change from 0 to 33280 [ 85.301100][ T1947] EXT4-fs: journaled quota format not specified [ 85.327146][ T28] audit: type=1400 audit(1700000052.980:597): avc: denied { load_policy } for pid=1935 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 85.347701][ T1936] SELinux: policydb magic number 0x34747865 does not match expected magic number 0xf97cff8c [ 85.370620][ T1936] SELinux: failed to load policy [ 85.397883][ T1950] netlink: 80 bytes leftover after parsing attributes in process `syz.2.461'. [ 85.407220][ T1950] netlink: 68 bytes leftover after parsing attributes in process `syz.2.461'. [ 85.416651][ T1950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.461'. [ 85.442915][ T1952] loop2: detected capacity change from 0 to 33280 [ 85.469662][ T1952] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.479031][ T1952] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.512664][ T1952] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.462: iget: bad i_size value: 2533274857506816 [ 85.535158][ T1952] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.462: iget: bad i_size value: 2533274857506816 [ 85.549040][ T1952] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.462: iget: bad i_size value: 2533274857506816 [ 85.562486][ T28] audit: type=1400 audit(1700000053.220:598): avc: denied { mounton } for pid=1951 comm="syz.2.462" path="/11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 85.562684][ T1952] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.462: iget: bad i_size value: 2533274857506816 [ 85.619664][ T1952] overlayfs: failed to resolve './file0': -117 [ 85.619730][ T1955] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.462: iget: bad i_size value: 2533274857506816 [ 85.638905][ T1955] overlayfs: failed to resolve './file0/file0': -117 [ 85.663969][ T28] audit: type=1400 audit(1700000053.320:599): avc: denied { remount } for pid=1951 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 85.707925][ T1617] EXT4-fs (loop2): unmounting filesystem. [ 85.758266][ T1638] EXT4-fs (loop3): unmounting filesystem. [ 86.053656][ T28] audit: type=1326 audit(1700000053.710:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.1.468" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd865da8fd9 code=0x7ffc0000 [ 86.078420][ T28] audit: type=1326 audit(1700000053.710:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.1.468" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd865da8fd9 code=0x7ffc0000 [ 86.104219][ T28] audit: type=1326 audit(1700000053.710:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.1.468" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd865da8fd9 code=0x7ffc0000 [ 86.129097][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 86.129259][ T28] audit: type=1326 audit(1700000053.710:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.1.468" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd865da8fd9 code=0x7ffc0000 [ 86.162535][ T28] audit: type=1326 audit(1700000053.710:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.1.468" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fd865da8fd9 code=0x7ffc0000 [ 86.187789][ T28] audit: type=1326 audit(1700000053.710:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1969 comm="syz.1.468" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd865da8fd9 code=0x7ffc0000 [ 86.374689][ T1979] loop2: detected capacity change from 0 to 34816 [ 86.420527][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 86.448555][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 86.528478][ T24] usb 4-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1024 [ 86.547453][ T1979] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.057157][ T1979] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.084743][ T24] usb 4-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 87.111775][ T1979] fs-verity: sha512 using implementation "sha512-avx2" [ 87.150085][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 87.181913][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 87.201347][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.218572][ T24] usb 4-1: Product: syz [ 87.227295][ T24] usb 4-1: Manufacturer: syz [ 87.237595][ T24] usb 4-1: SerialNumber: syz [ 87.252879][ T1962] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 87.450394][ T403] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.632920][ T403] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.660056][ T403] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x84 has invalid wMaxPacketSize 0 [ 87.679346][ T403] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 87.690043][ T403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.699705][ T403] usb 3-1: Product: syz [ 87.704947][ T403] usb 3-1: Manufacturer: syz [ 87.710199][ T403] usb 3-1: SerialNumber: syz [ 87.792278][ T403] usb-storage 3-1:1.0: USB Mass Storage device detected [ 87.848549][ T403] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 87.856889][ T403] scsi host1: usb-storage 3-1:1.0 [ 87.987718][ T1979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.996378][ T1979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.004873][ T6] usb 3-1: USB disconnect, device number 4 [ 88.528353][ T1617] EXT4-fs (loop2): unmounting filesystem. [ 88.572783][ T2032] loop2: detected capacity change from 0 to 128 [ 88.598579][ T2032] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 88.607231][ T2032] FAT-fs (loop2): Filesystem has been set read-only [ 88.615706][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 88.615721][ T28] audit: type=1400 audit(1700000056.270:622): avc: denied { bind } for pid=2031 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.661063][ T28] audit: type=1400 audit(1700000056.300:623): avc: denied { setopt } for pid=2031 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.744775][ T28] audit: type=1400 audit(1700000056.400:624): avc: denied { write } for pid=2040 comm="syz.4.494" name="usbmon1" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 88.778515][ T28] audit: type=1400 audit(1700000056.420:625): avc: denied { map } for pid=2037 comm="syz.2.493" path="/dev/tty1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 88.786180][ T2042] loop2: detected capacity change from 0 to 2048 [ 88.817531][ T24] cdc_ether 4-1:1.0: skipping garbage [ 88.823920][ T24] usb 4-1: bad CDC descriptors [ 88.832348][ T24] usb 4-1: USB disconnect, device number 7 [ 88.853439][ T2042] loop2: p1 < > p4 [ 88.857902][ T2042] loop2: p4 size 722688 extends beyond EOD, truncated [ 88.919344][ T2048] loop2: detected capacity change from 0 to 33280 [ 89.003634][ T2053] loop3: detected capacity change from 0 to 256 [ 89.054300][ T1673] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.206608][ T2062] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 89.245746][ T2065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.501'. [ 89.334950][ T2078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.503'. [ 89.356159][ T2078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.503'. [ 89.372679][ T2078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.503'. [ 89.744871][ T2104] loop3: detected capacity change from 0 to 34816 [ 90.278171][ T2111] loop2: detected capacity change from 0 to 40427 [ 90.286679][ T2111] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 90.294477][ T2111] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 90.304498][ T2111] F2FS-fs (loop2): invalid crc value [ 90.322965][ T2111] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 90.359089][ T2111] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 90.366405][ T2111] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 90.370843][ T2129] loop4: detected capacity change from 0 to 33792 [ 90.374917][ T2123] Bluetooth: hci0: Frame reassembly failed (-84) [ 90.386188][ T2129] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.400486][ T2129] EXT4-fs: Invalid want_extra_isize 9 [ 90.411585][ T28] audit: type=1400 audit(1700000058.060:626): avc: denied { lock } for pid=2128 comm="syz.4.518" path="socket:[23178]" dev="sockfs" ino=23178 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.446440][ T28] audit: type=1400 audit(1700000058.090:627): avc: denied { ioctl } for pid=2128 comm="syz.4.518" path="socket:[23181]" dev="sockfs" ino=23181 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 90.511711][ T2111] usb usb5: usbfs: process 2111 (syz.2.513) did not claim interface 2 before use [ 91.103544][ T2147] futex_wake_op: syz.0.523 tries to shift op by -1; fix this program [ 91.116734][ T28] audit: type=1400 audit(1700000058.750:628): avc: denied { module_load } for pid=2144 comm="syz.0.523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 91.209471][ T2149] 9pnet_fd: Insufficient options for proto=fd [ 91.271294][ T1617] syz-executor: attempt to access beyond end of device [ 91.271294][ T1617] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 91.417869][ T28] audit: type=1400 audit(1700000058.860:629): avc: denied { mounton } for pid=2148 comm="syz.3.524" path="/10/file0" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.468944][ T2154] loop3: detected capacity change from 0 to 33792 [ 91.500833][ T2154] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.508747][ T2154] EXT4-fs: Ignoring removed bh option [ 91.548493][ T2154] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 91.565966][ T28] audit: type=1400 audit(1700000059.220:630): avc: denied { setattr } for pid=2152 comm="syz.3.528" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.572067][ T2154] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 91.591697][ T2160] loop2: detected capacity change from 0 to 256 [ 91.616214][ T2160] exfat: Deprecated parameter 'utf8' [ 91.621915][ T2160] exfat: Deprecated parameter 'namecase' [ 91.627682][ T2160] exfat: Deprecated parameter 'utf8' [ 91.636695][ T2160] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 91.674561][ T28] audit: type=1400 audit(1700000059.330:631): avc: denied { append } for pid=2159 comm="syz.2.525" path=2F32322F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F637075616363742E75736167655F737973 dev="loop2" ino=1048703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.734851][ T2166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.530'. [ 91.764009][ T1638] EXT4-fs (loop3): unmounting filesystem. [ 92.044260][ T2194] loop2: detected capacity change from 0 to 256 [ 92.097657][ T1673] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.400359][ T2130] Bluetooth: hci0: command 0x1003 tx timeout [ 92.400369][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.434205][ T2196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.541'. [ 92.445241][ T2196] loop4: detected capacity change from 0 to 256 [ 92.456231][ T2196] FAT-fs (loop4): Unrecognized mount option "udf8=1" or missing value [ 93.103443][ T2221] loop2: detected capacity change from 0 to 33280 [ 94.036458][ T2221] EXT4-fs (loop2): Test dummy encryption mode enabled [ 94.156411][ T2221] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.548: inode has both inline data and extents flags [ 94.172925][ T2221] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.548: couldn't read orphan inode 15 (err -117) [ 94.208655][ T2221] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 94.249343][ T2215] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 94.261878][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 94.261894][ T28] audit: type=1400 audit(1700000061.920:638): avc: denied { ioctl } for pid=2213 comm="syz.2.548" path="/27/file1/file1" dev="loop2" ino=18 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.419116][ T1617] EXT4-fs (loop2): unmounting filesystem. [ 94.999541][ T28] audit: type=1326 audit(1700000062.110:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.0.551" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c623a8fd9 code=0x7ffc0000 [ 95.190813][ T28] audit: type=1326 audit(1700000062.110:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.0.551" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c623a8fd9 code=0x7ffc0000 [ 95.216309][ T28] audit: type=1326 audit(1700000062.110:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.0.551" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c623a8fd9 code=0x7ffc0000 [ 95.349312][ T28] audit: type=1326 audit(1700000062.110:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.0.551" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8c623a8fd9 code=0x7ffc0000 [ 95.461027][ T28] audit: type=1326 audit(1700000062.480:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.0.551" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c623a8fd9 code=0x7ffc0000 [ 95.556643][ T28] audit: type=1326 audit(1700000062.490:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.0.551" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8c623a8d42 code=0x7ffc0000 [ 95.587548][ T2242] futex_wake_op: syz.0.551 tries to shift op by 144; fix this program [ 95.643207][ T28] audit: type=1326 audit(1700000063.030:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.0.551" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8c623a8dd7 code=0x7ffc0000 [ 95.667850][ T28] audit: type=1326 audit(1700000063.030:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.0.551" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8c62365cd1 code=0x7ffc0000 [ 95.693909][ T28] audit: type=1326 audit(1700000063.030:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2226 comm="syz.0.551" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8c623a9dc9 code=0x7ffc0000 [ 95.797427][ T2262] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 95.909510][ T2273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.569'. [ 97.169669][ T2284] netlink: 3596 bytes leftover after parsing attributes in process `syz.0.573'. [ 97.460547][ T2289] 9pnet_virtio: no channels available for device syz [ 97.532886][ T2306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.569617][ T2306] device veth0_vlan left promiscuous mode [ 97.576431][ T2306] device veth0_vlan entered promiscuous mode [ 97.585066][ T2306] device veth1_macvtap left promiscuous mode [ 97.592474][ T2306] device veth1_macvtap entered promiscuous mode [ 97.603071][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.618046][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.632783][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.647368][ T528] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.654638][ T528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.662804][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.671534][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.679971][ T528] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.687782][ T528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.695851][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.705933][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 97.714601][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.723325][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 97.732062][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.740662][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.748923][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.757617][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.766456][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.775085][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.784171][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.792950][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.801871][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.810971][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.819152][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.828185][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.837277][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.846766][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.856130][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.865229][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.873983][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.882506][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.890781][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.899649][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.908447][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.917663][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.925839][ T528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.938020][ T2313] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 98.890445][ T403] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.019796][ T2350] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 99.147525][ T403] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 99.157921][ T403] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 99.167800][ T403] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 99.179579][ T403] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 99.195538][ T403] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 99.204871][ T403] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.227170][ T2333] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 99.240417][ T2333] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 99.248982][ T2333] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 99.258617][ T403] pl2303 3-1:1.0: pl2303 converter detected [ 99.278680][ T403] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 100.070642][ T2358] xt_hashlimit: size too large, truncated to 1048576 [ 101.495973][ T2386] loop3: detected capacity change from 0 to 33792 [ 101.515053][ T2386] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.569832][ T2386] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.713767][ T6] usb 3-1: USB disconnect, device number 5 [ 101.744791][ T6] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 101.763143][ T6] pl2303 3-1:1.0: device disconnected [ 101.816725][ T1638] EXT4-fs (loop3): unmounting filesystem. [ 101.952118][ T2397] loop2: detected capacity change from 0 to 33280 [ 102.245829][ T2410] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 102.375471][ T28] kauditd_printk_skb: 664 callbacks suppressed [ 102.375489][ T28] audit: type=1400 audit(1700000070.030:1312): avc: denied { write } for pid=2413 comm="syz.3.614" path="socket:[24788]" dev="sockfs" ino=24788 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.442385][ T2417] loop3: detected capacity change from 0 to 34816 [ 102.450667][ T28] audit: type=1400 audit(1700000070.060:1313): avc: denied { shutdown } for pid=2413 comm="syz.3.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 102.491872][ T2417] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 102.510236][ T2417] EXT4-fs error (device loop3): ext4_find_extent:936: inode #2: comm syz.3.615: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 102.530393][ T2417] EXT4-fs (loop3): Remounting filesystem read-only [ 102.602686][ T1638] EXT4-fs (loop3): unmounting filesystem. [ 102.636494][ T2425] device batadv_slave_1 entered promiscuous mode [ 102.644190][ T2423] device batadv_slave_1 left promiscuous mode [ 102.824109][ T2434] loop2: detected capacity change from 0 to 256 [ 103.788890][ T2428] loop3: detected capacity change from 0 to 40427 [ 103.862443][ T2428] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 103.889425][ T2428] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 103.908203][ T2428] F2FS-fs (loop3): invalid crc value [ 103.935972][ T2428] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.011120][ T2428] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 104.020548][ T2428] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 104.142965][ T2446] ip_tables: iptables: counters copy to user failed while replacing table [ 104.213950][ T28] audit: type=1326 audit(1700000071.870:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2453 comm="syz.4.628" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069a7a8fd9 code=0x7ffc0000 [ 104.270262][ T28] audit: type=1326 audit(1700000071.870:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2453 comm="syz.4.628" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069a7a8fd9 code=0x7ffc0000 [ 104.378589][ T28] audit: type=1326 audit(1700000071.870:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2453 comm="syz.4.628" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069a7a8fd9 code=0x7ffc0000 [ 104.403748][ T28] audit: type=1326 audit(1700000071.870:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2453 comm="syz.4.628" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069a7a8fd9 code=0x7ffc0000 [ 104.428783][ T403] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 104.437427][ T28] audit: type=1326 audit(1700000071.900:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2453 comm="syz.4.628" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f069a7a8fd9 code=0x7ffc0000 [ 104.463652][ T28] audit: type=1326 audit(1700000071.900:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2453 comm="syz.4.628" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069a7a8fd9 code=0x7ffc0000 [ 104.520782][ T28] audit: type=1326 audit(1700000071.900:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2453 comm="syz.4.628" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069a7a8fd9 code=0x7ffc0000 [ 104.547038][ T28] audit: type=1326 audit(1700000071.900:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2453 comm="syz.4.628" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069a7a8fd9 code=0x7ffc0000 [ 104.610509][ T403] usb 4-1: Using ep0 maxpacket: 32 [ 104.633441][ T403] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.775285][ T403] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 104.900743][ T403] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.024119][ T403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.241741][ T403] usb 4-1: Product: syz [ 105.246011][ T403] usb 4-1: Manufacturer: syz [ 105.271952][ T403] usb 4-1: SerialNumber: syz [ 105.484224][ T2462] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 105.519264][ T2441] loop2: detected capacity change from 0 to 131072 [ 105.538990][ T2441] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 105.549865][ T2441] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 105.565718][ T2441] F2FS-fs (loop2): invalid crc value [ 105.609521][ T403] usb 4-1: found format II with max.bitrate = 5, frame size=9 [ 105.618950][ T403] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 105.624493][ T2441] F2FS-fs (loop2): Found nat_bits in checkpoint [ 105.639778][ T403] usb 4-1: USB disconnect, device number 8 [ 105.990812][ T2441] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 106.059849][ T2441] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 106.793106][ T2498] overlayfs: failed to clone upperpath [ 106.815816][ T2498] overlayfs: failed to clone upperpath [ 107.143846][ T2524] loop2: detected capacity change from 0 to 33280 [ 107.190538][ T2524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.217977][ T2524] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 107.248694][ T2524] EXT4-fs (loop2): unable to read superblock [ 107.373938][ T2525] loop2: detected capacity change from 0 to 40427 [ 107.393455][ T2525] F2FS-fs (loop2): invalid crc value [ 107.414457][ T2525] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.451545][ T2534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 107.476679][ T2525] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.576271][ T2541] netlink: 964 bytes leftover after parsing attributes in process `syz.4.646'. [ 107.586284][ T2541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 110.152532][ T2582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.661'. [ 110.171330][ T2579] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 110.182693][ T2579] netlink: 28 bytes leftover after parsing attributes in process `syz.3.659'. [ 110.200947][ T2575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.660'. [ 110.210016][ T2575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.660'. [ 110.647907][ T2602] netlink: 16 bytes leftover after parsing attributes in process `syz.1.666'. [ 110.759374][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 110.759391][ T28] audit: type=1400 audit(1700000078.410:1346): avc: denied { bind } for pid=2604 comm="syz.3.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.799485][ T2605] netlink: 32 bytes leftover after parsing attributes in process `syz.3.668'. [ 110.840207][ T2605] netlink: 28 bytes leftover after parsing attributes in process `syz.3.668'. [ 110.880234][ T28] audit: type=1400 audit(1700000078.450:1347): avc: denied { setopt } for pid=2604 comm="syz.3.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 110.962747][ T2612] loop2: detected capacity change from 0 to 256 [ 110.978493][ T2612] FAT-fs (loop2): Unrecognized mount option "sp¥rtname=lower" or missing value [ 110.999994][ T28] audit: type=1400 audit(1700000078.650:1348): avc: denied { relabelfrom } for pid=2615 comm="syz.3.672" name="" dev="pipefs" ino=25225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 111.051183][ T2616] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.062608][ T28] audit: type=1400 audit(1700000078.680:1349): avc: denied { read } for pid=2613 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 111.089314][ T28] audit: type=1326 audit(1700000078.740:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2596 comm="syz.4.665" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069a7a8fd9 code=0x7ffc0000 [ 111.180647][ T28] audit: type=1326 audit(1700000078.740:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2596 comm="syz.4.665" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069a7a8fd9 code=0x7ffc0000 [ 111.224984][ T28] audit: type=1326 audit(1700000078.740:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2596 comm="syz.4.665" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069a7a8fd9 code=0x7ffc0000 [ 111.250236][ T28] audit: type=1326 audit(1700000078.740:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2596 comm="syz.4.665" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069a7a8fd9 code=0x7ffc0000 [ 111.282209][ T28] audit: type=1326 audit(1700000078.740:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2596 comm="syz.4.665" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f069a7a8fd9 code=0x7ffc0000 [ 111.320383][ T28] audit: type=1326 audit(1700000078.740:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2596 comm="syz.4.665" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f069a7a8fd9 code=0x7ffc0000 [ 111.430490][ T2629] loop3: detected capacity change from 0 to 34816 [ 111.504774][ T2629] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 111.741051][ T2636] loop2: detected capacity change from 0 to 256 [ 111.806967][ T2636] FAT-fs (loop2): Unrecognized mount option "udf8=1" or missing value [ 112.122666][ T1638] EXT4-fs (loop3): unmounting filesystem. [ 112.185894][ T2653] loop3: detected capacity change from 0 to 33792 [ 112.206106][ T2653] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.273394][ T2653] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 112.287679][ T2623] overlayfs: missing 'workdir' [ 112.295061][ T2657] fuse: Bad value for 'fd' [ 112.395526][ T2669] overlayfs: unrecognized mount option "smackfstransmute=index=on" or missing value [ 112.719912][ T2682] __nla_validate_parse: 3 callbacks suppressed [ 112.719934][ T2682] netlink: 76 bytes leftover after parsing attributes in process `syz.0.696'. [ 112.759763][ T2685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'. [ 112.800827][ T2689] device ip6gre1 entered promiscuous mode [ 112.807806][ T309] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.817803][ T309] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.834990][ T309] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.855967][ T2691] ./dev/sda1: Can't open blockdev [ 112.892542][ T309] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.014910][ T2700] netlink: 16 bytes leftover after parsing attributes in process `syz.0.703'. [ 113.016706][ T1638] EXT4-fs (loop3): unmounting filesystem. [ 113.316292][ T2723] 9pnet: Could not find request transport: fj–×Zdno=0x0000000000000004 [ 113.405566][ T1460] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.687856][ T2738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.717'. [ 114.721351][ T2738] loop3: detected capacity change from 0 to 256 [ 114.767503][ T2738] FAT-fs (loop3): Unrecognized mount option "udf8=1" or missing value [ 114.844957][ T2747] netlink: 140 bytes leftover after parsing attributes in process `syz.3.721'. [ 114.867039][ T2747] netlink: 140 bytes leftover after parsing attributes in process `syz.3.721'. [ 115.326643][ T2761] 9pnet_fd: Insufficient options for proto=fd [ 117.058527][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 125.569809][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 142.907072][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.271982][ T2785] netlink: 16 bytes leftover after parsing attributes in process `syz.0.734'. [ 160.443796][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 160.443813][ T28] audit: type=1400 audit(1700000895.937:1423): avc: denied { ioctl } for pid=2767 comm="syz.1.729" path="socket:[25665]" dev="sockfs" ino=25665 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 160.596909][ T28] audit: type=1400 audit(1700000896.086:1424): avc: denied { connect } for pid=2765 comm="syz.4.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 161.322029][ T2814] overlayfs: failed to clone upperpath [ 161.384156][ T28] audit: type=1400 audit(1700000896.874:1425): avc: denied { getopt } for pid=2806 comm="syz.1.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 162.388990][ T2861] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 162.487519][ T2864] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 164.177774][ T28] audit: type=1400 audit(1700000899.647:1426): avc: denied { mount } for pid=2877 comm="syz.0.760" name="/" dev="ramfs" ino=25820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 164.791369][ T2884] xt_hashlimit: size too large, truncated to 1048576 [ 165.220316][ T28] audit: type=1400 audit(1700000900.694:1427): avc: denied { execmem } for pid=2905 comm="syz.3.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 165.297028][ T2912] 9pnet_fd: Insufficient options for proto=fd [ 165.331614][ T2912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.770'. [ 165.555666][ T28] audit: type=1400 audit(1700000901.033:1428): avc: denied { create } for pid=2916 comm="syz.2.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 166.529400][ T2949] 9pnet_fd: Insufficient options for proto=fd [ 166.549252][ T2949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.781'. [ 167.582411][ T28] audit: type=1400 audit(1700000903.058:1429): avc: denied { create } for pid=2972 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 167.768409][ T2983] 9pnet_fd: Insufficient options for proto=fd [ 167.793668][ T2983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.792'. [ 169.390520][ T28] audit: type=1400 audit(1700000904.853:1430): avc: denied { write } for pid=2992 comm="syz.3.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.390716][ T2993] netlink: 100 bytes leftover after parsing attributes in process `syz.3.796'. [ 170.375747][ T2993] overlayfs: failed to clone upperpath [ 171.355577][ T28] audit: type=1400 audit(1700000904.853:1431): avc: denied { nlmsg_write } for pid=2992 comm="syz.3.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.405994][ T28] audit: type=1400 audit(1700000906.868:1432): avc: denied { getopt } for pid=2996 comm="syz.0.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.611954][ T3018] netlink: 56 bytes leftover after parsing attributes in process `syz.2.807'. [ 171.661360][ T3021] device ipip0 entered promiscuous mode [ 171.698710][ T3023] device gretap1 entered promiscuous mode [ 171.708480][ T28] audit: type=1400 audit(1700000907.178:1433): avc: denied { name_bind } for pid=3024 comm="syz.2.809" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 171.730656][ T3026] tipc: Enabling of bearer rejected, failed to enable media [ 171.756881][ T28] audit: type=1400 audit(1700000907.218:1434): avc: denied { setopt } for pid=3027 comm="syz.1.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 171.873907][ T3036] ip_tables: iptables: counters copy to user failed while replacing table [ 172.113939][ T3052] futex_wake_op: syz.4.819 tries to shift op by 144; fix this program [ 172.286049][ T3057] fuse: Bad value for 'fd' [ 172.719613][ T3069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.826'. [ 172.961172][ T3077] 9pnet_fd: Insufficient options for proto=fd [ 172.993089][ T3077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.829'. [ 173.091413][ T3079] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 173.232460][ T3082] netlink: 56 bytes leftover after parsing attributes in process `syz.2.831'. [ 174.137760][ T28] audit: type=1326 audit(1700000909.592:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3104 comm="syz.2.838" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 174.183952][ T28] audit: type=1326 audit(1700000909.622:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3104 comm="syz.2.838" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 174.236107][ T28] audit: type=1326 audit(1700000909.622:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3104 comm="syz.2.838" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 174.272616][ T28] audit: type=1326 audit(1700000909.622:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3104 comm="syz.2.838" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 174.282573][ T3112] 9pnet_fd: Insufficient options for proto=fd [ 174.358234][ T3114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 174.370345][ T28] audit: type=1326 audit(1700000909.622:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3104 comm="syz.2.838" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 174.405927][ T28] audit: type=1326 audit(1700000909.622:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3104 comm="syz.2.838" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 175.157925][ T3131] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 175.183720][ T3131] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 175.717369][ T3149] 9pnet_fd: Insufficient options for proto=fd [ 175.737205][ T3149] netlink: 16 bytes leftover after parsing attributes in process `syz.2.854'. [ 176.102963][ T3169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.860'. [ 176.112361][ T3170] fuse: Unknown parameter '' [ 176.787198][ T3194] 9pnet_fd: Insufficient options for proto=fd [ 176.795453][ T3194] netlink: 16 bytes leftover after parsing attributes in process `syz.4.868'. [ 177.301160][ T3213] Invalid ELF header magic: != ELF [ 177.560823][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.677303][ T3223] xt_hashlimit: size too large, truncated to 1048576 [ 177.742724][ T3224] netlink: 'syz.4.878': attribute type 4 has an invalid length. [ 177.779363][ T3226] netlink: 'syz.4.878': attribute type 4 has an invalid length. [ 177.883486][ T3231] 9pnet_fd: Insufficient options for proto=fd [ 177.890654][ T3231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.879'. [ 178.334092][ T3258] x_tables: duplicate underflow at hook 2 [ 178.346113][ T3259] x_tables: duplicate underflow at hook 2 [ 178.539316][ T3265] 9pnet_fd: Insufficient options for proto=fd [ 178.546676][ T3265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.891'. [ 178.770940][ T3281] cgroup: Invalid name [ 179.550867][ T3303] overlayfs: unrecognized mount option "/" or missing value [ 179.560597][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 179.560613][ T28] audit: type=1400 audit(1700000915.009:1510): avc: denied { create } for pid=3302 comm="syz.0.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 179.729816][ T3308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.907'. [ 180.564668][ T3333] x_tables: duplicate underflow at hook 2 [ 181.288645][ T3355] 9pnet_fd: Insufficient options for proto=fd [ 182.764721][ T28] audit: type=1400 audit(1700000918.202:1511): avc: denied { create } for pid=3369 comm="syz.0.926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 182.856233][ T28] audit: type=1400 audit(1700000918.301:1512): avc: denied { getopt } for pid=3373 comm="syz.0.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 182.880788][ T3374] xt_hashlimit: size too large, truncated to 1048576 [ 183.363803][ T3394] x_tables: duplicate underflow at hook 2 [ 183.456584][ T3396] netlink: 'syz.2.931': attribute type 9 has an invalid length. [ 183.464421][ T3397] netlink: 'syz.2.931': attribute type 9 has an invalid length. [ 183.872063][ T3406] device vlan1 entered promiscuous mode [ 184.109488][ T3415] netlink: 104 bytes leftover after parsing attributes in process `syz.4.939'. [ 185.605711][ T3449] x_tables: duplicate underflow at hook 2 [ 185.954130][ T3454] device vlan1 entered promiscuous mode [ 185.985162][ T28] audit: type=1326 audit(1700000921.414:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3459 comm="syz.3.954" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef105a8fd9 code=0x0 [ 188.136991][ T3524] bridge0: port 3(gretap0) entered blocking state [ 188.143516][ T3524] bridge0: port 3(gretap0) entered disabled state [ 188.150668][ T3524] device gretap0 entered promiscuous mode [ 188.162706][ T3524] netlink: 'syz.4.970': attribute type 16 has an invalid length. [ 188.170723][ T3524] netlink: 'syz.4.970': attribute type 17 has an invalid length. [ 188.187911][ T3524] bridge0: port 3(gretap0) entered blocking state [ 188.194416][ T3524] bridge0: port 3(gretap0) entered forwarding state [ 188.202152][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.210040][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.218445][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.226318][ T3525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=3525 comm=syz.4.970 [ 188.252452][ T3524] device veth0_vlan left promiscuous mode [ 188.258557][ T3524] device veth0_vlan entered promiscuous mode [ 188.266387][ T3524] device veth1_macvtap left promiscuous mode [ 188.273294][ T3524] device veth1_macvtap entered promiscuous mode [ 188.281062][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.293264][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.305282][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.317270][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.333293][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.340418][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.349078][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.357924][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.366691][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.373785][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.381580][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.390550][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 188.399204][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.407671][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 188.416468][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.424815][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.433423][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.442180][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.450795][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.459493][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.477708][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.495889][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.534980][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.543550][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.551934][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.563117][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.623724][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.632166][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.640966][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.650002][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.672064][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.686200][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.704471][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.956560][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.026183][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.034619][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.199408][ T3572] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 190.217701][ T3572] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 192.716509][ T3613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.995'. [ 192.923907][ T3615] netlink: 'syz.1.997': attribute type 13 has an invalid length. [ 193.522082][ T3640] xt_l2tp: wrong L2TP version: 0 [ 193.968950][ T28] audit: type=1400 audit(1700000929.387:1514): avc: denied { map } for pid=3666 comm="syz.2.1015" path="pipe:[27779]" dev="pipefs" ino=27779 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 194.329227][ T28] audit: type=1400 audit(1700000929.746:1515): avc: denied { bind } for pid=3674 comm="syz.4.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.348904][ T28] audit: type=1400 audit(1700000929.746:1516): avc: denied { ioctl } for pid=3674 comm="syz.4.1016" path="socket:[28792]" dev="sockfs" ino=28792 ioctlcmd=0x89f6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 194.581741][ T3678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 194.595212][ T3682] device batadv_slave_1 entered promiscuous mode [ 194.745427][ T3695] x_tables: duplicate underflow at hook 2 [ 196.585518][ T3728] overlayfs: failed to clone upperpath [ 196.630015][ T28] audit: type=1400 audit(1700000932.032:1517): avc: denied { read } for pid=3716 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 198.057558][ T3742] 9pnet_fd: Insufficient options for proto=fd [ 198.106989][ T3742] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1037'. [ 199.619657][ T3782] 9pnet_fd: Insufficient options for proto=fd [ 199.730724][ T3782] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1052'. [ 199.740996][ T28] audit: type=1400 audit(1700000935.146:1518): avc: denied { setattr } for pid=3787 comm="syz.3.1056" name="PPPOL2TP" dev="sockfs" ino=27867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 199.778876][ T28] audit: type=1400 audit(1700000935.166:1519): avc: denied { ioctl } for pid=3787 comm="syz.3.1056" path="socket:[27868]" dev="sockfs" ino=27868 ioctlcmd=0x890d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 201.178741][ T3828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1071'. [ 201.842478][ T3870] netlink: 'syz.1.1084': attribute type 12 has an invalid length. [ 201.850595][ T3870] netlink: 'syz.1.1084': attribute type 29 has an invalid length. [ 201.858794][ T3870] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1084'. [ 201.868445][ T3870] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1084'. [ 202.212152][ T28] audit: type=1400 audit(1700000937.611:1520): avc: denied { ioctl } for pid=3896 comm="syz.3.1094" path="/128/file2" dev="tmpfs" ino=722 ioctlcmd=0x4c05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 203.389908][ T3922] ip_tables: iptables: counters copy to user failed while replacing table [ 203.419038][ T3921] ip_tables: iptables: counters copy to user failed while replacing table [ 204.631856][ T3922] ªªªªªª: renamed from vlan0 [ 204.869245][ T3948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1109'. [ 204.902439][ T3945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 205.947569][ T3973] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1119'. [ 206.027327][ T28] audit: type=1326 audit(1700000941.413:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.4.1121" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f069a7a8fd9 code=0x0 [ 206.081470][ T3983] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1123'. [ 206.128984][ T3986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1121'. [ 206.188267][ T3988] xt_hashlimit: size too large, truncated to 1048576 [ 206.532623][ T3997] netlink: 'syz.0.1128': attribute type 12 has an invalid length. [ 206.557278][ T3997] 9pnet_fd: Insufficient options for proto=fd [ 206.750934][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.757686][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.764004][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.770252][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.776521][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.782795][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.789031][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.795281][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.801527][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.807791][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.814183][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.820900][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.827271][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.833794][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.840053][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.846322][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.852602][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.858837][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.865120][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.871390][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.877792][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.884175][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.890427][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.896713][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.903022][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.909293][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.915567][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.921800][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.928077][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.934365][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.940616][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.947068][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.953367][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.959680][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.966190][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.972608][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.978912][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.985202][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.991445][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 206.997765][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.004055][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.010307][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.016583][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.022865][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.029240][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.035526][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.041779][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.048067][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.054340][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.060575][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.066891][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.073178][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.079429][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.085703][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.091950][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.098264][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.104625][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.110954][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.117255][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.123524][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.129784][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.136150][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.142411][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.148742][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 207.155012][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 208.402774][ T4059] SELinux: security_context_str_to_sid (U) failed with errno=-22 [ 208.728651][ T4071] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1153'. [ 208.775891][ T4075] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1154'. [ 208.794437][ T4077] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1155'. [ 209.466118][ T4098] netlink: 'syz.2.1164': attribute type 12 has an invalid length. [ 209.478556][ T4098] 9pnet_fd: Insufficient options for proto=fd [ 209.698816][ T28] audit: type=1326 audit(1700000945.087:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4115 comm="syz.3.1171" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef105a8fd9 code=0x0 [ 209.801003][ T4122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1171'. [ 210.290700][ T4127] netlink: 'syz.0.1174': attribute type 16 has an invalid length. [ 210.298773][ T4127] netlink: 'syz.0.1174': attribute type 17 has an invalid length. [ 210.539675][ T4149] netlink: 'syz.2.1182': attribute type 4 has an invalid length. [ 210.845339][ T4167] ip_tables: iptables: counters copy to user failed while replacing table [ 210.924577][ T28] audit: type=1400 audit(1700000946.304:1523): avc: denied { bind } for pid=4165 comm="syz.0.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 210.948551][ T4168] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1188'. [ 213.297428][ T4217] 9pnet_fd: Insufficient options for proto=fd [ 213.687506][ T4240] netlink: 'syz.0.1211': attribute type 12 has an invalid length. [ 213.734524][ T4242] 9pnet: Could not find request transport: [é�Ë¿fd [ 213.744439][ T4240] 9pnet_fd: Insufficient options for proto=fd [ 213.798614][ T4244] overlayfs: failed to clone upperpath [ 214.668595][ T4069] syz.1.1152 (4069) used greatest stack depth: 15400 bytes left [ 214.731036][ T4271] netlink: 'syz.1.1223': attribute type 12 has an invalid length. [ 214.740135][ T4271] 9pnet_fd: Insufficient options for proto=fd [ 215.110943][ T4286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1228'. [ 215.816082][ T4302] netlink: 'syz.0.1234': attribute type 12 has an invalid length. [ 215.862675][ T4302] 9pnet_fd: Insufficient options for proto=fd [ 215.933055][ T4307] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1236'. [ 215.962048][ T4304] overlayfs: failed to clone upperpath [ 216.023636][ T4311] netlink: 'syz.0.1247': attribute type 12 has an invalid length. [ 216.033533][ T4311] 9pnet_fd: Insufficient options for proto=fd [ 216.774904][ T4337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1245'. [ 216.975398][ T4347] netlink: 'syz.0.1249': attribute type 12 has an invalid length. [ 216.985186][ T4347] 9pnet_fd: Insufficient options for proto=fd [ 217.115587][ T4352] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.122916][ T4352] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.217502][ T4353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'. [ 217.616853][ T28] audit: type=1400 audit(1700000952.983:1524): avc: denied { create } for pid=4355 comm="syz.4.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 217.733829][ T4364] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 217.762471][ T60] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 217.814870][ T4368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1257'. [ 217.831228][ T4374] netlink: 'syz.4.1260': attribute type 12 has an invalid length. [ 217.856115][ T4374] 9pnet_fd: Insufficient options for proto=fd [ 217.976223][ T28] audit: type=1400 audit(1700000953.342:1525): avc: denied { rename } for pid=4380 comm="syz.3.1264" name="file0" dev="tmpfs" ino=897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 217.999515][ T4382] overlayfs: failed to clone upperpath [ 218.005489][ T28] audit: type=1400 audit(1700000953.362:1526): avc: denied { mounton } for pid=4380 comm="syz.3.1264" path="/159/bus" dev="tmpfs" ino=897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 218.391100][ T4387] netlink: 'syz.4.1265': attribute type 4 has an invalid length. [ 218.398996][ T4387] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1265'. [ 218.763960][ T308] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 219.110503][ T4407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1272'. [ 219.180380][ T4409] netlink: 'syz.3.1273': attribute type 12 has an invalid length. [ 219.192226][ T4409] 9pnet_fd: Insufficient options for proto=fd [ 219.773396][ T4428] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1278'. [ 219.885719][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 220.171099][ T4456] netlink: 'syz.0.1284': attribute type 12 has an invalid length. [ 220.180237][ T4456] 9pnet_fd: Insufficient options for proto=fd [ 221.104294][ T4481] x_tables: unsorted entry at hook 2 [ 221.248591][ T4485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 221.455095][ T4496] netlink: 'syz.0.1296': attribute type 12 has an invalid length. [ 221.464571][ T4496] 9pnet_fd: Insufficient options for proto=fd [ 221.968949][ T4510] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 222.719008][ T4520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1304'. [ 222.999448][ T4528] netlink: 'syz.1.1308': attribute type 12 has an invalid length. [ 223.008356][ T4528] 9pnet_fd: Insufficient options for proto=fd [ 223.403517][ T4526] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.413566][ T4526] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.518161][ T4549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1315'. [ 224.194840][ T4565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1320'. [ 224.229370][ T4566] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 224.245417][ T4568] netlink: 'syz.4.1321': attribute type 12 has an invalid length. [ 224.264137][ T4568] 9pnet_fd: Insufficient options for proto=fd [ 224.618074][ T4586] fuse: Bad value for 'group_id' [ 225.493855][ T4612] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1331'. [ 225.606290][ T4616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1333'. [ 225.695887][ T4619] ./dev/sda1: Can't open blockdev [ 226.537486][ T4650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4650 comm=syz.0.1343 [ 227.688627][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1358'. [ 227.750123][ T4688] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 227.770889][ T4693] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 229.441149][ T4731] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1370'. [ 229.584357][ T4737] xt_hashlimit: size too large, truncated to 1048576 [ 229.696870][ T4742] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1015 sclass=netlink_tcpdiag_socket pid=4742 comm=syz.2.1376 [ 229.784301][ T4745] netlink: 'syz.4.1378': attribute type 12 has an invalid length. [ 229.853234][ T4752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'. [ 229.873689][ T28] audit: type=1326 audit(1700000965.222:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.1380" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 229.917288][ T28] audit: type=1326 audit(1700000965.222:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.1380" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 229.943328][ T28] audit: type=1326 audit(1700000965.222:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.1380" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 230.065006][ T28] audit: type=1326 audit(1700000965.222:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.1380" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 230.091869][ T28] audit: type=1326 audit(1700000965.222:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.1380" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 230.204881][ T4767] x_tables: duplicate underflow at hook 2 [ 230.438761][ T28] audit: type=1326 audit(1700000965.222:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.1380" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 230.482787][ T28] audit: type=1326 audit(1700000965.222:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.1380" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 230.519119][ T4775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1386'. [ 230.553141][ T28] audit: type=1326 audit(1700000965.222:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.1380" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 230.593666][ T4786] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1386'. [ 230.604288][ T28] audit: type=1326 audit(1700000965.222:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.1380" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 230.653093][ T28] audit: type=1326 audit(1700000965.222:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4751 comm="syz.2.1380" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 230.994194][ T4804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1393'. [ 231.004396][ T4806] netlink: 'syz.3.1394': attribute type 1 has an invalid length. [ 231.701178][ T4858] x_tables: duplicate underflow at hook 2 [ 234.108048][ T4913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1426'. [ 234.204618][ T4908] x_tables: duplicate underflow at hook 2 [ 236.186586][ T4991] x_tables: duplicate underflow at hook 2 [ 236.464622][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 236.464638][ T28] audit: type=1400 audit(1700000971.802:1564): avc: denied { setattr } for pid=5031 comm="syz.3.1465" name="" dev="pipefs" ino=31443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 236.513103][ T28] audit: type=1400 audit(1700000971.852:1565): avc: denied { create } for pid=5035 comm="syz.3.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 236.718489][ T5030] 9pnet: p9_errstr2errno: server reported unknown error [ 236.827773][ T5049] device wg1 entered promiscuous mode [ 236.976970][ T5051] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1471'. [ 236.986472][ T5051] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1471'. [ 236.995732][ T5051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1471'. [ 237.004869][ T5051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1471'. [ 237.057521][ T28] audit: type=1326 audit(1700000972.391:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5057 comm="syz.3.1474" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef105a8fd9 code=0x0 [ 237.257930][ T5071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1479'. [ 237.297773][ T5077] netlink: 'syz.1.1482': attribute type 12 has an invalid length. [ 237.394422][ T5080] x_tables: duplicate underflow at hook 2 [ 237.426839][ T5083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1484'. [ 239.099107][ T5131] x_tables: duplicate underflow at hook 2 [ 239.482753][ T5142] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 239.699890][ T5163] ------------[ cut here ]------------ [ 239.705478][ T5163] WARNING: CPU: 1 PID: 5163 at crypto/rsa-pkcs1pad.c:540 pkcs1pad_verify+0x4b8/0x600 [ 239.715079][ T5163] Modules linked in: [ 239.719040][ T5163] CPU: 1 PID: 5163 Comm: syz.1.1517 Not tainted syzkaller #0 [ 239.726423][ T5163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 239.736645][ T5163] RIP: 0010:pkcs1pad_verify+0x4b8/0x600 [ 239.742249][ T5163] Code: 44 89 f6 e8 4a 0f 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c6 1a 2c ff 0f 0b b8 ea ff ff ff eb e3 e8 b8 1a 2c ff <0f> 0b b8 ea ff ff ff eb d5 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 85 [ 239.762121][ T5163] RSP: 0018:ffffc90007647728 EFLAGS: 00010283 [ 239.768277][ T5163] RAX: ffffffff82455768 RBX: ffff8881268e4000 RCX: 0000000000080000 [ 239.776278][ T5163] RDX: ffffc90002e80000 RSI: 0000000000000519 RDI: 000000000000051a [ 239.784321][ T5163] RBP: ffffc90007647770 R08: ffffc900076478af R09: ffffc90007647898 [ 239.792350][ T5163] R10: 0000000000000000 R11: ffffffff824552b0 R12: 0000000000000000 [ 239.800414][ T5163] R13: ffff88814f287480 R14: dffffc0000000000 R15: ffff8881268e4038 [ 239.808448][ T5163] FS: 00007fd866d176c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 239.817442][ T5163] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.824064][ T5163] CR2: 000000110c2dc6ef CR3: 000000014d791000 CR4: 00000000003506a0 [ 239.832114][ T5163] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 239.840178][ T5163] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 239.848250][ T5163] Call Trace: [ 239.851559][ T5163] [ 239.854528][ T5163] ? sg_init_one+0x93/0x140 [ 239.859130][ T5163] public_key_verify_signature+0x90f/0xd80 [ 239.864987][ T5163] ? __cfi_public_key_verify_signature+0x10/0x10 [ 239.871416][ T5163] ? __kmalloc_node_track_caller+0xb1/0x1e0 [ 239.877377][ T5163] ? memdup_user+0x2a/0xc0 [ 239.881855][ T5163] ? keyctl_pkey_verify+0x3a4/0x460 [ 239.887139][ T5163] ? __se_sys_keyctl+0x817/0xe10 [ 239.891519][ T28] audit: type=1400 audit(1700000975.227:1567): avc: denied { nlmsg_read } for pid=5165 comm="syz.2.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 239.892118][ T5163] ? __x64_sys_keyctl+0xbf/0xd0 [ 239.913896][ T5166] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1518'. [ 239.917643][ T5163] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 239.917685][ T5163] public_key_verify_signature_2+0x43/0x50 [ 239.939142][ T5163] verify_signature+0xe4/0x110 [ 239.943960][ T5163] asymmetric_key_verify_signature+0x177/0x220 [ 239.950242][ T5163] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 239.957026][ T5163] ? __kasan_check_write+0x14/0x20 [ 239.962221][ T5163] keyctl_pkey_verify+0x434/0x460 [ 239.967342][ T5163] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 239.972936][ T5163] ? kasan_quarantine_put+0x34/0x190 [ 239.978309][ T5163] __se_sys_keyctl+0x817/0xe10 [ 239.983115][ T5163] ? ____kasan_slab_free+0x13d/0x180 [ 239.988493][ T5163] ? __x64_sys_keyctl+0xd0/0xd0 [ 239.993388][ T5163] ? do_futex+0x2e2/0x430 [ 239.997800][ T5163] ? slab_free_freelist_hook+0xc2/0x190 [ 240.003415][ T5163] ? __cfi_do_futex+0x10/0x10 [ 240.008284][ T5163] ? __se_sys_futex+0x136/0x310 [ 240.013181][ T5163] ? __x64_sys_futex+0x100/0x100 [ 240.018185][ T5163] ? xfd_validate_state+0x70/0x150 [ 240.023361][ T5163] ? __kasan_check_write+0x14/0x20 [ 240.028584][ T5163] ? fpregs_restore_userregs+0x128/0x260 [ 240.034264][ T5163] __x64_sys_keyctl+0xbf/0xd0 [ 240.039026][ T5163] x64_sys_call+0x71a/0x9a0 [ 240.043578][ T5163] do_syscall_64+0x4c/0xa0 [ 240.048089][ T5163] ? clear_bhb_loop+0x30/0x80 [ 240.052808][ T5163] ? clear_bhb_loop+0x30/0x80 [ 240.057587][ T5163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.063533][ T5163] RIP: 0033:0x7fd865da8fd9 [ 240.068052][ T5163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.087780][ T5163] RSP: 002b:00007fd866d17028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 240.096251][ T5163] RAX: ffffffffffffffda RBX: 00007fd866025fa0 RCX: 00007fd865da8fd9 [ 240.104311][ T5163] RDX: 0000200000000d40 RSI: 0000200000000d00 RDI: 000000000000001c [ 240.112350][ T5163] RBP: 00007fd865e37fed R08: 0000200000000dc0 R09: 0000000000000000 [ 240.120395][ T5163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.128482][ T5163] R13: 00007fd866026038 R14: 00007fd866025fa0 R15: 00007ffc938697f8 [ 240.136510][ T5163] [ 240.139604][ T5163] ---[ end trace 0000000000000000 ]--- [ 240.452567][ T5189] x_tables: duplicate underflow at hook 2 [ 242.212941][ T5221] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1539'. [ 243.634432][ T5245] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5245 comm=syz.0.1547 [ 243.647865][ T5246] x_tables: duplicate underflow at hook 2 [ 243.689133][ T5245] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=5245 comm=syz.0.1547 [ 244.049255][ T28] audit: type=1400 audit(1700000979.371:1568): avc: denied { connect } for pid=5258 comm="syz.4.1552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 244.123548][ T5268] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1556'. [ 244.175093][ T5270] overlayfs: failed to clone upperpath [ 244.404572][ T5282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 244.434340][ T5282] device macsec2 entered promiscuous mode [ 244.926463][ T5299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1567'. [ 244.950927][ T5301] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1568'. [ 244.972334][ T5303] ip_tables: iptables: counters copy to user failed while replacing table [ 244.988806][ T5303] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.996059][ T5303] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.531764][ T5322] x_tables: duplicate underflow at hook 2 [ 245.545314][ T28] audit: type=1400 audit(1700000980.839:1569): avc: denied { setopt } for pid=5311 comm="syz.0.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 246.377378][ T5335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1579'. [ 246.485370][ T5346] TCP: TCP_TX_DELAY enabled [ 246.673580][ T5356] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 246.818137][ T5367] device wireguard0 entered promiscuous mode [ 246.856313][ T5372] x_tables: duplicate underflow at hook 2 [ 246.955574][ T5376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1593'. [ 247.238992][ T5458] tipc: Started in network mode [ 247.244087][ T5458] tipc: Node identity ac14140f, cluster identity 4711 [ 247.251270][ T5458] tipc: New replicast peer: 255.255.255.255 [ 247.257759][ T5458] tipc: Enabled bearer , priority 10 [ 247.266421][ T5458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1602'. [ 247.293682][ T5461] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 247.590576][ T5464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1604'. [ 247.775258][ T28] audit: type=1400 audit(1700000983.086:1570): avc: denied { shutdown } for pid=5449 comm="syz.1.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 248.734170][ T468] tipc: Node number set to 2886997007 [ 249.223634][ T5483] overlayfs: failed to resolve './file0': -2 [ 249.940657][ T28] audit: type=1400 audit(1700000985.253:1571): avc: denied { create } for pid=5486 comm="syz.4.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 249.967444][ T5488] SELinux: Context : is not valid (left unmapped). [ 249.981330][ T28] audit: type=1400 audit(1700000985.303:1572): avc: denied { relabelto } for pid=5487 comm="syz.3.1612" name="rdma.current" dev="tmpfs" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 250.019206][ T5492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 250.061066][ T28] audit: type=1400 audit(1700000985.303:1573): avc: denied { associate } for pid=5487 comm="syz.3.1612" name="rdma.current" dev="tmpfs" ino=1262 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 250.157640][ T5499] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1616'. [ 250.183659][ T28] audit: type=1400 audit(1700000985.503:1574): avc: denied { module_request } for pid=5495 comm="syz.1.1615" kmod="netdev-nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 250.225557][ T5505] ./dev/sda1: Can't open blockdev [ 250.638721][ T28] audit: type=1400 audit(1700000985.952:1575): avc: denied { unlink } for pid=1638 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=1262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 251.035624][ T5515] ip_tables: iptables: counters copy to user failed while replacing table [ 251.302715][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 251.489295][ T28] audit: type=1400 audit(1700000986.801:1576): avc: denied { mounton } for pid=5516 comm="syz.1.1623" path=2F3238302FE91F7189591E9233614B dev="tmpfs" ino=1542 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 251.517217][ T5515] netlink: 'syz.3.1622': attribute type 3 has an invalid length. [ 251.655610][ T28] audit: type=1400 audit(1700000986.981:1577): avc: denied { create } for pid=5532 comm="syz.3.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 252.331427][ T5554] overlayfs: failed to clone upperpath [ 252.609077][ T5560] xt_hashlimit: size too large, truncated to 1048576 [ 253.425688][ T5614] overlayfs: unrecognized mount option "verity=on" or missing value [ 253.765903][ T28] audit: type=1326 audit(1700000989.058:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5627 comm="syz.4.1663" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f069a7a8fd9 code=0x0 [ 253.846041][ T28] audit: type=1400 audit(1700000989.158:1579): avc: denied { read } for pid=5627 comm="syz.4.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 255.466286][ T5657] sch_fq: defrate 0 ignored. [ 255.471718][ T5657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1671'. [ 257.358492][ T5712] futex_wake_op: syz.3.1686 tries to shift op by 144; fix this program [ 257.367087][ T5712] futex_wake_op: syz.3.1686 tries to shift op by 144; fix this program [ 257.377186][ T28] audit: type=1326 audit(1700001248.695:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.3.1686" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fef105a8fd9 code=0x0 [ 257.534244][ T5731] virtio-fs: tag <> not found [ 257.661430][ T5734] netlink: 'syz.1.1694': attribute type 4 has an invalid length. [ 259.101256][ T5773] overlayfs: failed to clone upperpath [ 259.109986][ T28] audit: type=1326 audit(1700001250.415:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.2.1709" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 259.157123][ T28] audit: type=1326 audit(1700001250.415:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.2.1709" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 259.205874][ T28] audit: type=1326 audit(1700001250.415:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.2.1709" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 259.230930][ T28] audit: type=1326 audit(1700001250.415:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.2.1709" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 259.256137][ T28] audit: type=1326 audit(1700001250.415:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.2.1709" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 259.281455][ T28] audit: type=1326 audit(1700001250.415:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.2.1709" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 259.306597][ T28] audit: type=1326 audit(1700001250.415:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.2.1709" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 259.331568][ T28] audit: type=1326 audit(1700001250.415:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.2.1709" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 259.356506][ T28] audit: type=1326 audit(1700001250.415:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5772 comm="syz.2.1709" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94ca9a8fd9 code=0x7ffc0000 [ 259.492552][ T5782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1713'. [ 259.547335][ T5786] netlink: 'syz.1.1715': attribute type 3 has an invalid length. [ 259.559890][ T5789] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000005 [ 259.978706][ T5795] ip_tables: iptables: counters copy to user failed while replacing table [ 259.991707][ T5795] ip_tables: iptables: counters copy to user failed while replacing table [ 260.551573][ T5819] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1725'. [ 264.524859][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 264.524877][ T28] audit: type=1400 audit(1700001255.835:1617): avc: denied { map } for pid=5840 comm="syz.3.1733" path="socket:[34110]" dev="sockfs" ino=34110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 264.555555][ T28] audit: type=1400 audit(1700001255.835:1618): avc: denied { read } for pid=5840 comm="syz.3.1733" path="socket:[34110]" dev="sockfs" ino=34110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 264.780480][ T5852] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1738'. [ 264.905878][ T5864] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 264.931002][ T468] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 265.878978][ T5883] incfs: Options parsing error. -22 [ 265.965534][ T5883] incfs: mount failed -22 [ 265.986893][ T468] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 266.097469][ T5895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1754'. [ 266.552413][ T5927] ip_tables: iptables: counters copy to user failed while replacing table [ 266.561994][ T28] audit: type=1400 audit(1700001257.865:1619): avc: denied { audit_read } for pid=5923 comm="syz.1.1761" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 266.596578][ T28] audit: type=1400 audit(1700001257.875:1620): avc: denied { mounton } for pid=5923 comm="syz.1.1761" path="/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 266.953831][ T5936] device macsec1 entered promiscuous mode [ 266.959985][ T5936] device vlan1 entered promiscuous mode [ 267.001926][ T5938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1766'. [ 268.040789][ T5962] tipc: Started in network mode [ 268.055885][ T5962] tipc: Node identity 4, cluster identity 4711 [ 268.075565][ T5962] tipc: Node number set to 4 [ 268.108187][ T5962] overlayfs: failed to clone upperpath [ 268.395773][ T5969] overlayfs: failed to clone upperpath [ 270.045872][ T6004] tipc: Enabling of bearer rejected, failed to enable media [ 270.059401][ T6000] 9pnet_fd: Insufficient options for proto=fd [ 270.216680][ T6019] xt_hashlimit: size too large, truncated to 1048576 [ 271.222987][ T6040] tipc: Enabling of bearer rejected, failed to enable media [ 271.981211][ T6045] overlayfs: failed to clone upperpath [ 273.142546][ T6074] 9pnet_fd: Insufficient options for proto=fd [ 273.309192][ C0] ================================================================== [ 273.317328][ C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 273.324760][ C0] Read of size 8 at addr ffff8881126c6d90 by task ksoftirqd/0/13 [ 273.332508][ C0] [ 273.334854][ C0] CPU: 0 PID: 13 Comm: ksoftirqd/0 Tainted: G W syzkaller #0 [ 273.343637][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 273.353724][ C0] Call Trace: [ 273.357289][ C0] [ 273.360280][ C0] __dump_stack+0x21/0x24 [ 273.364636][ C0] dump_stack_lvl+0x110/0x170 [ 273.369334][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 273.374385][ C0] ? debug_smp_processor_id+0x17/0x20 [ 273.379783][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 273.384855][ C0] print_address_description+0x71/0x200 [ 273.390429][ C0] print_report+0x4a/0x60 [ 273.394801][ C0] kasan_report+0x122/0x150 [ 273.399332][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 273.404379][ C0] __asan_report_load8_noabort+0x14/0x20 [ 273.410037][ C0] rcu_cblist_dequeue+0x6c/0xb0 [ 273.414914][ C0] rcu_do_batch+0x4bc/0xc30 [ 273.419439][ C0] ? rcu_core+0xf00/0xf00 [ 273.423797][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 273.429626][ C0] ? rcu_report_qs_rnp+0x2b9/0x390 [ 273.434763][ C0] rcu_core+0x486/0xf00 [ 273.438944][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 273.444165][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 273.449772][ C0] ? rcu_softirq_qs+0xd5/0x340 [ 273.454570][ C0] ? __cfi_rcu_softirq_qs+0x10/0x10 [ 273.459799][ C0] ? __schedule+0xcbb/0x1700 [ 273.464417][ C0] rcu_core_si+0x9/0x10 [ 273.468630][ C0] handle_softirqs+0x1dd/0x5f0 [ 273.473418][ C0] ? __cfi_run_ksoftirqd+0x10/0x10 [ 273.478565][ C0] run_ksoftirqd+0x28/0x30 [ 273.483006][ C0] smpboot_thread_fn+0x48c/0x8e0 [ 273.487972][ C0] kthread+0x281/0x320 [ 273.492091][ C0] ? __cfi_smpboot_thread_fn+0x10/0x10 [ 273.497588][ C0] ? __cfi_kthread+0x10/0x10 [ 273.502210][ C0] ret_from_fork+0x1f/0x30 [ 273.506669][ C0] [ 273.509713][ C0] [ 273.512078][ C0] Allocated by task 6088: [ 273.516421][ C0] kasan_set_track+0x4b/0x70 [ 273.521042][ C0] kasan_save_alloc_info+0x1f/0x30 [ 273.526181][ C0] __kasan_kmalloc+0x95/0xb0 [ 273.530797][ C0] __kmalloc+0xb4/0x1e0 [ 273.534987][ C0] l2tp_session_create+0x38/0xbd0 [ 273.540049][ C0] pppol2tp_connect+0xbf5/0x1640 [ 273.545015][ C0] __sys_connect+0x3da/0x460 [ 273.549630][ C0] __x64_sys_connect+0x7a/0x90 [ 273.554420][ C0] x64_sys_call+0x88d/0x9a0 [ 273.558948][ C0] do_syscall_64+0x4c/0xa0 [ 273.563385][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.569301][ C0] [ 273.571669][ C0] Freed by task 5402: [ 273.575664][ C0] kasan_set_track+0x4b/0x70 [ 273.580283][ C0] kasan_save_free_info+0x2b/0x40 [ 273.585335][ C0] ____kasan_slab_free+0x132/0x180 [ 273.590471][ C0] __kasan_slab_free+0x11/0x20 [ 273.595293][ C0] slab_free_freelist_hook+0xc2/0x190 [ 273.600685][ C0] __kmem_cache_free+0xb7/0x1b0 [ 273.605566][ C0] kfree+0x6f/0xf0 [ 273.609304][ C0] l2tp_session_put+0xaf/0x1a0 [ 273.614090][ C0] l2tp_session_delete+0x3df/0x4d0 [ 273.619244][ C0] l2tp_tunnel_del_work+0x199/0x410 [ 273.624467][ C0] process_one_work+0x717/0xc30 [ 273.629338][ C0] worker_thread+0xa4d/0x11d0 [ 273.634063][ C0] kthread+0x281/0x320 [ 273.638180][ C0] ret_from_fork+0x1f/0x30 [ 273.642624][ C0] [ 273.644966][ C0] Last potentially related work creation: [ 273.650700][ C0] kasan_save_stack+0x3a/0x60 [ 273.655404][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 273.660798][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 273.666634][ C0] call_rcu+0xcf/0xf50 [ 273.670729][ C0] pppol2tp_release+0x1e3/0x2b0 [ 273.675608][ C0] sock_close+0xc9/0x220 [ 273.679879][ C0] __fput+0x1fd/0x8f0 [ 273.683888][ C0] ____fput+0x15/0x20 [ 273.687901][ C0] task_work_run+0x1e1/0x250 [ 273.692515][ C0] exit_to_user_mode_loop+0x9b/0xb0 [ 273.697750][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 273.703266][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 273.708789][ C0] do_syscall_64+0x58/0xa0 [ 273.713226][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.719148][ C0] [ 273.721491][ C0] Second to last potentially related work creation: [ 273.728094][ C0] kasan_save_stack+0x3a/0x60 [ 273.732794][ C0] __kasan_record_aux_stack+0xb6/0xc0 [ 273.738185][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 273.744038][ C0] kvfree_call_rcu+0x8b/0x7a0 [ 273.748742][ C0] inet6_ifa_finish_destroy+0x129/0x1b0 [ 273.754314][ C0] addrconf_ifdown+0x1254/0x1950 [ 273.759281][ C0] addrconf_notify+0x39f/0xe30 [ 273.764067][ C0] raw_notifier_call_chain+0xa1/0x110 [ 273.769458][ C0] __dev_notify_flags+0x276/0x5b0 [ 273.774502][ C0] dev_change_flags+0xe3/0x1a0 [ 273.779287][ C0] do_setlink+0xc02/0x2a10 [ 273.783728][ C0] rtnl_newlink+0x10b3/0x20d0 [ 273.788418][ C0] rtnetlink_rcv_msg+0xb28/0xde0 [ 273.793376][ C0] netlink_rcv_skb+0x200/0x450 [ 273.798163][ C0] rtnetlink_rcv+0x1c/0x20 [ 273.802600][ C0] netlink_unicast+0x8c1/0xa60 [ 273.807386][ C0] netlink_sendmsg+0x8b9/0xbd0 [ 273.812170][ C0] ____sys_sendmsg+0x5fb/0x9c0 [ 273.816955][ C0] ___sys_sendmsg+0x2a2/0x360 [ 273.821650][ C0] __x64_sys_sendmsg+0x20d/0x2e0 [ 273.826603][ C0] x64_sys_call+0x171/0x9a0 [ 273.831131][ C0] do_syscall_64+0x4c/0xa0 [ 273.835566][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.841480][ C0] [ 273.843856][ C0] The buggy address belongs to the object at ffff8881126c6c00 [ 273.843856][ C0] which belongs to the cache kmalloc-512 of size 512 [ 273.857928][ C0] The buggy address is located 400 bytes inside of [ 273.857928][ C0] 512-byte region [ffff8881126c6c00, ffff8881126c6e00) [ 273.871223][ C0] [ 273.873565][ C0] The buggy address belongs to the physical page: [ 273.879989][ C0] page:ffffea000449b100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1126c4 [ 273.890246][ C0] head:ffffea000449b100 order:2 compound_mapcount:0 compound_pincount:0 [ 273.898585][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 273.904692][ C0] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100042f00 [ 273.913301][ C0] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 273.921896][ C0] page dumped because: kasan: bad access detected [ 273.928338][ C0] page_owner tracks the page as allocated [ 273.934061][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 109, tgid 109 (udevd), ts 5707878993, free_ts 0 [ 273.953712][ C0] post_alloc_hook+0x1f5/0x210 [ 273.958529][ C0] prep_new_page+0x1c/0x110 [ 273.963097][ C0] get_page_from_freelist+0x2ca9/0x2d20 [ 273.968679][ C0] __alloc_pages+0x1fa/0x610 [ 273.973307][ C0] alloc_slab_page+0x6e/0xf0 [ 273.977915][ C0] new_slab+0x98/0x3e0 [ 273.981992][ C0] ___slab_alloc+0x70f/0xb70 [ 273.986599][ C0] __slab_alloc+0x5e/0xa0 [ 273.990939][ C0] __kmem_cache_alloc_node+0x204/0x2d0 [ 273.996418][ C0] __kmalloc_node_track_caller+0xa1/0x1e0 [ 274.002151][ C0] __alloc_skb+0x226/0x4a0 [ 274.006583][ C0] alloc_skb_with_frags+0xa8/0x620 [ 274.011733][ C0] sock_alloc_send_pskb+0x87f/0x9a0 [ 274.016943][ C0] unix_dgram_sendmsg+0x5c1/0x1710 [ 274.022069][ C0] sock_write_iter+0x2ea/0x3f0 [ 274.026864][ C0] vfs_write+0x5ef/0xd00 [ 274.031207][ C0] page_owner free stack trace missing [ 274.036581][ C0] [ 274.038917][ C0] Memory state around the buggy address: [ 274.044642][ C0] ffff8881126c6c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.052740][ C0] ffff8881126c6d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.060817][ C0] >ffff8881126c6d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 274.068896][ C0] ^ [ 274.073507][ C0] ffff8881126c6e00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 274.081704][ C0] ffff8881126c6e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 274.089780][ C0] ================================================================== [ 274.097920][ C0] Disabling lock debugging due to kernel taint [ 274.110117][ T28] audit: type=1400 audit(1700001265.425:1621): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 274.172456][ T28] audit: type=1400 audit(1700001265.425:1622): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.219002][ T28] audit: type=1400 audit(1700001265.425:1623): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.259000][ T28] audit: type=1400 audit(1700001265.425:1624): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.283142][ T28] audit: type=1400 audit(1700001265.425:1625): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 274.304002][ T28] audit: type=1400 audit(1700001265.425:1626): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 274.341783][ T28] audit: type=1400 audit(1700001265.425:1627): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1